CVE Vulnerability Catalog

Mage AI does not confine the paths accepted by its browser-items API to the project directory. A user with the Viewer role, which grants read access within the project, can read any file the server process can read by supplying an absolute path. Users with the Editor role can also write outside the project directory.

OpenMetadata accepts a caller-supplied post-authentication redirect target and appends the issued token to it. SamlLoginServlet reads the callback parameter and stores it in the session without validation, and the assertion consumer later formats it into a URL with the JWT and account details. The OIDC and OAuth2 handlers follow the same pattern. An attacker can craft a link that, after victim login, sends the token to an attacker-controlled destination, allowing account takeover.

ZLMediaKit confines the downloadFile API to configured root directories with a prefix comparison that does not account for directory boundaries. A requested path is accepted if it starts with the configured root, allowing reading files from similarly named directories. The API secret is required, but the reference container runs the server as root.

one-api gates one of its two channel-pinning paths and not the other. The API key suffix path requires admin check, but the URL path parameter branch has no role check. The route is behind token authentication only, so any valid token holder can reach it. The value flows to the distributor, which loads the channel by ID without scoping, and sets the Authorization header to that channel's key. A low-privilege account can pin any channel, sending requests with an operator-configured provider key, bypassing group restrictions and model allowlists.

bestzip builds the argument list for the system zip utility without separating options from operands. The destination archive path and source paths are passed without a -- delimiter, so any source entry starting with a hyphen is interpreted as an option. zip accepts -T to test the archive and -TT to name the test command, so a source list containing those and a command string causes zip to run that command via shell. An application passing untrusted file names to bestzip can execute arbitrary commands.

FiftyOne renders a dataset field's description as markup. The sidebar field-information component passes the description to dangerouslySetInnerHTML without sanitization, allowing stored markup to execute on hover. Since the description is stored in the schema and travels with exported datasets, opening a dataset from another party can run malicious scripts in the app's origin.

DebugKit for CakePHP applications has a vulnerability in the MailPreview feature that allows an attacker to execute arbitrary class constructors. The attack requires access to DebugKit with debug mode enabled and an allowed hostname.

SunEditor before 3.1.4 has a vulnerability in the Embed plugin that allows JavaScript execution in the editor. The plugin parses raw embed HTML and recreates external script elements, leading to XSS. If an application stores or reflects content without additional sanitization, an attacker can trigger stored or reflected XSS.

Nagios Core before 4.5.13 and Nagios XI before 2026R1.5 contain a CSRF vulnerability in cmd.cgi. The double-submit cookie protection can be bypassed when no Cookie header is present by supplying matching NagFormId and nagFormId values in the POST body.

Nagios Core before 4.5.12 contains a CSRF vulnerability in cmd.cgi where the CSRF protection passes validation when the NagFormId cookie is absent. Attackers can craft a malicious cross-site POST request to execute arbitrary Nagios commands as an authenticated user.

A vulnerability in the Linux kernel block subsystem was found where the timeout timer is not stopped when releasing a disk that was never added (e.g., after a failed probe). This leads to a use-after-free in the timer mechanism, potentially causing system crashes or privilege escalation.

In the Linux kernel, the following vulnerability has been resolved: mptcp: reclaim forward-allocated memory on RX path errors. After commit 9db5b3cec4ec ("mptcp: borrow forward memory from subflow"), errors in the receive path prior to queueing skbs into the receive queue do not trigger forward-allocated memory reclaiming. Prevent forward memory from growing unboundedly in pathological drop scenarios by explicitly reclaiming memory when skbs are dropped.

In the Linux kernel's MPTCP module, a vulnerability was found due to lack of rejection of mutually exclusive incoming MPTCP suboptions. An attacker can send a packet with a combination of suboptions that according to RFC 8684 cannot coexist, potentially leading to unexpected network stack behavior. The fix introduces validation consistent with outgoing rules, ignoring invalid combinations.

In the Linux kernel's MPTCP module, a remote peer can send a malformed DSS with an incorrect size, causing the first suboption to be ignored but leaving some fields written, potentially leading to inconsistency or access to uninitialized data. The fix explicitly resets fields that could have been modified in case of unexpected size.

In the Linux kernel's MPTCP module, mptcp_fastopen_subflow_synack_set_params() set the is_mptfo flag before checking for queued SYN data. This caused data-less TFO SYNs to trigger a WARN and leave stale MPTFO state, potentially leading to a state-confusion bug in check_fully_established(). The fix marks the subflow as MPTFO only after confirming that an SKB was queued.

In the Linux kernel's s390/qeth driver, qeth_snmp_command() and qeth_l3_arp_query() allocate a buffer sized by a user-supplied length without checking a lower bound, leading to out-of-bounds write. The fix rejects buffers smaller than udata_offset before allocation.

In the Linux kernel's ASoC lpass-tx-macro driver, tx_macro_dec_mode_get() and tx_macro_dec_mode_put() access the control value via ucontrol->value.integer.value[0] instead of ucontrol->value.enumerated.item[0], leading to out-of-bounds access for enum types. The fix uses the correct field.

In the Linux kernel's drm/shmem_helper driver, the ->huge_fault handler did not check if the PMD mapping exceeds VMA boundaries, potentially leading to VM_BUG_ON_VMA() in copy_pmd_range(). The fix adds VMA boundary checks before installing the mapping.

In the Linux kernel's ASoC SOF ipc4-pcm driver, IPC errors for pipeline state change are ignored if the firmware is crashed or IPC timed out. The fix allows continuing with state changes to reset the kernel's internal state.

In the Linux kernel's fbdev driver, mode_string() uses snprintf() which can return a value larger than the remaining buffer space, causing the offset to advance past the sysfs buffer. The fix adds a size parameter and uses scnprintf(), plus an early return when offset exceeds the buffer.