CVE Vulnerability Catalog

In Axios from version 1.12.0 to 1.20.0, ResolveConfig reads inherited Symbol.toStringTag, append, and getHeaders properties while resolving FormData headers. A separate same-process prototype-pollution flaw supplies an array or non-plain class instance whose inherited properties make it appear FormData-like; plain objects are blocked. The inherited getHeaders function can return attacker-controlled headers that resolveConfig merges into a fetch adapter request. Attacker-controlled headers can alter authorization, cache, metadata-service, or application-specific request behavior.

A vulnerability found in deepseek-ai deepseek-harness up to 0.1.0-rc.7 affects the run_code function of the Code Mode Sandbox component. Manipulation leads to a sandbox issue, and the attack can be executed remotely. The vendor's own code, SAFETY.md, and design notes explicitly state the worker is "containment, not a security boundary".

A vulnerability in ag-ui-protocol ag-ui up to 2026-09-07 affects the JSON.parse function in the file legacy/convert.ts of the Middleware component. Manipulation leads to an uncaught exception, and remote exploitation is possible. Upgrading to version 2026-09-08 addresses the issue.

A flaw in ag-ui-protocol ag-ui up to 2026-09-07 affects the FilterToolCallsMiddleware function in the file sdks/typescript/packages/client/src/middleware/filter-tool-calls.ts of the Middleware component. Executing a manipulation can lead to incomplete cleanup, and the attack may be launched remotely. Upgrading to version 2026-09-08 resolves the issue.

A vulnerability in ag-ui-protocol ag-ui up to 2026-09-23 affects an unknown part of the file SseParser.kt in the Kotlin Community SDK component. Manipulation results in handling of exceptional conditions, and the attack may be initiated remotely. The pull request to fix this issue awaits acceptance.

DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in sql_type_cast_svpv. When casting to SQL_NUMERIC, sql_type_cast_svpv passes the string pointer and length of the SV to grok_number without stringifying it first; an integer (IV) or floating-point (NV) value has no valid string pointer, so grok_number reads from an invalid address, triggering a segmentation fault.

A vulnerability has been detected in ag-ui-protocol ag-ui up to 2026-09-23. The readAllBytes function in JdkAgentHttpHandler.java of the HTTP Handler component leads to resource consumption. The attack can be launched remotely. The pull request to fix this issue awaits acceptance.

A vulnerability has been detected in PMWeb v7.x/v8.x/v2025.x. An unknown function in the encryptionhelper.dll library leads to information disclosure. The attack may be launched remotely. The vendor did not respond.

A weakness has been identified in PMWeb 7.x/8.x/2025.x. Unknown processing in downloader.aspx with the FullFileName/FileName argument causes path traversal. The attack may be initiated remotely. The exploit is publicly available. The vendor did not respond.

Missing Authentication for Critical Function (CWE-306) in the product cache revalidation Server Action in MarcosCamara01 Ecommerce Template before commit ec97209 allows a remote, unauthenticated attacker to force expiration of the entire storefront product cache at will.

Langflow 1.0.16 before 1.12.0 and 0.0.94 before 1.12.0 contain an unsafe eval() vulnerability in schema.py that allows authenticated attackers to achieve code execution by placing a Python object with a malicious __repr__ method into component input options lists.

A vulnerability was identified in Tencent AI-Infra-Guard up to 4.5.2/4.6.2. The startsWith function in skill_scan/tools/dir/dir_actions.py of the File Access component leads to path traversal. The attack needs to be performed locally. The exploit is publicly available. Upgrading to version 4.6.0 mitigates this issue.

A vulnerability has been found in deepseek-ai deepseek-harness up to 0.1.7-rc.2. An unknown function in packages/sandbox/sandbox-local/src/profiles.ts of the Landlock Backend component leads to improper isolation or compartmentalization. The attack must be carried out locally. The exploit has been disclosed to the public. The vendor did not respond.

A privilege mismatch was found in Fleet. When a bundle requested namespace labels or annotations through the namespaceLabels and namespaceAnnotations options, the resulting namespace metadata update was not subject to the same authorization as the rest of the bundle's deployment. As a result, a bundle could change labels and annotations on a target namespace even when the identity it was pinned to was not authorized to modify that namespace.

A vulnerability was discovered in Fleet's Git webhook receiver (the gitjob webhook service). When a webhook secret is not configured, incoming webhook requests are accepted without verification, and processing a request can change the spec.pollingInterval field of a matching GitRepo resource in any namespace. A caller with network access to the webhook service and no Kubernetes credentials can therefore alter GitRepo configuration outside the namespaces they are authorized for.

Dell Boot Optimized Server Storage (BOSS) prior to version 2.2.13.2038 contains an improper access control vulnerability in the on-chip debug and test interface in SMCU on 17G BOSS-N1 controllers. An unauthenticated attacker with physical access could exploit this, leading to unauthorized access.

Dell Boot Optimized Server Storage (BOSS) prior to version 2.2.13.2038 contains an improper access control vulnerability in the on-chip debug and test interface in SMCU on 17G BOSS-N1 controllers. An unauthenticated attacker with physical access could exploit this, leading to unauthorized access.

Dell Live Optics Collector prior to version 27.2.13.310 contains a hard-coded password vulnerability. A low-privileged attacker with local access could exploit this, leading to information exposure.

A user who can supply bundle content to a repository referenced by a GitRepo resource, for example through Git push access or permission to create/modify a GitRepo, can cause SUSE Rancher Fleet to read files from the filesystem of the environment processing the bundle and include their contents in the generated Bundle resource. This can expose configuration or credential material the user has no Kubernetes RBAC permission to read, including Helm registry credentials made available to the bundle-processing job when per-path Helm credentials are configured.

Improper link resolution in the recursive file pull feature of the LXD CLI client in versions 4.0.2 up to 6.9 (fixed in 4.0.14, 5.0.10, and 5.21.8) on Linux allows an attacker with root access inside a virtual machine to write attacker-controlled files or directory trees to arbitrary paths on the client host, with the operator's privileges. The attacker does this by using a modified lxd-agent that returns inconsistent SFTP directory listings and Lstat results.