Browse CVEs by Ecosystem and Severity

YesWiki Vulnerable to Authenticated PHP Object Injection in BazarImportAction via unserialize

YesWiki has Authenticated SQL Injection via ReactionManager

YesWiki: Second-Order SQL Injection in Page Delete API via Unescaped Page Tag (`ApiController::deletePage`)

YesWiki has Unauthenticated Server-Side Request Forgery via ActivityPub `Signature.keyId`

YesWiki Vulnerable to Unauthenticated ActivityPub Signature-Verification Bypass via `!openssl_verify(...)` accepting `int(-1)`

YesWiki vulnerable to unauthenticated arbitrary page deletion via `{{erasespamedcomments}}` action

Avo: Direct attachment upload endpoint lacks upload authorization and bypasses field-level upload policy

Ruby CSS Parser: SSRF and Local File Disclosure in `CssParser::Parser#read_remote_file`

org.hl7.fhir.core: ReDoS via FHIRPath matches()/replaceMatches() in FHIR Validator HTTP Endpoint

Joro: Unauthenticated Cross-Origin Plugin Upload Leads to RCE

DSpace has possible Remote Code Execution (RCE) through Velocity Templates used by LDN

Nuclio: Unsanitized cron trigger event headers/body injected into CronJob shell command leads to persistent RCE

Skipper: opaAuthorizeRequestWithBody filter bypasses OPA policy on Transfer-Encoding — chunked / HTTP/2 requests

Goploy: Cross-namespace IDOR and RCE via body-supplied row id in project and project_file handlers

ratex-parser panics on `\verb` with a multibyte delimiter (UTF-8 byte-boundary slice)

Cognee allows non-superusers to overwrite global LLM configuration

LocalAI POST /models/apply permits unauthenticated server-side request forgery through gallery URLs

@better-auth/sso provider registration has server-side request forgery via unvalidated OIDC endpoints

Better Auth has insecure cryptographic defaults in oidcProvider: alg=none advertised and plain PKCE accepted by default

Better Auth: OAuth refresh-token replay via missing client authentication on oidc-provider and mcp plugins

Open WebUI vulnerable to stored XSS via unescaped markdown token in MarkdownTokens.svelte leading to full account takeover and RCE via functions

Open WebUI allows limited stored XSS vila uploaded html file

PyLoad vulnerable to SQL Injection via API /json/add_package in add_links parameter

Langroid Allows XXE Injection via XMLToolMessage

Frappe vulnerable to information disclosure leading to account takeover

Access control vulnerable to user data deletion by anonynmous users

Remote Code Execution Vulnerability via SSTI in Fides Webserver Jinja Email Templating Engine

Ankitects Anki arbitrary script execution vulnerability

ebookmeta XML External Entity vulnerability

LoLLMS Path Traversal vulnerability

EGroupware has a Remote Code Execution Vulnerability

Apache Airflow allows code execution through unsafe serialized DAG deserialization

LoLLMS Command Injection vulnerability

mkfifo: permissions of an existing file are changed after FIFO creation fails

Coder's workspace agent API insecure redirect handling allowed cross-agent file read and write

9routers has Exposure of Sensitive Information and Unprotected Database Import/Export, Allowing Complete Credential Theft and Database Takeover

Craft CMS: Potential authenticated Remote Code Execution via referrer redirect

Zebra: Missing copy constraint in halo2_gadgets variable-base scalar multiplication allows under-constrained base, breaking Orchard Action circuit soundness

Langroid: Neo4jChatAgent executes LLM-generated Cypher without validation (prompt-to-Cypher injection; config-conditional RCE), mirroring the SQLChatAgent bug fixed in CVE-2026-25879

9router has unauthenticated CRUD on /api/providers and Full API Key Leak via /api/usage/stats

Coder's session token leaked to arbitrary hosts via `coder open app` for external workspace apps

Coder: Route hijacking through lack of validation of agent-supplied AllowedIPs in tailnet coordinator

Coder's workspace app upsert allows cross-workspace agent rebinding via user-controlled app ID

Coder vulnerable to SSH config injection via unsanitized server-supplied values in `coder config-ssh`

Langroid: Sandbox Escape to Remote Code Execution via Incomplete `eval()` Mitigation in TableChatAgent

Langroid: SQLChatAgent dangerous-function blocklist can be bypassed with quoted or schema-qualified pg_read_file calls

Decompress: Archive extraction can create files and links outside of the target directory

mv: symlinks expanded during cross-device move (resource exhaustion / data duplication)

rm: 'rm -rf ./' (and ./// variants) silently deletes current directory contents, bypassing dot protection

rm: --preserve-root bypassed via a symlink to / (string check instead of dev/inode)