CVE Vulnerability Catalog

Vulnerability in knowns versions before 0.30.0 fail to validate the settings.lsp.languages binary field in project configuration files, allowing attackers to execute arbitrary binaries by crafting a malicious .knowns/config.json file. When a repository with a crafted configuration is opened, the unvalidated binary path is executed twice under the user's account without any verification.

Vulnerability in knowns through 0.33.0 contains a server-side request forgery vulnerability in the POST /api/embedding-models/test endpoint that issues outbound requests to caller-supplied destinations without validation. Attackers can enumerate internal hosts and cloud metadata endpoints by observing transport error messages that reveal network reachability information.

Vulnerability in knowns versions before 0.30.0 contain a path traversal vulnerability in the POST /api/templates/preview endpoint that allows unauthenticated attackers to read arbitrary files. Attackers can supply directory traversal sequences in the templateFile parameter to bypass path restrictions and read sensitive files like credentials and configuration through the JSON response.

Vulnerability in knowns versions before 0.30.0 fail to validate filesystem paths in MCP tool arguments, allowing attackers to read, create, overwrite and delete files outside the project directory. Attackers can supply path arguments containing directory traversal sequences to access arbitrary Markdown files accessible to the server process.

Resource exhaustion vulnerability in ash_authentication_oauth2_server. An unauthenticated attacker can exhaust database storage and memory by sending requests to the /authorize endpoint with many distinct client_id URLs, creating permanent client rows and caching documents without limits.

Vulnerability in ash_lua allows user-supplied Lua scripts to read attributes not on the exposed-field allow-list. The read action's aggregate path does not consult the allow-list, enabling access to sensitive data such as passwords.

Lara Dashboard before 1.3.2 fails to authorize the MarketplaceModuleBrowser installModule Livewire action, allowing non-Superadmin administrators to install modules. Attackers can download and auto-activate arbitrary PHP modules from the marketplace over unsigned HTTP requests, achieving remote code execution.

Lara Dashboard before 1.3.2 authorizes the POST /admin/settings/core-upgrades/upload endpoint with only the settings.edit permission, allowing non-Superadmin administrators to upload and extract arbitrary zip archives over the live application source code. Attackers can upload a malicious archive containing modified application files such as routes/web.php with embedded system commands, which execute as the web server user with access to environment secrets and database credentials.

A vulnerability in the Net::IP::LPM module for Perl before version 1.12 accepts malformed prefix lengths. Invalid values are treated as 0 or truncated, poisoning the lookup table and causing lookups to always succeed, so an allow-list permits all addresses and a deny-list blocks all addresses.

A vulnerability in the Protocol::HTTP2 module for Perl before version 1.14 allows memory exhaustion via closed streams that are never removed from the connection stream table. Each closed stream leaves an entry, and stream identifiers increase monotonically, allowing an attacker to open and close streams indefinitely, leading to memory growth.

In JetBrains IntelliJ IDEA before 2026.2.2, missing project-trust confirmation before building a Dev Container allowed host-level code execution.

In JetBrains IntelliJ IDEA before 2026.2.2, missing TLS and authentication on the IJent gRPC server allowed local code execution on Remote Development hosts.

In JetBrains YouTrack before 2025.3.160480 and 2026.1.14047, PUT requests on link sub-resources allowed modification of linked entities without update permission.

In JetBrains YouTrack before 2026.2.18634, cloning a whiteboard allowed unauthorized changes to links on inaccessible issues.

In JetBrains YouTrack before 2026.2.18634, a shared token cache allowed cross-tenant theft of GitHub App installation tokens.

In JetBrains YouTrack before 2026.2.18634, insufficient validation of role assignments allowed privilege escalation.

In JetBrains YouTrack before versions 2026.2.18788, 2026.1.14055, and 2025.3.161254, missing authorization allowed access to restricted REST API resources via IDOR.

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00 contain an Improper Privilege Management vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to elevation of privileges.

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00 contain an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00 contain an OS Command Injection vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to elevation of privileges.