CVE Vulnerability Catalog

SmileCDR HAPI FHIR does not correctly check authorization for conditional create actions. A user with CREATE but not READ permissions could submit a conditional create whose predicate matches an existing resource and receive the target resource's contents.

A reflected cross-site scripting (XSS) vulnerability in localstack v4.9.2 allows attackers to execute arbitrary JavaScript in the context of the user's browser via a crafted URL.

ast-cli downloads two helper binaries, the Vorpal ASCA engine and the SCA Resolver, from download.checkmarx.com as part of its auto-update flow, triggered by Checkmarx VSCode/JetBrains extensions and cx scan sca-realtime. Prior to the fix, the downloaded archive was not verified against a checksum before extraction and execution. An attacker able to substitute the served archive could deliver an arbitrary binary that ast-cli would extract and execute.

Incomplete validation of extracted archive entry paths in ast-cli's tar extraction logic on Linux and macOS (used when installing Vorpal ASCA and SCA Resolver) allows a malicious tar archive with absolute or traversal path entries to write files outside the install directory. Windows builds were not affected, as the Windows extractor performs this path validation.

CloudPirates Open Source Helm Charts is a collection of Helm charts. Prior to commit 271d415, the pull_request_target workflow is vulnerable to cache poisoning and OIDC token theft. It checks out fork code using github.event.pull_request.head.sha or .head.ref, giving attacker-controlled code access to base repository secrets and tokens. A poisoned cache entry written by the workflow can execute during a subsequent release or publish workflow that restores from the same cache scope.

fpdf2 is a PDF creation library for Python. From 2.5.0 until 2.8.8, SVGObject.build_xref() passes nested SVG <use> references to GraphicsContext.add_item(), whose default clone=True deep-copy behavior copies the complete referenced graphics tree during FPDF.image() processing. Repeating references at each nesting level makes in-memory object count and processing work grow exponentially, allowing a small user-controlled SVG to consume excessive CPU and memory, raise MemoryError, fail PDF generation jobs, and exhaust worker capacity. ResourceAccessPolicy does not prevent the issue because the references are inline and require no external resource.

fpdf2 prior to 2.8.8 automatically dereferences attacker-controlled HTTP(S) URLs and raw local paths supplied through FPDF.image(), FPDF.write_html() HTML <img src> values, SVG <image href> or xlink:href values, and template image fields. This can cause outbound requests to attacker-selected internal or external services and local file open attempts.

PhpSpreadsheet prior to versions 1.30.7, 2.1.19, 2.4.8, 3.10.8, and 5.10.0 validates only the initial external-image URL with setIsWhitelisted when setAllowExternalImages is enabled. The HTTP stream context permits PHP to follow a redirect without applying the callback to the redirected URL, so a permitted image host can redirect the server to an internal address and cause a blind GET request.

A missing authorization check allows anyone having access to a "link without login" for a DataApp to list and potentially access jobs of other users created by the same link in KNIME Business Hub prior to 1.19.0.

Pylint from 0.15.2 until 4.0.9 stores module statistics in predictable files under PYLINT_HOME and loads those files with pickle.load on a later run. An attacker who can write to a shared, group-writable, or otherwise untrusted cache directory can replace a stats cache with crafted serialized data, causing arbitrary code to execute with the privileges of the user who next runs Pylint.

draw.io Desktop prior to 31.4.4 is vulnerable to arbitrary local-file disclosure through the Electron main process's read-side IPC handlers. The readFile, getFileDrafts, getBkpFile, fileStat, isFileWritable, checkFileExists, and watchFile actions operate on a renderer-chosen filesystem path with no blessed-path (assertWritablePath) authorization.

Overly informative error messages in the catalog functionality of KNIME Business Hub prior to version 1.18.5 may allow an authenticated remote attacker to see workflow names if their ID is known.

A flaw in the cross-site request forgery (CSRF) prevention of KNIME Business Hub prior to version 1.19.0 allows an authenticated attacker to perform a CSRF attack with passive user interaction. This means the state of a resource could be changed without the user noticing.

An excessive resource allocation issue in the remote workflow editing capabilities of KNIME Business Hub prior to version 1.19.0 allows an authenticated attacker to exhaust resources on the server side. This leads to intermittent unavailability of workflow execution functionality.

OpenTelemetry Python prior to 1.45.1 contains the TraceState.from_header function, which parses inbound W3C tracestate headers with an unbounded optional-whitespace regular expression. A malformed header containing a long run of spaces or tabs without a following comma causes quadratic backtracking, leading to excessive CPU consumption on a single unauthenticated request.

Missing authorization in the PAM AD computer import endpoint in Devolutions Server 2026.3.5.0 through 2026.3.10.0 and 2026.2.20.0 and earlier allows an authenticated non-administrative user with a PAM license to create PAM sub-providers under existing AD providers via a crafted import request.

Incorrect authorization in the Devolutions Gateway token generation in Devolutions Server 2026.3.10.0 and earlier allows an authenticated non-administrative attacker to bypass the Network Access Rules of a virtual gateway and reach denied hosts via wildcard additional destinations signed into the gateway token.

Insufficient protection of sensitive information in the user list endpoint in Devolutions Server 2026.3.10.0 and earlier allows an authenticated attacker with delegated user view permissions to obtain the MFA secrets of all users via the user list API response.

An issue in SKYWORTH SK-WR6640X Wi-Fi 6 Dual-Band Fiber Router (AX1800M) V1.0.3 allows a remote attacker to obtain sensitive information via the hidden_factory_switch.gch file.

OCO-Server prior to 1.2.3 allows a valid Self-Service Portal user with permission to create job containers and read visibility on a computer and package to queue an uninstall job without deploy permission for those resources. The permission-check loop continues after denied checks without removing rejected IDs, then passes the original list to the uninstall function, which is executed in system context.