Browse CVEs by Ecosystem and Severity

ImageMagick: Heap Buffer Over-Write of a single byte in the JP2 encoder.

ImageMagick: Stack overflow in fx operation

ImageMagick: Use-After-Free in MSL decoder.

ImageMagick: Infinite Loop in the MIFF decoder can lead to CPU exhaustion

ImageMagick: Heap Buffer Over-Write in MIFF encoder when using LZMA compression

ImageMagick: Heap Buffer Over-Write in IPL decoder when reading multiple images of different dimensions

ImageMagick: Policy Bypass in MNG coder could

ImageMagick: Heap Buffer Over-Read of a 4 bytes in distort operation.

HAPI FHIR: ReDoS via FHIRPath matches()/replaceMatches() in FHIR Validator HTTP Endpoint

Microsoft Security Advisory CVE-2026-35433 – .NET Elevation of Privilege Vulnerability

Microsoft Security Advisory CVE-2026-42899 – ASP.NET Core Denial of Service Vulnerability

Microsoft Security Advisory CVE-2026-32175 – .NET Core Tampering Vulnerability

ChromaDB Python project has a pre-authentication code injection vulnerability

ngrok is Vulnerable to Command Injection

ImageMagick: Policy Bypass in PSD decoder

ImageMagick: Out-of-Bounds Read of a single byte in meta encoder

ImageMagick: Out-of-Bounds Read in connected components when the user supplies an invalid keep-top define

Budibase: Builder-to-Admin Privilege Escalation via onboardUsers Endpoint Without SMTP Configuration

ruby-jwt: Empty-key HMAC bypass; cross-language sibling of CVE-2026-44351

Formie: Pre-authenticated server-side template injection in Hidden fields

TinyIce: Missing authentication on WebRTC ingest endpoint allows unauthorized stream injection

Dozzle: Pre-auth SSRF with response-body reflection via POST /api/notifications/test-webhook (default no-auth deploy)

CI4MS: Stored XSS in Pages Module Content via Broken html_purify Validation Rule

Microsoft DirectX12: .spritefont multiply overflow only in 32-bit builds

Microsoft DirectX: .spritefont multiply overflow only in 32-bit builds

ImageMagick: Heap Buffer Over-Read in IPTC encoder

Arcane Backend: Unauthenticated reflected XSS via SVG color parameter enables admin account takeover

Arcane Backend: Missing admin authorization on git repository endpoints allows non-admin users to exfiltrate stored Git credentials and tamper with GitOps configs

SGLang: Unauthenticated RCE via --enable-custom-logit-processor

SGLanG: Multimodal scheduler deserializes untrusted pickle data on 0.0.0.0 ROUTER socket

SGLang's multimodal generation runtime has an unauthenticated path traversal vulnerability

Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin

Mattermost doesn't sanitize sensitive configuration fields before including them in support packet generation

AVideo: OS command injection in on_publish.php execAsync via unescaped m3u8 URL

Apache Flink: Remote code execution via SQL injection in code generation

SimpleSAMLphp casserver FileSystemTicketStore path traversal allows out-of-ticket-directory read/unserialize and conditional deletion

Budibase: `PUT /api/datasources/:datasourceId` is protected only by `TABLE/READ` permission instead of builder access, allowing any authenticated app user to overwrite datasource connection parameters including host, port, and URL

NukeViet CMS: Stored Cross-Site Scripting (XSS) via insufficient server-side input sanitization in Request class

nimiq-keys: Unchecked Ed25519 signature length in TaggedPublicKey::verify causes remote node panic via DHT

Crabbox: environment variable exposure vulnerability

Crabbox: authentication bypass vulnerability that allows impersonation of others by spoofing identity headers

vm2 Has a Sandbox Breakout Using Async Generator

utcp-cli Vulnerable to Command Injection via Unsanitized Argument Substitution in CLI Communication Protocol

Marten has an injection vulnerability in its full-text search regConfig parameter

DeepSeek TUI: task_create Insecure Defaults Enable RCE via Prompt Injection in Project Files

DeepSeek TUI has SSRF IPV6 bypass

DeepSeek TUI: run_tests Tool Enables RCE via Malicious Repository Without Approval

DeepSeek TUI has SSRF via HTTP Redirect Bypass in fetch_url Tool

Electerm: Importing unsafe bookmark data could lead to unsafe operation when clicking local type bookmark

ethyca-fides has a DOM-based XSS vulnerability in fides.js via fides_description override