Denial Of Service (DoS)

org.xerial.snappy, snappy-java is vulnerable to denial of serviceDoS. The vulnerability is due to unbounded memory allocation based on the declared uncompressed length in crafted compressed input, which allows an attacker to exhaust JVM memory by triggering allocations of up to 2 GB and causing a...

Undici Vulnerable To Cache Poisoning And Cross-user Disclosure Via Cross-origin Redirects

Impact When an originless "Agent" composes the redirect and cache interceptors as "composeredirect, cache" with a shared cache "type: 'shared'", the cache builds its key from the original request URL before the redirect handler changes the origin. The response produced after a redirect is then...

Nodemailer: Quadratic (O(n^2)) SMTP Client Reply Parsing Lets A Malicious Server Or MITM Cause A Pre-auth Remote Denial

Summary The SMTP client response parser reassembles multiline server replies by appending each continuation line onto a single response-queue entry and re-testing whether that entry is still a partial continuation reply on every line. The partial-response test runs "str.slicestr.lastIndexOf' ' + ...

Nodemailer: Quadratic Backtracking In SMTP AUTH Mechanism Detection Regexes Allows Pre-auth Remote Denial Of Service

Summary Nodemailer's SMTP client applies four regular expressions to a peer's EHLO response to detect the supported SASL mechanisms. Each pattern uses an alternation with two overlapping whitespace-matching sub-patterns, which produces quadratic On^2 backtracking whenever the mechanism name is...

Buffer Overflow

org.xerial.snappy, snappy-java is vulnerable to a buffer overflow. The vulnerability is due to incorrect output array size calculations in typed Snappy.uncompressArray methods while passing the undivided length to native code, which allows an attacker to provide crafted compressed input to write...

@better-auth/drizzle-adapter: Concurrent Requests Can Exceed Rate Limits On PostgreSQL

Am I affected? You are affected if you use "@better-auth/drizzle-adapter" from 1.6.17 through versions before 1.7.7 including the 1.7.0 prereleases from beta.6 through rc.6 or "@better-auth/kysely-adapter" 1.6.17 through 1.6.31, and keep rate-limit records in a PostgreSQL database. All of these...

Undici Vulnerable To TLS Certificate Validation Bypass Via Dropped Tls Options In Agent

Impact undici's "Agent" passes its constructor options through a JSON-based deep clone "JSON.parseJSON.stringify..." before forwarding them to each per-origin "Pool". JSON cannot represent functions, so a caller-supplied "tls" option containing a "checkServerIdentity" callback is silently dropped...

Sensitive Information Disclosure

org.asynchttpclient, async-http-client is vulnerable to sensitive information disclosure. The vulnerability is due to improper handling of proxy authentication headers when using an authenticated SOCKS proxy, which allows an attacker-controlled origin to obtain proxy credentials, including Basic,...

Uncontrolled Resource Consumption

org.asynchttpclient, async-http-client is vulnerable to uncontrolled resource consumption. The vulnerability is due to connection permits not being released when TLS connection establishment fails, which allows an attacker to trigger repeated connection failures and exhaust the available connecti...

Session Fixation

org.opencastproject, base is vulnerable to session fixation. The vulnerability is due to failure to regenerate the session ID after authentication when a client-supplied JSESSIONID is accepted through the URL, which allows an attacker to hijack a victim’s authenticated session and potentially gai...

Server-Side Request Forgery (SSRF)

org.graylog2, graylog2-server is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to failure to re-validate URLs after following HTTP redirects, which allows an attacker with lookup table or event notification permissions to redirect requests to internal services and...

Server-Side Request Forgery (SSRF)

org.glassfish, jakarta.faces is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to improper sanitization and validation of remote URLs in DefaultFaceletFactory, which allows an attacker to specify a malicious remote Facelet URL that the server processes with its privilege...

Missing Authentication For Critical Function

Apache ActiveMQ Artemis is vulnerable to Missing Authentication for Critical Function. The vulnerability is due to improper protection of cluster administrative credentials during the initial cluster connection handshake, which allows an unauthenticated network-adjacent attacker to exploit the...

Missing Authorization

Apache ActiveMQ Artemis is vulnerable to Missing Authorization. The vulnerability is due to insufficient authentication and authorization checks when processing OpenWire RemoveSubscriptionInfo commands, which allows a remote attacker to delete queues on the Artemis broker before authentication or...

Improper Authentication

Apache ActiveMQ Artemis is vulnerable to Improper Authentication. The vulnerability is due to insufficient validation of CORE protocol SESSIONREATTACH packets, which allows an unauthenticated remote attacker to hijack an existing authenticated session and take over its ongoing execution...

Path Traversal

Apache MINA SSHD bundle sshd-git is vulnerable to path traversal. The vulnerability is due to lack of path validation in git-upload-pack, git-receive-pack, and other git operations, where authenticated SSH users can access git repositories outside the configured server root directory, allowing th...

Regular Expression Denial Of Service (ReDoS)

JLine is vulnerable to a Regular Expression Denial of Service ReDoS. The vulnerability is due to insufficient validation of user-controlled regular expression patterns in the built-in less viewer, which allows an attacker to trigger excessive CPU consumption through crafted patterns...

Out-of-bounds Read

Apache Fory is vulnerable to Out-of-Bounds Read. The vulnerability is due to improper bounds checking in readAlignedVarUint when using sun.misc.Unsafe during out-of-band zero-copy deserialization, which allows an attacker to trigger reads beyond the underlying buffer boundaries using crafted...

Denial Of Service

Netty is vulnerable to denial of service. The vulnerability is due to io.netty.handler.codec.stomp.StompSubframeDecoder failing to limit the total number of headers or their cumulative size per frame, where the maxLineLength parameter only restricts individual header lines and the headers are...

Improper Authentication

Apache CXF is vulnerable to Improper Authentication. The vulnerability is due to caching validated security tokens using a non-cryptographic 32-bit hash and treating hash collisions as proof of validation, which allows an attacker to craft a colliding token to bypass password or signature...

Audit Log Injection

Apache ZooKeeper is vulnerable to audit log injection. The vulnerability is due to improper handling of tab characters in audit log serialization, where the server writes attacker‑controlled usernames and ACL identifiers into the acl= field without escaping tabs, and an attacker can send a digest...

Buffer Overflow

Brotli is vulnerable to Buffer Overflow. The vulnerability is due to improper bounds handling in c/dec/decode.c, where a crafted Brotli-compressed stream can corrupt adjacent decoder memory, potentially enabling sensitive information disclosure, denial of service, or arbitrary code execution by a...

MLflow FileStore Trace IDs Allow Path Traversal And Arbitrary File Writes

MLflow 3.17.1 and earlier contains a path traversal vulnerability in the FileStore tracking backend that allows unauthenticated attackers to control filesystem paths by submitting a crafted trace ID containing traversal sequences to the POST /api/3.0/mlflow/traces endpoint. Attackers can exploit...

Langflow: Code Injection Vulnerability In Code Validation Endpoint

IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated attackers to execute arbitrary OS commands and read sensitive files including credentials, enabling complete system compromise and lateral movement...

Filelock ReadWriteLock: SQLite Reopens The Lock Database By Name, So A Planted Symlink Or Journal File Makes The Lock Us

"ReadWriteLock" and "AsyncReadWriteLock" the SQLite-backed reader/writer lock hand SQLite a name they do not control. On Linux the lock validates its database through a descriptor the number the kernel gives a process for an open file. It then connects SQLite to "/proc/self/fd/", a Linux path tha...

Twisted: HTTP Request Smuggling In Twisted.web Via A Bare CR Or LF In A Header Value

Summary An incomplete header-value validation CWE-444 in the Twisted HTTP server lets a bare carriage return or line feed in a header value hide a following header from the parser. "twisted.web.http.HTTPChannel.headerReceived" rejects a NUL byte in a header value but not a bare CR or LF, even...

VLLM: Forged Multimodal UUID + P0/P1 Processor-cache Eviction Drift: Unauthenticated Remote Crash Of The Whole VLLM Engi

Summary Multimodal content parts "imageurl", "videourl", "inputaudio", ... accept a user-supplied "uuid" field that vLLM uses verbatim as the item's cache identity "mmhash". The two frontend/engine processor caches P0 "sender" cache in the API process, P1 "receiver" cache in the EngineCore proces...

Filelock: ReadWriteLock On The Hard-link Route Deletes Any Directory Another User Renames Onto Its .filelock-* Link Dire

"ReadWriteLock" and "AsyncReadWriteLock" the SQLite-backed reader/writer lock remove their private ".filelock-" link directories with "shutil.rmtree" a recursive delete on a remembered path. They do not check that the path still names the directory they created. This happens on the hard-link rout...

Virtualenv: Seed Replacement Does Not Contain Metadata Deletion Paths

Summary The app-data seeder joins paths from existing distribution metadata to site-packages and deletes the resulting paths without checking containment within the environment. Anthropic's OSS Scanner reported this as "ANT-2026-SXOEHWP7" in "virtualenv-20261015-005", received on 15 October 2026...

VLLM : DoS Via Unvalidated Mm_processor_kwargs In Multimodal Image Processors (Isaac, InternVL, H2OVL, Etc.)

Summary API clients can supply arbitrary "mmprocessorkwargs" per request. vLLM forwards these values through the multimodal rendering and processing pipeline to Hugging Face and custom image/video processor constructors and calls. Resource-sensitive values such as image size, patch size, patch...

Twisted: Unauthenticated Remote Denial Of Service In The Twisted Conch Telnet Transport Via An Unbounded Subnegotiation

Summary An allocation-without-limits vulnerability CWE-770 in the Twisted conch telnet transport lets any unauthenticated remote peer exhaust server memory over a single connection. When the peer opens a telnet subnegotiation with "IAC SB" and then streams bytes without ever sending the "IAC SE"...

Filelock: SoftFileLock Stale-break Restore Follows A Swapped-in Symbolic Link And Hard-links A File Of The User Running

When a soft-lock stale break finds that the marker the lock file at "" it renamed aside was a live one recreated by a successor, the restore branch of "breaklockfile" checks the break name with "lstat" a check that reads a name without following a symbolic link and then calls "os.linkbreakpath,...

Filelock: ReadWriteLock On Windows Acts On SQLite Side Files Another Local User Places Beside Its Database

On Windows, "ReadWriteLock" and "AsyncReadWriteLock" the SQLite-backed reader/writer lock connect SQLite to the lock database by its path, in every directory. SQLite derives three side files from that path: "-journal", the rollback journal pages saved to undo an interrupted write; "-wal", the...

Mem0ai Databricks Vector Store Vulnerable To SQL Injection

mem0 0.1.117 before 1.0.8 contains an sql injection vulnerability in mem0/vectorstores/databricks.py that allows attackers to inject SQL by influencing stored memory content. Attackers can supply crafted memory text, metadata, or message names that reach unescaped insert and update string...

Filelock: On Windows An Oplock On A Soft Lock's Marker Holds SoftFileLock.acquire() Past Its Timeout And Blocks The Stal

On Windows the soft locks "SoftFileLock", "MarkerSoftFileLock", "SoftFileLease", their async forms, and a "FileLock" that fell back to a soft lock read their marker by path. The marker is the lock file whose presence says a process holds the lock. Each "acquire" attempt that finds a marker opens ...

Twisted: Unauthenticated Remote Denial Of Service In The Twisted IRC Server Via An Unbounded Line Buffer

Summary An unbounded-buffer vulnerability CWE-770 in the Twisted words IRC server lets any unauthenticated remote client exhaust server memory. "twisted.words.protocols.irc.IRC.dataReceived" appends every received byte to a per-connection buffer and only removes data at a line feed, with no maxim...

Pydantic AI Harness Tool-call Limit Bypass In Nested CodeMode Calls

Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.toolcallslimit on nested tool calls dispatched from runcode in the CodeMode toolset. Users or prompt-injected content can make the sandboxed program invoke tools via runnestedcall without checkbeforetoolcall, exceeding operator limits...

MLflow: SSRF On Unauthenticated MLflow Servers Via Third-party Scorer Kwargs In The Scorer Invoke, Register, And GenAI E

Summary MLflow's tracking server exposes "POST /ajax-api/3.0/mlflow/scorer/invoke" with no authentication, and the handler reflectively instantiates an attacker-named class from attacker-supplied JSON with unconstrained constructor kwargs. With the optional "trulens" + "trulens-providers-litellm"...

Twisted: Denial Of Service In The Twisted IMAP4 Server Via A Negative Literal Size In SEARCH

Summary An infinite-loop vulnerability CWE-835 in the Twisted IMAP4 server lets an authenticated client freeze the whole process with one small command. "twisted.mail.imap4.parseNestedParens" reads an IMAP literal size with "int" and never rejects a negative value. A negative size such as "-100"...

Filelock: SoftFileLock Evicts A Fresh Lock File Whose Watched Age Another Local User's Pre-dated File Passed On Through

"SoftFileLock" and "MarkerSoftFileLock" evict an unparsable marker the lock file at "", whose presence says a process holds the lock once a waiting contender has watched it unchanged for two seconds. "SoftFileLease" expires a lease the same way. The watch tells two looks apart by the marker's...

Apache Tomcat Util Accepted Misconfigured CRLs

Detection of Error Condition Without Action vulnerability in Apache Tomcat when configuring Certificate Revocation List CRLs for a FFM based connector. If an FFM connector was configured with invalid CRLs, the invalid CRLs were ignored meaning invalid certificates could be accepted. This issue...

SiYuan: Missing Consistency Check Between PackageName And RepoURL/repoHash In Bazaar Package Install Allows Overwriting

Summary "installBazaarPlugin" and the equivalent endpoints for widgets/icons/templates/themes accept "packageName", "repoURL", and "repoHash" as independent request fields with no validation that they refer to the same package. "packageName" alone determines the install destination;...

SiYuan: The Publish Filter For Database Backlinks Consults The Forbidden List Instead Of The Visibility List, Disclosing

Summary "/api/av/getAttributeViewBacklinks" filters its results for reader roles through "FilterAttributeViewBacklinksByPublishAccess". That function resolves its ignore list with "GetDisablePublishAccess", which covers only the forbidden tier. Documents at the hidden tier are absent from that...

Chi: Client IP Spoofing In ClientIPFromXFF Via X-Forwarded-For

Summary "ClientIPFromXFF" skips any "X-Forwarded-For" entry in a configured trusted CIDR but never verifies that the direct TCP peer in "http.Request.RemoteAddr" belongs to that CIDR. A client that can reach the Go server directly can therefore append a trusted-looking proxy address and choose th...

SiYuan: A Parser Differential Between The WebSocket Keepalive Exemption And The Session Quarantine Allows Unauthenticate

Summary Two checks on the same WebSocket request URI parse it differently. The authentication exemption for keepalive sessions matches raw substrings, while the quarantine introduced to contain those sessions reads a parsed query parameter. Because Go's "url.Values.Get" returns only the first val...

SiYuan: AuthFilePublishAccess Distinguishes Hidden And Forbidden Documents From Public And Nonexistent Ones, And Issues

Summary "/api/filetree/authFilePublishAccess" is registered with "CheckAuth" only and is reachable anonymously. It never sets a failure code, so its outcome is signalled entirely by the response message and by whether a "Set-Cookie" header is present. Those two signals differ across access tiers,...

Undici Vulnerable To Denial Of Service Via Unhandled Error On Excessive Content-encodings

Impact undici's "fetch" crashes the Node.js process when a malicious server returns a response with more than five content codings and closes the connection before sending the body. undici rejects such responses a content-encoding limit, but it created the internal response stream before that che...

Fast-uri Vulnerable To Improper Path Equivalence In Relative Reference Normalization

Impact "fast-uri"'s "normalize" and "serialize" apply RFC 3986 dot-segment removal "removedotsegments" to the path of a relative-path reference. RFC 3986 section 5.2.4 defines that algorithm only for the merged target path during resolution, not for the reference itself, so applied to the referen...

MSAL Node Authorization Code Flow May Disclose Parameters To An Attacker-controlled Endpoint

Impact Origin validation error in Microsoft Authentication Library MSAL for Node.js allows an unauthorized attacker to disclose information over a network. This affects the authcode flow. Patches Version 7.1.0 and higher are patched. Workarounds Ensure you pass in only the authcode to to...

Fast-uri Vulnerable To Host Confusion Via Unchecked WHATWG Host Canonicalization

Impact "fast-uri" versions "= 2.4.2, = 3.1.3, = 4.0.1, = 4.2.2" can silently rewrite the host of an HTTP-family URL "http", "https", "ws", "wss", or any scheme with "domainHost: true". For those schemes "canonicalizeHost" passes the parsed host to the WHATWG "URL" parser and adopts its ".hostname...