Search Vulnerabilities

jeremyckahn Chitchatter PostMessage Bootstrap.tsx isConfigMessageEvent improper authentication

WebSub: Reflected script execution through intent-verification challenges

CVE-2026-22063 eMudhra CA Certificate Compromise in NetApp Products

ThorVG: Out-of-bounds Read in SFNT/TTF Font Loader via Memory API

a2aproject a2a-js Task Status Update result_manager.ts ResultManager.applyStatusUpdate race condition

Asterisk: Local privilege escalation through ast_loggrabber's world-writable helper location

Asterisk: Out-of-Bounds Write in Codec2 Decoder Due to Floor/Ceil Sample Count Mismatch

russh: peer-declared zero maximum packet size permanently stalls channel writes (silent AsyncWrite hang)

russh's SSH client is susceptible to unbounded allocations via EXT_INFO packets

Crass: Incorrect tokenization of bad URLs enables CSS sanitizer bypass

OpenTelemetry Python: Unbounded memory allocation in Jaeger baggage propagation

MLflow CrewAI autologging records LLM provider API keys in logged trace spans

follow-redirects: Cross-realm sensitiveHeaders arrays are discarded and custom credentials can follow redirects

Model Context Protocol Python SDK: Client fetched server-chosen $ref URLs while validating tool results against output schemas

Model Context Protocol Python SDK: HTTP client transports followed cross-origin redirects carrying custom headers and bodies

Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource server

MISP Guard Incomplete Tag Validation Allows Non-Allowed Taxonomy Tags to Bypass Feed Policy Enforcement

reduxjs redux-devtools Remotedev Server evalAction code injection

Homebox generic notifier SSRF via HTTP redirect after URL validation

Unauthenticated Wireless Regulatory Region Configuration in TP-Link RE305