Browse CVEs by Ecosystem and Severity

Traefik HTTP/3 Backend NTLM Connection Reuse

Traefik: Rootless HTTP/1 request-target routes as "/" but is forwarded verbatim, bypassing path-scoped routing, middleware guards and access logging

rclone serve s3: --auth-proxy without --auth-key authenticates nobody - full SigV4 signature bypass

rclone: RC per-server auth-proxy bypass

OmniRoute ACP Custom-Agent Remote Code Execution (RCE)

n8n: Expression Sandbox Escape via Shared Builtin Tampering and Code-Printer Injection Leads to Code Execution

Traefik: ForwardAuth identity spoofing via dot-form header alias

Angular: SSR XSS via Unescaped <template> Content Across DocumentFragment Boundaries in Fallback Raw-Content Elements

Angular: SSRF and Cross-Origin Credential Disclosure via URL Resolution Discrepancy in SSR

Pimcore: SQL Injection in Custom Reports via Malicious Report Configuration

PyTorch Lightning path traversal vulnerability

n8n: Expression Sandbox Escape via Class-Field Sanitizer Rebinding Can Lead to Code Execution

Apache FreeMarker template loading mechanism vulnerable to path traversal

Identrail Cross-tenant IDOR: Client-supplied GitHub App installation_id is bound to the caller's workspace without ownership verification

@yeger/turbo-graph: Unauthenticated Network-Exposed Task Execution via /api/run

GeoNetwork Web Module: Unauthenticaded Server-Side Request Forgery in SLD Tool

decidim-elections: Election question titles allow stored script execution

gix-sec safe.directory protections absent for elevated administrators

Microsoft Security Advisory CVE-2026-69304 – ASP.NET Core Denial of Service Vulnerability

Microsoft Security Advisory CVE-2026-69522 – .NET and Visual Studio Remote Code Execution Vulnerability

Microsoft Security Advisory CVE-2026-69439 – .NET and Visual Studio Elevation of Privilege Vulnerability

Microsoft Security Advisory CVE-2026-71328 – .NET and Visual Studio Remote Code Execution Vulnerability

mongodb: Reject "." and NUL bytes in database and collection names

Composer arbitrary command execution via a malicious package's Perforce source URL

SVGO: removeScripts allows executable links through namespace and control-character bypasses

Predis: Redis command injection and denial of service via CRLF smuggling in pipelined commands on aggregate connections

CakePHP: FunctionsBuilder::jsonValue() vulerable to SQL injection with PostgresDriver

Next.js: Unauthenticated Remote Code Execution on windows-hosted servers

MapLibre GL JS: XSS Sanitizer Bypass in DOM.sanitize() via Live NamedNodeMap Removal Skip

Microsoft Security Advisory CVE-2026-50646 – .NET Remote Code Execution Vulnerability

Microsoft QUIC: Remote Code Execution Vulnerability

Microsoft Security Advisory CVE-2026-62900 – .NET Information Disclosure Vulnerability

GitPython: Dormant multi-line git-config values are corrupted into live injected directives (e.g. core.hooksPath) on any unrelated GitConfigParser write, enabling RCE

DeepSeek Harness contains an authentication bypass vulnerability in local HTTP control-plane API

Netty: SNI Routing Bypass via Fragmented TLS ClientHello Causing Fallback to Default SslContext

SWC HTML minifier may allow script element breakout when minifying embedded JSON

Semaphore U: OS Command Injection

Gitea: Remote Code Execution via diffpatch Git Hook Installation

SiYuan: The publish-access gate treats encrypted notebooks as publicly accessible by default, allowing anonymous readers to retrieve fully decrypted document content while a notebook is unlocked

NLTK: Allowlisted pickle loaders still permit code execution in current source

NLTK: Unsafe Pickle Deserialization in TransitionParser Allows Remote Code Execution

@sap/cds-mtx: Credential disclosure in multitenant applications using SAP Cloud Application Programming Model (CAP)

OpenChoreo: cluster-gateway internal proxy performs no caller authentication and is not read-only — data-plane Secret disclosure and arbitrary Kubernetes mutation

SiYuan: Non-administrator responses from /api/system/getConf omit three secrets that the configuration-export path explicitly strips, disclosing the session-cookie signing key and the OS username to anonymous readers

SiYuan: Embedded (transclusion) block content is returned without publish-access filtering, leaking private and password-protected document content to anonymous readers

SiYuan: The session-cookie signing key (Conf.CookieKey) is returned to anonymous readers by /api/system/getConf

SiYuan: Publish-access filter on renderAttributeView leaves related-database content unfiltered and fails open on non-block first columns

SurrealDB: Custom API route lets authenticated callers override namespace/database scope via URL path

CodeWhale: Project config `allow_shell` override enables arbitrary shell command execution via cloned repository

CodeWhale: rlm_eval auto-approves arbitrary Python execution, bypassing the user's approval policy (RCE)