Browse CVEs by Ecosystem and Severity

Apache Cassandra is vulnerable to privilege escalation in an mTLS environment using MutualTlsAuthenticator

Lupa has a Sandbox escape and RCE due to incomplete attribute_filter enforcement in getattr / setattr

Apache Kafka Clients: Kafka Producer Message Corruption and Misrouting via Buffer Pool Race Condition

Authenticated Apache ActiveMQ Broker and Apache ActiveMQ users could perform RCE via Jolokia MBeans

libp2p-rendezvous: Unbounded rendezvous DISCOVER cookies enable remote memory exhaustion

libp2p-rendezvous: Unlimited namespace registrations per peer enables OOM DoS on rendezvous servers

Directus: Missing Cross-Origin Opener Policy

Budibase: Path traversal in plugin file upload enables arbitrary directory deletion and file write

LiteLLM: Privilege escalation via unrestricted proxy configuration endpoint

OpenSTAManager has a SQL Injection via righe Parameter in confronta_righe Modals

Budibase: Command Injection in Bash Automation Step

OpenSTAManager: SQL Injection via Aggiornamenti Module

OpenClaw: Unbound bootstrap setup codes allow privilege escalation during pairing

OpenClaw: Paired node escalates to gateway RCE via unrestricted node.event agent dispatch

OpenClaw: Device-Paired Node Skips Node Scope Gate → Host RCE.md

OpenClaw: OpenShell Mirror Sync — Sandbox Escape via Unrestricted File Sync + Symlink Traversal

Electron: Context Isolation bypass via contextBridge VideoFrame transfer

Rack's multipart parsing without Content-Length header allows unbounded chunked file uploads

Rack has quadratic complexity in Rack::Utils.select_best_encoding via wildcard Accept-Encoding header

Rack's multipart header parsing allows Denial of Service via escape-heavy quoted parameters

Rack::Static prefix matching can expose unintended files under the static root

EnhancedLinq.Async is Vulnerable to Denial of Service via Transitive Dependency Microsoft.Bcl.Memory

Ferret: Path Traversal in IO::FS::WRITE allows arbitrary file write when scraping malicious websites

KubeAI: OS Command Injection via Model URL in Ollama Engine startup probe allows arbitrary command execution in model pods

phpMyFAQ: Path Traversal - Arbitrary File Deletion in MediaBrowserController

CI4MS: Account Deactivation Module Grants Full Persistent Unauthorized Access for All‑Roles via Improper Session Invalidation (Logic Flaw)

CI4MS: Account Deletion Module Grants Full Persistent Unauthorized Access for All‑Roles via Improper Session Invalidation (Logic Flaw)

@payloadcms/next has Stored XSS in Admin Panel

OpenSTAManager has a Time-Based Blind SQL Injection via `options[stato]` Parameter

SiYuan Desktop: Stored XSS in imported .sy.zip content leads to arbitrary command execution

OpenClaw's incomplete host env sanitization blocklist allows supply-chain redirection via package-manager env overrides

OpenClaw: Discord text `/approve` bypasses `channels.discord.execApprovals.approvers` and allows non-approvers to resolve pending exec approvals

baserCMS has Unsafe File Upload Leading to Remote Code Execution (RCE)

Zebra has a Consensus Failure due to Improper Verification of V5 Transactions

nginx-UI has Unencrypted Storage of DNS API Tokens and ACME Private Keys

Gotenberg has Chromium deny-list bypass via case-insensitive URL scheme (bypass of GHSA-rh2x-ccvw-q7r3)

libp2p-gossipsub: Remote crash via unchecked Instant overflow in heartbeat backoff expiry handling

MikroORM has Prototype Pollution in Utils.merge

OpenClaw: Gateway Plugin HTTP Auth Grants Unrestricted operator.admin Runtime Scope to All Callers

AWS SDK for .NET: Improper escaping of special characters in CloudFront policy document construction

Ruby LSP has arbitrary code execution through branch setting

act: Unrestricted set-env and add-path command processing enables environment injection

MCP Ruby SDK: Insufficient Session Binding Allows SSE Stream Hijacking via Session ID Replay

Saloon has insecure deserialization in AccessTokenAuthenticator

Undertow is Vulnerable to HTTP Request/Response Smuggling

Undertow is Vulnerable to HTTP Request/Response Smuggling

Undertow is Vulnerable to HTTP Request/Response Smuggling

Moby has AuthZ plugin bypass when provided oversized request bodies

Local Incus UI web server vulnerable to nuthentication bypass

Spring AI: Insufficient Validation causes SSRF when processing multimodal messages with user-supplied URLs