Browse CVEs by Ecosystem and Severity

zebrad vulnerable to full node denial of service via crafted Sapling receiver in z_listunifiedreceivers

zebrad has full node denial of service via non-ASCII LongPollId in getblocktemplate

OpenClaw: Node pairing reconnection could confuse approval scope state

SurrealDB: Port-specific --deny-net rules silently bypassed on HTTP redirect

SurrealDB: Graph traversal bypasses table SELECT permissions

SurrealDB: Scraping a TABLE with no available PERMISSIONS to current auth level

CefSharp.Common: `FolderSchemeHandlerFactory` path boundary check can expose files outside the configured root folder

ImageMagick has a Heap Buffer Over-Write in SF3 encoder when writing multi-frame image

ImageMagick: Memory Leak in wand option parser when providing invalid arguments

YARD static cache reads raw traversal paths before router sanitization

Cargo crates in third party registries can override the cached source of other crates

Scriban: ExpressionDepthLimit guard is non-enforcing — parser-recursion DoS in 6.6.0–7.2.0 (incomplete fix for GHSA-wgh7-7m3c-fx25 / GHSA-p6q4-fgr8-vx4p)

Scriban: array * int (ScriptArray<T>.TryEvaluate) bypasses LoopLimit — incomplete fix for GHSA-c875-h985-hvrc, missed sibling of GHSA-24c8-4792-22hx

ImageMagick has Null Pointer Dereference caused by the distort operation when passing incorrect arguments

fluent-plugin-opentelemetry Has Denial of Service (DoS) via Large Payloads and Decompression Bombs in `in_opentelemetry`

ImageMagick has a Use-After-Free when allocation in CheckPrimitiveExtent fails

ImageMagick: Policy Bypass can read disallowed files via symlink

ImageMagick has a Heap Buffer Over-Write in MAT decoder on 32-bit systems

ImageMagick Vulnerable to Stack Overflow in its MVG Decoder

ImageMagick has an Infinite Loop in subimage-search with crafted image

ImageMagick has a Heap Buffer Underwrite in the Floyd-Steinberg depth dithering method

MessagePack-CSharp: ExpandoObject formatter can perform quadratic insertion work on untrusted maps

MessagePack-CSharp: LZ4 decompression allocates from unbounded declared output lengths

MessagePack-CSharp: ASP.NET Core MessagePackInputFormatter defaults to TrustedData for HTTP request bodies

WASI hard links and renames bypass wasmtime-wasi's FilePerms for destination

AVideo Meet plugin: anonymous-to-admin stored XSS via unescaped participant User-Agent in getMeetInfo.json.php Participants panel

Mise's local credential_command executes untrusted config

Gogs's Unauthenticated Jupyter Notebook (ipynb) Sanitizer allows arbitrary data: URIs leading to XSS

Cloudflare Quiche: Use-after-free in connection ID iterator FFI functions

Traefik Kubernetes Ingress NGINX provider fails open when auth-secret resolution fails

Grafana Operator: Privilege escalation from namespace admin to cluster admin via GrafanaDashboard jsonnetLib fileName

CoreWCF: SAML token replay protection is inoperative

CoreWCF: UnixDomainSocket Non-Reentrant POSIX Identity Resolution

CoreWCF NetNamedPipe transport accepts attach to a pre-existing named pipe instance

CoreWCF: Unix Domain Socket PosixIdentity transport accepts connections that skip the security upgrade

CoreWCF: Kafka consume pump halts permanently on a Kafka tombstone (null-value record), causing persistent endpoint denial of service.

CoreWCF: WS-Security signature substitution via document-wide Signature lookup

Oj: intern.c form_attr (uninitialized stack read)

containerd: CRI checkpoint import allows local image tag poisoning

Nokogiri: Possible Out-of-Bounds Read in `Nokogiri::XML::NodeSet#[]`

tract: Arbitrary file read via unsanitized ONNX external_data `location` (path traversal) on model load in tract-onnx

Canonical MicroCeph: path traversal issue in the remote-import AP

tract-nnef: integer overflow in NNEF `.dat` tensor parser yields an out-of-bounds read on model load

NCalc: Denial of Service via Unbounded and Non-Terminating Factorial Evaluation

katello: missing repository authorization in content_uploads exposes cross-product content existence

Claude Code: Out-of-Band Data Exfiltration via Pre-Approved HuggingFace Domain in WebFetch

Deno: Node TCPWrap numeric hostname aliases bypass --deny-net resolved-IP deny checks

n8n: SQL Injection in Postgres v1/TimesclaeDB Nodes

Microsoft Security Advisory CVE-2026-45491 – .NET Tampering Vulnerability

Symfony: UrlGenerator Dot-Segment Encoding Skips Every Other Chained `../` or `./` → Generated URL Collapses Off-Route Under RFC 3986 Normalization