CVE Vulnerability Catalog

RT, an open-source issue and ticket tracking system, versions 5.0.0 through 5.0.9 and 6.0.0 through 6.0.2, contains an SQL injection vulnerability. An authenticated user can craft input that is incorporated into database queries without proper validation, potentially allowing them to read or modify data in the RT database.

RT versions 6.0.0 through 6.0.2 contain a Cross-Site Request Forgery (CSRF) vulnerability. An attacker can induce a logged-in RT user to visit a malicious web page, triggering arbitrary state-changing actions in RT on that user's behalf.

In libheif before 1.22.0, a crafted HEIF file with more samples declared than actually exist causes an out-of-bounds read in the SampleAuxInfoReader constructor. The vulnerability is triggered during file parsing.

An authentication logic vulnerability in multiple TP-Link range extenders allows an unauthenticated attacker on an adjacent network to manipulate a login parameter and reset the administrator password due to insufficient validation. Successful exploitation allows an attacker to obtain full administrative control of the affected device, potentially impacting confidentiality, integrity, and availability.

The MLX inference backend in Docker Model Runner on macOS uses the MLX-LM library, which unconditionally imports and executes arbitrary Python files from model directories via the model_file configuration field in config.json. No sandboxing allows remote code execution on the Docker host as the Docker Desktop user.

The vllm-metal inference backend in Docker Model Runner on macOS unconditionally sets trust_remote_code=True when loading model tokenizers and runs without sandboxing. This causes arbitrary Python file execution from the model, enabling remote code execution on the Docker host as the Docker Desktop user.

MantisBT versions 2.11.0 through 2.28.1 contain a stored XSS vulnerability due to incorrect escaping of a saved filter's owner. An attacker can inject arbitrary HTML if the option to show real user names is enabled.

Vulnerability in Mantis Bug Tracker (MantisBT) versions 2.28.1 and below. An attacker can bypass Content Security Policy script-src directive by uploading a crafted attachment that, when accessed via file_download.php, is interpreted as JavaScript, enabling script execution.

Mantis Bug Tracker (MantisBT) versions 2.11.0 through 2.28.1 allow an authenticated user to inject arbitrary HTML by updating their font family. The XSS payload is reflected on every MantisBT page.

Insecure deserialization in the job results processing component in Amazon Braket SDK before version 1.117.0. A remote authenticated user with S3 write access to the job output bucket can achieve remote code execution on any machine processing job results.

The Docker CLI --use-api-socket flag bypasses Enhanced Container Isolation (ECI) restrictions in Docker Desktop. When ECI is enabled, Docker socket mounts from containers are denied unless explicitly allowed. The --use-api-socket flag adds the mount via HostConfig.Mounts instead of HostConfig.Binds, and ECI enforcement only inspects Binds, allowing the mount to pass unchecked. This grants a container full access to the Docker Engine socket and, if the host user is logged into container registries, their authentication credentials.

In authentik prior to versions 2025.12.5 and 2026.2.3, the PATCH /api/v3/core/users/{pk}/ API allows a caller with change_user permission to assign arbitrary groups, including groups with is_superuser=True, without requiring enable_group_superuser, leading to privilege escalation.

In authentik prior to versions 2025.12.5 and 2026.2.3, authenticated non-admin users with at least one OAuth2 access token can retrieve the client_secret of confidential OAuth2 providers they have previously authenticated against. This occurs via the GET /api/v3/oauth2/access_tokens/ API, which returns a nested provider object containing client_id and client_secret for providers with client_type: confidential.

TypeBot versions up to 3.15.2 contain a critical stored XSS vulnerability in the profile picture upload form at app.typebot.io. The application does not sanitize SVG/XML files, allowing upload of a malicious SVG file with embedded JavaScript that executes in the victim's browser.

TypeBot versions 3.15.2 and prior have an incomplete fix for GHSA-4xc5-wfwc-jw47. Although the builder's getCredentials tRPC endpoint was patched, the bot-engine runtime still allows any authenticated user to use credentials from any workspace via the preview chat endpoint. The getCredentials() function uses a falsy check (if (workspaceId && ...)), and an attacker can supply workspaceId: "" to bypass ownership verification.

In Ruby 4 before 4.0.5, a use-after-free vulnerability exists in the pthread-based getaddrinfo timeout handler (rb_getaddrinfo in ext/socket/raddrinfo.c). A race condition allows a remote attacker who delays DNS responses near the user-specified timeout to crash a Ruby process calling Addrinfo.getaddrinfo(..., timeout:) or Socket.tcp(..., resolv_timeout:). Memory-corruption-based exploitation is theoretically possible.

TypeBot versions up to 3.15.2 have an SSRF vulnerability via Open Redirect Bypass. The validateHttpReqUrl() function blocks private IPs and cloud metadata hosts, but HTTP clients (ky and fetch) follow 302 redirects without re-validating the destination.

Kiro CLI before version 1.28.0 lacks input source validation in the tool authorization prompt. A local attacker can execute arbitrary tools, including shell commands, without user approval by crafting content piped via stdin.

Vulnerability in ClipBucket v5.5.2 allows remote attacker to execute arbitrary code via the authentication interface, login page, and HTTP response security headers.

A buffer overflow vulnerability in Easy Chat Server 3.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via the chat message functionality.