CVE Vulnerability Catalog

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. No vulnerability information is available.

praktor is a multi-agent Claude Code orchestrator with Telegram input and output, Docker isolation, and a Mission Control UI. Prior to 0.9.1, both Telegram upload sites in `internal/telegram/bot.go` concatenate the attacker-controlled document filename into a destination path without sanitization, and `path.Join` collapses parent-directory traversal. A remote Telegram user who can message the bot can therefore write outside `uploads/` within the persistent agent workspace mounted at `/workspace/agent`; because `allow_from: []` permits all senders by default, no prior authentication is required in that configuration. The attacker can plant or overwrite `CLAUDE.md`, instruction, skill, hook, or configuration files that the Claude agent reads and operates on across later runs, turning a document upload into stored instruction injection. The demonstrated arbitrary-write scope is the persistent agent workspace volume, not an unrestricted host-filesystem write. This issue is fixed in version 0.9.1.

Pistache (a C++ REST toolkit) versions 0.0.5 through 0.4.26 use std::regex_replace() with the //+ expression to collapse consecutive slashes in SegmentTreeNode::sanitizeResource(). With libstdc++, a path with tens of thousands of consecutive slashes causes deep recursion, stack exhaustion, and process crash.

mouse07410/asn1c is an ASN.1 compiler. Prior to 1.2.5, `OPEN TYPE` decoding can dereference an unallocated member pointer and crash the consuming program. `OPEN_TYPE_aper_get`, `OPEN_TYPE_ber_get`, `OPEN_TYPE_oer_get`, and `OPEN_TYPE_uper_get` share the pattern: a conditional null check on `*memb_ptr2` resets presence only when the member exists, but execution then unconditionally computes an inner value from that pointer and a member offset. If the `OPEN TYPE` member has not been allocated, the null-pointer arithmetic and subsequent read cause a segmentation fault. This is fixed in version 1.2.5.

In PDF Reader MCP versions 2.2.0 through 3.0.0, when the opt-in HTTP transport is enabled, the X-API-Key header is never validated despite startup logs claiming authentication is enabled. As a result, the /mcp endpoint accepts unauthenticated clients, and with the default 0.0.0.0 bind address anyone who can reach the port can invoke PDF tools and read any PDF the server process can open. URL-based sources also allow limited server-side request forgery, with private and loopback destinations blocked by default.

In Hydra (a layer-two scalability solution for Cardano) before 2.1.0, the Claim branch in the deposit validator only checks that datum.head_id matches the attacker-controlled redeemer.currencySymbol and that the transaction is valid before the deposit deadline. It neither requires spending the Head state-token UTxO in the same transaction nor constrains outputs, so after a deposit via POST /commit is confirmed, any third party can consume the pending deposit UTxO and redirect the assets to an arbitrary address.

In Daptin (a GraphQL/JSON-API headless CMS) before 0.12.26, the global LanguageMiddleware passes the raw Accept-Language header to golang.org/x/text without a size or shape filter. The guard for CVE-2022-32149 counts hyphens but not underscores, so long lists of underscore-separated language subtags bypass it and cause quadratic buffer processing. Unauthenticated requests to the public landing page or /api can exhaust server CPU.

The Booktics plugin (Arraytics) through 1.0.31 contains a missing authorization vulnerability. This allows exploitation of incorrectly configured access control security levels.

The Unlimited Elements For Elementor plugin through 2.0.26 contains an improper control of filename for include/require statement in PHP (PHP Remote File Inclusion) vulnerability, allowing PHP Local File Inclusion.

The Divi Contact Form 7 plugin (cf7-styler-for-divi) through 4.1.0 contains an improper neutralization of script-related HTML tags in a web page (Basic XSS) vulnerability, allowing code injection.

The Fluent CRM plugin (WP ManageNinja LLC) through 3.2.6 contains a missing authorization vulnerability. This allows exploitation of incorrectly configured access control security levels.

The Event Tickets plugin (Liquid Web / StellarWP) through 5.30.2 contains a missing authorization vulnerability. This allows exploitation of incorrectly configured access control security levels.

The Unlimited Elements For Elementor plugin through 2.0.26 contains a missing authorization vulnerability. This allows exploitation of incorrectly configured access control security levels.

The BookIt plugin (Liquid Web / StellarWP) through 2.6.0.6 contains a missing authorization vulnerability. This allows exploitation of incorrectly configured access control security levels.

In VoiceSentinel (a real-time voice moderation system for Minecraft servers) versions 2.2.1 through 3.3.0, the optional report buffer feature has a race between retention cleanup and transcript writes. _maybe_cleanup() uses an unlocked dictionary for hourly cleanup throttling, and _cleanup_tenant() rewrites transcripts.jsonl without file locking or atomic replacement while report_buffer_append_async appends without synchronization. With the report buffer enabled, racing writes can lose, duplicate, or corrupt transcript data and defeat retention pruning, leading to unbounded disk growth.

Crass (a Ruby CSS parser) prior to 1.0.7 inefficiently tracks positions of multi-byte characters when parsing input containing non-ASCII characters. This results in superlinear parsing time, and an attacker can supply CSS with many non-ASCII characters, causing excessive CPU consumption and potential denial of service.

Crass, a Ruby CSS parser, prior to 1.0.7, when the :preserve_comments option is disabled (the default), discards CSS comments by recursively consuming the next token. An attacker-provided stylesheet with a very large number of adjacent comments can cause excessive recursion and trigger a SystemStackError, denying service to the parsing application.

Crass, a Ruby CSS parser, prior to 1.0.7 recursively parses CSS simple blocks and functions without a depth guard. An attacker-controlled CSS value containing deeply nested blocks or functions can recurse until Ruby raises a SystemStackError or cause excessive memory usage.

In Crass (a Ruby CSS parser compliant with CSS Syntax Level 3) before 1.0.7, scientific-notation number values are converted with unbounded exponentiation before clamping to Float::MAX. Applications parsing attacker-controlled CSS can be forced to spend disproportionate CPU and memory on a tiny input, potentially causing a crash.

Quest Bot is an open-source Discord bot. Prior to 1.1.9, the `image to GIF` command uses a request helper that validates a hostname's public IP addresses but then sends the actual request by hostname, causing a second DNS lookup. An attacker controlling a domain can return a public address during validation and an internal address during connection, bypassing internal-address protection through DNS rebinding. This is fixed in version 1.1.9.