CVE Vulnerability Catalog

Kolibri is an offline-first education platform. Prior to version 0.19.4, several Kolibri API endpoints accept an unvalidated `baseurl` parameter and fetch attacker-controlled URLs from the Kolibri server, reflecting the response body back to the caller. The original report identified two endpoints on the `RemoteFacilityUser*` viewsets; remediation review found two further reflection points on the same pattern. The GET endpoint was unauthenticated. Version 0.19.4 fixes the vulnerability.

compliance-trestle before versions 3.12.2 and 4.0.3 has a vulnerability in the `-o/--output` argument in `trestle author jinja` that allows writing files outside the intended workspace. The application does not properly validate `../`, `..\`, or absolute paths, allowing arbitrary file write to attacker-controlled locations. Versions 3.12.3 and 4.0.3 patch the issue.

Stirling-PDF before version 2.0.0 has a stored XSS vulnerability in the Get Info workflow in app/core/src/main/resources/templates/security/get-info-on-pdf.html. Untrusted PDF Title and Author metadata are inserted into the summary-text element with innerHTML, allowing a malicious PDF to execute stored cross-site scripting when a user clicks Get Info and to access browser-session data or modify page content. This issue is fixed in version 2.0.0.

A vulnerability in the flash_copy() system call in Zephyr RTOS (with CONFIG_USERSPACE enabled) allows an unprivileged thread to pass forged pointers to flash device structures. Lack of device object validation (src_dev, dst_dev) before dereferencing enables arbitrary code execution in supervisor mode, leading to privilege escalation outside the userspace sandbox.

Glances before version 4.5.6 has a vulnerability in _sanitize_mustache_dict() in glances/actions.py that sanitizes individual Mustache values before chevron.render(), allowing adjacent unescaped Mustache variables to reconstruct shell operators that secure_popen() executes when attacker-controlled process or container fields are rendered by an administrator-configured action template. This issue is fixed in 4.5.6.

Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.6, the cors_origins guard in glances/outputs/glances_restful_api.py uses exact list equality instead of wildcard membership, allowing a multi-origin list containing the wildcard to retain cors_credentials and expose authenticated REST API data to an untrusted website visited by a previously authenticated user. This issue is fixed in 4.5.6.

websocket-driver before version 0.8.2 has a vulnerability in WebSocket::Driver.server() that passes a malformed Host header to URI.parse in lib/websocket/http/request.rb without catching URI::InvalidURIError, allowing a remote client to crash a TCP-backed WebSocket server when the application does not catch the error from parse(). This issue is fixed in version 0.8.2.

A vulnerability exists in the interaction between a Endpoint Privilege Management (Windows Deployment) support utility and the agent's tamper protection controls. Under certain conditions, the protections applied to the utility process may not be enforced as intended.

Zephyr's 6LoWPAN IPHC uncompression code contains an out-of-bounds read in get_ihpc_inlined_size() (subsys/net/ip/6lo.c). The destination inline size is looked up in da_inline_size_table (13 entries) using an index built from the M, DAC and DAM bits of the IPHC dispatch word; reserved combinations 13, 14 and 15 are not bounds-checked and read past the end of the table.

The ARM PL011 UART driver (drivers/serial/uart_pl011.c) fails to acknowledge receive error interrupts. Framing, parity, break, and overrun errors are cleared only by writing the UARTICR register, but the interrupt service routine pl011_isr() does not do this, leaving the interrupt pending. An attacker controlling the serial peer can trigger these errors, causing an interrupt storm and permanent system hang.

The WNC-M14A2A LTE-M modem driver mishandles unsolicited %NOTIFYEV events, leading to out-of-bounds stack read and a single out-of-bounds stack write. The vulnerability can be triggered by a rogue base station or compromised modem without application interaction.

In JetBrains PyCharm before 2026.2.1 code execution was possible via unauthenticated Jupyter MCP tools.

In JetBrains PyCharm before 2026.2.1 code execution via Quick Documentation was possible.

In JetBrains IntelliJ IDEA before 2026.2.1 XXE was possible in the Eclipse settings importers.

In JetBrains IntelliJ IDEA before 2026.1.5 git credentials were written in plaintext to the IDE log.

In JetBrains IntelliJ IDEA before 2026.2.1, remote code execution (RCE) was possible via the Markdown export tool.

In JetBrains IntelliJ IDEA before 2026.2.1 hadoop ResourceManager could read local files via XXE.

In JetBrains IntelliJ IDEA before 2026.2.1 SSRF was possible via the OpenAPI preview proxy in untrusted projects.

In JetBrains IntelliJ IDEA before 2026.2.1, a Server-Side Request Forgery (SSRF) was possible via the DevKit debug listener endpoint.

In JetBrains IntelliJ IDEA before 2026.2.1, command execution via crafted Markdown preview content was possible in trusted projects.