CVE Vulnerability Catalog

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.7 and macOS Tahoe 26.5.

A vulnerability in WebKit allows a process crash when processing maliciously crafted web content. The issue was addressed with improved memory handling.

A buffer overflow was addressed with improved bounds checking. This issue is fixed in several versions of Apple operating systems.

A permissions issue was addressed with additional restrictions. An app may be able to gain root privileges.

A vulnerability was detected in inkeep agents version 0.58.14, affecting the function createDevContext in the file agents-api/src/middleware/runAuth.ts of the runAuth Middleware component. Manipulating this function results in authentication bypass using an alternate channel.

EDIMAX BR-6428nS V3 firmware version 1.15 is vulnerable to Command Injection. An authenticated attacker with network access can submit crafted input to the WLAN configuration functionality. Due to insufficient input validation, the attacker can execute arbitrary system commands on the device.

A vulnerability in mlflow/mlflow versions 3.9.0 and earlier allows an unauthenticated remote attacker to read arbitrary files from the server's filesystem. The issue occurs when a CreateModelVersion request includes the tag mlflow.prompt.is_prompt, which bypasses source path validation. The get_model_version_artifact_handler() function later uses this source to serve files without verifying the model version's prompt status, leading to a complete confidentiality compromise.

Alien::FreeImage versions through 1.001 for Perl contains several vulnerable libraries, including version 3.17.0 of the FreeImage library from 2017, which has known vulnerabilities.

Uncontrolled Resource Consumption vulnerability in the cow_http_te module of the ninenines cowlib allows for excessive resource allocation. An attacker can exploit this vulnerability by sending an HTTP/1.1 request with Transfer-Encoding: chunked and a very long hex string in the chunk-size field, leading to CPU exhaustion and memory amplification.

Crabbox before version 0.9.0 contains a path traversal vulnerability in the Islo provider's workspace path resolution. Attackers can supply absolute or relative paths that resolve outside the intended /workspace directory.

Crabbox before version 0.9.0 contains an authentication bypass vulnerability in the coordinator user-token verification path. The verifyUserToken() function fails to reject payloads containing an admin claim, allowing attackers to escalate privileges.

A vulnerability was detected in OpenClaw up to version 2026.1.24, affecting the function handleBlueBubblesWebhookRequest in the file extensions/bluebubbles/src/monitor.ts of the bluebubbles Webhook component. Manipulating this function leads to improper authentication.

`xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection, allowing a crafted XML document to trigger hash flooding.

A buffer overflow in dnsmasq's extract_addresses() function allows an attacker to trigger a heap out-of-bounds read and crash by exploiting a malformed DNS response, enabling extract_name() to advance the pointer past the record's end.

Heap-based out-of-bounds write in dnsmasq DHCPv6 allows local attackers to execute code as root.

The DNSSEC validation in dnsmasq has a denial of service (DoS) vulnerability. A remote attacker can send a crafted DNS packet, causing the service to crash.

OpenClaw before version 2026.4.23 contains an improper access control vulnerability in the gateway tool's config.apply and config.patch operations, allowing compromised models to write unsafe configuration changes by bypassing an incomplete denylist protection.

OpenClaw before 2026.4.23 contains an arbitrary code execution vulnerability in the bundled plugin setup resolver that loads setup-api.js from process.cwd() during provider setup metadata resolution. Attackers can execute arbitrary JavaScript under the current user account by placing a malicious extensions/<plugin>/setup-api.js file in a repository.

OpenClaw before version 2026.4.20 contains a guard bypass vulnerability in the config.patch and config.apply endpoints. This vulnerability fails to protect operator-trusted settings such as sandbox policy, plugin enablement, gateway auth/TLS, and MCP server configuration.

OpenClaw before version 2026.4.20 contains an improper environment variable validation vulnerability in MCP stdio server configuration that allows attackers to execute arbitrary code. Malicious workspace configurations can pass dangerous startup variables to MCP server processes.