Browse CVEs by Ecosystem and Severity

Dalfox Server Mode Vulnerable to Unauthenticated Remote Code Execution via `found-action`

protobuf.js: Code injection in pbjs static output from crafted schema names

protobuf.js: Code injection through bytes field defaults in generated toObject code

Spring AI: Prompt Injection via Memory Poisoning in PromptChatMemoryAdvisor

Spring AI: ChatMemory DEFAULT_CONVERSATION_ID causes unintended cross-user data leakage

Malware in @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys

SandboxJS has a sandbox escape via Function.caller leakage of internal call op

MantisBT is Vulnerable to XSS leading to account takeover via updating a user's font family preference

pgAdmin 4 server mode has an authorization vulnerability affecting Server Groups, Servers, Shared Servers, Background Processes, and Debugger modules

Unity Catalog has a JWT Issuer Validation Bypass tht Allows Complete User Impersonation

WebdriverIO BrowserStack Service has a Command Injection issue

Angular Expressions - Remote Code Execution using filters

Local Path Provisioner Vulnerable to HelperPod Template Injection

elFinder MySQL has a SQL Injection in its Volume Driver (elFinderVolumeMySQL)

CloudNativePG's metrics exporter allows privilege escalation to PostgreSQL superuser and OS RCE

Next.js vulnerable to server-side request forgery in applications using WebSocket upgrades

Facebook React has a Denial of Service Vulnerability in React Server Components

Dozzle's Cross-Site WebSocket Hijacking (CSWSH) on exec/attach endpointsbypasses authentication

PraisonAI MCP `tools/call` path-traversal => RCE via Python `.pth` injection

Gotenberg: Server-Side Request Forgery via Chromium URL Endpoint with Redirect-Based Deny-List Bypass

Spring AI's MilvusVectorStore#doDelete(List) implementation is vulnerable to filter-expression injection via unsanitized document IDs

@yoda.digital/gitlab-mcp-server's SSE transport has no authentication and wildcard CORS, exposing all 86 GitLab tools

smallbitvec: Integer overflow in safe API leads to heap buffer overflow

SharpCompress has directory traversal via directory entries in WriteToDirectory (zip slip variant)

view_component: System Test Entry Point Path Check Allows Sibling Directory Escape

view_component: Preview Route Can Dispatch Inherited Helper Methods

Snipe-IT has insecure permissions in file uploads

free5GC's NEF nnef-pfdmanagement API is unauthenticated; forged bearer tokens can read PFD data and create/delete PFD subscriptions

free5GC's SMF UPI management interface lacks auth middleware; unauthenticated topology read/write requests reach handlers

free5GC's NEF nnef-oam route group is unauthenticated; no-token requests reach the OAM handler

free5GC's NEF 3gpp-traffic-influence API is unauthenticated; missing or forged bearer tokens can create, read, patch, and delete subscriptions

free5GC's NEF 3gpp-pfd-management API is unauthenticated; forged bearer tokens can create, read, and delete PFD transactions

Snipe-IT has Privilege Escalation via API Permissions Assignment

OpenTelemetry.Exporter.Instana bypasses TLS certificate validation when a proxy is configured

Cline Kanban Server has a Cross-Origin WebSocket Hijacking Vulnerability

Open WebUI has an LDAP Empty Password Authentication Bypass

Zebra has Permanent Block Discovery Halt via Gossip Queue Saturation and Syncer Poisoning

SiYuan: Electron Renderer RCE via decodeURIComponent-driven tooltip XSS in aria-label sink (incomplete fix for CVE-2026-34585)

Electerm users can run dangrous code through link or command line

Electerm Security Vulnerability: RCE via malicious SSH server filename in openFileWithEditor

Electerm has an unvalidated shell.openExternal that allows arbitrary protocol execution via terminal link click

Electerm runWidget has a path traversal that leads to arbitrary code execution

dash-uploader has a directory traversal vulnerability

Zebra v4.4.0 still accepts V5 SIGHASH_SINGLE without a corresponding output

PrestaShop has a stored XSS executable in customer service view

SiYuan Affected by Stored XSS via Attribute View Name to Electron Renderer RCE

vm2 has Sandbox Breakout Through Null Proto Exception

vm2 has sandbox breakout via `neutralizeArraySpeciesBatch`

Devise has an Open Redirect via Unvalidated `request.referrer` in Timeoutable Session Timeout Handler

Apache NiFi is missing the Restricted annotation with the Execute Code Required Permission