Search Vulnerabilities

view_component: Reused Component Instances Retain Stale Render Context

Symfony: Unauthenticated PHP Object Deserialization in MonologBridge server:log Listener

A exposure of resource to wrong sphere vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.2, FortiSandbox 4.4.3 through 4.4.8 may allow an un...

Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket

FOSSBilling: Downloadable product files can be overwritten through filename collisions

DeepMyst Mysti Per-Project Auto-Memory MemoryManager.ts initProjectMemory exposure of resource

Podman: Malformed Image can trick podman run into leaking host environment variables into the container

PraisonAI - Information Disclosure via Shared MultiAgentLedger State

Steeltoe's static JWKS cache shared across schemes and never invalidated

OpenClaw < 2026.4.26 - Information Disclosure via Sandboxed Session Spawn

vm2: NodeVM observability builtins leak host process and HTTP request data

OpenFGA: Cache-key delimiter injection in openfga/openfga shared-iterator and v2 iterator caches enables intra-store authorization-decision poisoning

Apache HTTP Server: mod_dav_fs protected directory access

Dräger Zeus IE Anesthesia Workstation USB Interface Privilege Escalation

Algernon: Auto-refresh SSE event server binds to all interfaces by default on Linux/macOS

Information Disclosure in extension "Faceted Search" (ke_search)

Open WebUI: Redis Cache Keys tool_servers and terminal_servers Missing Instance Prefix Enable Cross-Instance Cache Poisoning

vm2: Sandbox Breakout Using Async Generator

vm2: Sandbox Breakout Through Null Proto Exception

vm2: Snabox breakout via `neutralizeArraySpeciesBatch`