Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

Axios: Incomplete Fix for CVE-2025-62718 — NO_PROXY Protection Bypassed via RFC 1122 Loopback Subnet (127.0.0.0/8) in Axios 1.15.0

Command Injection in mlflow/mlflow

Path Traversal Vulnerability in mlflow/mlflow

Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRF

Feast < 0.63.0 Unauthenticated RCE via ApplyFeatureView gRPC Deserialization

LiteLLM: Authentication Bypass via Host Header Injection

AI Tensor Engine for ROCm (AITER) 0.1.14 Unauthenticated RCE via MessageQueue.recv() Pickle Deserialization

Netty: HTTP/1.0 TE+CL Coexistence Bypasses Smuggling Sanitization

The Adversarial Robustness Toolbox (ART) thru 1.20.1 contains a command-line argument injection vulnerability in its Kubeflow component (robustness_evaluation_fgsm_pytorch.py)

Apache OpenNLP: Arbitrary Class Instantiation via Model Manifest in ExtensionLoader

protobufjs has an arbitrary code execution issue

cryptography has a buffer overflow if non-contiguous buffers were passed to APIs

CVE-2026-33816 in github.com/jackc/pgx

CVE-2026-33815 in github.com/jackc/pgx

Missing Authentication for Critical Function in mlflow/mlflow

pyOpenSSL DTLS cookie callback buffer overflow

(SimpleEval) Objects (including modules) can leak dangerous modules through to direct access inside the sandbox.

SSRF Protection Bypass in vLLM

DiskCache (python-diskcache) through 5.6.3 uses Python pickle for serialization by default

Policy Bypass in LightGlue Nested Config Resolution in huggingface/transformers

jupyterlab: Command linker attributes in HTML enable one-click command execution from untrusted content

Apostrophe has default XSS via `xmp` raw-text passthrough in `sanitize-html`

Ai-gateway-payload-processing: ai-gateway-payload-processing: tenant/credential selection from client-controlled url path with no in-process authorization

vLLM: OpenAI auth bypass

Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

Axios: Prototype pollution read-side gadgets in HTTP adapter allow credential injection and request hijacking

Apache OpenNLP: XXE via Dictionary Parsing in DictionaryEntryPersistor

Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget in `parseReviver`

Path Traversal Vulnerability in mlflow/mlflow

ONNX Untrusted Model Repository Warnings Suppressed by silent=True in onnx.hub.load() — Silent Supply-Chain Attack