Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks

Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

Axios: Incomplete Fix for CVE-2025-62718 — NO_PROXY Protection Bypassed via RFC 1122 Loopback Subnet (127.0.0.0/8) in Axios 1.15.0

Command Injection in mlflow/mlflow

Path Traversal Vulnerability in mlflow/mlflow

Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRF

Feast < 0.63.0 Unauthenticated RCE via ApplyFeatureView gRPC Deserialization

LiteLLM: Authentication Bypass via Host Header Injection

AI Tensor Engine for ROCm (AITER) 0.1.14 Unauthenticated RCE via MessageQueue.recv() Pickle Deserialization

Netty: HTTP/1.0 TE+CL Coexistence Bypasses Smuggling Sanitization

The Adversarial Robustness Toolbox (ART) thru 1.20.1 contains a command-line argument injection vulnerability in its Kubeflow component (robustness_evaluation_fgsm_pytorch.py)

Apache OpenNLP: Arbitrary Class Instantiation via Model Manifest in ExtensionLoader

protobufjs has an arbitrary code execution issue

cryptography has a buffer overflow if non-contiguous buffers were passed to APIs

CVE-2026-33816 in github.com/jackc/pgx

CVE-2026-33815 in github.com/jackc/pgx

Missing Authentication for Critical Function in mlflow/mlflow

Policy Bypass in LightGlue Nested Config Resolution in huggingface/transformers

jupyterlab: Command linker attributes in HTML enable one-click command execution from untrusted content

Apostrophe has default XSS via `xmp` raw-text passthrough in `sanitize-html`

vLLM: OpenAI auth bypass

Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

Axios: Prototype pollution read-side gadgets in HTTP adapter allow credential injection and request hijacking

Apache OpenNLP: XXE via Dictionary Parsing in DictionaryEntryPersistor

Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget in `parseReviver`

Rhoai maas: llm-d: maas/llm-d inference gateway: default allowedroutes.namespaces.from: all allows namespace users to hijack shared model-serving traffic (tokens, prompts, outputs)

Heap out-of-bounds write via odd slice_height in FFmpeg MagicYUV decoder

undici vulnerable to cross-origin request routing via SOCKS5 proxy pool reuse

A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a…

All V1 collection-level endpoints in ChromaDB's Python project pass None for the tenant and database to the authorization layer, allowing attackers to bypass authorization…

A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in…

Diffusers: `trust_remote_code` bypass via `custom_pipeline` and local custom components

JupyterLab has an Extension Manager API/GUI Policy Discrepancy allowing 3rd party (malicious) extensions install via POST request.

protobufjs: Code injection through bytes field defaults in generated toObject code

jupyter-server path traversal allows access to sibling directories sharing root_dir name prefix

Axios: Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy`

FFmpeg - Out-of-Bounds Write in RASC Decoder decode_dlta()

Axios: shouldBypassProxy does not recognize IPv4-mapped IPv6 addresses, allowing NO_PROXY bypass (incomplete fix for CVE-2025-62718)

@fastify/reply-from vulnerable to connection header abuse enabling stripping of proxy-added headers

Argo Workflows Is Missing Authorization in Sync ConfigMap Provider

Quarkus authorization bypass via semicolon path normalization inconsistency

Netty has an IPv6 Subnet Filter Bypass via Incorrect Comparator Masking

Path Traversal in keras-team/keras

Argo Workflows has incomplete fix for CVE-2026-31892: hostNetwork, securityContext, serviceAccountName bypass templateReferencing Strict/Secure

systeminformation: Linux command injection in networkInterfaces() via unsanitized NetworkManager connection profile name

Safe Mode Bypass in keras-team/keras

Axios: Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge

Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode

Quarkus-vertx-http: authorization bypass via path normalization discrepancy in quarkus http security