2026

In Trimble TM4WEB 21.4.0.4, the external bill viewer endpoint is vulnerable to reflected cross-site scripting via inject

jina-ai reader contains a server-side request forgery vulnerability where URL validation is performed only on the initia

LaVague 0.2.35 contains a remote code execution vulnerability in PythonFromMarkdownExtractor.extract_as_object that eval

MegaParse 0.0.55 contains an unauthenticated server-side request forgery vulnerability in the POST /v1/url endpoint that

Plandex 2.2.1 contains a path traversal vulnerability in the ApplyFiles function that allows attackers to write files ou

surya 0.22.1 screenshot server contains an unauthenticated arbitrary file read vulnerability in the /info, /page, and /p

ms-swift 4.5.2 contains a server-side request forgery vulnerability in the swift deploy OpenAI-compatible API that fetch

AgentScope through 2.0.7.post1 contains a path traversal vulnerability in LocalWorkspace.add_skill that copies arbitrary

OWL's DocumentProcessingToolkit contains a server-side request forgery vulnerability in the extract_document_content too

aider (aider-chat) automatically loads a .aider.conf.yml configuration file from the root of the git repository it is la

LLaMA-Factory contains a server-side request forgery vulnerability in the OpenAI-compatible API multimodal media URL han

QAnything 2.0.0 contains an authentication bypass vulnerability in the /api/local_doc_qa/get_file_base64 and /api/local_

Xinference (affected commit 4a94832, v3.x) contains an unauthenticated arbitrary-path file read vulnerability in the POS

OGX (formerly Llama Stack, affected at commit fbe8e0f) contains an unauthenticated server-side request forgery vulnerabi

Chroma 1.5.9 fails to validate maximum bounds on HNSW index parameters max_neighbors, ef_construction, and ef_search in

cli-mcp-server 0.2.5 contains a command allowlist bypass vulnerability in the _validate_command_with_operators function

Trigger.dev versions before 4.5.2 fail to validate environment membership during run replay operations, allowing authent

git-mcp-server 2.15.1 contains an argument injection vulnerability in the ref and object parameters of git_log, git_diff

sift (sift.js) 17.1.3 enumerates query keys with for...in, which walks the object prototype chain, and dispatches any ma

goose 1.37.0 executes arbitrary commands from recipe stdio extensions and retry.checks without security inspection. Atta

Postgres MCP Pro 0.3.0 contains a restricted-mode bypass vulnerability where function-name validation is not applied to

AppFlowy-Cloud 0.9.64 fails to verify that requested collab objects belong to the workspace in authorization checks, all

Douyin_TikTok_Download_API through 4.1.2 contains a server-side request forgery vulnerability in the /api/download and /

Blinko 1.8.7 contains an authorization bypass (IDOR) vulnerability in multiple tRPC procedures (message.list, message.up

firecrawl-mcp-server 3.20.2 contains an arbitrary local file read vulnerability in the firecrawl_parse tool that accepts

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 1

Acunetix 25.11.251107123 for Windows contains a local privilege escalation vulnerability in the Web Vulnerability Scanni

Observable response discrepancy vulnerability in GastroMenum GastroMenum Web Panel allows Account Footprinting. This is

** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vul

The LearnDash LMS plugin for WordPress is vulnerable to Unrestricted File Type Upload in versions up to and including 5.

(Holloway) Chew, Kean Ho's Actualizer v1.2.0 and earlier contains a fail-open password validation vulnerability in the A

A vulnerability was detected in code-projects Vehicle Management System 1.0. The affected element is an unknown function

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in TAC Information Se

snipe-it versions before 8.6.3 contain an authorization bypass vulnerability in the bulk delete functionality that allow

Snipe-IT versions before 8.6.2 contain an authorization bypass vulnerability in checkout-acceptance report actions when

OpenPanel before 2.3.0 contains an unauthenticated server-side request forgery vulnerability in the GET /tools/site-chec

OpenPanel before 2.3.0 contains a cross-site scripting vulnerability in the unauthenticated favicon proxy endpoint GET /

OpenPanel before 2.3.0 contains an unauthenticated server-side request forgery vulnerability in the /misc/favicon and /m

OpenPanel before 2.3.0 fails to properly validate chart formula expressions, allowing authenticated project members with

Openpanel before 2.3.0 contains an unauthenticated full-read server-side request forgery (SSRF) vulnerability in the GET

Grav before 2.0.18 (affected versions <= 2.0.17) contains a remote code execution vulnerability in the Twig sort filter.

Grav Shortcode Core before 6.2.5 contains stored cross-site scripting vulnerabilities in the [lorem] tag parameter and [

SiYuan before v3.8.2 contains an unbounded resource consumption vulnerability in the request-concurrency middleware that

SiYuan versions before v3.8.2 contain a denial of service vulnerability in the publish-service Basic Auth throttle that

SiYuan before v3.8.2 contains a denial of service vulnerability in the unauthenticated /api/system/uiproc endpoint that

Observable response discrepancy vulnerability in Menulux Software Inc. Menulux Portal allows Account Footprinting. This

Plaintext storage of a password vulnerability in Menulux Software Inc. Menulux Portal allows Retrieve Embedded Sensitive

A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This vulnerability affects

fastify versions before 5.12.2 implement the case-insensitive nature of HTTP header names by lowercasing names in a rout

DreamMaker developed by Interinfo has a SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary