CVE Vulnerability Catalog

fsspec from 0.9.0 to 2026.6.0 contains a vulnerability involving unrestricted Jinja2 template rendering in Kerchunk reference documents. An attacker can supply a malicious document that executes Python code when the reference filesystem is opened, including through consumers such as xarray.

crmne/ruby_llm at commit fa6f279847d6d7027814539d9c0dfc3bbdfd2a83 contains a polynomial-time regular expression denial-of-service condition in Mistral model capability matching on Ruby 3.1.x

FinRobot v1.0.0 is vulnerable to code injection in the CodingUtils.modify_code function.

TransformerOptimus SuperAGI v0.0.14 contains an incorrect access control vulnerability in delete_user_knowledge in superagi/controllers/knowledges.py. In affected source snapshots, POST /knowledges/delete/{knowledge_id} deletes the selected knowledge object without requiring authentication in the route and without verifying organization ownership of the supplied knowledge_id.

TransformerOptimus SuperAGI v0.0.14 is vulnerable to incorrect access control in the agent template controller. In affected source snapshots, save_agent_as_template and publish_template in superagi/controllers/agent_template.py accept caller-supplied agent_id or agent_execution_id values and do not verify that the referenced agent or execution belongs to the authenticated user's organization.

In TaskingAI v0.3.0 in the QR Code Generator plugin save_base64_image function, a path traversal vulnerability allows attackers to write image files to arbitrary locations on the server filesystem by manipulating the project_id parameter.

SuperAGI up to 0.0.14 is vulnerable to Incorrect Access Control. The agent execution controller endpoint /api/agentexecutions/schedule allows authenticated users from one organization to schedule existing agents belonging to a different organization without proper authorization checks. The endpoint accepts an agent_id parameter but does not verify that the agent belongs to the authenticated user's organization.

MISP before version 2.5.48 has an authorization flaw in correlation handling during attribute searches. An authenticated user can access attributes and events they no longer have permission to view when an event has been restricted after correlation creation.

MISP before version 2.5.48 has an improper input validation vulnerability in the decaying model import functionality. A user with perm_decaying permissions can overwrite existing models of other organizations, change their ownership, or create a default model, affecting scoring behavior.

prosemirror-view before version 1.42.3 has a vulnerability in paste handling that does not validate clipboard context attributes. An attacker can supply malicious HTML that executes JavaScript in the victim's browser when pasted.

Seroval before version 1.6.3 has a vulnerability in TypedArray deserialization that allows an attacker to provide a small JSON object with a large length value, causing excessive memory allocation and CPU or memory exhaustion.

Buffer overflow in WebRTC in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Type confusion in V8 in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.

Use after free in Contextual Tasks in Google Chrome on Windows prior to 154.0.8037.97 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page.

Use after free in MediaStream in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.

Use after free in SVG in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.

Meari IoT Cloud Platform OpenAPI Service has an authorization flaw that allows authenticated users to manipulate configurations of devices they do not own. Attackers can alter device settings or trigger unintended behaviors without verifying ownership.

onetwothreeneth HospitalManagementSystem has an unrestricted file upload vulnerability in the functions add_patient/add_physician/add_account/update_account/update_subaccount/edit_physician/edit_patient in the file php/controller.php. Manipulation of the img argument allows remote upload of malicious files.

Sapling SCM before version v0.2.20260929-102736 allows embedding control characters in Git subtree URLs. A maliciously constructed repository, if cloned, can trigger code execution during read-only operations such as sl log/blame/annotate.

xdg-dbus-proxy before version 0.1.9 has an incorrect implementation of message filtering that allows an attacker to bypass intended filtering on the D-Bus session bus by setting a reply serial number on non-reply messages. A malicious or compromised Flatpak app could use this to achieve arbitrary code execution outside its sandbox.