Browse CVEs by Ecosystem and Severity

NASA AMMOS Instrument Toolkit: Path traversal resulting in arbitrary file append (can be triggered over the network by unauthenticated attacker)

Authenticated Remote Code Execution via loadReader functionName code injection in DbGate

DbGate: Zip Slip in archive/unzip allows arbitrary file write leading to RCE

DbGate: Unauthenticated Remote Code Execution via JSON Script Runner

MCP-for-Stata: Command injection via log_file_name parameter in Stata command wrapper

WWBN AVideo: Unauthenticated Stored DOM Cross-Site Scripting via Per-Client Metadata Broadcast in YPTSocket Plugin

Apache Fory Java SDK Has Deserialization of Untrusted Data in the Java replace-resolve path

OpenStack Mistral allows Arbitrary Remote Code Execution when the API is exposed

Jupyter Enterprise Gateway: Kubernetes Manifest Injection in Jinja2 Template Rendering

Jupyter Enterprise Gateway: Jinja2 Template Server Side Template Injection resulting in Remote Code Execution

Jupyter Enterprise Gateway: ContainerProcessProxy._enforce_prohibited_ids Bypass

Apache MINA: Critical Deserialization Allow-list Bypass via resolveProxyClass

MLflow: Environment variable injection in AI Gateway secrets enables server-side credential exfiltration

OpenMed vulnerable to remote code injection through privacy-filter model loading path

praisonai-platform: Any workspace member can add arbitrary user as owner via POST /workspaces/{id}/members

Vitest browser mode serves unsanitized otelCarrier query parameter as inline script

When Vitest UI server is listening, arbitrary file can be read and executed

Apache Airflow vulnerable to Improper Neutralization of Special Elements Used in a Template Engine

praisonai-platform: Any workspace member can promote themselves or others to owner via PATCH /workspaces/{id}/members/{user_id}

praisonai-platform: JWT signing key defaults to hardcoded "dev-secret-change-me", allowing token forgery for any user when PLATFORM_ENV is unset

PraisonAI Platform has a cross-workspace IDOR + member-role privilege escalation

PraisonAI's unauthenticated A2A official example can reach real LLM-driven `eval()` tool execution

PraisonAI vulnerable to sandbox escape via `print.__self__` builtins module leak in `execute_code` (subprocess mode)

PraisonAI `deploy --type api` emits a Flask server with authentication disabled by default

PraisonAI call server exposes unauthenticated agent listing, invocation, and deletion when CALL_SERVER_TOKEN is unset

stigmem-node: Auth-disabled deployments may grant broad anonymous access outside loopback

amazon-redshift-python-driver vulnerable to Remote Code Execution via eval() Injection

NodeVM builtin denylist bypass via process and inspector/promises allows host code execution

vm2 sandbox escape via JSPI-backed Promise `.finally()` species bypass

vm2 has a CVE-2023-37903 patch bypass: nesting:true without explicit require still allows full RCE

vm2 is Vulnerable to Sandbox Breakout Through Promise Species

vm2 has a Sandbox Escape issue

Casdoor doesn't verify that a JWT used for token exchange is still active

Casdoor does not validate the AudienceRestriction element in SAML assertions

Casdoor: GetTokenExchangeToken bypass through lack of cross-organization JWT signature check

Casdoor has an authentication bypass

Casdoor SAML callback handler accepts any well-formed SAMLResponse sent to /api/acs without verifying that it corresponds to an AuthnRequest

MCP Toolbox for Databases vulnerable to DNS rebinding attacks

Yamcs Vulnerable to Authenticated Remote Code Execution (RCE) via Jython Algorithm Code Injection

Yamcs Vulnerable to Remote Code Execution via Mission Database algorithm override

Langroid has Prompt to SQL Injection, Leading to RCE

LiquidJS is Vulnerable to Remote Code Execution

Yamcs Vulnerable to Server-Side Code Injection (RCE) via Janino Expression Engine in `JavaExprAlgorithmExecutionFactory`

XWiki Platform has an Unauthenticated XAR Import via REST /wikis/{wikiName}

XWiki Platform has path traversal via resources parameter in ssx and jsx endpoints when using leading slash

KubeVirt has a Link Following vulnerability

Dolibarr ERP CRM contains a remote code evaluation vulnerability

Apache CXF has an LDAP injection vulnerability

Nezha Monitoring: RoleMember can run shell on every server (cross-tenant RCE) via POST /api/v1/cron