2026

stoatchat versions before 0.15.5 contain a denial of service vulnerability in the acknowledgement worker that processes

stoatchat before 0.15.5 fails to revalidate usernames after Unicode sanitization, allowing attackers to create usernames

Grav 2.0.0 through 2.0.24 contain a Twig content sandbox escape. The `array` filter (and its identical function form) is

grav-plugin-login (the Grav CMS Login plugin) versions >= 3.8.7 and < 3.9.7 allow the two-factor authentication challeng

Netty's HTTP/3 codec (io.netty:netty-codec-http3) in versions 4.2.0.Final through 4.2.17.Final does not enforce the RFC

vLLM before 0.29.0 accepts user-controlled stop_token_ids on the OpenAI-compatible POST /v1/completions and POST /v1/cha

vLLM is an inference and serving engine for large language models. In versions from 0.22.1 through 0.28.0, the operator-

vLLM versions 0.22.0 through 0.23.0 fail to validate stop_token_ids against vocabulary bounds in Rust HTTP and gRPC fron

vLLM before 0.29.0 fails to enforce decoder prompt-length validation on the disaggregated serving endpoint /inference/v1

vLLM through 0.29.0 fetches and fully materializes remote or inline media before enforcing its documented media controls

vllm before 0.29.0 fails to enforce VLLM_MAX_AUDIO_CLIP_FILESIZE_MB limit in multimodal chat audio decoding, allowing un

vLLM versions before 0.29.0 contain a denial-of-service vulnerability in the cache_salt parameter accepted on OpenAI-com

SiYuan before v3.8.4 contains an authorization omission in the siyuan-get IPC handler that allows remote-kernel renderer

SiYuan before v3.8.4 contains an authentication bypass vulnerability in the publish service where session cookies are is

SiYuan before v3.8.4 does not validate the sender or restrict recipients in the 'siyuan-send-windows' IPC handler of the

SiYuan is a self-hosted personal knowledge management system. In versions 3.8.0 through 3.8.3, the MCP file tool's sensi

Parse Server is an open-source backend server. In versions >= 9.0.0 and < 9.10.1-alpha.8, and in versions < 8.6.89, Live

AVideo before 29.1.0 contains a stored cross-site scripting vulnerability in the video trailer1 field rendered unsanitiz

Capgo (capgo.app backend) before 12.127.5 contains an authorization flaw in the PATCH /private/role_bindings/:binding_id

capgo.app before 12.128.12 fails to enforce an organization's API key expiration policy when creating app-scoped API key

capgo through 12.128.2 contains an insecure direct object reference vulnerability in the PUT /app/:appId endpoint that a

Capgo.app before 12.264.5 does not enforce upload expiry or build lifecycle state in the /build/upload/:jobId TUS proxy

Capgo (capgo.app) contains an incomplete access-control/content-lock enforcement issue affecting all versions; no patch

capgo.app is an over-the-air update platform for Capacitor apps. In all versions prior to a fix, the row-level security

capgo.app is an over-the-air (OTA) update platform for Capacitor apps. In all versions up to and including the current r

Capgo (capgo.app backend, versions ≤ 12.261.0) improperly restricts which roles the apikey_manager organization role may

Flowise (npm packages `flowise` and `flowise-components`) through 3.1.4 looks up credentials by ID without filtering on

ClawHub (openclaw/clawhub) contains an incorrect authorization vulnerability in the ClawHub application/backend: an orga

ClawHub (openclaw/clawhub) application/backend contains a flaw in the skill report moderation flow: four distinct ordina

ClawHub (openclaw/clawhub application/backend) contains a missing authorization check in the changelog preview feature.

ClawHub (openclaw/clawhub) application/backend contains a server-side request forgery vulnerability in the public profil

ClawHub (the openclaw/clawhub application/backend) does not bind anonymous HTTP API requests to a trusted caller identit

A weakness has been identified in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be

A security flaw has been discovered in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b6

The Testimonials Widget WordPress plugin through 4.0.4 does not validate a user-supplied URL before fetching it server-s

The Optimole WordPress plugin before 4.2.13 does not escape unrecognized attributes of its video-player block before re

The WP Delicious WordPress plugin before 1.10.8 does not validate or escape the HTML tag name taken from user-supplied

The Bluff Post WordPress plugin through 1.1.1 does not sanitise and escape parameters before using them as identifiers i

The wp-review-slider-pro WordPress plugin before 12.7.12 does not sanitize a value stored through one of its AJAX handle

The File Manager WordPress plugin before 8.0.5 does not prevent unauthenticated users from downloading its database back

The Team Members WordPress plugin before 9.3 does not perform any authorization or visibility check in an unauthenticate

The Automatic.css plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REQUEST_URI in all version 4.0.0

OpenClaw versions before 2026.7.1 contain an authorization bypass vulnerability in the diagnostics export command that a

OpenClaw versions before 2026.7.1 contain an authorization bypass vulnerability in the /export-trajectory endpoint that

OpenClaw (npm package `openclaw`) before 2026.7.1 does not enforce the documented owner-only requirement for persistent

OpenClaw is an agent gateway distributed via npm. In versions >= 2026.4.10 and < 2026.7.1, persistent memory dreaming mu

OpenClaw is an npm-distributed agent gateway. In versions before 2026.7.1, the global Active Memory toggle mutations cou

OpenClaw before 2026.7.1 contains an authorization bypass vulnerability in the /voice set command that allows non-owner

OpenClaw is an npm-distributed agent runtime. In versions >= 2026.2.26 and < 2026.7.1, PowerShell command analysis on Wi

OpenClaw Discord versions before 2026.7.1 contain an authorization bypass vulnerability in guild metadata read actions t