Open Source Vulnerabilities
victoriametrics-vmagent-cluster, victoriametrics-vmalert-cluster, victoriametrics-vminsert-cluster, victoriametrics-vmselect-cluster, victoriametrics-vmstorage-cluster
victoriametrics-vmagent-cluster/ victoriametrics-vmalert-cluster/ victoriametrics-vminsert-cluster/ victoriametrics-vmselect-cluster/ victoriametrics-vmstorage-cluster
Nightingale 9.1.1 SSRF Guard Bypass via IPv6 Encoding
victoriametrics-operator, victoriametrics-operator-config-reloader
victoriametrics-operator/ victoriametrics-operator-config-reloader
victoriametrics-operator-fips, victoriametrics-operator-fips-config-reloader
victoriametrics-operator-fips/ victoriametrics-operator-fips-config-reloader
victoriametrics, victoriametrics-vmagent, victoriametrics-vmalert, victoriametrics-vmauth
victoriametrics/ victoriametrics-vmagent/ victoriametrics-vmalert/ victoriametrics-vmauth
victoriametrics-fips, victoriametrics-vmagent-fips, victoriametrics-vmalert-fips, victoriametrics-vmauth-fips
victoriametrics-fips/ victoriametrics-vmagent-fips/ victoriametrics-vmalert-fips/ victoriametrics-vmauth-fips
MegaParse 0.0.55 Server-Side Request Forgery via POST /v1/url
MegaParse 0.0.55 Server-Side Request Forgery via POST /v1/url
Plandex 2.2.1 Path Traversal via ApplyFiles
llmware 0.4.6 SQL Injection via unescaped filter values
TEN Framework 0.11.71 Unauthenticated File Read/Write via TMAN Designer
TEN Framework 0.11.71 Unauthenticated File Read/Write via TMAN Designer
surya 0.22.1 Unauthenticated Arbitrary File Read via screenshot server
surya 0.22.1 Unauthenticated Arbitrary File Read via screenshot server
ms-swift 4.5.2 Unauthenticated SSRF via Multimodal Media URLs
ms-swift 4.5.2 Unauthenticated SSRF via Multimodal Media URLs
AgentScope through 2.0.7.post1 Arbitrary Directory Copy via add_skill
AgentScope through 2.0.7.post1 Arbitrary Directory Copy via add_skill
marker through 2.0.0 Path Traversal via upload filename
tempo-fips-3.0, tempo-fips-3.0-cli, tempo-fips-3.0-query, tempo-fips-3.0-vulture
tempo-fips-3.0/ tempo-fips-3.0-cli/ tempo-fips-3.0-query/ tempo-fips-3.0-vulture
tempo-fips-3.0, tempo-fips-3.0-cli, tempo-fips-3.0-vulture
tempo-fips-3.0/ tempo-fips-3.0-cli/ tempo-fips-3.0-vulture
tempo-fips-3.0, tempo-fips-3.0-cli, tempo-fips-3.0-vulture
tempo-fips-3.0/ tempo-fips-3.0-cli/ tempo-fips-3.0-vulture
tempo-fips-2, tempo-fips-2-cli, tempo-fips-2-vulture
tempo-fips-2, tempo-fips-2-cli, tempo-fips-2-query, tempo-fips-2-vulture
tempo-fips-2/ tempo-fips-2-cli/ tempo-fips-2-query/ tempo-fips-2-vulture
tempo-fips-2, tempo-fips-2-cli, tempo-fips-2-vulture
aider 0.86.2 Remote Code Execution via .aider.conf.yml
tempo-3.0, tempo-3.0-cli, tempo-3.0-vulture
tempo-2, tempo-2-cli, tempo-2-vulture
tempo-3.0, tempo-3.0-cli, tempo-3.0-vulture
tempo-2, tempo-2-cli, tempo-2-vulture
tempo-3.0, tempo-3.0-cli, tempo-3.0-query, tempo-3.0-vulture
tempo-3.0/ tempo-3.0-cli/ tempo-3.0-query/ tempo-3.0-vulture
tempo-2, tempo-2-cli, tempo-2-query, tempo-2-vulture
LLaMA-Factory SSRF Guard Bypass via Redirect and DNS Rebinding
LLaMA-Factory SSRF Guard Bypass via Redirect and DNS Rebinding
QAnything 2.0.0 Unauthenticated Cross-User File Disclosure
