Better Auth 输入验证错误漏洞

Better Auth is a TypeScript's most comprehensive authentication framework open-sourced by Better Auth. An input validation error vulnerability exists in versions of Better Auth prior to 1.2.10, which stems from the presence of an open redirect in the originCheck middleware function, which could...

Hugging Face Transformers 输入验证错误漏洞

Hugging Face Transformers is Hugging Face's open source advanced natural language processing for Jax, PyTorch and TensorFlow. An input validation error vulnerability exists in Hugging Face Transformers version 4.49.0 and earlier, which stems from insufficient URL validation in imageutils.py and...

CVE-2025-53366

The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol MCP. Prior to version 1.9.4, a validation error in the MCP SDK can cause an unhandled exception when processing malformed requests, resulting in service unavailability 500 errors until manually...

GHSA-3QHF-M339-9G5V MCP Python SDK vulnerability in the FastMCP Server causes validation error, leading to DoS

A validation error in the MCP SDK can cause an unhandled exception when processing malformed requests, resulting in service unavailability 500 errors until manually restarted. Impact may vary depending on the deployment conditions, and presence of infrastructure-level resilience measures. Thank y...

MCP Python SDK vulnerability in the FastMCP Server causes validation error, leading to DoS

A validation error in the MCP SDK can cause an unhandled exception when processing malformed requests, resulting in service unavailability 500 errors until manually restarted. Impact may vary depending on the deployment conditions, and presence of infrastructure-level resilience measures. Thank y...

CVE-2025-53366 MCP SDK Vulnerable to FastMCP Server Validation Error, Leading to Denial of Service

The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol MCP. Prior to version 1.9.4, a validation error in the MCP SDK can cause an unhandled exception when processing malformed requests, resulting in service unavailability 500 errors until manually...

CVE-2025-53366 MCP SDK Vulnerable to FastMCP Server Validation Error, Leading to Denial of Service

The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol MCP. Prior to version 1.9.4, a validation error in the MCP SDK can cause an unhandled exception when processing malformed requests, resulting in service unavailability 500 errors until manually...

CVE-2025-53366

CVE-2025-53366 relates to the MCP Python SDK (PyPI: mcp). Before version 1.9.4, a validation error can trigger an unhandled exception when processing malformed requests, resulting in service unavailability (HTTP 500) that requires manual restart. The issue varies by deployment conditions and resi...

CVE-2025-53366 MCP SDK Vulnerable to FastMCP Server Validation Error, Leading to Denial of Service

The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol MCP. Prior to version 1.9.4, a validation error in the MCP SDK can cause an unhandled exception when processing malformed requests, resulting in service unavailability 500 errors until manually...

OpenBao Input Validation Error Vulnerability

OpenBao is OpenBao open source a sensitive data management software . OpenBao has an input validation error vulnerability that can be exploited by an attacker to cause a denial of service...

Monitorr 输入验证错误漏洞

Monitorr is a web front-end for Monitorr open source. It is used to display the status of any web application or service in real time. An input validation error vulnerability exists in Monitorr 1.7.6m and earlier versions, which stems from improper input validation due to incorrect manipulation o...

CHMLib 输入验证错误漏洞

CHMLib is a library of functions for working with CHM files from the individual developers of jedwing. An input validation error vulnerability exists in CHMLib 2bef8d0 and earlier versions, which stems from a chmdecompressblock integer overflow that could result in a heap buffer overflow...

PT-2025-28027

Name of the Vulnerable Software and Affected Versions: MCP Python SDK versions prior to 1.9.4 Description: A validation error in the MCP SDK can cause an unhandled exception when processing malformed requests, resulting in service unavailability until manually restarted. The impact may vary...

COVID19 Testing Management System Input Validation Error Vulnerability

The COVID19 Testing Management System is a new crown pneumonia testing management system. The COVID19 Testing Management System has an input validation error vulnerability that originates from an open redirect due to the operation of the parameter q in the file /search-report-result.php. No detai...

CVE-2025-5824

Autel MaxiCharger AC Wallbox Commercial Origin Validation Error Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Autel MaxiCharger AC Wallbox Commercial. An attacker must first obtain the ability to pai...

xxl-sso 输入验证错误漏洞

xxl-sso is a distributed single sign-on framework by individual developer Xu Xue Li. An input validation error vulnerability exists in xxl-sso version 1.1.0, which is caused by incorrect operation of the redirecturl parameter in file /xxl-sso-server/doLogin, resulting in an open redirect...

n8n 输入验证错误漏洞

n8n is a scalable workflow automation tool from n8n open source. An input validation error vulnerability exists in n8n versions prior to 1.98.0, which stems from an open redirection vulnerability in the login process that could lead to a phishing attack...

CVE-2025-5824

CVE-2025-5824 affects Autel MaxiCharger AC Wallbox Commercial. The flaw is an origin validation error in Bluetooth pairing handling, allowing network-adjacent attackers to bypass authentication by exploiting insufficient validation of command origins. Multiple sources (ZDI-25-343, NVD/NVD-derived...

Julia GitForge 输入验证错误漏洞

Julia GitForge is a Julia open source interface for interacting with Git forges. An input validation error vulnerability exists in Julia GitForge versions prior to 5.9.1, which stems from a lack of input validation and could lead to a path traversal attack...

ServiceStack 输入验证错误漏洞

ServiceStack is an API for building high-performance web services from ServiceStack, Inc. An input validation error vulnerability exists in ServiceStack that stems from the GetErrorResponse method not properly validating user input, which could lead to an NTLM credential relay attack...