Browse CVEs by Ecosystem and Severity

OpenClaw: Plugin subagent routes could bypass gateway authorization with synthetic admin scopes

Dagu: Path Traversal via `dagRunId` in Inline DAG Execution

SandboxJS affected by a Sandbox Escape

TinaCMS CLI Dev Server Vulnerable to Cross-Origin File Exfiltration via CORS Misconfiguration + Path Traversal in TinaCMS

Parse Server: Account takeover via operator injection in authentication data identifier

AdGuard Home: HTTP/2 Cleartext (h2c) Upgrade Authentication Bypass

Winter vulnerable to privilege escalation by authenticated backend users

SGLang's encoder parallel disaggregation system is vulnerable to unauthenticated remote code execution through the disaggregation module

SGLang's multimodal generation module is vulnerable to unauthenticated remote code execution through the ZMQ broker

Parse Server vulnerable to SQL Injection via dot-notation sub-key name in `Increment` operation on PostgreSQL

Parse Server vulnerable to SQL injection via `Increment` operation on nested object field in PostgreSQL

@siteboon/claude-code-ui is Vulnerable to Command Injection via Multiple Parameters

Parse Server has role escalation and CLP bypass via direct `_Join` table write

Parse Server vulnerable to session token exfiltration via `redirectClassNameForKey` query parameter

Feathers has a NoSQL Injection via WebSocket id Parameter in MongoDB Adapter

Feathers has an OAuth Callback Account Takeover issue

simple-git has blockUnsafeOperationsPlugin bypass via case-insensitive protocol.allow config key enables RCE

Parse Server: SQL injection via dot-notation field name in PostgreSQL

RSSN has Arbitrary Code Execution via Unvalidated JIT Instruction Generation in C-FFI Interface

OneUptime has Synthetic Monitor RCE via exposed Playwright browser object

OneUptime has authorization bypass via client‑controlled is-multi-tenant-query header that leads to cross‑tenant data exposure and account takeover

Parse Server: JWT audience validation bypass in Google, Apple, and Facebook authentication adapters

Apache IoTDB has an Improper Input Validation vulnerability

Apache IoTDB has an Insecure Default Configuration Vulnerability

OneUptime: Synthetic Monitor RCE via exposed Playwright browser object

OneUpTime's Unsandboxed Code Execution in Probe Allows Any Project Member to Achieve RCE

SiYuan Vulnerable to Path Traversal in /export Endpoint Allows Arbitrary File Read and Secret Leakage

WeKnora has Remote Code Execution (RCE) via Command Injection in MCP Stdio Configuration Validation

WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool

WeKnora Vulnerable to Broken Access Control in Tenant Management

soft-serve vulnerable to SSRF via unvalidated LFS endpoint in repo import

Pingora has HTTP Request Smuggling via HTTP/1.0 and Transfer-Encoding Misparsing

Pingora vulnerable to HTTP Request Smuggling via Premature Upgrade

Gogs: Cross-repository LFS object overwrite via missing content hash verification

Nginx-UI Vulnerable to Unauthenticated Backup Download with Encryption Key Disclosure

zeptoclaw has Shell allowlist-blocklist bypass via command/argument injection and file name wildcards

pac4j-jwt: JwtAuthenticator Authentication Bypass via JWE-Wrapped PlainJWT

ZITADEL has 1-Click Account Takeover via XSS in /saml-post Endpoint

File Browser's TUS Delete Endpoint Bypasses Delete Permission Check

SiYuan: Unauthenticated Reflected XSS via SVG Injection in /api/icon/getDynamicIcon Endpoint

Apache Artemis and Apache ActiveMQ Artemis are Missing Authentication for Critical Functions

Craft CMS Vulnerable to Authenticated RCE via "craft.app.fs.write()" in Twig Templates

PickleScan has multiple stdlib modules with direct RCE not in blocklist

PickleScan's pkgutil.resolve_name has a universal blocklist bypass

PickleScan's profile.run blocklist mismatch allows exec() bypass