Open Source

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab

In CISA KEV

Gitea: Remote Code Execution via diffpatch Git Hook Installation

In CISA KEV

WordPress Core Remote File Inclusion Vulnerability

In CISA KEV

HTTP/2 Rapid Reset Attack Vulnerability

In CISA KEV

MLflow Server-Side Request Forgery Vulnerability

In CISA KEV

WordPress Core Interpretation Conflict Vulnerability

In CISA KEV

LiteLLM: Authenticated command execution via MCP stdio test endpoints

In CISA KEV

LiteLLM: SQL injection in Proxy API key verification

In CISA KEV

Google Chromium ANGLE and GPU Improper Input Validation Vulnerability

In CISA KEV

RoundCube Webmail Cross-site Scripting Vulnerability

In CISA KEV

Drupal core - Highly critical - Remote Code Execution

In CISA KEV

WordPress < 7.0.2 - Facilitated SQL Injection via author__not_in in WP_Query

In CISA KEV

Google Skia Out-of-Bounds Write Vulnerability

In CISA KEV

Apple Multiple Products Buffer Overflow Vulnerability

In CISA KEV

LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback

In CISA KEV

Langflow Authorization Bypass Through User-Controlled Key Vulnerability

In CISA KEV

open source GitLab: security vulnerability

Gitea Org-mode file disclosure and code execution

Rails: Initialization of a Resource with an Insecure Default

Net-SNMP snmptrapd crash

Langflow code Code Injection Remote Code Execution Vulnerability

PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation

Improper Control of Generation of Code ('Code Injection') in GitLab

Langflow OSS is affected by multiple vulnerabilities

Python Software Foundation CPython: Path Traversal