Command Injection

Overview vite is a Native-ESM powered web dev build tool Affected versions of this package are vulnerable to Command Injection via constructWindowsLaunchCommand in packages/launch-editor/construct-windows-launch-command.js, where file path arguments containing % characters are passed unsanitized ...

Command Injection

Overview launch-editor is a launch editor from node.js Affected versions of this package are vulnerable to Command Injection via constructWindowsLaunchCommand in packages/launch-editor/construct-windows-launch-command.js, where file path arguments containing % characters are passed unsanitized to...

Command Injection

Overview vite-plus is a The Unified Toolchain for the Web Affected versions of this package are vulnerable to Command Injection via constructWindowsLaunchCommand in packages/launch-editor/construct-windows-launch-command.js, where file path arguments containing % characters are passed unsanitized...

launch-editor: escapeCmdArgs() omits % escaping on Windows

Summary launch-editor did not escape % on Windows when passing an argument to cmd. When an environment variable contained a malicious value, it was possible that that content to be executed. Impact Only apps that match all of the following conditions are affected: - The user uses Windows - An...

GHSA-698V-4R3X-3VCV launch-editor: escapeCmdArgs() omits % escaping on Windows

Summary launch-editor did not escape % on Windows when passing an argument to cmd. When an environment variable contained a malicious value, it was possible that that content to be executed. Impact Only apps that match all of the following conditions are affected: - The user uses Windows - An...

CVE-2026-89876

A flaw was found in the Linux kernel's media driver for tda18250. An integer overflow can occur when a specific variable, exp, is zero, leading to undefined behavior. This issue arises from a shift operation 1 exp - 1 which can result in unexpected system behavior...

CVE-2026-89808

A flaw was found in the drm/amdkfd component of the Linux kernel. During virtual memory VM migration, if a VM range is a 'hole' on the CPU side, an uninitialized variable is used. This can cause the system to drop all Video Random Access Memory VRAM, potentially leading to a denial of service or...

CVE-2026-89809

A flaw was found in the drm/amdkfd component of the Linux kernel. A local user can trigger a system crash by reading the /sys/kernel/debug/kfd/mqds file while a process holds an active Kernel Fusion Driver KFD queue. This issue arises from a NULL pointer dereference, where a critical variable is...

llm-guard-service

LLM Guard Service for ORBIT An LLM Guard Microservice offering protection against prompt injection, jailbreak attacks, data leakage, and harmful content while offering advanced sanitization and detection features. 🚀 Features Security Scanners Prompt Injection Detection : Advanced ML-based detecti...

CVE-2026-113605

Stirling-PDF from 2.13.2 through 3.2.0 contains an incomplete denylist in DatabaseService.validateSqlContent that allows administrators to bypass H2 import restrictions using CREATE OR REPLACE ALIAS. Authenticated administrators can upload a crafted SQL backup to the import-database endpoint, whe...

vLLM Permission Authorization and Access Control Vulnerabilities

Versions of vLLM prior to 0.31.0 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from cache alias issues. Authenticated attackers can exploit these vulnerabilities by providing caller-controlled values such as EXIF ImageID or cachesalt, thereby...

CVE-2026-113605 Stirling-PDF 2.13.2 through 3.2.0 H2 SQL Denylist Bypass via import-database

Stirling-PDF from 2.13.2 through 3.2.0 contains an incomplete denylist in DatabaseService.validateSqlContent that allows administrators to bypass H2 import restrictions using CREATE OR REPLACE ALIAS. Authenticated administrators can upload a crafted SQL backup to the import-database endpoint, whe...

EUVD-2026-105083

Stirling-PDF from 2.13.2 through 3.2.0 contains an incomplete denylist in DatabaseService.validateSqlContent that allows administrators to bypass H2 import restrictions using CREATE OR REPLACE ALIAS. Authenticated administrators can upload a crafted SQL backup to the import-database endpoint, whe...

CVE-2026-113605 Stirling-PDF 2.13.2 through 3.2.0 H2 SQL Denylist Bypass via import-database

Stirling-PDF from 2.13.2 through 3.2.0 contains an incomplete denylist in DatabaseService.validateSqlContent that allows administrators to bypass H2 import restrictions using CREATE OR REPLACE ALIAS. Authenticated administrators can upload a crafted SQL backup to the import-database endpoint, whe...

CVE-2026-113605 Stirling-PDF 2.13.2 through 3.2.0 H2 SQL Denylist Bypass via import-database

Stirling-PDF from 2.13.2 through 3.2.0 contains an incomplete denylist in DatabaseService.validateSqlContent that allows administrators to bypass H2 import restrictions using CREATE OR REPLACE ALIAS. Authenticated administrators can upload a crafted SQL backup to the import-database endpoint, whe...

CVE-2026-113605

Stirling-PDF versions 2.13.2 through 3.2.0 are vulnerable to an H2 SQL Denylist Bypass within the DatabaseService.validateSqlContent() function. Due to an incomplete denylist, authenticated administrators can use the import-database endpoint to upload a crafted SQL backup. By utilizing CREATE OR ...

CVE-2026-112943

launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.2, launch-editor did not escape % on Windows when passing an argument to cmd. When an environment variable contained a malicious value, it was possible that that content to be executed. This...

EUVD-2026-105039

launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.2, launch-editor did not escape % on Windows when passing an argument to cmd. When an environment variable contained a malicious value, it was possible that that content to be executed. This...

CVE-2026-112943

launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.2, launch-editor did not escape % on Windows when passing an argument to cmd. When an environment variable contained a malicious value, it was possible that that content to be executed. This...

CVE-2026-112943 launch-editor: escapeCmdArgs() omits % escaping on Windows

launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.2, launch-editor did not escape % on Windows when passing an argument to cmd. When an environment variable contained a malicious value, it was possible that that content to be executed. This...