Browse CVEs by Ecosystem and Severity

@better-auth/sso provider registration has server-side request forgery via unvalidated OIDC endpoints

Better Auth: OAuth refresh-token replay via missing client authentication on oidc-provider and mcp plugins

PyLoad vulnerable to SQL Injection via API /json/add_package in add_links parameter

Langroid Allows XXE Injection via XMLToolMessage

Frappe vulnerable to information disclosure leading to account takeover

Access control vulnerable to user data deletion by anonynmous users

Remote Code Execution Vulnerability via SSTI in Fides Webserver Jinja Email Templating Engine

Ankitects Anki arbitrary script execution vulnerability

ebookmeta XML External Entity vulnerability

LoLLMS Path Traversal vulnerability

EGroupware has a Remote Code Execution Vulnerability

Apache Airflow allows code execution through unsafe serialized DAG deserialization

LoLLMS Command Injection vulnerability

9routers has Exposure of Sensitive Information and Unprotected Database Import/Export, Allowing Complete Credential Theft and Database Takeover

Zebra: Missing copy constraint in halo2_gadgets variable-base scalar multiplication allows under-constrained base, breaking Orchard Action circuit soundness

Langroid: Neo4jChatAgent executes LLM-generated Cypher without validation (prompt-to-Cypher injection; config-conditional RCE), mirroring the SQLChatAgent bug fixed in CVE-2026-25879

9router has unauthenticated CRUD on /api/providers and Full API Key Leak via /api/usage/stats

Langroid: Sandbox Escape to Remote Code Execution via Incomplete `eval()` Mitigation in TableChatAgent

Langroid: SQLChatAgent dangerous-function blocklist can be bypassed with quoted or schema-qualified pg_read_file calls

Decompress: Archive extraction can create files and links outside of the target directory

Cilium vulnerable to sensitive information disclosure and cluster disruption via local Envoy admin socket access

Formie Hidden field defaults vulnerable to Server-Side Template Injection

Apache Camel DNS Has Improper Input Validation, Leading to Server-Side Request Forgery (SSRF)

Apache Camel: KeycloakSecurityPolicy has Improper Authentication, Missing Authentication for Critical Function and Failing Open Vulnerabilities

Apache Camel-AWS2-SNS: An inbound Camel-namespace filter was added to Sns2HeaderFilterStrategy

Apache Camel-Solr: The SolrParam. and SolrField. Exchange header prefixes used non-Camel-prefixed names that bypass the HTTP header filter, allowing an HTTP client to inject Solr query parameters (server-side request forgery) and document fields

Apache Camel-AWS2-SQS: Inbound message attributes are mapped into the Exchange without an inbound HeaderFilterStrategy, allowing a message sender to inject Camel control headers

Apache Camel: camel-mongodb-gridfs producer allows GridFS operation override and NoSQL operator injection via unfiltered  gridfs.*  HTTP headers

Apache Camel-PQC: The AWS Secrets Manager key-lifecycle manager deserializes persisted key metadata with java.io.ObjectInputStream and no ObjectInputFilter

Apache Camel-Keycloak: The access-token validity window is not verified because the IS_ACTIVE check is missing from the TokenVerifier, allowing expired tokens to be accepted

Apache Camel-Cometd: Inbound Bayeux message headers are mapped into the Exchange without a HeaderFilterStrategy, allowing unauthenticated clients to inject Camel control headers

Apache Camel-Docling: Insufficient validation of custom CLI arguments enables argument injection and path traversal in DoclingProducer

Gitea pre-receive hook scanner errors allow branch-protection bypass

Gitea OAuth2 authorization codes can be reused after expiry

Gitea repository creation accepts insufficiently validated fields

Gitea template repository generation follows unsafe filesystem paths

Gitea OAuth2 PKCE S256 verifier bypass

Gitea LFS mirror operations bypass migration HTTP transport protections

9router's Hardcoded Default fallback JWT Secret Allows Authentication Bypass

LaunchServer FileServerHandler has an unauthenticated path traversal issue

fast-mcp-telegram: Bearer token path traversal bypasses reserved Telegram session protection

9router: Missing Authorization and OS Command Injection

Mautic vulnerable to Path Traversal via Campaign Import

Mautic has Server-Side Template Injection (SSTI) in Theme Templates

zebrad has consensus divergence via P2SH sigop undercount in pure-Rust disabled-opcode parser

OpenClaw: QQBot admin commands could skip DM-only and allowFrom policy

mcp-memory-service: Missing Authentication on Document API Endpoints Allows Unauthenticated Memory Read/Write/Delete

Ghost: Cache-poisoning XSS in Ghost frontend via x-ghost-preview header