Browse CVEs by Ecosystem and Severity

Flowise: CVE-2025-8943 Patch Bypass: npm_config_yes bypasses MCP environment variable blocklist (Unauthenticated RCE)

ip-address: Address4 decodes leading-zero octets as decimal while resolvers decode them as octal, allowing SSRF and trust-boundary bypass

Angular i18n: Cross-Site Scripting (XSS) via event-handler attributes

Angular SSR: Missing Fallback Raw-Content Serialization Escaping leads to Cross-Site Scripting (XSS)

Angular: Cache-Key Ambiguity in HttpTransferCache Leading to Cross-Request Response Reuse and State Poisoning

Bouncy Castle: Lazy ASN.1 sequence forcing resets nesting-depth guard

@apostrophecms/seo Vulnerable to Stored XSS via Unsanitized Google Analytics / GTM ID Injected into Script Tag

Savon::Model evaluates WSDL operation names as Ruby source

MCP Ruby SDK: Ruby SSE Session Poisoning

MCP Ruby SDK: Unbounded JSON-RPC request body causes uncontrolled memory allocation in StreamableHTTPTransport

AgentCore CLI Bedrock Agent Import Vulnerable to Code Injection via Improper Triple-Quote Escaping

Quarkus: Authentication/Authorization Bypass via Advanced Path Normalization Vulnerabilities

Style Dictionary - Prototype Pollution in convertTokenData utility function

openhole-server vulnerable to path traversal via URL-decoded request path

Microsoft Security Advisory CVE-2026-32203 – .NET and Visual Studio Denial of Service Vulnerability

Fission: Incomplete capability denylist in Environment/Function PodSpec validation allows tenant-added CAP_SYS_TIME and cross-tenant node wall-clock corruption

SIPSorcery: Malformed UDP packet on the RTP/ICE socket can remotely terminate a media session (DoS)

QTINeon has unauthenticated relay-to-host amplification via unbounded RECONNECT_REQUEST forwarding

OAuth2::Client#request: Protocol-relative redirect Location overrides authority, leaking bearer Authorization to attacker host

OAuth: Cross-origin token-request redirects can expose signed request metadata

Pterodactyl's improper JWT scoping allows subuser to upload files when not explicitly granted `file.create` permissions

Cedar-Java has policy injection, type confusion, and incorrect equality comparison vulnerabilities

WordPress Coding Standards (WordPressCS) contains an arbitrary code execution vulnerability

Smithy-RS: Allocation of resources without limits in the default aws-smithy-http-server serve() path allows unauthenticated Slowloris denial of service

Budibase: Privilege escalation via public role assignment API missing app-level authorization

react-server-dom: Denial of Service in Server Functions

Microsoft Kiota: Arbitrary file write + code-injection via x-ms-kiota-info clientClassName and clientNamespaceName

Microsoft Kiota Workspace-config poisoning: out-of-repo file write + generation-time SSRF

Microsoft Kiota: Generation-time SSRF + remote/local file inclusion via unrestricted $ref

Microsoft Kiota: Code Generation Literal Injection in Kiota PHP Generator

Microsoft Kiota: Code Generation Literal Injection in Kiota Python Generator

Microsoft Kiota: Code Generation Literal Injection in Kiota Ruby Generator

Microsoft Kiota: XML Doc-Comment Newline Breakout Code Injection

Quinn: Remote memory exhaustion in quinn-proto from unbounded out-of-order stream reassembly

PHPSpreadsheet: XLS/OLE sector-chain self-loop causes memory exhaustion

PHPSpreadsheet: Gnumeric reader unbounded gzip expansion causes memory exhaustion

PHPSpreadsheet: SSRF bypass via HTTP redirect in WEBSERVICE() domain whitelist

JupyterLab: Cross-site scripting (XSS) via crafted settings file (`overrides.json`)

Next.js: Server-Side Request Forgery in rewrites via attacker-controlled destination hostname

Eclipse Jetty Digest Authentication: ISO-8859-1 lossy encoding allows authentication bypass via character substitution

n8n: Shared-Workflow Editor Can Exfiltrate Credentials via Inline Sub-Workflow JSON

n8n: Credential Authorization Bypass via Expression in HTTP Request Node `genericAuthType`

n8n: Expression sandbox escape via arrow-function bodies enabling command execution

n8n: Authenticated code execution in the n8n Git node

n8n: Account Takeover via Unverified Email Claim in Token Exchange Embed Login

n8n: SSO Instance-Role Provisioning Allows Privilege Escalation to Instance Owner

n8n: Legacy Expression Evaluator Sanitizer Bypass Leads to Authenticated Code Execution

n8n: Privilege Escalation and Code Execution via Full Public API Key Scope Assignment to Token Exchange JWTs

n8n: Prototype Pollution via Workflow Credentials Leads to Unauthenticated User and Project Enumeration

n8n: Stored DOM XSS via Resource Locator `cachedResultUrl`