Browse CVEs by Ecosystem and Severity

SillyTavern has Authentication Bypass via SSO Header Injection

Security feature bypass vulnerability in Azure Key Vault Keys library for Java

llm CLI tool contains a code injection vulnerability via `--functions` command-line argument

imgaug contains an insecure deserialization vulnerability in BackgroundAugmenter class within multicore.py module

mamba language model framework vulnerable to insecure deserialization when loading pre-trained models from HuggingFace Hub

Ludwig framework is vulnerable to insecure deserialization through its predict() method.

Ludwig framework is vulnerable to insecure deserialization in its model serving component

Horovod contains an insecure deserialization vulnerability in its KVStore HTTP server component

Guardrails AI contains a code injection vulnerability in its Hub package installation mechanism

Apache Tomcat - Security constraints not correctly applied

Open Source Kubectl MCP Server vulnerable to arbitrary code execution via user interaction with crafted HTML page

PySyft server-side arbitrary Python execution after code approval

Apache Tomcat - Digest authenticator will authenticate any unknown user

Apache Tomcat - HTTP/2 request headers not validated

OpenClaude Sandbox Bypass via Model-Controlled `dangerouslyDisableSandbox` Input

sealed-env: TOTP secret embedded in unseal token payload (enterprise mode)

Dalfox Server Mode Vulnerable to Unauthenticated Remote Code Execution via `found-action`

Malware in @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys

SandboxJS has a sandbox escape via Function.caller leakage of internal call op

pgAdmin 4 server mode has an authorization vulnerability affecting Server Groups, Servers, Shared Servers, Background Processes, and Debugger modules

Unity Catalog has a JWT Issuer Validation Bypass tht Allows Complete User Impersonation

WebdriverIO BrowserStack Service has a Command Injection issue

Angular Expressions - Remote Code Execution using filters

CloudNativePG's metrics exporter allows privilege escalation to PostgreSQL superuser and OS RCE

PraisonAI MCP `tools/call` path-traversal => RCE via Python `.pth` injection

Snipe-IT has insecure permissions in file uploads

free5GC's NEF nnef-pfdmanagement API is unauthenticated; forged bearer tokens can read PFD data and create/delete PFD subscriptions

free5GC's SMF UPI management interface lacks auth middleware; unauthenticated topology read/write requests reach handlers

free5GC's NEF nnef-oam route group is unauthenticated; no-token requests reach the OAM handler

free5GC's NEF 3gpp-traffic-influence API is unauthenticated; missing or forged bearer tokens can create, read, patch, and delete subscriptions

free5GC's NEF 3gpp-pfd-management API is unauthenticated; forged bearer tokens can create, read, and delete PFD transactions

Cline Kanban Server has a Cross-Origin WebSocket Hijacking Vulnerability

Open WebUI has an LDAP Empty Password Authentication Bypass

SiYuan: Electron Renderer RCE via decodeURIComponent-driven tooltip XSS in aria-label sink (incomplete fix for CVE-2026-34585)

Electerm users can run dangrous code through link or command line

Electerm runWidget has a path traversal that leads to arbitrary code execution

dash-uploader has a directory traversal vulnerability

Zebra v4.4.0 still accepts V5 SIGHASH_SINGLE without a corresponding output

PrestaShop has a stored XSS executable in customer service view

SiYuan Affected by Stored XSS via Attribute View Name to Electron Renderer RCE

vm2 has Sandbox Breakout Through Null Proto Exception

vm2 has sandbox breakout via `neutralizeArraySpeciesBatch`

Note Mark has a JWT Secret Weakness that allows Full Account Takeover via Token Forgery

Zebra's Transparent SIGHASH_SINGLE Handling Diverges from zcashd for Corresponding Outputs

Zebra has Consensus Divergence in Transparent Sighash Hash-Type Handling due to Stale Buffer

Zebra's Block Validator Undercounts Coinbase and P2SH Sigops

query-parser-string is vulnerable to Prototype Pollution

parse-ini is vulnerable to Prototype Pollution in index.js()

next-npm-version is vulnerable to Command injection