CVE Vulnerability Catalog

A flaw in Node.js HTTP Agent connection reuse can cause a client to accept as valid a response that was sent before the client has sent the request. This is an incomplete fix of CVE-2026-48931.

Hugging Face Datasets through 5.1.0 contains an insecure deserialization vulnerability allowing arbitrary Python code execution via a crafted pickle file. The file is loaded through the deprecated pandas packaged builder and processed by Pandas._generate_tables via pandas.read_pickle() without validation, so calling datasets.load_dataset("pandas", ...) executes the embedded __reduce__ payload with the victim process's privileges.

An OS command injection vulnerability exists in the /htdocs/web/diagnostic.php endpoint of D-Link DAP1160L A1_FW101WWb04, allowing attackers to execute arbitrary commands by injecting shell metacharacters.

e-SIC Livre (esiclivre) v0.2.2 and earlier contains an uncontrolled resource consumption vulnerability in restrito/inc/captcha.php. The application uses user-supplied parameters (l, a, tf, ql) without validation to generate CAPTCHA images, allowing remote attackers to cause denial of service via excessive memory and CPU consumption.

An issue in Nitro Software, Inc Nitro PDF Pro for macOS v.14.7 allows a local attacker to execute arbitrary code via a crafted PDF. The vulnerability requires a user to open a malicious document on the targeted system.

In Uni-CLI prior to version 0.225.2, the legacy JSON-RPC-over-HTTP MCP transport was exposed on loopback without validating browser Origin headers. A malicious web page could send a CORS simple POST to the local /mcp endpoint and drive tools/call requests against the user's local Uni-CLI server.

In Goobi viewer from version 25.08 to before 26.05, the IIIF Auth 2.0 endpoints auth/login and auth/token accept an origin query parameter without validation and embed it into the Content-Security-Policy header and an HTML response body as a postMessage argument. Since the attacker controls both calls, the unescaped value yields reflected XSS.

The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 22.04 to before version 26.05, the unauthenticated REST endpoint GET /api/v1/index/{solrField}/spatial/search concatenates the user-supplied region query parameter directly into a Solr query string with no escaping, no local-param stripping, and no runtime schema enforcement. An attacker can inject Solr local-param syntax ({!parent ...}, {!join ...}) and boolean operators to make access-restricted georeferenced records match the query, bypassing the access-condition filter. This issue has been patched in version 26.05.

In Goobi viewer, several Jakarta WebSocket endpoints (DownloadTaskEndpoint, CampaignEndpoint, AutocompleteEndpoint, UserEndpoint) accept connections without verifying that the associated HttpSession belongs to a logged-in user, and none validate the Origin header against an allowlist. An unauthenticated attacker can connect to these endpoints; through CampaignEndpoint this allows polluting the in-process crowdsourcing page-lock map and broadcasting forged lock messages, disrupting reviewers' work.

In Goobi viewer from version 25.01 to before 26.05, AuthenticationEndpoint.verifyOpenIdToken does not enforce the aud claim during cryptographic validation, and the manual check only handles single-string aud values. In a multi-RP IdP setup, a token issued for a different relying party can authenticate the attacker.

In Goobi viewer prior to version 26.05, Configuration.getWebApiToken returns an empty string when the token is not configured, and AuthorizationFilter compares the supplied token against this default without checking it is non-empty. A request to a protected endpoint with an empty ?token= value is accepted.

In Goobi viewer, the legacy RSS servlet (RssResolver, GET /rss/) accepts the q and filterQuery parameters and concatenates them into Solr queries without validation. q forms the main query body (wrapped only in literal parentheses), while filterQuery is passed directly as a Solr fq. An unauthenticated attacker can inject Solr boolean operators to break out of the wrapping and render the trailing access-condition filter-query suffix optional, so that access-restricted records are included in the generated RSS feed.

In Goobi viewer, SolrTools.cleanUpQuery() strips Solr local-parameter syntax ({!...}) from user-supplied query strings before they reach Solr. Its regex can be bypassed by wrapping the local parameter in a second pair of curly braces ({{!...}}): the outer braces are stripped, the inner {!...} survives intact, and a valid Solr local parameter is forwarded. The flaw is in the shared sanitizer, so it affects any endpoint that routes user input through cleanUpQuery.

Isar is an integration system for automated root filesystem generation. In versions 0.11 and newer, /etc/apt/trusted.gpg.d is created manually during bootstrap setup to deploy local keys, so the directory is owned by the calling user instead of root. If the calling user's id matches an unprivileged user inside the image, that user can alter existing keys and deploy new ones, silently breaking apt repo integrity protection.

In Kitodo.Production prior to version 3.9.2, org.kitodo.production.helper.XMLUtils exposes XML parsing helpers that build a JAXP parser with the default, non-secure configuration. An authenticated user uploading an EAD/XML file can trigger XXE injection, leading to local file disclosure and SSRF requests.

In conda/conda prior to commit 9c0f238, a GitHub Actions Pwn Request vulnerability remains in .github/workflows/update.yml. It is triggered by comments containing @conda-bot render or @conda-bot recreate, allowing an untrusted PR to reach Jinja2 template rendering in a privileged token context.

Cacti is an open source performance and fault management framework. Prior to version 1.2.31, a user enumeration vulnerability allows an attacker to identify valid usernames on the Cacti service. On login attempts, the application returns slightly different error messages depending on whether the provided username exists — the only difference is the capitalization of the letter "f" in the word "failed".

In Goobi viewer from version 24.03 to before 26.05, ExternalFilesDownloader.getFilename() extracts the filename from a server-supplied Content-Disposition header and passes it directly to Path.resolve() without stripping directory components. A malicious HTTP server can supply an absolute path or ../ sequences, writing attacker-controlled content to an arbitrary path, leading to remote code execution.

In Goobi viewer from version 24.03 to before 26.05, the DownloadTaskEndpoint WebSocket endpoint (/tasks/download/monitor.socket) in goobi-viewer-core accepts download requests from unauthenticated users. This issue has been patched in version 26.05.

Cacti contains an authenticated stored second-order SQL injection in the automation tree rule item handler. A user holding the Automation realm (default General Administration role) can persist an arbitrary SQL fragment in the automation_tree_rule_items.field column, which is later concatenated directly into a SELECT ... AS source FROM ... clause in lib/api_automation.php :: create_all_header_nodes() and executed when an administrator triggers automation via the "Apply Automation Rules" bulk action. The injected SELECT result is written into graph_tree_items.title and rendered in the Cacti tree UI, providing a direct exfiltration channel.