CVE Vulnerability Catalog

Mantis Bug Tracker (MantisBT) versions 2.11.0 through 2.28.1 allow an authenticated user to inject arbitrary HTML by updating their font family. The XSS payload is reflected on every MantisBT page.

Insecure deserialization in the job results processing component in Amazon Braket SDK before version 1.117.0. A remote authenticated user with S3 write access to the job output bucket can achieve remote code execution on any machine processing job results.

The Docker CLI --use-api-socket flag bypasses Enhanced Container Isolation (ECI) restrictions in Docker Desktop. When ECI is enabled, Docker socket mounts from containers are denied unless explicitly allowed. The --use-api-socket flag adds the mount via HostConfig.Mounts instead of HostConfig.Binds, and ECI enforcement only inspects Binds, allowing the mount to pass unchecked. This grants a container full access to the Docker Engine socket and, if the host user is logged into container registries, their authentication credentials.

In authentik prior to versions 2025.12.5 and 2026.2.3, the PATCH /api/v3/core/users/{pk}/ API allows a caller with change_user permission to assign arbitrary groups, including groups with is_superuser=True, without requiring enable_group_superuser, leading to privilege escalation.

In authentik prior to versions 2025.12.5 and 2026.2.3, authenticated non-admin users with at least one OAuth2 access token can retrieve the client_secret of confidential OAuth2 providers they have previously authenticated against. This occurs via the GET /api/v3/oauth2/access_tokens/ API, which returns a nested provider object containing client_id and client_secret for providers with client_type: confidential.

TypeBot versions up to 3.15.2 contain a critical stored XSS vulnerability in the profile picture upload form at app.typebot.io. The application does not sanitize SVG/XML files, allowing upload of a malicious SVG file with embedded JavaScript that executes in the victim's browser.

TypeBot versions 3.15.2 and prior have an incomplete fix for GHSA-4xc5-wfwc-jw47. Although the builder's getCredentials tRPC endpoint was patched, the bot-engine runtime still allows any authenticated user to use credentials from any workspace via the preview chat endpoint. The getCredentials() function uses a falsy check (if (workspaceId && ...)), and an attacker can supply workspaceId: "" to bypass ownership verification.

In Ruby 4 before 4.0.5, a use-after-free vulnerability exists in the pthread-based getaddrinfo timeout handler (rb_getaddrinfo in ext/socket/raddrinfo.c). A race condition allows a remote attacker who delays DNS responses near the user-specified timeout to crash a Ruby process calling Addrinfo.getaddrinfo(..., timeout:) or Socket.tcp(..., resolv_timeout:). Memory-corruption-based exploitation is theoretically possible.

TypeBot versions up to 3.15.2 have an SSRF vulnerability via Open Redirect Bypass. The validateHttpReqUrl() function blocks private IPs and cloud metadata hosts, but HTTP clients (ky and fetch) follow 302 redirects without re-validating the destination.

Kiro CLI before version 1.28.0 lacks input source validation in the tool authorization prompt. A local attacker can execute arbitrary tools, including shell commands, without user approval by crafting content piped via stdin.

Vulnerability in ClipBucket v5.5.2 allows remote attacker to execute arbitrary code via the authentication interface, login page, and HTTP response security headers.

A buffer overflow vulnerability in Easy Chat Server 3.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via the chat message functionality.

TypeBot versions prior to 3.16.0 have incomplete SSRF protection for Webhook/HTTP Request blocks. Validation only checks hostname literals and IP formats but does not resolve DNS before allowing the request.

Typebot versions 3.15.2 and earlier have an HTML/JS injection vulnerability in the RatingButton component, which renders the customIcon.svg field via innerHTML without sanitization. An attacker can inject malicious code that executes in the context of an authenticated user in the builder panel, bypassing the Web Worker sandbox.

Improper handling of factor key state in the multi-factor authentication management feature in Devolutions Server allows an attacker with knowledge of a user's password to bypass the user's multi-factor authentication after the user reconfigures their factors.

Improper authorization in the Active Directory browsing feature of Devolutions Server allows a low-privileged authenticated user to obtain authentication material associated with a stored PAM provider service account via authentication relay to an attacker-controlled server.

A vulnerability in the ngx_http_rewrite_module of NGINX Plus and NGINX Open Source occurs when a rewrite directive uses a regex pattern with overlapping PCRE captures and a replacement string referencing multiple captures. An unauthenticated attacker can send crafted HTTP requests, causing a heap buffer overflow in the NGINX worker process, leading to a restart.

An improper certificate validation vulnerability in Ivanti Secure Access Client before 22.8R6 allows a remote unauthenticated attacker to execute arbitrary code.

Follett Software's Destiny Library Manager version 22_0_2_rc1 has a directory traversal vulnerability that allows remote attackers to read arbitrary system and application files via the image parameter. Fixed in v.22.5 AU1.

In shell-quote, the quote() function did not validate object-token inputs against the operator model used by parse(). The .op field was backslash-escaped character by character using /(.)/g, which in JavaScript does not match line terminators (\n, \r, U+2028, U+2029). A line terminator in .op therefore passed through unescaped into the output; POSIX shells treat a literal newline as a command separator, so any content after it would execute as a second command. The fix replaces per-character escape with strict shape validation.