Browse CVEs by Ecosystem and Severity

Apostrophe has default XSS via `xmp` raw-text passthrough in `sanitize-html`

go-billy has path traversal vulnerabilities

Portainer has an endpoint security bypass via Swarm service create/update

Portainer Has an Arbitrary File Read via Git Symlink Injection in Stack Auto-Update

Portainer has a bind-mount restriction bypass via HostConfig.Mounts

Portainer missing authorization on Docker plugin endpoints, which allows host RCE

FlowiseAI: Evaluator create+update mass-assignment allows cross-workspace evaluator takeover

FlowiseAI: Evaluation create+update mass-assignment allows cross-workspace evaluation takeover

FlowiseAI: DatasetRow create+update mass-assignment allows cross-workspace row takeover

FlowiseAI: Dataset create+update mass-assignment allows cross-workspace dataset takeover

FlowiseAI: Assistant create+update mass-assignment allows cross-workspace assistant takeover

FlowiseAI: Vector Store No Permission Checks

n8n Has a Source Control Pull SQL Injection

n8n Has an XML Node Prototype Pollution Patch Bypass

n8n Has an Arbitrary File Read via Git Node

n8n: HTTP Request Node Pagination Prototype Pollution to RCE

FlowiseAI: Authenticated Host RCE via POST /api/v1/node-custom-function and NodeVM Sandbox Escape

Flowise has an MCP Security Bypass that Enables RCE

CoreShop Vulnerable to Remote Code Execution (RCE) via Insecure `pull_request_target` Configuration

Strapi may leak sensitive data via relational filtering due to lack of query sanitization

Strapi Vulnerable to SQL Injection in Content Type Builder

SiYuan Bazaar marketplace renders unescaped package `name` and `version` metadata, allowing stored XSS and Electron code execution

Goobi viewer - Core: Unauthenticated Solr Streaming Expression Proxy

Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server

Anchor: Program<'info, System> is not properly validated

Traefik: Gateway API TraefikService backend accepts rest@internal, allowing unauthorized exposure of the REST provider despite providers.rest.insecure=false

Klever-Go MultiDataInterceptor has remote OOM via crafted compressed P2P payload

Mapfish Print: Remote Code Injection (RCE) in Dynamic table

SillyTavern has a Path Traversal issue

SillyTavern has Authentication Bypass via SSO Header Injection

HashiCorp Nomad vulnerable to a path traversal

Security feature bypass vulnerability in Azure Key Vault Keys library for Java

llm CLI tool contains a code injection vulnerability via `--functions` command-line argument

imgaug contains an insecure deserialization vulnerability in BackgroundAugmenter class within multicore.py module

mamba language model framework vulnerable to insecure deserialization when loading pre-trained models from HuggingFace Hub

Ludwig framework is vulnerable to insecure deserialization through its predict() method.

Ludwig framework is vulnerable to insecure deserialization in its model serving component

Horovod contains an insecure deserialization vulnerability in its KVStore HTTP server component

Guardrails AI contains a code injection vulnerability in its Hub package installation mechanism

Apache Tomcat - Security constraints not correctly applied

Apache Tomcat: LockOutRealm treats user names as case-sensitive

Open Source Kubectl MCP Server vulnerable to arbitrary code execution via user interaction with crafted HTML page

PySyft server-side arbitrary Python execution after code approval

Apache Tomcat - WebSocket authentication header exposure

Apache Tomcat: Unbounded read in WebDAV LOCK and PROPFIND handling

Apache Tomcat - Digest authenticator will authenticate any unknown user

Apache Tomcat - HTTP/2 request headers not validated

OpenClaude Sandbox Bypass via Model-Controlled `dangerouslyDisableSandbox` Input

sealed-env: TOTP secret embedded in unseal token payload (enterprise mode)

Dalfox Server Mode has an Unauthenticated Arbitrary File Create/Append via `output` Option