Browse CVEs by Ecosystem and Severity

CodeWhale: Argument Injection in `git_blame` Tool Allows Arbitrary File Read Without Approval

CodeWhale: SSRF bypass - TOCTOU on DNS failure for DNS pinning

CodeWhale: js_execution leaks parent environment to model context via missing env scrub

CodeWhale: Argument Injection in `git_show` Tool Allows Arbitrary File Write Without Approval

CodeWhale: exec_shell_interact sends LLM-controlled input to a running shell without an approval prompt (privilege escalation)

CodeWhale: Project config `instructions` override enables arbitrary file read into AI system prompt via cloned repository

CodeWhale: image_analyze follows workspace symlinks, leaking external file bytes

SurrealDB allows bypass of deny-net flags via DNS resolution

SiYuan: Graph endpoints omit the publish-password tier: anonymous readers receive block-level content of password-protected documents

SiYuan: Publish-boundary bypass via WebSocket broadcast: anonymous readers receive a live unfiltered feed of all edits including protected/forbidden documents (publish mode)

SiYuan: SQL injection in backlink/mention search via unescaped stored and client input (publish mode): first-order (client keyword) and second-order (stored document title) breakout on read-write handle

rubyzip path traversal vulnerability

SiYuan: Anonymous publish-password authentication bypass via getHeadingChildrenDOM / getHeading*Transaction / getBacklinkDoc (publish mode)

SiYuan: Cross-boundary content disclosure via getBacklinkDoc/getBackmentionDoc (publish mode): reader-reachable rendered DOM of publish-forbidden docs; sibling list endpoints are filtered

SiYuan: Full-content disclosure of publish-disabled documents via getHeading*Transaction endpoints (publish mode): reader-reachable rendered DOM with no publish-access check

SiYuan: Unauthenticated SQL execution and REGEXP injection via fullTextSearchAssetContent (publish mode): reader-reachable raw SQL (method 2) and unescaped REGEXP (method 3) on read-write asset-content DB

SiYuan: Unauthenticated arbitrary SQL execution via searchEmbedBlock (publish mode) : reader-reachable raw statement on read-write handle, cross-notebook read/write

Claude Code Templates: Unauthenticated OS command injection (RCE) in Claude Code Studio server (--studio)

Semaphore UI: Manager-to-owner privilege escalation via custom-role slug collision

Orval: RCE via OpenAPI path -> unescaped request-URL template literal (backtick breakout)

Orval: RCE via servers[].url -> unescaped request-URL template literal (with getBaseUrlFromSpecification)

Orval: Import-time RCE via schema default -> zod module-level template literal

Orval: Import-time RCE via array-items default -> zod module-level template literal

Orval: Import-time RCE via header-parameter default -> zod module-level template literal

Orval: RCE via schema property name -> computed-property-key injection in the MSW mock generator

Orval: Import-time RCE via enum-typed default -> zod module-level template literal

Orval: Import-time RCE via query parameter name -> computed-property-key injection in the zod cli

Orval: Import-time RCE via header parameter name -> computed-property-key injection in the zod client

unstructured: Server-Side Request Forgery in the URL-based partitioning

SiYuan: Stored and reflected XSS in SiYuan through an SVG sanitizer bypass

OpenChoreo: Authenticated OS command injection via OpenChoreo Workflow Plane templates enables code execution in privileged pods

OpenChoreo: Cross-project command execution and wirelog view access via OpenChoreo openchoreo-api exec and wirelogs endpoints

OpenChoreo: Unauthenticated access to data-plane operations via OpenChoreo cluster-gateway management APIs

Centrifugo: Client-forgeable headers emulation lets any client spoof headers forwarded to proxy backends

Hurl: Cookies in Cookies section leak when redirecting to a different host

Mail: Email address spoofing via malformed RFC 2047 encoded-words

Kirby: Access to image files outside of the site root via path traversal in the media handling

Orval: Import-time RCE via query-parameter default -> zod module-level template literal

Orval: Import-time RCE via schema property name -> computed-property-key injection in the zod client

SeaweedFS: Unauthenticated filer IAM gRPC service grants S3 administrative control

Grav: Remote code execution via unrestricted callable in Blueprint::dynamicData()

EasyAdmin custom-action dispatcher bypasses access_control on other routes

elFinder: ZIP extraction bypasses uploadDeny MIME filter allowing PHP file upload (RCE)

ImageMagick: Memory Leak when providing invalid options to the cli

Filament: Multi-factor authentication (app) can be bypassed when recovery codes are enabled

NLTK: JVM argument injection bypass via per-call options in the NLTK Stanford wrappers (incomplete fix of CVE-2026-12841)

Smarty: SSRF via redirect bypass of trusted_uri using {fetch}

elFinder: SSRF protection bypass via DNS rebinding in the `fsock_get_contents()` fallback

`zbus_polkit`: authorization bypass via PID reuse

MapFish Print has XXE that allows reading arbitrary files of certain types