CWE-501

Claude Code is an agentic coding tool. Prior to version 2.1.2, Claude Code's bubblewrap sandboxing mechanism failed to p

Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.43, 3.6.14, and 3.7.0-rc.2, there is an authe

vLLM is an inference and serving engine for large language models (LLMs). From 0.3.0 until 0.22.0, a vulnerability in AS

An unauthenticated remote attacker can post a malicious ID to the MQTT Broker results in the creation of a new configura

vLLM is an inference and serving engine for large language models (LLMs). Starting in version 0.10.1 and prior to versio

Sandbox escape due to incorrect boundary conditions in the Telemetry component. This vulnerability was fixed in Firefox

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. From versions 39

Trust boundary violation in Windows Attestation allows an authorized attacker to elevate privileges locally.

DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. Prior to 3.4.6, DOMPurify.sanitize(nod

DOMPurify before 3.4.7 (affected versions <= 3.4.5) passes direct references to the module-level DEFAULT_ALLOWED_TAGS an

NVIDIA Jetson Linux has a vulnerability in initrd, where the nvluks trusted application is not disabled. A successful ex