Browse CVEs by Ecosystem and Severity

mcp-shell has a Secure Mode Allowlist Bypass via Git Shell Alias

qwed-mcp has Unsafe SymPy `parse_expr()` Remote Code Execution via Unsanitized Math Expression Input

PraisonAI has a Browser Server WebSocket origin validation bypass via unanchored regex (patch bypass of CVE-2026-40289 / GHSA-8x8f-54wf-vv92)

PraisonAI: `--api-key` flag on `praisonai serve` is not properly enforced

Sakai Conversations has a Stored XSS Issue

mcp-contextforge-gateway has RestrictedPython sandbox bypass via getattr builtin in python_sandbox_server

Apache Camel-Undertow: the endpoint discarded the undertow-specific header filter strategy in favour of the base HTTP one, so the undertow filtering never ran on endpoint-configured routes

Apache Camel-Azure-Storage-Blob: the downloadBlobToFile operation built the local download target from the remote blob name without constraining it to the configured fileDir

Apache Camel-Atmosphere-Websocket: WebSocket dispatch header injection - the producer selected its target peers through Exchange headers whose names sat outside the filtered Camel namespace

JSONata vulnerable to Arbitrary Code Execution via crafted JSONata expressions

JSONata vulnerable to Arbitrary Code Execution via crafted JSONata expressions

YOURLS has stored XSS in referrer statistics chart via crafted Referer header

JSONata: Arbitrary Code Execution via crafted JSONata expressions

Xinference vulnerable to remote code execution via unsafe `eval()` in Llama3 tool-call parsing

Phalcon Volt compiler `join` filter compile-time PHP code injection (SSTI leads to RCE)

Atlantis Workspace Handling has Path Traversal that Allows Out-of-Bounds Directory Deletion/Creation

GeoTools has unauthenticated SQL injection in the jsonArrayContains filter function against PostGIS layers

Winter: Authenticated Twig sandbox escape in CMS SecurityPolicy (bypass of CVE-2024-54149)

Laravel Backpack CRUD: OS command injection in Stats::makeCurlRequest via attacker-controlled Host header (pre-auth)

Laravel Backpack CRUD: Arbitrary file deletion via attacker-controlled clear_<attr>[] in HasUploadFields::uploadMultipleFilesToDisk

Qinglong has an incomplete fix for CVE-2026-3965: Improper Authentication

Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header

Dgraph Alpha group stores can be replaced via unauthenticated external snapshot import

Filesystem sandbox escape when paths or symlinks contain trailing slashes

Snipe-IT: Stored DOM XSS via table selected-count IDs

LibreNMS: SSRF-driven stored XSS via Oxidized API response fields in device showconfig page

LibreNMS Vulnerable to Remote Code Execution via AboutController

Froxlor: Credential and 2FA secret disclosure via Froxlor API endpoints

Froxlor: Stored XSS in DNS TXT Record Content Allows Customer-to-Admin Account Takeover

jmespath.php has CompilerRuntime code injection via unescaped function names

surfio has an out-of-bounds read

resdata has Classic Buffer Overflow, Improper Validation of Array Index, NULL Pointer Dereference and Out-of-bounds Read

kobako Sandbox Escape: guest eval reaches host RCE via method_missing → public_send (any bound Service)

Keycloak: Unauthenticated account takeover via reset-credentials flow bypass

RabbitMQ Java client: Unvalidated Class.forName in JSON-RPC ProcedureDescription enables arbitrary class loading

Kestra vulnerable to stored XSS via custom Markdown [[link]] attribute injection

MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)

9Router: Authenticated Server-Side Request Forgery (SSRF) via OIDC Provider Test Endpoint

http4k: `DigestAuthProvider.verify` did not bind to request URI

vm2: NodeVM `builtin: ['*']` exposes `os` and `dns` — process-wide observability reads AND writes that hijack the host (sibling class of GHSA-9g8x-92q2-p28f)

vm2: Sandbox Breakout Using Dangerous Host Proto Mutators

VM2 has Missing Error.cause Sanitization that Enables Sandbox Escape to RCE

New API: Integer overflow in quota billing yields negative charges (self-crediting)

New API: User List API Leaks Root User Access Token Leading to Privilege Escalation