Search Vulnerabilities

Hulumi: IAM-role policy checks bypassed when the role trusts multiple OIDC providers

DOMPurify before 3.4.0 ADD_TAGS Function Bypasses FORBID_TAGS

CedarJava has policy injection, type confusion, and incorrect equality comparison vulnerabilities

FlaskBB Logic Flaw Authorization Group Deletion via Bulk AJAX Endpoint

setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) on macOS APFS/HFS+

666ghj BettaFish InsightEngine search-result Deduplication agent.py _deduplicate_results partial string comparison

HdrHistogram Range Check DoubleHistogram.java org.HdrHistogram.DoubleHistogram.recordValue comparison

NousResearch hermes-agent Streaming Reasoning Tag Filter stream_consumer.py GatewayStreamConsumer._filter_and_accumulate case sensitivity

ML-KEM-1024 x64 AVX2 incomplete cipher text comparison enables IND-CCA2 break and static private-key recovery

gonic has arbitrary file write in createPlaylist: any authenticated user can write playlist M3U content to attacker-controlled path on the host

Netty has an IPv6 Subnet Filter Bypass via Incorrect Comparator Masking

Roxy-WI: Path-traversal patch in commit d4d10006 is a no-op (tuple-membership bug)

Roxy-WI: Authentication bypass via 'api' substring in URL + unauthenticated /api/gpt

Kavita: Pre-Auth Account Takeover

NousResearch hermes-agent CLI web-dashboard web_server.py _discover_dashboard_plugins comparison

Pingvin Share X: TOTP Authentication Bypass via Password-only Login

fast-jwt: Stateful RegExp (/g or /y) causes non-deterministic allowed-claim validation (logical DoS)

Parse Server: Session field immutability bypass via falsy-value guard

mppx has Stripe charge credential replay via missing idempotency check

soroban-sdk: `Fr` scalar field equality comparison bypasses modular reduction