Open Source Vulnerabilities
Grimoire before 1.0.0 Unauthenticated SSRF via /api/fetch-metadata
Grimoire before 1.0.0 Unauthenticated SSRF via /api/fetch-metadata
abp-next-admin 10.4.0 through 10.7.0 Cross-Tenant File Disclosure via Blob Download-By-Name
abp-next-admin 10.4.0 through 10.7.0 Cross-Tenant File Disclosure via Blob Download-By-Name
SonicJS through 3.0.0 Missing Authorization in Content Write API
SonicJS through 3.0.0 Missing Authorization in Content Write API
LMDeploy 0.9.0 through 0.18.0 Unauthenticated RCE via /update_weights Pickle Deserialization
LMDeploy 0.9.0 through 0.18.0 Unauthenticated RCE via /update_weights Pickle Deserialization
SerpBear before 3.1.1 Missing Authentication via POST /api/notify
SerpBear before 3.1.1 Missing Authentication via POST /api/notify
Bastille through 1.4.4 Jail Escape via Symlink Following in cp, rcp, jcp
Bastille through 1.4.4 Jail Escape via Symlink Following in cp, rcp, jcp
xiaozhi-esp32-server through 0.9.8 Authentication Bypass via Spoofed Device-ID Header
xiaozhi-esp32-server through 0.9.8 Authentication Bypass via Spoofed Device-ID Header
WPGraphQL before 2.24.1 Missing Authorization via createComment Mutation
WPGraphQL before 2.24.1 Missing Authorization via createComment Mutation
WPGraphQL before 2.24.1 Email Flooding via Aliased sendPasswordResetEmail Mutations
WPGraphQL before 2.24.1 Email Flooding via Aliased sendPasswordResetEmail Mutations
WPGraphQL before 2.24.2 Object Existence Disclosure via Media and Comment Mutations
WPGraphQL before 2.24.2 Object Existence Disclosure via Media and Comment Mutations
WPGraphQL Smart Cache before 2.3.3 Unbounded Persisted Query Storage DoS
WPGraphQL Smart Cache before 2.3.3 Unbounded Persisted Query Storage DoS
Scribus before 1.6.7 and 1.7.x before 1.7.4 Out-of-Bounds Memory Access via SVM Import Plugin
Scribus before 1.6.7 and 1.7.x before 1.7.4 Out-of-Bounds Memory Access via SVM Import Plugin
qt3d-opensource-src, qt3d-opensource-src, qt3d-opensource-src, qt3d-opensource-src, qt6-3d, qt3d-opensource-src, qt6-3d, qt3d-opensource-src, qt6-3d, qt3d-opensource-src, qt6-3d
qt3d-opensource-src/ qt3d-opensource-src/ qt3d-opensource-src/ qt3d-opensource-src/ qt6-3d/ qt3d-opensource-src/ qt6-3d/ qt3d-opensource-src/ qt6-3d/ qt3d-opensource-src/ qt6-3d
Scribus before 1.6.7 and 1.7.x before 1.7.4 Heap Buffer Overflow via PICT 4-bit Pixel Unpacking
Scribus before 1.6.7 and 1.7.x before 1.7.4 Heap Buffer Overflow via PICT 4-bit Pixel Unpacking
Scribus before 1.6.7 and 1.7.x before 1.7.4 Heap Out-of-Bounds Write via Micrografx Draw Import
Scribus before 1.6.7 and 1.7.x before 1.7.4 Heap Out-of-Bounds Write via Micrografx Draw Import
Scribus before 1.6.7 and 1.7.x before 1.7.4 Heap Overflow via TIFF Tile Buffer Handling
Scribus before 1.6.7 and 1.7.x before 1.7.4 Heap Overflow via TIFF Tile Buffer Handling
Scribus before 1.6.7 and 1.7.x before 1.7.4 Out-of-Bounds Read via PICT Planar Image Data
Scribus before 1.6.7 and 1.7.x before 1.7.4 Out-of-Bounds Read via PICT Planar Image Data
Scribus before 1.6.7 and 1.7.x before 1.7.4 Heap Buffer Overflow via PICT Pixmap Loader
Scribus before 1.6.7 and 1.7.x before 1.7.4 Heap Buffer Overflow via PICT Pixmap Loader
Scribus before 1.6.7 and 1.7.x before 1.7.4 Heap Out-of-Bounds Write via PSD Image Loader
Scribus before 1.6.7 and 1.7.x before 1.7.4 Heap Out-of-Bounds Write via PSD Image Loader
rancher-agent
containerd is an open-source container runtime
rancher-agent
containerd is an open-source container runtime
rancher-agent
containerd is an open-source container runtime
rancher-agent
containerd is an open-source container runtime
rancher-agent
containerd is an open-source container runtime
rancher-agent
containerd is an open-source container runtime
kubeflow-pipelines-frontend, kubeflow-pipelines-frontend
kubeflow-pipelines-frontend/ kubeflow-pipelines-frontend
kubeflow-pipelines-frontend, kubeflow-pipelines-frontend
kubeflow-pipelines-frontend/ kubeflow-pipelines-frontend
Collabora Online: Reflected HTML injection through host_session_id
Collabora Online: Reflected HTML injection through host_session_id
libass: Out-of-bounds read and write in wrap_lines_measure
joserfc
joserfc: Compact JWS size guard allocates attacker-controlled segments before rejection
joserfc
joserfc: Compact JWS size guard allocates attacker-controlled segments before rejection
joserfc
joserfc: Unbounded JWE General JSON `recipients` Array Leads to CPU Exhaustion (DoS) via Repeated RSA Private-Key Decryption
joserfc
joserfc: Unbounded JWE General JSON `recipients` Array Leads to CPU Exhaustion (DoS) via Repeated RSA Private-Key Decryption
github.com/charmbracelet/soft-serve
charmbracelet/soft-serve: Race in `SetPrivate` leaves a private repository readable by unauthenticated users
github.com/charmbracelet/soft-serve
charmbracelet/soft-serve: Race in `SetPrivate` leaves a private repository readable by unauthenticated users
libass: Out-of-bounds bit clears for negative Matroska ReadOrder values
libass: Out-of-bounds bit clears for negative Matroska ReadOrder values
SOCFortress CoPilot: Authentication Bypass and Missing Authorization on Velociraptor Sigma Exclusion Rules (Detection Suppression)
SOCFortress CoPilot: Authentication Bypass and Missing Authorization on Velociraptor Sigma Exclusion Rules (Detection Suppression)
ddtrace
CVE-2026-116588 in ddtrace - Patched by Root
ddtrace
CVE-2026-116588 in ddtrace - Patched by Root
ddtrace
CVE-2026-116589 in ddtrace - Patched by Root
ddtrace
CVE-2026-116589 in ddtrace - Patched by Root
