Path Traversal

github.com/ctfer-io/monitoring is vulnerable to a Path Traversal. The vulnerability is due to a missing trailing path separator in the strings.HasPrefix check within the sanitizeArchivePath function, which allows an attacker to perform arbitrary file writes via a crafted archive, potentially...

Denial Of Service (DoS)

Mattermost is vulnerable to Denial of Service DoS. The vulnerability is due to improper handling of excessively long passwords during authentication, which allows an attacker to consume excessive CPU and memory resources by submitting login attempts with multi-megabyte passwords...

Missing Authorization

github.com/argoproj/argo-workflows is vulnerable to Missing Authorization. The vulnerability is due to missing authorization checks in the Sync Service's ConfigMap-backed provider, which allows an attacker to create, read, update, and delete synchronization-related Kubernetes ConfigMaps without...

Authentication Bypass

MinIO is vulnerable to Authentication Bypass. The vulnerability is due to missing signature verification for authTypeStreamingUnsignedTrailer requests in the Snowball auto-extract handler, which allows an attacker with knowledge of a valid access key to upload arbitrary objects without providing ...

Improper Access Control

Traefik is vulnerable to Improper Access Control. The vulnerability is due to insufficient validation of TraefikService backend references ending with @internal, which allows an attacker with HTTPRoute creation permissions to access the internal REST provider and perform unauthorized configuratio...

Out-of-bounds Read

github.com/gomarkdown/markdown is vulnerable to an Out-of-Bounds Read. The vulnerability is due to improper handling of malformed Markdown input containing a character when processed by the SmartypantsRenderer, which allows an attacker to trigger an out-of-bounds read or cause the application to...

Improper Authorization

Kyverno is vulnerable to Improper Authorization. The vulnerability is due to missing validation of the configMap.namespace field in the ConfigMap context loader, which allows a namespace administrator to bypass RBAC restrictions and read ConfigMaps from arbitrary namespaces using Kyverno's...

Insufficient Verification Of Data Authenticity

go-git is vulnerable to Insufficient Verification of Data Authenticity. The vulnerability is due to improper handling of malformed or ambiguous Git object headers and reconstructing commit data for signing and verification instead of using the original raw object bytes, which allows an attacker t...

Server-Side Request Forgery (SSRF)

github.com/kyverno/kyvern is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to the apiCall feature in ClusterPolicy automatically attaching the admission controller's ServiceAccount token to outbound HTTP requests without validating the destination URL, which allows an...

Improper Input Validation

github.com/filebrowser/filebrowser/v2 is vulnerable to an improper input validation. The vulnerability is due to the Upload-Length header being parsed as a signed 64-bit integer without validating that the value is non-negative, which allows an authenticated attacker with upload permissions to...

Authentication Bypass

Traefik is vulnerable to Authentication Bypass. The vulnerability is due to improper handling of decoded and percent-encoded URL paths in the StripPrefixRegex middleware when used with authentication mechanisms such as ForwardAuth, BasicAuth, or DigestAuth, which allows an unauthenticated attacke...

Denial Of Service (DoS)

github.com/openziti/zrok is vulnerable to Denial Of Service DoS. The vulnerability is due to improper validation of an attacker-supplied cookie chunk count in the endpoints.GetSessionCookie function, which performs unbounded memory allocations before token validation, allowing an unauthenticated...

Improper Certificate Validation

Nebula is vulnerable to Improper Certificate Validation. The vulnerability is due to ECDSA signature malleability in P256 certificates, which allows an attacker to generate a certificate with a different fingerprint and bypass certificate fingerprint-based blocklist entries...

Information Exposure

github.com/zalando/skipper is vulnerable to Information Exposure. The vulnerability is due to the default -lua-sources=inline,file configuration, which allows untrusted users to create inline Lua scripts that can read files accessible to the Skipper process, allowing an attacker to access sensiti...

Improper Authentication

github.com/lxc/incus/v6/cmd/incus is vulnerable to Improper Authentication. The vulnerability is due to improper validation of the authentication token passed in the incus webui URL, which allows an attacker who can access the temporary localhost web server to bypass authentication and gain the...

Server-Side Request Forgery (SSRF)

github.com/apache/skywalking-mcp is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to improper validation of the SW-URL header, which allows an attacker to supply arbitrary URLs and force the server to send requests to unintended internal or external resources...

Improper Input Validation

ingress-nginx is vulnerable to Improper Input Validation. The vulnerability is due to improper validation of the nginx.ingress.kubernetes.io/auth-method Ingress annotation, which allows an attacker to inject malicious NGINX configuration, achieve arbitrary code execution in the ingress-nginx...

Exposure Of Sensitive Information

Portainer Community Edition is vulnerable to Exposure of Sensitive Information. The vulnerability is due to the authentication middleware accepting JWT bearer tokens through the ?token= URL query parameter, which allows an attacker to obtain authentication tokens from browser history, proxy logs,...

Denial Of Service

github.com/hashicorp/boundary is vulnerable to denial of service. The vulnerability is due to improper handling of TLS handshakes during worker node enrollment, where an attacker can delay or withhold the client certificate to block connection handling, allowing legitimate worker connections to b...

Arbitrary File Read

go-getter is vulnerable to Arbitrary File Read. The vulnerability is due to improper validation of maliciously crafted Git URLs during certain Git operations, where specially crafted URLs can access unintended file system paths, allowing attackers to read arbitrary files on the host system...

OS Command Injection

PicoClaw is vulnerable to OS Command Injection. The vulnerability is due to insufficient validation and sanitization of input in the /api/gateway/restart endpoint of the Web Launcher Management Plane, which allows a remote attacker to inject and execute arbitrary system commands on the underlying...

Uncontrolled Resource Consumption

NATS-Server is vulnerable to Uncontrolled Resource Consumption. The vulnerability is due to improper bounds checking during WebSocket message decompression, which allows an unauthenticated attacker to send a compression bomb that consumes excessive memory and causes a denial-of-service...

Local File Inclusion (LFI)

github.com/esm-dev/esm.sh is vulnerable to Local File Inclusion. The vulnerability is due to improper handling of the browser field in package.json by the esbuild plugin, which allows an attacker to publish a malicious npm package that causes the server to read and return arbitrary files from the...

Improper Access Control

Kata Containers is vulnerable to Improper Access Control. The vulnerability is due to an oversight in the CopyFile policy and/or handler, which allows an untrusted host to write files to arbitrary locations within the guest workload image, enabling an attacker to overwrite binaries, compromise...

Server-Side Request Forgery (SSRF)

github.com/zalando/skipper is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to insufficient restrictions on Kubernetes ExternalName services when Skipper is used as an Ingress controller, which allows an attacker with permissions to create an Ingress and an ExternalName...

Denial Of Service (DoS)

github.com/hashicorp/vault is vulnerable to Denial of ServiceDoS. The vulnerability is due to insufficient access controls on root token generation and rekey operations, which allows an unauthenticated attacker to repeatedly initiate or cancel these operations, occupying the single available...

Improper Enforcement Of Security Restrictions

github.com/portainer/portainer is vulnerable to improper enforcement of security restrictions. The vulnerability is due to inconsistent enforcement of configured EndpointSecuritySettings on the Docker Swarm service API, which allows an attacker to bypass administrator-defined container security...

Sensitive Information Exposure

Portainer Community Edition is vulnerable to Exposure of Sensitive Information. The vulnerability is due to the authentication middleware accepting JWT bearer tokens through the ?token= URL query parameter, which allows an attacker to obtain authentication tokens from browser history, proxy logs,...

Denial-of-service (DoS)

github.com/prometheus/prometheus is vulnerable to Denial-of-service DoS. The vulnerability is due to improper validation of the declared decoded length in snappy-compressed requests sent to the remote read endpoint /api/v1/read, which allows an unauthenticated attacker to send a small malicious...

Improper Privilege Management

OpenClaude is vulnerable to improper privilege management. The vulnerability is due to the dangerouslyDisableSandbox parameter being exposed in the BashTool input schema, which allows an attacker to use a prompt-injected LLM to disable the sandbox and execute arbitrary commands on the host system...

Improper Input Validation

github.com/free5gc/udm is vulnerable to improper input validation. The vulnerability is due to the UDM component failing to validate the SUPI path parameter in multiple nudm-sdm GET handlers, which allows an unauthenticated attacker to inject control characters, forward malformed requests to the...

Improper Input Validation

github.com/cloudnativelabs/kube-router is vulnerable to improper input validation. The vulnerability is due to Kube-router's proxy module not validating externalIPs or loadBalancer IP addresses before programming them into the node's network configuration, which allows an attacker with permission...

Arbitrary Code Execution

openclaw is vulnerable to arbitrary code execution. The vulnerability is due to improper trusted-prefix fallback logic in shell-env for the $SHELL environment variable, which allows an attacker to influence $SHELL and execute attacker-controlled binaries on systems with writable trusted-prefix...

Mass Assignment

Flowise is vulnerable to Mass Assignment. The vulnerability is due to missing server-side validation and authorization checks in the assistant update endpoint, which allows an authenticated attacker to manipulate server-controlled properties such as workspaceId and reassign assistants to arbitrar...

Denial Of Service (DoS)

github.com/xddxdd/bird-lg-go is vulnerable to Denial Of Service DoS. The vulnerability is due to the application processing user-supplied JSON requests with json.NewDecoderr.Body.Decode without enforcing a maximum request size, which allows an unauthenticated remote attacker to send an excessivel...

OS Command Injection

github.com/kubeai-project/kubeai is vulnerable to OS Command Injection. The vulnerability is due to the ollamaStartupProbeScript function constructing a shell command with unsanitized model URL components ref and modelParam and executing it via bash -c, which allows an attacker with permission to...

Improper Access Control

github.com/distribution/distribution is vulnerable to Improper Access Control. The vulnerability is due to stale repository-scoped blob membership data remaining after a blob deletion when Redis blob descriptor caching and delete functionality are enabled, which allows an attacker to regain...

Server-Side Request Forgery (SSRF)

FrontMCP is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to unsafe dereferencing of $ref pointers in OpenAPI specifications without URL restrictions, which allows an attacker to trigger requests to internal network resources or read local files through malicious OpenAP...

Arbitrary File Read

github.com/hahwul/dalfox/v2 is vulnerable to Arbitrary File Read. The vulnerability is due to unsafe deserialization of the attacker-controlled custom-payload-file parameter in REST API server mode, which allows an unauthenticated attacker to read arbitrary files accessible to the dalfox process...

Denial Of Service (DoS)

github.com/gofiber/fiber is vulnerable to Denial Of Service DoS. The vulnerability is due to unvalidated MsgPack deserialization of the fiberflash cookie, which allows an unauthenticated attacker to supply a crafted cookie value that triggers excessive memory allocation, resulting in a...

Improper Input Validation

mppx is vulnerable to improper input validation. The vulnerability is due to improper validation in the cooperative close handler, where the close voucher amount was checked using “” instead of “=” against the on-chain settled amount, which allows an attacker to submit a close voucher equal to th...

Path Traversal

zrok is vulnerable to Path Traversal. The vulnerability is due to failure to prevent symlink traversal in the WebDAV drive backend, which allows a remote attacker to access symbolic links pointing outside the shared root and read or, where permitted, modify arbitrary files on the host filesystem...

Improper Restriction Of Outbound Network Requests (SSRF)

Flowise is vulnerable to improper restriction of outbound network requests SSRF. The vulnerability is due to multiple tool implementations directly importing and invoking raw HTTP clients instead of using the secured wrapper, which allows an attacker to perform unauthorized server-side requests...

Denial Of Service (DoS)

github.com/go-jose/go-jose is vulnerable to Denial Of Service DoS. The vulnerability is due to improper validation of JWE objects during decryption when the alg field indicates a key wrapping algorithm and the encryptedkey field is empty, which allows an attacker to trigger a runtime panic via...

Arbitrary File Write

github.com/hahwul/dalfox/v2 is vulnerable to Arbitrary File Write. The vulnerability is due to unsafe deserialization of attacker-controlled logging configuration fields in REST API server mode, which allows an unauthenticated attacker to supply arbitrary file paths that are then used by the...

Information Disclosure

strapi/strapi is vulnerable to information disclosure. The vulnerability is due to insufficient sanitization of relational query parameters in the where filter, which allows an unauthenticated attacker to perform a boolean-oracle attack against restricted adminusers table fields and potentially...

Sandbox Escape

Angular Expressions is vulnerable to sandbox escape. The vulnerability is due to malicious expressions using filters that can escape the AngularJS sandbox, which allows an attacker to execute arbitrary code on the underlying system...

Missing Authorization

github.com/minio/minio is vulnerable to IMissing Authorization. The vulnerability is due to insufficient validation of user-supplied X-Minio-Replication- headers in the extractMetadataFromMime function, which allows an authenticated attacker with s3:PutObject permissions to inject internal...

Path Traversal

github.com/moby/buildkit is vulnerable to Path Traversal. The vulnerability is due to insufficient validation of Git URL fragment subdirectory components, which allows an attacker to craft a malicious Git URL that accesses files outside the checked-out repository root through symlink manipulation...

Server-Side Request Forgery (SSRF)

n8n-mcp is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to improper validation of webhook trigger tools, the n8n API client N8NAPIURL, and per-request URLs supplied through the x-n8n-url header in multi-tenant HTTP mode, which allows an authenticated attacker to send...