CVE Vulnerability Catalog

FastGPT versions up to 4.14.11 are vulnerable to DNS rebinding (TOCTOU) in the isInternalAddress() function. The function checks the IP before the HTTP request, but a new DNS resolution during the request may return a different address, bypassing validation. No public patches available.

FastGPT versions up to 4.14.13 have weak resource isolation in the code-sandbox component. Lack of strict OS-level constraints (e.g., cgroups) allows attackers to bypass memory checks and exhaust the JavaScript worker pool, causing a complete Denial of Service (DoS).

Vim before version 9.2.0383 has an OS command injection vulnerability in the netrw standard plugin via a crafted URL (e.g., sftp:// or file://). User interaction is required.

SysReptor from version 2026.4 to before 2026.27 has improperly authorized endpoints for reading and creating sharing links for personal notes. An authenticated attacker who obtains the note ID of victim users can list and create sharing links to those users' personal notes, gaining read and write access. This issue has been patched in version 2026.27.

The SolidCAM-GPPL-IDE extension from version 1.0.0 to before 1.0.2 improperly handles the inc "filename" directive in GPPL postprocessor files, resolving arbitrary paths (absolute, relative with parent-directory segments, UNC, and subfolders) into clickable links and calling File.Exists. This results in information disclosure via File.Exists probing and NTLM hash leak via UNC path probing. The issue is patched in version 1.0.2.

In FlashMQ prior to version 1.26.1, a remote client with retained publish permission can crash the broker when both set_retained_message_defer_timeout and set_retained_message_defer_timeout_spread are configured to non-default values, resulting in denial of service. If anonymous retained publishing is allowed, no authentication is required; otherwise, the attacker needs the corresponding publish permission. The issue is patched in version 1.26.1.

Roadiz is a node-based CMS. Prior to 2.3.43, 2.5.45, 2.6.31, and 2.7.18, the roadiz/openid package generates an OIDC nonce and sends it in the authorization request but never stores or validates it on callback, enabling replay attacks.

In nova-toggle-5 prior to version 1.3.0, the toggle endpoint (POST /nova-vendor/nova-toggle/toggle/{resource}/{resourceId}) was protected only by web + auth:<guard> middleware. Any user authenticated on the configured guard could call the endpoint and flip boolean attributes on any Nova resource, including users who do not have access to Nova itself. The endpoint also accepted an arbitrary attribute parameter, allowing a valid caller to toggle any boolean column on the underlying model. This issue has been patched in version 1.3.0.

Grid is a data structure grid for Rust. From version 0.17.0 to before version 1.0.1, an integer overflow in Grid::expand_rows() can corrupt the relationship between the grid's logical dimensions and its backing storage. After the internal invariant is broken, the safe API get() may invoke get_unchecked() with an invalid index, resulting in Undefined Behavior. This issue has been patched in version 1.0.1.

In the Plunk email platform prior to version 0.9.0, a stored XSS vulnerability exists in the campaign management feature. Email body content created by authenticated project members is stored and rendered in the admin dashboard using React's dangerouslySetInnerHTML without HTML sanitization.

In n8n-MCP prior to version 2.47.13, when running in HTTP transport mode, authenticated tools/call requests had their full arguments and JSON-RPC params written to server logs before any redaction. When a tool call carries credential material (e.g., n8n_manage_credentials.data), raw values can be persisted in logs. In deployments with log collection, this can disclose bearer tokens, OAuth credentials, API keys, and other secrets. The issue requires authentication and is patched in version 2.47.13.

In RedwoodSDK versions 1.0.0-beta.50 to before 1.2.3, server actions enforce HTTP method but not origin validation. A request from a different origin that the browser treats as same-site can invoke a server action with the victim's session cookie attached.

In People (La Suite) prior to version 1.25.0, a user with the Administrator role on a mail domain could send a crafted invitation request to promote any existing user (including users without domain access) to the Owner role. This requires a single authenticated HTTP request and grants full domain ownership immediately without any acceptance from the target. The issue is patched in version 1.25.0.

Lemmy fetches metadata for user-supplied post URLs and, under the default StoreLinkPreviews image mode, downloads the preview image through local pict-rs. The extracted og:image URL is not checked against internal IP ranges, so an authenticated low-privileged user can force server-side fetching of an internal image and store it as a local thumbnail.

In Lemmy prior to version 0.19.18, an authenticated low-privileged user can create a link post via POST /api/v3/post. The backend asynchronously sends a Webmention to the attacker-controlled target, and the code path does not reject loopback, private, or link-local destinations.

In Scoold prior to version 1.67.0, the admins configuration value can be modified through /api/config/set/admins using a forged Bearer token accepted as an admin API token. Once changed, the target email is written to the application configuration file, and after a Scoold restart the selected user is recognized as an administrator and gains admin panel access. This gives an attacker a reliable persistence path. The issue is patched in version 1.67.0.

In n8n-MCP prior to version 2.47.11, when running in HTTP transport mode, request metadata for the POST /mcp endpoint was written to server logs regardless of authentication outcome. In deployments where logs are collected or forwarded, this can disclose bearer tokens, per-tenant API keys, and JSON-RPC payloads. Access control was not bypassed — unauthenticated requests were correctly rejected with 401 — but sensitive values could still be persisted in logs. The issue is patched in version 2.47.11.

OpenMcdf to biblioteka .NET / C# do manipulacji plikami w formacie Compound File Binary. W wersjach przed 3.1.3 nie wykrywa cykli w drzewie czerwono-czarnym wpisów katalogowych, co może prowadzić do nieskończonej pętli przy przetwarzaniu plików CFB z cyklem w łańcuchu LeftSiblingID / RightSiblingID.

Prior to version 2.1.1, a path traversal vulnerability has been identified in novaGallery. This allows unauthenticated users to read image files outside the intended gallery root directory.

In Flarum prior to versions 1.8.16 and 2.0.0-rc.1, the patch for CVE-2023-27577 restricted LESS @import and data-uri() features only in the custom_less setting, but not in other settings registered as LESS config variables (e.g., theme_primary_color, theme_secondary_color, and keys registered via Extend\Settings::registerLessConfigVar()). These values are interpolated verbatim into the LESS source at compile time, allowing an authenticated administrator to inject an arbitrary @import directive into the compiled forum.css. Since the LESS parser honors @import (inline) '<path>', an attacker can read arbitrary files reachable by the PHP process (LFI) or trigger outbound HTTP(S) requests (SSRF). The issue is patched in versions 1.8.16 and 2.0.0-rc.1.