Browse and filter security vulnerabilities across ecosystems
Browse and filter security vulnerabilities across ecosystems
File Browser: Colliding username normalization gives two users the same home directory
In Eclipse Jetty, an HTTP URI of this form: /public;/../admin/secret.txt results in an unresolved path of: /public/../admin/secret.txt instead of t...
Astro 6.4.7 Authorization Bypass via Decode Iteration Limit and Rewrite Path Canonicalization Mismatch
Cargo can be coerced to share credentials between registries
Aap-gateway: improper path validation in gateway allows credential exfiltration
Astro has an Authentication Bypass via Double URL Encoding, a bypass for CVE-2025-64765
Symfony's incorrect parsing of PATH_INFO can lead to limited authorization bypass
In browser-use (aka Browser Use) before 0.1.45, URL parsing of allowed_domains is mishandled because userinfo can be placed in the authority component
Sonos api.sonos.com through 2025-04-21, when the /login/v3/oauth endpoint is used, accepts a redirect_uri containing userinfo in the authority comp...
Hitachi Vantara Pentaho Business Analytics Server - Use of Non-Canonical URL Paths for Authorization Decisions