Browse CVEs by Ecosystem and Severity

FileBrowser Quantum: Path traversal in public share PATCH allows file ops outside shared directory

YesWiki: Unauthenticated SQL Injection

Boxlite: Path Traversal Vulnerability Leads to Arbitrary File Write on the Host

BoxLite: Permission Bypass Allows Modification of Read-Only Files

Twig: PHP code injection via `{% use %}` template name

@hulumi/policies: GitHub OIDC trust policy bypass via AWS set-qualified condition operators

Fission router exposes /fission-function/<ns>/<name> on its public listener, allowing invocation of any function without an HTTPTrigger

Apache Fory PyFory Deserialization of Untrusted Data

Drupal Core has a SQL Injection issue

Malicious code in @beproduct/nestjs-auth (0.1.2 through 0.1.19) — Mini Shai-Hulud worm

Coder: PKCS#7 signature bypass in Azure instance identity allows unauthenticated agent token theft

9router: Unauthenticated Remote Code Execution via unprotected MCP custom plugin routes

Kopia: RCE via SSH ProxyCommand Injection

APScheduler's JSONSerializer and CBORSerializer are vulnerable to Remote Code Execution (RCE) via Insecure Deserialization

Malicious code in guardrails-ai 0.10.1 (supply chain compromise)

GlassFish's gadget handler is vulnerable to RCE

GlassFish's Administration Console is Vulnerable to RCE

Camel-CXF and Camel-Knative Message Header are Vulnerable to Injection via Missing Inbound Filtering

rok Python ProxyShare can be used as an SSRF proxy through absolute URL paths

HAXcms: Private Key Disclosure via Broken HMAC Implementation

Algernon: handler.lua discovery walks parent directories above the server root

TYPO3 Remote Code Execution in extension "Content Element Selector" (ceselector)

MLflow: Improper Origin Validation in MLflow Assistant /ajax-api Endpoints Enables Browser-Mediated Local Command Execution

ChromaDB Python project has a pre-authentication code injection vulnerability

Formie: Pre-authenticated server-side template injection in Hidden fields

Arcane Backend: Missing admin authorization on git repository endpoints allows non-admin users to exfiltrate stored Git credentials and tamper with GitOps configs

SGLang: Unauthenticated RCE via --enable-custom-logit-processor

SGLanG: Multimodal scheduler deserializes untrusted pickle data on 0.0.0.0 ROUTER socket

SGLang's multimodal generation runtime has an unauthenticated path traversal vulnerability

Crabbox: environment variable exposure vulnerability

vm2 Has a Sandbox Breakout Using Async Generator

utcp-cli Vulnerable to Command Injection via Unsanitized Argument Substitution in CLI Communication Protocol

Marten has an injection vulnerability in its full-text search regConfig parameter

DeepSeek TUI: task_create Insecure Defaults Enable RCE via Prompt Injection in Project Files

DeepSeek TUI: run_tests Tool Enables RCE via Malicious Repository Without Approval

Electerm: Importing unsafe bookmark data could lead to unsafe operation when clicking local type bookmark

Apostrophe has default XSS via `xmp` raw-text passthrough in `sanitize-html`

Portainer has an endpoint security bypass via Swarm service create/update

Portainer missing authorization on Docker plugin endpoints, which allows host RCE

n8n Has an XML Node Prototype Pollution Patch Bypass

n8n Has an Arbitrary File Read via Git Node

n8n: HTTP Request Node Pagination Prototype Pollution to RCE

FlowiseAI: Authenticated Host RCE via POST /api/v1/node-custom-function and NodeVM Sandbox Escape

Strapi may leak sensitive data via relational filtering due to lack of query sanitization

Strapi Vulnerable to SQL Injection in Content Type Builder

SiYuan Bazaar marketplace renders unescaped package `name` and `version` metadata, allowing stored XSS and Electron code execution

Goobi viewer - Core: Unauthenticated Solr Streaming Expression Proxy

Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server

Mapfish Print: Remote Code Injection (RCE) in Dynamic table

SillyTavern has a Path Traversal issue