2026

IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote authenticated attacker to obtain sensitive information due to

IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote authenticated attacker to execute arbitrary code due to an au

IBM Observability with Instana (Agent) Build 1.0.303 through 1.0.323 IBM Instana Agent Operator could allow an authentic

IBM Observability with Instana (Agent) Build 1.0.303 through 1.0.323 IBM Instana Agent Operator could allow an authentic

IBM ContextForge MCP Gateway (`mcp-contextforge-gateway`) <= v1.0.6 MCP Context Forge could allow a remote authenticated

IBM i 7.6, 7.5, 7.4, and 7.3 could allow an authenticated attacker to obtain sensitive information in PASE. An attacker

IBM i 7.6, and 7.5 could allow a local authenticated attacker to obtain information from a privileged file when using SS

IBM Operational Decision Manager 9.6.0.0, 9.5.0.0, 8.11.1.0, 8.11.0.1, 8.12.0.1, 9.5.0.1, and 9.0.0.1 is vulnerable to S

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a local attacker to obtain information due to a race condition involv

In Trimble TM4WEB 21.4.0.4, the external bill viewer endpoint is vulnerable to reflected cross-site scripting via inject

In Trimble TM4WEB 21.4.0.4 due to security misconfiguration with session identifiers, it is possible to recover valid se

IBM Langflow OSS 1.0.0 through 1.11.2 allows remote authenticated attackers to bypass localhost-only MCP configuration i

IBM Langflow OSS 1.0.0 through 1.11.2 Langflow could allow an authenticated attacker to write arbitrary files to the ser

IBM Langflow OSS 1.0.0 through 1.11.2 suffer from a stored cross-site scripting vulnerability in the Playground chat int

Onyx 4.6.6 fails to properly restrict access to custom tool credentials stored in custom_headers, allowing any authentic

jina-ai reader contains a server-side request forgery vulnerability where URL validation is performed only on the initia

Turso through 0.8.0-pre.8 contains an out-of-bounds read vulnerability in the table-leaf page reader that uses an attack

Documenso 2.17.0 contains an access control vulnerability in the PDF-serving endpoint that fails to validate document vi

SadTalker contains an OS command injection vulnerability in the video muxing process where uploaded audio filenames are

FastChat contains an authentication bypass vulnerability in the /register_worker endpoint that allows unauthenticated at

LaVague 0.2.35 contains a remote code execution vulnerability in PythonFromMarkdownExtractor.extract_as_object that eval

Chatbot UI contains an authorization bypass vulnerability in the retrieval endpoint that allows authenticated attackers

Nightingale (n9e), as of commit 8362cbe (main branch, confirmed 2026-08-27), contains a server-side request forgery vuln

MegaParse 0.0.55 contains an unauthenticated server-side request forgery vulnerability in the POST /v1/url endpoint that

Plandex 2.2.1 contains a path traversal vulnerability in the ApplyFiles function that allows attackers to write files ou

llmware 0.4.6 contains an SQL injection vulnerability in the collection-database layer (llmware/resources.py) where filt

TEN Framework 0.11.71 contains unauthenticated arbitrary file read and write vulnerabilities in the TMAN Designer file-c

surya 0.22.1 screenshot server contains an unauthenticated arbitrary file read vulnerability in the /info, /page, and /p

ms-swift 4.5.2 contains a server-side request forgery vulnerability in the swift deploy OpenAI-compatible API that fetch

AgentScope through 2.0.7.post1 contains a path traversal vulnerability in LocalWorkspace.add_skill that copies arbitrary

marker through 2.0.0 contains a path traversal vulnerability in the FastAPI /marker/upload handler that fails to sanitiz

Dub contains an open redirect vulnerability in the redir_url query parameter that is accepted on every short link withou

OWL's DocumentProcessingToolkit contains a server-side request forgery vulnerability in the extract_document_content too

aider (aider-chat) automatically loads a .aider.conf.yml configuration file from the root of the git repository it is la

LLaMA-Factory contains a server-side request forgery vulnerability in the OpenAI-compatible API multimodal media URL han

zerox 1.1.20 contains an OS command injection vulnerability in the file download mechanism where the temporary file exte

QAnything 2.0.0 contains an authentication bypass vulnerability in the /api/local_doc_qa/get_file_base64 and /api/local_

tokenizers (Hugging Face) is affected by an out-of-bounds buffer access in BpeBuilder::build (tokenizers/src/models/bpe/

potpie through 2.0.0 fails to verify user ownership on the POST /conversations/{conversation_id}/code-changes/sync endpo

Xinference (affected commit 4a94832, v3.x) contains an unauthenticated arbitrary-path file read vulnerability in the POS

xiaobei through 5.5.2 fails to implement authentication or signature validation on webhook endpoints, allowing unauthent

OGX (formerly Llama Stack, affected at commit fbe8e0f) contains an unauthenticated server-side request forgery vulnerabi

Bruno versions through 4.1.0 fail to validate file paths in request body declarations, allowing attackers to read arbitr

Chroma 1.5.9 fails to validate maximum bounds on HNSW index parameters max_neighbors, ef_construction, and ef_search in

Aim 3.29.1 remote tracking server fails to authenticate requests and dispatches arbitrary methods through getattr withou

Marqo 2.26.0 contains a server-side request forgery vulnerability in the add_documents endpoint that allows unauthentica

excel-mcp-server 0.1.8 fails to enforce path confinement in stdio mode when EXCEL_FILES_PATH is unset, allowing attacker

cli-mcp-server 0.2.5 contains a command allowlist bypass vulnerability in the _validate_command_with_operators function

Trigger.dev versions before 4.5.2 fail to validate environment membership during run replay operations, allowing authent

Trigger.dev before 4.5.2 contains a server-side request forgery vulnerability in webhook alert channel delivery URLs tha