CVE Vulnerability Catalog

Warp is an agentic development environment that, from versions 0.2025.03.05.08.02.stable_00 to 0.2026.05.06.15.42.stable_01, accepts `OSC 1337;File` payloads from terminal output and materializes the decoded payload as a local file without an additional confirmation step. This vulnerability is fixed in version 0.2026.05.06.15.42.stable_01.

Warp, an agentic development environment, contains a command injection vulnerability in the prompt branch selector. A user who can publish a branch to a Git repository opened in Warp can cause a crafted branch name to be interpreted by the victim's shell if the victim selects that branch from the UI.

Warp, an agentic development environment, may open executable local files through the operating system default file handler. A malicious Markdown document can contain a local-file link that, when clicked by the user, may lead to unsafe file opening.

Warp, an agentic development environment, contains a command execution policy bypass in Agent code search tools. Versions from 0.2025.04.09.08.11.stable_00 to 0.2026.05.06.15.42.stable_01 are vulnerable, allowing execution of shell commands from Agent-controlled inputs.

A vulnerability in Docling library versions 2.13.0 through 2.74.0 allows XML External Entity (XXE) attacks via parsing malicious USPTO patent XML files. An attacker can read arbitrary files from the server, perform SSRF attacks, or cause denial of service through entity expansion.

A vulnerability in Docling before version 2.91.0 allows Zip Slip attacks during EasyOCR model downloads. An attacker can overwrite arbitrary files, leading to remote code execution, persistent backdoors, or data corruption.

In Docling versions 2.82.0 through 2.90.0, if the HTML backend was explicitly configured for rendering (disabled by default), the Playwright-based rendering feature could allow JavaScript execution and unrestricted network access when processing untrusted HTML documents. An attacker could craft malicious HTML that executes arbitrary JavaScript in the rendering context or makes unauthorized network requests to internal services.

The vulnerability in the concurrent-ruby library for Ruby causes the AtomicReference#update method to enter an infinite retry loop when the stored value is Float::NAN. This is because Float::NAN == Float::NAN always returns false, preventing the compare_and_set operation from succeeding.

A vulnerability in the Faraday library allows a DoS attack by sending a specially crafted nested query string. The NestedParamsEncoder does not enforce a maximum nesting depth, leading to stack overflow and crash of the thread or worker process.

In the Linux kernel's OMFS filesystem, a missing lower-bound check for s_sys_blocksize allows a crafted image with a value smaller than OMFS_DIR_START (440) to cause an unsigned integer underflow in omfs_make_empty(). This triggers a memset() with a length near 4 GiB, overwriting kernel memory beyond the block buffer.

A use-after-free vulnerability was found in the Linux kernel's mbcache mechanism. The mb_cache_destroy() function fails to cancel the pending c_shrink_work work item before freeing memory, potentially leading to access of already freed memory.

In the Linux kernel's PCI subsystem, a use-after-free (UAF) vulnerability was found related to the driver_override field. When a driver is probed via __driver_attach(), the bus's match() function is called without holding the device lock, allowing concurrent access to the driver_override field without synchronization, leading to UAF.

In the Linux kernel's platform/wmi subsystem, a use-after-free (UAF) vulnerability was found related to the driver_override field. When a driver is probed via __driver_attach(), the bus's match() function is called without holding the device lock, allowing concurrent access to the driver_override field without synchronization, leading to UAF.

In the Linux kernel, the vdpa subsystem has a use-after-free (UAF) vulnerability during driver matching. The match() function is called without holding the device lock, allowing unprotected access to the driver_override field.

In the Linux kernel, the s390/cio subsystem has a use-after-free (UAF) vulnerability during driver matching. The match() function is called without holding the device lock, allowing unprotected access to the driver_override field.

In the Linux kernel, in the s390/ap subsystem, a potential use-after-free (UAF) occurs during AP mask updates. __ap_revise_reserved() accesses the driver_override field without locking, racing with driver_override_store().

In the Linux kernel, the fsl-mc bus has a use-after-free (UAF) vulnerability during driver matching. The match() function is called without holding the device lock, allowing unprotected access to the driver_override field.

In the rtlwifi driver in the Linux kernel, there is a use-after-free (UAF) vulnerability due to an unfinished irq_prepare_bcn_tasklet. When the card is detached or initialization fails, ieee80211_hw is freed, but the tasklet may still be running, leading to access to freed memory.

In the Linux kernel, the s390 BPF JIT subsystem lacks zero extension for BPF program return values and kfunc arguments. According to the s390x ABI, callers must zero-extend unsigned arguments and callees must zero-extend unsigned return values, which is currently not implemented.

A bug in the Linux kernel's pte_frag_destroy function for PowerPC causes a 'Bad page state' error when freeing PTE table fragments. The issue occurs when pt_frag_refcount reaches zero but the 'active' flag on the folio is not cleared before pagetable_free(), leading to a kernel panic during process exit.