CVE Vulnerability Catalog

A vulnerability was found in langgraph library from langchain-ai up to version 1.2.4 in the _freeze function of _cache.py, where the default_cache_key argument causes use of a weak hash function. The attack can be performed remotely but is difficult to exploit.

A security flaw in exo-explore exo up to version 1.0.71 uses a weak hash function in the _image_cache_key function of the Vision Feature Cache component. The vulnerability allows remote attacks but is difficult to exploit due to high complexity. A public exploit has been released and may be used in attacks.

A flaw in zcaceres markdownify-mcp up to version 1.1.0 causes insufficiently random values in the saveToTempFile function of src/Markdownify.ts. The attack requires local access and is difficult to exploit, but a public exploit is available.

A vulnerability has been discovered in zcaceres markdownify-mcp up to version 1.1.0, allowing symlink following via the assertPathAllowed function in src/Markdownify.ts. The attack can only be executed locally.

A vulnerability was found in HdrHistogram up to version 2.2.2 in the `DoubleHistogram.recordValue` function. It involves an incorrect comparison during range checking, potentially leading to erroneous behavior. The attack requires local access and is publicly known, but its significance is disputed due to security boundary limitations.

A vulnerability was found in HdrHistogram up to version 2.2.2 in the recordValueWithCount method of the AbstractHistogram class. Manipulation of the Count argument leads to a state issue. The attack requires local access and has been publicly disclosed, but its existence is disputed due to lack of security boundary crossing.

A flaw has been found in HdrHistogram up to version 2.2.2, involving uncontrolled memory allocation in the decodeFromByteBuffer function when processing the numberOfSignificantValueDigits argument. The attack requires local access and an exploit has been published, but the vulnerability is disputed due to potential lack of security boundary crossing.

A vulnerability was found in HdrHistogram up to version 2.2.2, involving uncontrolled memory allocation in the decodeFromCompressedByteBuffer function. The attack requires local access and manipulation of the lengthOfCompressedContents argument. The existence of the vulnerability is disputed due to doubts about crossing security boundaries.

A cross-site scripting vulnerability has been found in Assessment Management 1.0 in the admin/view-users.php file via the User argument. The attack can be performed remotely and the exploit is publicly available.

A vulnerability was found in grass up to version 0.13.4 in the functions grass_compiler::selector::extend and grass_compiler::evaluate::visitor, allowing a local denial of service attack. The maintainer states that DoS vulnerabilities are generally acceptable in Sass compilers due to the exponential nature of the @extend algorithm.

A denial of service vulnerability has been found in the grass library up to version 0.13.4 in the grass_compiler::raw_to_parse_error function of the UTF-8 Character Handler component. A local attack can cause denial of service. The maintainer considers DoS vulnerabilities acceptable in Sass compilers.

A vulnerability was found in the Memory Recall Handler component of the AI-fundermentals library versions 2.0 and 3.0, involving the use of a weak hash function in the get_conversation_history function. Remote exploitation is possible but requires a high degree of complexity.

In multi-tenanted deployments, the application consent management mechanism fails to correctly isolate consent scopes between tenants. Consent granted by a user for a specific SaaS application within one tenant can be incorrectly applied to SaaS applications with the same name in other tenants, leading to unintended cross-tenant consent sharing.

A vulnerability in the OSX Broker component of FederatedAI FATE up to version 2.2.0 causes data exposure to the wrong session due to improper handling of arguments rollSiteSessionId, dstRole, and dstPartyId in the QueuePushReqStreamObserver.initEggroll function. The attack can be executed remotely but is considered difficult due to high complexity.

PHPIPAM is affected by an authenticated local file inclusion vulnerability that allows users with access to the API to execute/include arbitrary PHP files on the web server's file system. The API is not enabled by default on installations.

A security vulnerability has been detected in the Streaming Reasoning Tag Filter component of NousResearch hermes-agent up to version 2026.4.30, involving improper handling of case sensitivity in the GatewayStreamConsumer._filter_and_accumulate function. The attack can be initiated remotely but is difficult to exploit due to high complexity. The project decided not to implement a dedicated fix, citing maintenance costs.

The vulnerability in Dell PowerProtect Data Domain involves the use of a less trusted source. It allows a high-privileged attacker with remote access to tamper with information.

Dell PowerProtect Data Domain in multiple versions contains a use of uninitialized resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information exposure.

Dell PowerProtect Data Domain in multiple versions contains a path traversal vulnerability due to improper limitation of a pathname to a restricted directory. This allows a high-privileged attacker with local access to potentially expose sensitive information.

A vulnerability in CubeSpace CW0057 Reaction Wheel firmware versions prior to 5.0.20 is due to improper verification of cryptographic signatures. This allows an attacker with physical access to upload arbitrary malicious firmware without authentication.