CVE Vulnerability Catalog

A vulnerability in Nomad and Nomad Enterprise allows cross-namespace authorization bypass in the dynamic host volumes feature. An operator with host volume delete permission in one namespace can delete a sticky volume claim belonging to a job in another namespace.

A vulnerability in GitLab EE allows an authenticated user with maintainer role to obtain another user's stored credentials under certain conditions due to improper authorization controls. Affected versions range from 9.5 to 18.11.7, 19.0 to 19.0.4, and 19.1 to 19.1.2.

Relative path traversal vulnerability in the Admin Settings module of Progress MOVEit Transfer. Allows an attacker to access files outside the intended directory.

An improper neutralization of special elements in data query logic vulnerability exists in Progress MOVEit Transfer (Custom Reports modules). Affected versions are before 2025.0.7 and from 2025.1.0 before 2025.1.3.

Composer, a dependency manager for PHP, prior to versions 2.2.29 and 2.10.2 leaked credentials (e.g., GitHub tokens) to debug output when run with -vvv verbosity. The issue was due to missing sanitization of username-only URL credentials.

A vulnerability in the Composer dependency manager for PHP allows changing permissions of an existing host file to world-readable and world-executable. The issue occurs during package install, update, or require when a package bin entry contains '..' path segments.

LiteLLM before version 1.83.7-stable has a vulnerability due to insufficient file path validation when extracting Skills ZIP archives. An authenticated user with access to LLM API routes or a key with /v1/skills, anthropic_routes, or llm_api_routes can upload a crafted archive that writes files outside the intended directory (path traversal).

LiteLLM before version 1.83.10-stable has a vulnerability in the /health/test_connection endpoint that allows reading files from the local filesystem via oidc/file/ references. The flaw is due to the server resolving request-supplied environment and OIDC file references in litellm_params.

A path validation bypass vulnerability in Composio SDK before version 0.2.32-beta.283 allows attackers to read and exfiltrate sensitive files. The missing assertSafeFileUploadPath check in the readFileFromDisk function enables prompt injection to manipulate file_uploadable parameters and upload credential files like SSH private keys to attacker-controlled storage.

A broken access control vulnerability in Gumroad before version 2026.07.06.2 allows authenticated sellers to manipulate purchase access for other sellers' products. The PurchasesController lacks seller ownership validation, enabling PUT requests to revoke_access and undo_revoke_access actions to unauthorizedly revoke or restore buyer access.

Midscene Bridge Server up to version 1.10.3 (fixed in commit 86f4118) suffers from missing authentication and CORS misconfiguration. This allows unauthenticated remote attackers to hijack active bridge sessions by opening a cross-origin WebSocket connection to the local Socket.IO server, which performs no Origin header validation and requires no authentication token.

Vulnerability in the Zeep Python SOAP client versions 4.0.0 through 4.3.2. The Settings.forbid_external setting is defined but not enforced when parsing WSDL or XSD documents, allowing transitive external imports and references to attacker-chosen HTTP or HTTPS URLs. Fixed in version 4.3.3.

In NATS Server prior to versions 2.14.3 and 2.12.8, message trace destination checks were applied to ordinary client connections but not consistently to messages arriving through leafnode connections, allowing a leafnode operator to send trace events to subjects that would not otherwise be permitted and to use trace-only behavior to prevent normal delivery or storage of affected messages.

A vulnerability in NATS Server allows an authenticated user to receive messages on denied subjects when a wildcard subscription overlaps with a configured wildcard deny rule but is not a subset of it. Additionally, queue subscriptions can affect delivery to legitimate queue consumers.

In NATS Server, an authenticated user with subscription deny permissions can bypass a plain subject deny rule by using a queue subscription. This occurs because queue-specific deny evaluation can override the plain subject deny result when the queue name itself is not denied.

In NATS Server before versions 2.14.3 and 2.12.12, an authenticated MQTT client could subscribe to the internal $MQTT.deliver.pubrel subject family, bypassing configured subscribe permissions and exposing MQTT QoS2 protocol metadata for sessions in the account.

In NATS Server versions prior to 2.14.3 and 2.12.12, a vulnerability was found in MQTT message handling. The delivery paths for retained messages and QoS1+ durable replay did not recheck the original topic before sending the MQTT PUBLISH to the subscriber, potentially bypassing configured subscribe deny rules.

In the Fiber web framework for Go prior to version 3.4.0, the helmet middleware incorrectly checks the protocol using c.Protocol() instead of c.Scheme(), causing the Strict-Transport-Security header to never be set even when HSTSMaxAge is configured. This issue is fixed in version 3.4.0.

In the Fiber web framework for Go, prior to versions 3.3.0 and 2.52.14, the BalancerForward proxy helper in middleware/proxy/proxy.go uses Header.Add() instead of Header.Set() when injecting the X-Real-IP header. This allows an attacker to supply a first X-Real-IP value that gets forwarded to upstream servers for logging, rate limiting, and access control.

A vulnerability in the ONNX library (versions 1.9.0 through 1.22.0) allows a null pointer dereference in the Upsample_6_7::adapt_upsample_6_7() function when processing a malicious model with an Upsample node having zero inputs. This leads to an unrecoverable denial of service (DoS).