Browse CVEs by Ecosystem and Severity

Microsoft QUIC: Remote Code Execution Vulnerability

GitPython: Dormant multi-line git-config values are corrupted into live injected directives (e.g. core.hooksPath) on any unrelated GitConfigParser write, enabling RCE

DeepSeek Harness contains an authentication bypass vulnerability in local HTTP control-plane API

Netty: SNI Routing Bypass via Fragmented TLS ClientHello Causing Fallback to Default SslContext

Semaphore U: OS Command Injection

Gitea: Remote Code Execution via diffpatch Git Hook Installation

NLTK: Allowlisted pickle loaders still permit code execution in current source

NLTK: Unsafe Pickle Deserialization in TransitionParser Allows Remote Code Execution

@sap/cds-mtx: Credential disclosure in multitenant applications using SAP Cloud Application Programming Model (CAP)

OpenChoreo: cluster-gateway internal proxy performs no caller authentication and is not read-only — data-plane Secret disclosure and arbitrary Kubernetes mutation

CodeWhale: SSRF bypass - TOCTOU on DNS failure for DNS pinning

SiYuan: SQL injection in backlink/mention search via unescaped stored and client input (publish mode): first-order (client keyword) and second-order (stored document title) breakout on read-write handle

SiYuan: Unauthenticated SQL execution and REGEXP injection via fullTextSearchAssetContent (publish mode): reader-reachable raw SQL (method 2) and unescaped REGEXP (method 3) on read-write asset-content DB

SiYuan: Unauthenticated arbitrary SQL execution via searchEmbedBlock (publish mode) : reader-reachable raw statement on read-write handle, cross-notebook read/write

Orval: RCE via OpenAPI path -> unescaped request-URL template literal (backtick breakout)

Orval: RCE via servers[].url -> unescaped request-URL template literal (with getBaseUrlFromSpecification)

Orval: Import-time RCE via schema default -> zod module-level template literal

Orval: Import-time RCE via array-items default -> zod module-level template literal

Orval: Import-time RCE via header-parameter default -> zod module-level template literal

Orval: RCE via schema property name -> computed-property-key injection in the MSW mock generator

Orval: Import-time RCE via enum-typed default -> zod module-level template literal

Orval: Import-time RCE via query parameter name -> computed-property-key injection in the zod cli

Orval: Import-time RCE via header parameter name -> computed-property-key injection in the zod client

unstructured: Server-Side Request Forgery in the URL-based partitioning

OpenChoreo: Unauthenticated access to data-plane operations via OpenChoreo cluster-gateway management APIs

Centrifugo: Client-forgeable headers emulation lets any client spoof headers forwarded to proxy backends

Orval: Import-time RCE via query-parameter default -> zod module-level template literal

Orval: Import-time RCE via schema property name -> computed-property-key injection in the zod client

SeaweedFS: Unauthenticated filer IAM gRPC service grants S3 administrative control

NLTK: JVM argument injection bypass via per-call options in the NLTK Stanford wrappers (incomplete fix of CVE-2026-12841)

Pimcore Vulnerable to Remote Code Execution via DataObject Class-Definition Field Name

Pimcore Hotspotimage getDataFromResource() unrestricted Serialize::unserialize over object-store column (PHP Object Injection, CWE-502)

plone.app.event vulnerable to denial of service via iCalendar import

plone.app.portlets vulnerable to denial of service via RSS feed portlet

Yamcs vulnerable to authenticated remote code execution via unescaped StreamSQL `LIKE` pattern compiled by Janino (`LikeExpression`)

Yamcs vulnerable to Remote Code Execution via instance-template argument YAML injection (createInstance)

Yamcs vulnerable to authenticated RCE via StreamSQL aggregate-compiler column-name injection in Yamcs `executeSql`

free5GC NRF nnrf-nfm lacks NF Profile input validation — enables NF Registration Poisoning with arbitrary service endpoints

Klever: Integer overflow in split-royalty validation enables unbounded minting of KLV (native token)

Klever: Marketplace settlement mints KLV when referral % + royalty % exceed the bid (negative seller share silently skipped)

LiteLLM vulnerable to server-side template injection in the /prompts/test endpoint