CVE Vulnerability Catalog

A vulnerability in PasswordPusher before version 2.8.1 allows data URI schemes in URL push payloads due to insufficient validation in the valid_url function. Attackers can craft malicious pushes with data:text/html URIs that execute arbitrary JavaScript in victims' browsers when clicked, enabling phishing and credential theft under the trusted PasswordPusher domain.

In NATS Server, when no_auth_user is configured, a parser fast path intended for ordinary client connections could also apply to route or leafnode listeners, allowing an unauthenticated peer to bypass inter-server CONNECT authentication and operate with the privileges associated with that connection type.

In NATS Server before versions 2.12.8 and 2.11.17, an unauthenticated peer with network access to a leafnode listener with compression enabled could crash the server by sending repeated leafnode INFO protocol messages before authentication and account setup completed.

A vulnerability in the NATS Server allows an MQTT client to inject protocol control characters into subscription filters, which are later forwarded as NATS protocol data to route or leafnode connections, potentially corrupting the protocol stream and enabling unauthorized NATS operations.

An unauthenticated MQTT client can cause the NATS server to retain large incomplete MQTT CONNECT packets before authentication completes, consuming server memory while waiting for the advertised packet length. This affects versions prior to 2.14.3 and 2.12.12.

A path traversal vulnerability in Handlebars.java allows arbitrary file read. Applications passing user-controlled input to Handlebars.compile() with FileTemplateLoader or ClassPathTemplateLoader are affected.

In LiquidJS prior to version 10.27.1, the 'pop' array filter allocates a full clone of the input array without respecting the memoryLimit budget. This allows a template render like {{ huge_array | pop }} to allocate memory outside the configured limit.

In yt-dlp and youtube-dl prior to version 2026.7.4, the --write-link, --write-url-link, and --write-desktop-link options write .url or .desktop shortcut files using attacker-controlled webpage_url or filename metadata without sufficient validation or escaping. This allows malicious file:// URI injection on Windows or newline-based desktop entry key injection on Linux, potentially leading to command execution when the generated shortcut is opened.

HashiCorp Nomad and Nomad Enterprise are vulnerable to a sandbox escape in the Docker task driver that allows a job submitter to bind-mount a host path into a container even when volume bind mounts are disabled, potentially leading to reading and writing files on the host.

The vulnerability in Nomad and Nomad Enterprise is due to the lack of enforcement of the allow_privileged restriction for the Docker task driver's host namespace mode options. This allows an authenticated job submitter to run a container in a host namespace and access information belonging to the host or other workloads on the same client.

In the pypdf library prior to version 6.14.0, a vulnerability allows an attacker to craft a PDF with multiple malformed cross-reference streams, causing long runtimes for recovering broken cross-reference table entries. This leads to excessive CPU usage and processing delays.

The Horde_Vfs_Smb driver in Horde Virtual File System (VFS) API before version 3.0.1 contains an OS command injection vulnerability. The _escapeShellCommand() method fails to sanitize command substitution sequences, allowing authenticated attackers to inject arbitrary shell commands through user-controlled filenames.

A vulnerability in the Mistune Python Markdown parser before version 3.3.0 allows a denial of service attack via CPU exhaustion. A Markdown document containing many repeated or distinct reference-link definitions causes quadratic complexity in src/mistune/block_parser.py and the ref_links dictionary handling.

Mistune is a Python Markdown parser. Prior to version 3.3.0, long sequences of well-formed double-asterisk or triple-asterisk emphasis pairs around a character cause quadratic work in src/mistune/inline_parser.py because the parser scans forward for matching close markers from every potential opening run, allowing denial of service in default Mistune parsing.

A vulnerability in the Mistune Python Markdown parser before version 3.3.0 causes quadratic computational complexity when processing sequences of closed tilde, equals-sign, or caret markers in strikethrough, mark, and insert plugins. An attacker can exploit this to cause CPU exhaustion (denial of service).

Vulnerability in @opentelemetry/propagator-jaeger for JavaScript prior to version 2.9.0. Unsafe decoding of HTTP headers uber-trace-id and uberctx-* using decodeURIComponent() allows an unauthenticated remote attacker to send a malformed percent-encoded value, causing an uncaught URIError and terminating a Node.js process using JaegerPropagator as the active propagator.

The linkify-it library before version 5.0.2 contains a ReDoS (Regular Expression Denial of Service) vulnerability. The mailto: schema validator used by .test() and .match() can be invoked at every mailto: occurrence and scan the remaining input through src_email_name in lib/re.mjs, causing O(n^2) CPU consumption on crafted user text.

In Immutable.js versions prior to 4.3.9 and 5.1.8, a vulnerability exists in List#set, List#setSize, List#setIn, List#updateIn, and the functional set, setIn, and updateIn. Mishandling of an index or size in the range 2**30 to 2**31 in setListBounds in src/List.js can cause an uncatchable infinite loop, unbounded memory allocation, or silent wrapping of large values.

Astro version 6.4.7 performs authorization decisions on a partially decoded pathname after reaching the iterative URL decoder limit, while later rewrite route matching performs an additional decodeURI() operation, potentially allowing bypass of access controls to protected routes.

A vulnerability in OpenClaw before version 2026.5.28 allows workspace dotenv files to override provider credentials. Attackers with lower-trust access to configured input paths can expose sensitive data and credentials that should remain within trusted boundaries.