Browse CVEs by Ecosystem and Severity

Zebra has block suppression via NU5 same-header body poisoning of sent-hash cache

zebrad vulnerable to full node denial of service via crafted Sapling receiver in z_listunifiedreceivers

zebrad has full node denial of service via non-ASCII LongPollId in getblocktemplate

electerm has Command Injection in File System Operations (rmrf, mv, cp)

Coder vulnerable to workspace auto-creation via crafted URL parameters without user consent

mediawiki/maps has stored XSS through the overlays parameter in the display_map parser function

OpenClaw: PowerShell encoded-command aliases could miss exec allowlist checks

OpenClaw: Telegram interactive callbacks could skip commands.allowFrom

OpenClaw: Matrix allowFrom could bind to mutable display names

OpenClaw: Combined POSIX shell options could confuse exec revalidation

OpenClaw: Workspace .env could override Homebrew executable selection for skill install flows

OpenClaw: QQBot admin commands could skip DM-only and allowFrom policy

OpenClaw: Trusted-proxy Control UI WebSocket accepted client-declared scopes before pairing

OpenClaw: Node pairing reconnection could confuse approval scope state

OpenClaw: Scoped chat.send route inheritance could bypass admin command scope gates

OpenClaw's marketplace runtime extension metadata could point at unscanned payloads

OpenClaw: Shell wrapper argv could change between approval and execution

mcp-memory-service: Missing Authentication on Document API Endpoints Allows Unauthenticated Memory Read/Write/Delete

Ghost: Cache-poisoning XSS in Ghost frontend via x-ghost-preview header

Rancher has Privilege Escalation from Project Owner to Host

Rancher has over-inclusive team membership expansion in GitHub App authentication provider

Rancher Fleet vulnerable to cross namespace secret disclosure via unvalidated `valuesFrom` references in Helm Deployer

Rancher vulnerable to command injection through unsanitized YAML parameter

Fleet has PSS Bypass through addLabelsFromOptions in Fleet Agent

Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass

SurrealDB: Port-specific --deny-net rules silently bypassed on HTTP redirect

SurrealDB: Graph traversal bypasses table SELECT permissions

SurrealDB: Scraping a TABLE with no available PERMISSIONS to current auth level

SurrealDB has Denial of Service in JSON parser due to nested objects

SurrealDB: HTTP RPC Session Race Condition Allows Privilege Escalation

SurrealDB: HTTP /rpc `sessions` method leaks attached session UUIDs, enabling full session hijack by anonymous callers

repomix Vulnerable to Command Injection (RCE) via `--remote-branch` Argument Injection

pay-rails/pay: non-constant-time HMAC comparison in Paddle Billing webhook signature verifier

Fulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution for Meta-Issuer Paths, with Kubernetes Service-Account Token Leakage

CefSharp.Common: `FolderSchemeHandlerFactory` path boundary check can expose files outside the configured root folder

@adonisjs/bodyparser has an incomplete fix for CVE-2026-25754

Fission: Environment Runtime.Container and Builder.Container SecurityContext bypass allows privileged pod creation

Fission Environment CRD podspec passthrough enables hostPID/hostNetwork/privileged pods, node escape

Fission Container Executor Function PodSpec Injection Leading to Node Escape

Fission Environment CRD PodSpec Injection Leading to Node Escape and Cluster Takeover

Fission: Cross-namespace Environment reference via unvalidated EnvironmentRef in Function admission webhook

@cedar-policy/authorization-for-expressjs has an authorization bypass via query string manipulation

Paymenter has URL parameter injection that bypasses paid plan limits at checkout

Microsoft.OpenAPI: Circular schema references may terminate OpenAPI parsing

MCP Toolbox HTTP tool path parameters allow traversal to unintended endpoints

Remote unauthenticated attackers able to upload files in Onionshare

wolfSSL Python module vulnerable to Improper Authentication

mlflow: FastAPI job endpoints under `/ajax-api/3.0/jobs/*` are not protected by authentication or authorization

Apache Airflow: JWT token still valid after logout

PraisonAI Has Authentication Bypass via OAuthManager.validate_token()