Browse CVEs by Ecosystem and Severity

containerd CRI checkpoint restore CDI annotation smuggling

containerd CRI — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull

Oj: Stack Buffer Overflow in Oj.dump via Large Indent

containerd: CRI checkpoint import allows local image tag poisoning

Oj: Use-After-Free in Oj::Parser Symbol Key Cache Toggle

Hugo: security.http.urls deny rules bypassed by alternate IPv4 encodings (SSRF)

AlchemyCMS: Unauthenticated nested page API leaks restricted & unpublished content

Nokogiri: Possible Use-After-Free when setting an attribute value via `Nokogiri::XML::Attr#value=` or `#content=`

Nokogiri: Possible Use-After-Free when directly using `NokogirI::XML::XPathContext` beyond document lifetime

Nokogiri: Possible Use-After-Free when setting `Document#root=` to an invalid node type

Nokogiri: Possible Out-of-Bounds Read in `Nokogiri::XML::NodeSet#[]`

Nokogiri: Null Pointer Dereference calling methods on uninitialized wrapper classes

Nokogiri: Possible Use-After-Free when `Nokogiri::XML::Document#encoding=` raises an exception

Agentic-Flow: OS Command Injection in agentic-flow MCP server tools via unsanitized tool-parameter interpolation into execSync

tract: Arbitrary file read via unsanitized ONNX external_data `location` (path traversal) on model load in tract-onnx

CedarJava has policy injection vulnerability

CedarJava has type confusion vulnerability

Tilt: Missing authentication on the network-exposed Tilt HUD server

Network-AI: Improper Neutralization of Special Elements used in an OS Command

Network-AI: CVE-2026-46701 fix incomplete — empty default secret still authorizes all requests

Canonical MicroCeph: path traversal issue in the remote-import AP

gemini-mcp-tool vulnerable to OS command injection and @file exfiltration via prompt quoting (CVE-2026-0755)

[Eclipse Theia] Indirect Prompt Injection via Adversarial Workspace File and Directory Names in AI Chat

Crawl4AI: Unauthenticated RCE via Chromium launch-argument injection in browser_config.extra_args

Crawl4AI: Arbitrary file write (path traversal) in crawler downloads can lead to RCE

@acastellon/auth: Authentication bypass via spoofable headers in validateToken()

netlicensing-mcp: REST Path Traversal Bypasses Token Redaction

googleapis/mcp-toolbox: authentication bypass vulnerability in the generic opaque token validation path (validateOpaqueToken)

googleapis/mcp-toolbox: authentication bypass vulnerability in the generic opaque token validation path (validateOpaqueToken)

tract-nnef: integer overflow in NNEF `.dat` tensor parser yields an out-of-bounds read on model load

Kirby: External Initialization of the Panel on reverse proxy setups with the `Forwarded` header

python-statemachine SCXML <data expr> Eval Injection

praisonai-platform: default JWT signing secret 'dev-secret-change-me' enables token forgery

praisonai-platform 0.1.4 still boots on the hardcoded JWT secret dev-secret-change-me (default-open production guard)

PraisonAI: Arbitrary File Read/Write via `multiedit` Tool Without Path Validation

npm PraisonAI utility shell safe-command wrapper allowlist bypass via shell chaining

npm PraisonAI AgentLoop onToolCall approval runs after tool execution

npm PraisonAI MCPServer exposes unauthenticated HTTP tools/call

npm PraisonAI AgentOS exposes unauthenticated agent listing and invocation

PraisonAI: Remote Code Execution via Sandbox Escape in `codeMode` Tool

npm PraisonAI SandboxExecutor allowedCommands bypass via shell chaining

npm PraisonAI codeMode sandbox escape via Function constructor

Heimdall: Forwarded Header Injection via Unsanitized Host Header in Proxy Mode

Heimdall: IP Spoofing via Unvalidated Forwarding Headers

PraisonAI: Missing Authentication for Critical Function and Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in praisonai

PraisonAI: AgentOS remains unauthenticated after incomplete fix version and allows remote agent invocation

PraisonAI AgentTeam.launch exposes unauthenticated remote agent listing and invocation endpoints

PraisonAI: Jobs API exposes agent-execution endpoints with no authentication

praisonai: recipe serve auth middleware silently disables itself when no secret is set

PraisonAI: Unauthenticated RCE via Jobs API + Approval Bypass