CVE Vulnerability Catalog

In the Fleet device management software, prior to version 4.82.0, a vulnerability in the Windows MDM enrollment flow allows authentication tokens from any Azure AD tenant to be accepted. The issue arises from the lack of enforcement of the `aud` and `iss` claims in JWT signatures.

An authentication bypass vulnerability in Crabbox prior to v0.12.0 allows non-admin shared-token callers to impersonate other owners or organizations by spoofing identity headers.

SiYuan is a knowledge management system that prior to version 3.7.0 had security vulnerabilities related to 8 ungated APIs that could modify configuration and SQL index. Users with a valid JWT token could access these APIs, leading to unauthorized changes to server state.

Live Helper Chat is an open-source application that enables live support websites. In version 4.84v, the Live Helper Chat REST API chat update endpoint allows a REST user with lhchat/use to update a chat in a department they cannot read.

SiYuan is a knowledge management system that in versions from 2.1.12 to before 3.7.0 renders package author metadata from the public bazaar feed into HTML without proper escaping. In the desktop app, this leads to stored XSS, allowing code execution on the host.

In Note Mark from 0.13.0 to before 0.19.4, the asset filename provided via the X-Name header by an authenticated user is stored without validation, allowing directory traversal sequences. During CLI export, the stored name is passed to `filepath.Join()` and `os.Create()`, enabling file writes to arbitrary locations on the filesystem.

Strapi is an open-source content management system that in versions from 4.0.0 to prior to 5.37.0 did not sufficiently sanitize query parameters when filtering content via relational fields. An unauthenticated attacker could use the `where` query parameter to perform a boolean-oracle attack against private fields in the `admin_users` table, allowing for administrative account takeover.

In Fleet prior to 4.81.0, the Windows MDM management endpoint could process requests without proper client certificate validation (mTLS). An attacker with knowledge of a valid enrolled device identifier could impersonate that device and retrieve sensitive configuration data such as Wi-Fi, VPN settings, or certificates.

In Strapi (4.x before 4.26.1 and 5.x before 5.33.2), an authenticated administrator could inject arbitrary SQL statements through the `column.defaultTo` attribute in the Content-Type Builder write API by setting it as a tuple `[value, { isRaw: true }]`. Depending on the database engine, this enabled arbitrary file read, denial of service, or remote code execution against the database server.

CVE-2026-6332 vulnerability concerns the cleartext storage of sensitive information, which may lead to the disclosure of protected source code. An authorized attacker with access to the source code can edit or compile it.

Mongoose, a MongoDB object modeling tool, prior to versions 6.13.9, 7.8.9, 8.22.1, and 9.1.6 had a vulnerability that allowed bypassing the sanitizeFilter query sanitization mechanism via the $nor operator. This operator was not properly sanitized, allowing for the injection of malicious operators.

The Yordam Library Automation System has a code injection vulnerability that allows remote code inclusion. This issue affects versions from 19.5 to before 22.1.

The vulnerability related to incorrect authorization in the Yordam Library Automation System allows exploiting incorrectly configured access control security levels. It affects versions from 19.5 to before 22.1.

In diffusers prior to 0.38.0, the `_resolve_custom_pipeline_and_cls` function defaults `custom_pipeline` to `None.py`, allowing a malicious file from a Hugging Face Hub repository to be downloaded and executed during a standard `from_pretrained()` call. This bypasses the `trust_remote_code=True` safeguard, enabling silent remote code execution.

Valtimo is an open-source business process automation platform. From versions 12.4.0 to 12.33.0 and 13.26.0, the LoggingRestClientCustomizer in the web module automatically intercepts all outgoing HTTP calls and logs full request and response bodies, which may lead to sensitive information disclosure.

The Diffusers library before version 0.38.0 contains a vulnerability that bypasses the trust_remote_code protection. An attacker can execute arbitrary remote code even when trust_remote_code is set to False or omitted. The issue stems from a flawed implementation of the security check in the download() function, which can be bypassed through alternative code paths.

Katalyst Koi, a framework for building Rails admin functionality, had an issue where admin session cookies were not invalidated upon logout. An attacker with access to a valid admin session cookie could continue to access admin functionality after logout until the cookie expired or session secrets were rotated.

A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, allows an unauthenticated, remote attacker to read arbitrary files stored on the affected system. The flaw is due to improper handling of XML External Entity (XXE) entries when parsing an XML file.

Aegra, a drop-in replacement for LangSmith Deployments, prior to version 0.9.7 was vulnerable to a cross-tenant IDOR. This allows an authenticated attacker with another user's thread_id to execute operations on that thread and access the user's full checkpoint state.