41296 matches found
CVE-2026-108602
Helicone through v2025.08.21-1 contains a server-side request forgery vulnerability in the Jawn webhook sender that allows authenticated organization users to reach internal services by using hostnames resolving to private addresses. Attackers can create webhooks with public hostnames that resolv...
CVE-2026-108602 Helicone through v2025.08.21-1 SSRF via Jawn Webhook Sender DNS Resolution
Helicone through v2025.08.21-1 contains a server-side request forgery vulnerability in the Jawn webhook sender that allows authenticated organization users to reach internal services by using hostnames resolving to private addresses. Attackers can create webhooks with public hostnames that resolv...
CVE-2026-108594
Mealie versions 3.26.0 through 3.28.0 are vulnerable to a server-side request forgery (SSRF) vulnerability in the OpenID Connect (OIDC) avatar fetch mechanism. The root cause is that the system ignores ports when allowlisting the identity provider hostname. Consequently, authenticated OIDC users ...
CVE-2026-108594 Mealie 3.26.0 through 3.28.0 SSRF via OIDC Picture Claim Avatar Fetch
Mealie 3.26.0 through 3.28.0 contains a server-side request forgery vulnerability in the OpenID Connect avatar fetch that ignores ports when allowlisting the identity provider hostname. Authenticated OIDC users who control their picture URL can make the server send GET requests to arbitrary ports...
CVE-2026-108585
argocd-mcp Argo CD MCP Server through 0.9.0 contains a path traversal vulnerability in the deleteapplication tool that allows MCP clients to reach unintended API endpoints via unvalidated applicationName values. Attackers or prompt-injected models can supply dot-segment values like ../repositorie...
CVE-2026-108585 argocd-mcp through 0.9.0 Path Traversal via delete_application Tool
argocd-mcp Argo CD MCP Server through 0.9.0 contains a path traversal vulnerability in the deleteapplication tool that allows MCP clients to reach unintended API endpoints via unvalidated applicationName values. Attackers or prompt-injected models can supply dot-segment values like ../repositorie...
CVE-2026-108585
argocd-mcp Argo CD MCP Server through 0.9.0 contains a path traversal vulnerability in the deleteapplication tool that allows MCP clients to reach unintended API endpoints via unvalidated applicationName values. Attackers or prompt-injected models can supply dot-segment values like ../repositorie...
CVE-2026-108585
The argocd-mcp (Argo CD MCP Server) versions through 0.9.0 are vulnerable to a path traversal flaw within the delete_application tool. The root cause is the lack of validation on applicationName values, which allows MCP clients or prompt-injected models to use dot-segment sequences (e.g., ../repo...
EUVD-2026-96372
argocd-mcp Argo CD MCP Server through 0.9.0 contains a path traversal vulnerability in the deleteapplication tool that allows MCP clients to reach unintended API endpoints via unvalidated applicationName values. Attackers or prompt-injected models can supply dot-segment values like ../repositorie...
CVE-2026-108585 argocd-mcp through 0.9.0 Path Traversal via delete_application Tool
argocd-mcp Argo CD MCP Server through 0.9.0 contains a path traversal vulnerability in the deleteapplication tool that allows MCP clients to reach unintended API endpoints via unvalidated applicationName values. Attackers or prompt-injected models can supply dot-segment values like ../repositorie...
CVE-2026-108585 argocd-mcp through 0.9.0 Path Traversal via delete_application Tool
argocd-mcp Argo CD MCP Server through 0.9.0 contains a path traversal vulnerability in the deleteapplication tool that allows MCP clients to reach unintended API endpoints via unvalidated applicationName values. Attackers or prompt-injected models can supply dot-segment values like ../repositorie...
CLEANSTART-2026-DF84636 It is possible for outbound HTTP requests using a Micrometer-instrumented client to cause a denial-of-service (DoS) condition due to an unbounded memory leak
CVE-2026-59295 affects multiple packages. It is possible for outbound HTTP requests using a Micrometer-instrumented client to cause a denial-of-service DoS condition due to an unbounded memory leak. See references for individual vulnerability details...
CLEANSTART-2026-FS57151 In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) condition
Security vulnerability affects the apache-nifi package. In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service DoS condition...
PT-2026-109747
Name of the Vulnerable Software and Affected Versions Helicone versions prior to 2025.08.21-2 Description A server-side request forgery SSRF issue exists in the Jawn webhook sender. This allows authenticated organization users to access internal services by utilizing hostnames that resolve to...
PT-2026-109675
Name of the Vulnerable Software and Affected Versions argocd-mcp Argo CD MCP Server versions prior to 0.9.1 Description A path traversal issue exists in the delete application tool. This occurs when the applicationName variable is not properly validated, allowing MCP clients or prompt-injected...
CVE-2026-108594: Server-Side Request Forgery (SSRF)
Mealie 3.26.0 through 3.28.0 contains a server-side request forgery vulnerability in the OpenID Connect avatar fetch that ignores ports when allowlisting the identity provider hostname. Authenticated OIDC users who control their picture URL can make the server send GET requests to arbitrary ports...
CVE-2026-108585: Improper Limitation of a Pathname to a Restricted Directory
argocd-mcp Argo CD MCP Server through 0.9.0 contains a path traversal vulnerability in the deleteapplication tool that allows MCP clients to reach unintended API endpoints via unvalidated applicationName values. Attackers or prompt-injected models can supply dot-segment values like ../repositorie...
CVE-2026-108642: Authorization Bypass Through User-Controlled Key
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in SysAnnouncementSendController that allows authenticated users to modify other users' message delivery records. Attackers can obtain delivery ids from GET /sys/sysAnnouncementSend/list and submit edit requests that overwrite...
PT-2026-117759
Security vulnerability affects the apache-nifi package. In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service DoS condition...
GHSA-M687-P538-R5HP Vikunja: Permissive Cross-domain Security Policy trusts every localhost origin which should not be trusted
Summary Vikunja ships with cors.origins defaulting to http://127.0.0.1: and http://localhost:, and sends Access-Control-Allow-Credentials: true, so a page served from any port on the user's own machine may make credentialed cross-origin requests to the API and read the responses. The mandatory...