CVE Vulnerability Catalog

In virtualenv prior to 21.14.2, FishActivator inherits ViaTemplateActivator.quote(), which uses POSIX shlex.quote() even though fish interprets backslashes and single quotes differently. An attacker-influenced path, --prompt, or VIRTUALENV_PROMPT value containing a backslash before a quote can terminate the fish literal and execute command substitution when the user sources activate.fish.

The find_handlers_for_template MCP tool in python/djust/mcp/server.py from 0.9.0 until 1.0.10, 1.1.7, 1.2.4, and 1.3.0rc8 accepts an existing absolute template_path and reads it without restricting the resolved path to project directories. A local MCP client can use the tool as a file existence and readability oracle and obtain substrings matching the tool's attribute pattern from files readable by the djust process.

OGNL is an object graph navigation library for Java. Prior to 3.4.13, the optional stricter-invocation mode does not block java.lang.reflect.Method, Constructor or Field, allowing an attacker-controlled expression to bypass the check and execute operations on blocked classes via JDK reflection.

In Moov signedxml prior to 1.4.1, ExclusiveCanonicalization copies the complete accumulated namespace map at every nested element before reference digest or signature checks. Attacker-controlled XML with deeply nested elements and many unused namespace declarations causes quadratic memory allocation growth, allowing a small document to consume gigabytes of memory and terminate the process.

In Bulwark Webmail prior to 1.9.2, the unauthenticated POST /api/fetch-ical endpoint validates a caller-supplied hostname with one DNS lookup and then performs a separate lookup for the connection. An attacker controlling authoritative DNS can return a public address during validation and then rebind the hostname to a loopback, private, link-local, or cloud metadata address, causing the server to return up to 10 MB of an internal HTTP or HTTPS response.

In OpenChoreo from 1.0.0 until 1.0.6, 1.1.7, and 1.2.5, the PUT .../workflowruns/{runName} update route authorizes a request using project and component labels in the submitted body while selecting the stored WorkflowRun by the URL path. An authenticated caller with workflowrun:update can rewrite ownership labels of another run in the same namespace, gaining access to logs, events, deletion, or parameter modification.

In virtualenv prior to 21.13.0, the bash activate script that zsh also sources leaves the environment name unescaped; from 21.13.0 until 21.14.4, it escapes backslashes, dollar signs, and backticks only when BASH_VERSION is set, so zsh receives the raw value assigned to PS1. In zsh with PROMPT_SUBST, an attacker-influenced value containing expansion syntax can execute commands each time the prompt is drawn.

In a2aproject a2a-rs up to 0.4.3, the HttpPushSender function in crates/server/src/push_notification_sender.rs (Push Notification Handler component) allows manipulation of the TaskPushNotificationConfig argument, leading to server-side request forgery. The attack may be launched remotely, and the patch is commit 2ba50176ea9f222d9a7d0f0e8cfe6fae7cf4c224.

Improper state validation in the Performance component of Google Chrome prior to version 156.0.8078.47. A local attacker could read memory via a local program.

Incorrect authorization in the Sandbox component of Google Chrome prior to version 156.0.8078.47. A remote attacker who had compromised the renderer process could potentially execute arbitrary code outside the sandbox via a crafted HTML page.

Privilege elevation in Network in Google Chrome prior to 156.0.8078.47. A remote attacker leveraging social engineering could bypass web origin policy via a crafted HTML page.

Use-after-free vulnerability in Skia in Google Chrome on Android prior to 156.0.8078.47. A remote attacker could execute arbitrary code outside the sandbox via a crafted HTML page.

Uninitialized resource in ANGLE in Google Chrome on Windows prior to 156.0.8078.47. A remote attacker could read memory outside the sandbox via a crafted HTML page.

Use after free in SVG in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page.

Use-after-free vulnerability in the Turbolev component of Google Chrome prior to 156.0.8078.47. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page.

Use after free in Scroll in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page.

Use after free in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Race condition in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension.

Buffer overflow in ANGLE in Google Chrome on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.

Race condition in Extensions in Google Chrome prior to 156.0.8078.47. A remote attacker leveraging social engineering could bypass system access restrictions via a crafted Chrome extension.