Browse CVEs by Ecosystem and Severity

Langflow: PythonREPLComponent executes unsandboxed Python code, enabling authenticated RCE and privilege escalation

Seroval: `fromJSON()` Promise thenable assimilation invokes plugin-produced callables (bypass of GHSA-mv8w-475r-vwqw)

proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet

MongoDB: GridFS data disclosure and deletion via query-operator injection in file IDs

vm2: NodeVM custom resolution bypasses external path boundaries

vm2: NodeVM zlib Buffers expose pooled host memory across the VM boundary

hickory-resolver: Resolver::lookup() and Resolver::lookup_ip() APIs obscure DNSSEC validation failures

Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path

Tinypool: Prototype Pollution gadget in worker options leads to Remote Code Execution

Tinypool: Prototype Pollution Gadget to RCE in run() options

vm2: Sandbox Escape (NodeVM)

vm2: Default VM can mutate host TypedArray and ArrayBuffer intrinsics after the host-prototype pollution fix

vm2 sandbox escape to host RCE via revisited host-wrapped AggregateError bypassing Error sanitization cycle short-circuit

vm2: NodeVM `require.external` without an explicit `require.root` grants unrestricted host filesystem access and full RCE

vm2: Sandboxed code can read and write host-realm memory via Node's shared Buffer pool

vm2 sandbox escape via WebAssembly.compileStreaming Promise species bypass

Langflow: Unauthenticated Flow Execution via Webhook Authentication Bypass

gitea-runner: workflow container.options passes host namespaces and capability flags to job container when privileged mode is disabled

sqlite3-ruby: Use-After-Free in SQLite Aggregate Arguments in Heap-Allocated Argument Array

@a2ui/web_core: `openUrl` permits `javascript:` URI execution via agent-supplied button actions

aws-smithy-json: Uncontrolled recursion in the aws-smithy-json unknown-key skip path allows unauthenticated remote denial of service in smithy-rs generated servers

Wasmtime component async-lifted callback result count is unvalidated, causing a native stack buffer overflow

vm2: NodeVM builtin allowlist bypass via node:test.run() execArgv allows sandbox escape

vm2 CLI provides no sandbox isolation - host-realm require() is reachable from sandboxed scripts

vm2 exposes host HTTPS credentials and TLS traffic through globalAgent

vm2 Custom Module Resolver Can Bypass the External Package Allowlist by Loading a Colliding Host Package

vm2: NodeVM node:-prefixed negative builtin deny bypass exposes child_process

vm2: NodeVM nesting guard accepts array-shaped require and permits host RCE

vm2: GHSA-m283-3h24-438v fix bypass leads to host RCE via call/apply indirection

vm2 allows a sandboxed plugin to execute native code through `node:sqlite`

vm2 crypto builtin loads attacker native code through setEngine

vm2 sandbox escape on Node.js 26 through a stale PromiseThenLookupChain protector

vm2 NodeVM can replace the host process TLS trust store

SiYuan: Unauthenticated SQL injection in searchDocs via unescaped keyword (publish mode): cross-notebook read/write with statement stacking

pageant: Out-of-bounds read / oversized allocation in `pageant` MemoryMap::read via a malicious Pageant agent (Windows)

Russh: Unbounded memory exhaustion via CHANNEL_OPEN flood during a client-stalled rekey

russh: Client-side channel-scoped Handler callbacks fire for channel IDs the client never opened

Axios: Header Injection via Inherited headers After Minimal Interceptor

Axios: Fetch Adapter Header Injection via Inherited FormData getHeaders

Axios: maxRedirects: 0 is not enforced by the fetch adapter, allowing redirect-based SSRF

Axios: Prototype pollution gadget in fetch adapter can alter outbound requests

Axios: HTTP/2 adapter bypasses configured DNS lookup and proxy controls

@xhmikosr/decompress: Path traversal via symlink chain

PyJWT: Asymmetric-PEM detection bypass: whitespace/line-ending-mutated public keys skip the HS/asymmetric confusion guard

Ammonia: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Electron drops inherited HTML sandbox restrictions for popups opened through OpenURLFromTab

Electron: Windows opened from a sandboxed top-level document do not inherit its sandbox restrictions

Electron: <webview> can enable Node.js integration in Web Workers despite embedder restrictions

PHPCSUtils: Remote code execution via eval() in AbstractArrayDeclarationSniff::getActualArrayKey()

Angular SSR: XSS via Unescaped Processing Instruction (<?...?>) Nodes in Fallback Raw-Content Elements