CVE Vulnerability Catalog

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to obtain sensitive information due to improper validation of user-controlled API endpoints.

A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0. An attacker can provide a specially crafted Ruby source file that triggers the parser to pass a NULL pointer to string handling functions, resulting in undefined behavior and application crash.

IBM Langflow OSS versions 1.0.0 through 1.11.5 improperly validate command-line arguments in the MCP stdio server configuration. A remote authenticated attacker could execute arbitrary commands.

IBM ContextForge MCP Gateway versions 1.0.0 through 1.0.7 allow a remote attacker to gain administrative access due to the use of default credentials.

IBM Langflow OSS versions 1.0.0 through 1.11.5 perform an unguarded eval() call on attacker-controlled input. A remote authenticated attacker could execute arbitrary code.

IBM Langflow OSS versions 1.0.0 through 1.11.5 have an incomplete denylist in the security scanner. An authenticated attacker could execute arbitrary code.

IBM Langflow OSS versions 1.0.0 through 1.11.5 allow an attacker to submit custom component source code that bypasses the static security scanner via a crafted annotated class-body assignment resolving to a dangerous callable through alias tracking. A logic error means the resolved value is never checked against the dangerous callable blocklist.

IBM Aspera Enterprise WebApps versions 1.0.0 through 1.0.5 allow a local attacker to escape container protections due to unrestricted system calls permitted within the container.

IBM App Connect Enterprise versions 13.0.1.0 through 13.0.8.1 and 12.0.1.0 through 12.0.12.27 allow a remote authenticated attacker to bypass security restrictions due to incorrect authorization.

An issue in EGO-Planner-v2, all versions up to commit 5c99a95880401e2599638d567abc0e240396cb42, allows an attacker to cause a denial of service via checkCollisionCallback, execFSMCallback, and planFromGlobalTraj in ego_replan_fsm.cpp.

An issue in Robotics-STAR-Lab (SYSU STAR Group) RACER, tested affected version commit abcdef1234567890, allows an attacker to cause a denial of service via the exploration state machine.

An issue in ZJU-FAST-Lab EGO-Planner-v2, all versions up to commit 5c99a95880401e2599638d567abc0e240396cb42, allows an attacker to cause a denial of service via the EGOReplanFSM component.

An issue in ZJU-FAST-Lab EGO-Planner-v2, all versions up to commit 5c99a95880401e2599638d567abc0e240396cb42, allows an attacker to cause a denial of service via EGOReplanFSM::checkCollisionCallback().

An issue in ZJU-FAST-Lab EGO-Planner-v2, all versions up to commit 5c99a95880401e2599638d567abc0e240396cb42, allows unsafe vehicle motion via improper handling of expired trajectory data in the replanning pipeline.

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. No technical details about a vulnerability are available.

Transmute, a file conversion and compression tool, is vulnerable to Server-Side Request Forgery (SSRF) in its URL import endpoint (POST /api/files/url). The downloader fetches user-supplied URLs with redirects enabled and does not validate whether the target resolves to a public address, allowing an authenticated (or guest) user to make the server request internal or cloud-local resources. Since downloaded content is stored and retrievable via GET /api/files/{id}, this is full-read SSRF rather than blind SSRF. Fixed in version 1.3.0.

GoBGP, a BGP implementation in Go, prior to version 4.7.0 accepts a zero-length AS_PATH during UPDATE decoding and later panics while validating that attribute for a confederation eBGP peer. A malformed UPDATE that should be rejected as an invalid AS_PATH reaches an unchecked p.Value[0] access, allowing a configured confederation eBGP peer to trigger a denial of service. Version 4.7.0 patches the issue.

GoBGP, a BGP implementation in Go, prior to version 4.6.0 has a BGP OPEN capability parsing issue where several capability decoders may read from the full remaining capability buffer instead of the slice bounded by the declared CapLen. A malformed BGP OPEN message can cause bytes from a following capability to be interpreted as part of the current one; the most security-relevant case is the 4-octet AS capability, where CapLen == 0 may cause the parser to read bytes from the following capability as the 4-octet AS value. This parsed value may later affect peer AS validation during BGP session establishment. Version 4.6.0 patches the issue.

psd-tools, a Python package for working with Adobe Photoshop PSD files, prior to version 1.17.1 allows SmartObject.save() to write an embedded smart object to a path taken verbatim from the PSD file. Because that name is attacker-controlled and unsanitised, a tool extracting embedded objects from an untrusted .psd can be made to write attacker-chosen bytes to an attacker-chosen path (absolute or ../-traversing), outside its intended output directory. A secondary issue in SmartObject.open() for external-kind smart objects allows the attacker-controlled fullPath descriptor to be used as an arbitrary file read path, enabling exfiltration of the read content to the controlled write destination. Both issues are fixed in v1.17.1.

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From version 8.0.0 to 8.0.5, a Lua rule that registers too many flow variables can corrupt Lua detection state and may bypass Suricata's restricted Lua sandbox. This requires an affected Lua script or rule to be loaded.