CVE-2026-93983: Improper Neutralization of Special Elements used in an SQL Command

OpenPanel through commit bad75bdd fails to escape property keys in ClickHouse SQL queries, allowing authenticated users to inject boolean SQL terms. Attackers can supply crafted filter names to bypass project isolation and access metrics from other projects...

CVE-2026-63445: Improper Limitation of a Pathname to a Restricted Directory

Perses is an open-source dashboard and visualization project for observability data. Prior to 0.54.0-rc.0, list endpoints used with the file-system database bind the request-controlled project query parameter into the resource Query structure without validating it against directory traversal...

CVE-2026-62313

Incus is a system container and virtual machine manager. Prior to version 7.3.0, project-level enforcement of restricted.containers.privilege=isolated can be trivially bypassed, allowing a user to create a non-isolated shared host idmap container in a project that is configured to forbid them. Th...

EUVD-2025-29703

Malicious code in bioql PyPI...

CVE-2025-59455

In JetBrains TeamCity before 2025.07.2 project isolation bypass was possible due to race condition...

JetBrains TeamCity Competitive Conditions Vulnerability

JetBrains TeamCity is a Continuous Integration/Continuous Deployment CI/CD tool developed by JetBrains to automate the software build, test, and deployment process with support for multiple programming languages and tools. JetBrains TeamCity suffers from a competitive condition vulnerability that...

JetBrains TeamCity < 2025.07.2 Multiple Vulnerabilities

The version of JetBrains TeamCity installed on the remote host is prior to 2025.07.2. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity before 2025.07.2 project isolation bypass was possible due to race condition CVE-2025-59455 - In JetBrains TeamCity before 2025.07....

CVE-2025-59455

In JetBrains TeamCity before 2025.07.2 project isolation bypass was possible due to race condition...

CVE-2025-59455

In JetBrains TeamCity before 2025.07.2 project isolation bypass was possible due to race condition...

CVE-2025-59455

In JetBrains TeamCity before 2025.07.2 project isolation bypass was possible due to race condition...

CVE-2025-59455

In JetBrains TeamCity before 2025.07.2 project isolation bypass was possible due to race condition...

PT-2025-38133

Name of the Vulnerable Software and Affected Versions: TeamCity versions prior to 2025.07.2 Description: A race condition allowed for a project isolation bypass in TeamCity. Recommendations: Update to TeamCity version 2025.07.2 or later...