CVE Vulnerability Catalog

A server-side request forgery (SSRF) vulnerability was found in AstrBot up to version 4.25.2 in the plugin update handler component. An attacker can remotely manipulate the download_url, download_urls, or proxy arguments to send requests to internal network resources. The exploit is publicly available.

A vulnerability in IBM Security Verify allows a remote attacker to obtain sensitive information through a detailed technical error message returned in the browser. This information could be used in further attacks against the system.

A vulnerability in IBM Db2 causes a trap when compiling specially crafted statements with subqueries, leading to a denial of service.

NCalc before version 6.1.1 has a vulnerability in the factorial operator implementation. Specially crafted expressions with extremely large factorial operands cause excessive CPU consumption or a non-terminating loop due to integer overflow when evaluating untrusted expressions.

The WebSocket library used with the permessage-deflate extension can accept messages larger than the configured maximum size. The limit is checked against the message frames' length headers, which give the size of compressed data, not the size after decompression.

Excon before version 1.5.0 has a vulnerability in the RedirectFollower middleware that fails to strip additional sensitive headers during redirects, potentially leading to data leakage.

oras-go before version 2.6.1 has a vulnerability in resolveWritePath() that does not account for symlink traversal. This allows an attacker to bypass AllowPathTraversalOnWrite=false and write files outside the working directory via a controlled blob title.

IBM i versions 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to send a specially crafted message and downgrade the Transport Layer Security (TLS) protocol to a version disabled in the server configuration.

IBM Verify Identity Access and IBM Security Verify Access in the specified versions could allow an attacker with read-only privileges to make unauthorized modifications and deployments outside of their assigned permissions.

In the sigstore-go library (versions prior to 1.2.0), there is a vulnerability in verification configuration with multiple Transparency Logs or Signed Certificate Timestamps. When configured with a threshold N>1, the verifier counts witnesses per entry or validation path rather than per log authority, allowing a single compromised log to satisfy multi-log requirements.

Hey API before version 0.97.3 has a vulnerability in generated SDKs where slot-prefixed keys (e.g., $query__proto__) are written directly to the corresponding slot, allowing an attacker to set the object prototype and inject controlled keys during for..in iteration.

OpenTelemetry Rust is the Rust OpenTelemetry implementation. In 0.32.0 and earlier, BaggagePropagator::extract_with_context in opentelemetry_sdk did not enforce W3C Baggage size limits before parsing an inbound baggage header. A large attacker-controlled header could cause unnecessary CPU work and short-lived heap allocations while parsing entries later discarded by the SDK's baggage storage limits. Fixed in version 0.32.1.

A command injection vulnerability has been found in the GitHub action setup-php versions 2.25.0 through 2.37.1. The vulnerability is due to insufficient constraint of values from repository-controlled files such as .php-version, composer.lock, and composer.json, which are used to generate shell or PowerShell scripts.

A race condition in IBM Cognos Analytics 12.1.3 (up to build 12.1.3-2606251736) in the Agentic AI assistant's concurrent request-handling logic could allow an attacker to obtain incorrect report summary results or cause report-processing failures when multiple authenticated users submit tasks simultaneously.

A directory traversal vulnerability was found in the linting tools of the AWS HealthOmics MCP Server (aws-healthomics-mcp-server) before version 0.0.36. An actor who can influence the MCP agent may write actor-controlled content to arbitrary locations outside the intended workflow bundle directory by using directory traversal sequences in the workflow_files input.

IBM Engineering AI Hub versions 1.0.0, 1.1.0, and 1.2.0 allow a remote attacker to redirect users to malicious websites due to improper validation of user-supplied URLs.

Vulnerability in IBM Engineering AI Hub versions 1.0.0, 1.1.0, and 1.2.0. A remote attacker can execute arbitrary script code due to improper input neutralization during web page generation (XSS).

IBM Engineering Lifecycle Management versions 7.0.3 (Interim Fix 001 through 021), 7.1.0 (Interim Fix 001 through 009), and 7.2.0 and 7.2.0 Interim Fix 001 DOORS are vulnerable to a denial of service attack due to improper handling of XML entity expansion.

IBM Db2 Genius Hub (versions 1.1, 1.1.1, 1.1.2) and IBM Agentics 1.0 use dangerous functions without sufficient restrictions, potentially allowing an attacker to execute arbitrary code or obtain sensitive information.