CVE Vulnerability Catalog

CosyVoice contains an insecure deserialization vulnerability in its gRPC server component. The issue arises because the server loads the speech synthesis model from a user-specified directory without enabling the weights_only=True security parameter, allowing the deserialization of arbitrary Python objects.

CosyVoice contains an insecure deserialization vulnerability in its average_model.py model averaging tool. The issue is that the script loads PyTorch checkpoint files without enabling the weights_only=True security parameter, allowing the deserialization of arbitrary Python objects.

CosyVoice contains an insecure deserialization vulnerability in the make_parquet_list.py data processing tool. The script loads .pt files without enabling the weights_only=True security parameter, allowing the deserialization of arbitrary Python objects.

Docling's METS GBS backend is vulnerable to XML Entity Expansion (XXE) attacks through version 2.61.0. An attacker can craft a malicious XML file with nested entity definitions, leading to excessive resource consumption during processing by the Docling parser.

There is a path traversal vulnerability using symbolic links in pgAdmin 4 File Manager. An authenticated user can create a symbolic link in their directory pointing outside of it, allowing data to be written to any path accessible by the pgAdmin process.

In pgAdmin 4 FileBackedSessionManager, there is a vulnerability to deserialization of untrusted data, which can lead to remote code execution at the operating system level. This issue arises from the lack of proper integrity checks before deserializing session file contents.

In pgAdmin 4 before version 9.15, there is an OS command injection vulnerability (CWE-78) in the Import/Export query export feature. An authenticated user could inject malicious commands, leading to arbitrary command execution on the pgAdmin server or arbitrary file writes.

A SQL injection vulnerability in the pgAdmin 4 Maintenance Tool allows an authenticated user with tools_maintenance permissions to execute arbitrary SQL commands on the PostgreSQL server. Exploiting this vulnerability could lead to privilege escalation and execution of operating system commands on the database host.

Grav is a file-based web platform. Prior to version 2.0.0-beta.2, a stored Cross-Site Scripting (XSS) vulnerability allowed publisher-level accounts to execute arbitrary JavaScript.

Grav is a file-based web platform. Prior to version 2.0.0-beta.2, a low-privileged user could inject an svg element, leading to an XSS attack that could escalate to dumping system information available under /admin/config/info when a Super Admin visits the page.

Grav is a file-based web platform. Prior to version 2.0.0-beta.2, a business logic vulnerability in the Grav Admin Panel allowed a low-privileged user to overwrite existing accounts, including the primary administrator account.

A vulnerability in MediaWiki related to the exposure of sensitive information to unauthorized actors. It affects program files includes/Skin/Skin.Php.

CVE-2026-34091 describes an exposure of sensitive information to unauthorized actors in MediaWiki. This affects versions before 1.43.7, 1.44.4, and 1.45.2.

A vulnerability in CheckUser at the Wikimedia Foundation allows exposure of sensitive information to unauthorized actors. It affects versions from 1.45.0 before 1.45.2.

Vulnerability in the Wikimedia Foundation Scribunto extension. Affects versions from 1.45.0 before 1.45.2.

CVE-2026-34088 involves the exposure of sensitive information to unauthorized actors in MediaWiki. This affects versions before 1.43.7, 1.44.4, and 1.45.2.

CVE-2026-34087 involves the exposure of sensitive information to unauthorized actors in OATHAuth used by the Wikimedia Foundation. The issue affects OATHAuth versions before 1.43.7, 1.44.4, and 1.45.2.

Docling's JATS XML backend is vulnerable to XML Entity Expansion (XXE) attacks through version 2.61.0. It uses etree.parse() to parse XML files without disabling entity resolution, allowing for the creation of a malicious XML file that leads to excessive resource consumption.

docuFORM Managed Print Service Client version 11.11c is vulnerable to a directory traversal attack, allowing attackers to read arbitrary files via crafted URL.

A reflected cross-site scripting (XSS) vulnerability in the dfm-menu_orderopt.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value.