CVE Vulnerability Catalog

Hugo from version 0.60.0 to 0.163.3 by default rendered Markdown code blocks without proper HTML escaping in class and data-lang attributes. An info-string containing a quote and JavaScript payload could break out of the attribute and inject a live script element.

A vulnerability in vLLM versions 0.22.0 to 0.23.0 allows an attacker to upload oversized audio files via the /v1/audio/transcriptions or /v1/audio/translations API. The file is read into memory before the size limit is checked, potentially causing memory exhaustion or process termination.

In Hugo from version 0.91.0 to 0.162.0, the resources.GetRemote function does not re-validate destination URLs after HTTP 3xx redirects, allowing bypass of the security.http.urls policy. An attacker can redirect the request to a forbidden host, and Hugo will fetch from it.

Hugo before version 0.162.0 accepts content files in various markup formats. Files mapped to the text/html media type (e.g., .html files under /content) are emitted verbatim into the rendered page, enabling stored XSS attacks.

In OP-TEE from version 3.20.0 to 4.10.0, a vulnerability exists in the subkey rollback protection mechanism. The `shdr_load_pub_key()` function fails to assign the subkey version to the runtime structure, leaving the version field at zero. Consequently, the version update check (`check_update_version()`) does not record the correct version, allowing Trusted Applications (TAs) signed with older or revoked subkeys to load successfully.

The OpenAI Codex desktop app for macOS automatically fetched remote images from model responses, allowing an attacker to inject an indirect prompt into content processed by Codex. The attacker could craft an image URL containing sensitive data, which was sent to an attacker-controlled server without user interaction. This vulnerability enabled exfiltration of secrets, API keys, source code, and data from connected tools.

In Pillow prior to version 12.3.0, the WindowsViewer.get_command() function constructed a cmd.exe shell command by directly embedding a file path into an f-string without escaping and passed the result to subprocess.Popen(..., shell=True), allowing shell metacharacters in the file path to inject arbitrary cmd.exe commands.

The pgjdbc PostgreSQL JDBC driver versions 42.7.4 through 42.7.11 allow silent downgrade of SCRAM-SHA-256-PLUS with channel binding to plain SCRAM-SHA-256. A man-in-the-middle attacker can exploit a certificate lacking the proper channel binding hash to trigger the downgrade and bypass protection.

The Reviews Widgets for Google, Yelp & TripAdvisor plugin for WordPress up to version 2.7.3 is vulnerable to stored XSS. Authenticated attackers with contributor-level access or higher can inject arbitrary scripts via the 'page_id' attribute of the [fbrev] shortcode.

An off-by-one error in the ARM Crypto Extensions accelerated SHA-3 implementation in OP-TEE can cause a massive heap overflow, corrupting all TEE kernel memory after the hash state. Affected versions are from 3.21.0 to 4.11.0 with `CFG_CRYPTO_WITH_CE82=y`.

A vulnerability in LangSmith Client SDKs prior to version 0.8.18 allows an attacker to send an HTTP request to a server running TracingMiddleware, causing it to read an arbitrary file from the local filesystem and upload it as a trace attachment to LangSmith. Depending on the distributed trace system deployment, triggering the read may not require authentication.

A vulnerability in pydantic-settings versions 2.12.0 through 2.14.1 allows reading files outside the configured secrets_dir by following symbolic links. The secrets_dir_max_size protection is also bypassed, enabling unrestricted file reads.

A vulnerability in OpenVPN versions 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows a remote attacker to cause a denial of service by sending a malformed authentication token when external-auth is enabled. The issue is due to a reachable assertion in the code.

A validation vulnerability has been identified in file management or upload features in the TAO 2.0 suite. This flaw allows an attacker to access file system resources outside the intended scope of the application.

In SUSE Rancher Fleet versions 0.15 before 0.15.2, 0.14 before 0.14.6, 0.13 before 0.13.11, and 0.12 before 0.12.15, missing filtering in the bundle reader when the helmRepoURLRegex field is not set on a GitRepo resource causes Helm authentication credentials (BasicAuth) to be forwarded to any URL specified in the helm.repo field of a fleet.yaml file. This allows attackers with push access to Fleet-monitored git repositories to leak Helm access credentials.

A Reflected Cross-Site Scripting (XSS) vulnerability exists in the application, which fails to properly encode user-supplied input from a URL parameter before reflecting it back to the browser. This allows an attacker to inject malicious script into the served page.

Vulnerability in Apache Camel Undertow component causes sensitive information disclosure by returning full stack traces in HTTP responses. The muteException option defaults to false, exposing detailed exceptions on route processing errors. Rest DSL consumers ignore this option entirely, always returning stack traces.

A vulnerability in the Apache Camel Netty HTTP component causes the muteException option to default to false, returning full stack traces in HTTP responses on processing errors. Unauthenticated clients can thus obtain sensitive internal information like credentials, filesystem paths, and dependency versions.

A vulnerability in Apache Camel Salesforce component allows an attacker to inject arbitrary SOQL/SOSL queries, override the target SObject, or redirect Apex REST calls by setting control headers in an HTTP request. This occurs because the headers lack the 'Camel' prefix and are not blocked by HttpHeaderFilterStrategy, allowing them to pass from an HTTP request into the Salesforce producer.

A vulnerability in the Apache Camel Kafka component allows an attacker to override the target Kafka topic via the `kafka.OVERRIDE_TOPIC` header in an HTTP request. Due to improper input validation and neutralization of special elements, in routes bridging an HTTP consumer to a Kafka producer, any HTTP client can redirect messages to arbitrary Kafka topics, including sensitive internal ones. Affected versions: Apache Camel from 4.0.0 before 4.14.8, from 4.15.0 before 4.18.3, from 4.19.0 before 4.21.0.