Browse CVEs by Ecosystem and Severity

Jupyter Enterprise Gateway: Kubernetes Manifest Injection in Jinja2 Template Rendering

Jupyter Enterprise Gateway: Jinja2 Template Server Side Template Injection resulting in Remote Code Execution

Jupyter Enterprise Gateway: ContainerProcessProxy._enforce_prohibited_ids Bypass

Apache MINA: Critical Deserialization Allow-list Bypass via resolveProxyClass

MLflow: Environment variable injection in AI Gateway secrets enables server-side credential exfiltration

OpenMed vulnerable to remote code injection through privacy-filter model loading path

Rojo development server vulnerable to DNS rebinding, allowing unauthenticated read/write access and local program execution

praisonai-platform: Any workspace member can add arbitrary user as owner via POST /workspaces/{id}/members

rattler has an entry-point path traversal in noarch:python install (arbitrary file write)

Vitest browser mode serves unsanitized otelCarrier query parameter as inline script

When Vitest UI server is listening, arbitrary file can be read and executed

Apache ActiveMQ has an Incorrect Default Permissions vulnerability

Apache Airflow vulnerable to Improper Neutralization of Special Elements Used in a Template Engine

Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ have a Code Injection issue

Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ have a Code Injection issue

praisonai-platform: Any workspace member can promote themselves or others to owner via PATCH /workspaces/{id}/members/{user_id}

praisonai-platform: JWT signing key defaults to hardcoded "dev-secret-change-me", allowing token forgery for any user when PLATFORM_ENV is unset

PraisonAI Platform has a cross-workspace IDOR + member-role privilege escalation

PraisonAI's unauthenticated A2A official example can reach real LLM-driven `eval()` tool execution

PraisonAI vulnerable to sandbox escape via `print.__self__` builtins module leak in `execute_code` (subprocess mode)

PraisonAI `deploy --type api` emits a Flask server with authentication disabled by default

PraisonAI call server exposes unauthenticated agent listing, invocation, and deletion when CALL_SERVER_TOKEN is unset

stigmem-node: Auth-disabled deployments may grant broad anonymous access outside loopback

Spatie Laravel Media Library contains a file upload restriction bypass

authentik's XML Signature Wrapping in SAML Source ACS allows authentication as arbitrary federated user

CC-Tweaked has an SSRF Protection Bypass with NAT64

russh: Post-decompression SSH packet size was not bounded, allowing remote oversized compressed packets

amazon-redshift-python-driver vulnerable to Remote Code Execution via eval() Injection

unbounded-spsc: Sender::send pointer-as-value transmute causes OOB read and fake-Arc drop under TX/RX race

NodeVM network builtin exclusions bypass via internal _http_client and _http_server

NodeVM builtin denylist bypass via process and inspector/promises allows host code execution

vm2 sandbox escape via JSPI-backed Promise `.finally()` species bypass

vm2 has a CVE-2023-37903 patch bypass: nesting:true without explicit require still allows full RCE

vm2's Bridge Proxy set trap ignores receiver parameter, enabling host object property injection via prototype chain

vm2 has a sandbox escape via unblocked cross-realm Symbol.for keys + missing bridge write-trap symbol checks

vm2 is Vulnerable to Sandbox Breakout Through Promise Species

vm2 has a Sandbox Escape issue

Gotenberg has path traversal in zip entry name via Windows-style separators in upload filename

axios Vulnerable to Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy`

axios's shouldBypassProxy does not recognize IPv4-mapped IPv6 addresses, allowing NO_PROXY bypass (incomplete fix for CVE-2025-62718)

Froxlor has privilege escalation in SSH key synchronization via symlinked `authorized_keys` path

Froxlor has an authorization bypass in FTP shell assignment via missing server-side `available_shells` enforcement

HaxCMS has a stored Cross-Site Scripting (XSS) bypass in its saveNode endpoint

nono: Sandbox escape on Linux via D-Bus: `systemd-run --user`

Casdoor doesn't verify that a JWT used for token exchange is still active

Calico Inserts Sensitive Information into Log File

Casdoor does not validate the AudienceRestriction element in SAML assertions

Casdoor: GetTokenExchangeToken bypass through lack of cross-organization JWT signature check

Casdoor has an authentication bypass