The xmldom library versions prior to 0.8.13 and between 0.9.0 and 0.9.10 contain uncontrolled recursion in multiple DOM traversal functions without depth limits. This can cause a RangeError due to maximum call stack size exceeded when processing deeply nested XML documents, leading to application crashes or denial of service.
The @xmldom/xmldom package has an XML injection vulnerability (CVE-2026-41674) due to unvalidated serialization of DocumentType node fields. The fields internalSubset, publicId, and systemId are serialized verbatim without escaping or validation, allowing crafted inputs to break the DOCTYPE declaration and inject arbitrary XML markup. This affects versions prior to 0.8.13, versions from 0.9.0 up to but not including 0.9.10, and versions up to 0.6.0. The vulnerability is exploitable only when attacker-controlled data is passed programmatically to createDocumentType. A fix is available in versions 0.8.13 and 0.9.10.
The xmldom package has a vulnerability in processing instruction serialization where attacker-controlled data containing the sequence '?>' is not validated or neutralized. This allows an attacker to prematurely terminate the processing instruction and inject arbitrary XML nodes into the serialized output, altering the structure of generated XML documents. The issue arises because the serializer emits processing instruction data verbatim without escaping or splitting the closing delimiter. A fix is available that requires an explicit option to enforce well-formedness checks during serialization.
The @xmldom/xmldom package has a vulnerability where attacker-controlled comment content can be serialized into XML without proper validation, allowing injection of arbitrary XML nodes outside the intended comment boundary. This occurs because the serializer does not escape or neutralize comment-breaking sequences, enabling an attacker to break out of comment nodes and alter the XML structure. The issue affects versions prior to 0.8.13, versions from 0.9.0 up to but not including 0.9.10, and versions up to 0.6.0. A fix is available in versions 0.8.13 and 0.9.10, but it requires an explicit opt-in by passing { requireWellFormed: true } to the serializer. Without this option, serialization remains vulnerable by default.
A SQL validation bypass vulnerability exists in @nocobase/plugin-collection-sql versions up to 2.0.32 due to missing validation on the sqlCollection:update endpoint. The checkSQL() function, which blocks dangerous SQL keywords and restricts statements to SELECT or WITH clauses, is applied on create and execute endpoints but not on update. An attacker with collection management permissions can create a benign SQL collection, then update it with arbitrary SQL that bypasses validation and exfiltrate sensitive data such as user password hashes.
YesWiki's bazar module contains an authenticated SQL injection vulnerability in the EntryManager::formatDataBeforeSave() function. The vulnerability arises from unsanitized user input 'id_fiche' being directly concatenated into a SQL query, allowing time-based blind SQL injection and error-based data extraction. The flaw affects versions prior to 4.6.1 and has been confirmed via proof-of-concept tests including delayed responses and MySQL version exfiltration. A patch is available in version 4.6.1 that properly escapes the input or uses parameterized queries.
CVE-2026-41413 is a Server-Side Request Forgery (SSRF) vulnerability in Istio's RequestAuthentication resource. When a RequestAuthentication resource is configured with a jwksUri pointing to an internal service, istiod performs an unauthenticated HTTP GET request to that URL without filtering out localhost or link-local IP addresses. This can lead to sensitive data exposure to Envoy proxies via xDS configuration. Partial mitigations were released in versions 1.29.1, 1.28.5, and 1.27.8, but a more complete fix is included in versions 1.29.2 and 1.28.6. Users can also deploy a ValidatingAdmissionPolicy to block suspicious jwksUri values as a workaround.
The @cyclonedx/cdxgen package versions from 9.9.5 up to but not including 12.3.3 contain a vulnerability where Docker registry credentials can be forwarded incorrectly due to substring matching of registry hostnames. This causes credentials intended for one private registry to be sent to a different registry if the requested registry's hostname is a substring of the private registry's hostname. This misbinding can expose private registry credentials during Docker image pulls initiated by cdxgen.
OpenClaw versions from 2026.3.22 up to but not including 2026.4.5 have a symlink traversal vulnerability in the handling of remote marketplace repository paths. This flaw allows attackers to provide crafted symbolic link paths to escape the intended repository root directory and access files outside the expected scope. The vulnerability is fixed in version 2026.4.5.
A vulnerability in mathjs versions 13.1.0 through before 15.2.0 allows arbitrary JavaScript execution via its expression parser. This affects applications that evaluate user-supplied expressions using mathjs. The issue is fixed in version 15.2.0. No workaround exists other than upgrading.
Admidio contains a logic error in its two-factor authentication (2FA) reset authorization check that allows non-admin users with profile edit rights on admin accounts to disable 2FA for those administrators. This occurs because the authorization condition is inverted, blocking non-admins from resetting their own 2FA but permitting them to reset others', including admins. The flaw is fixed in version 5.0.9.
Admidio versions prior to 5.0.9 have a permission check mismatch vulnerability in the contacts_data.php endpoint. This flaw allows a user with 'user manager' privileges (rol_edit_user) but not full administrator rights (rol_administrator) to bypass multi-organization data isolation and retrieve member data across all organizations sharing the same database. The backend endpoint uses a weaker permission check than the frontend UI, exposing sensitive user information including UUIDs, login names, email addresses, and profile fields. This bypasses the intended 'contacts_show_all' setting and organization boundaries.
Admidio versions prior to 5.0.9 contain a path traversal vulnerability in the ecard_preview.php endpoint. An authenticated user can manipulate the ecard_template POST parameter to read arbitrary files on the server, including sensitive files such as configuration files containing database credentials. This occurs because the parameter is not properly validated for safe filenames before being used to open files. The vulnerability allows disclosure of database credentials, source code, and system files, posing a significant risk. A patch is available in version 5.0.9 that adds proper filename validation.
CI4MS contains a vulnerability in its theme upload feature that allows any authenticated backend user with theme-upload permission to upload a crafted ZIP file containing PHP files. These files are extracted and placed into the web-accessible public directory without any filtering, enabling remote code execution (RCE) by accessing the uploaded PHP files via HTTP. This can lead to full server compromise under the web server process.
The ci4ms Theme::upload function improperly extracts user-uploaded ZIP archives without validating file paths, allowing authenticated users with theme create permission to write files outside the intended directory. This Zip Slip vulnerability enables remote code execution by placing malicious PHP files in the web root. The vulnerability affects versions prior to 0.31.5.0 and has a critical CVSS 9.4 score. A fix is available in version 0.31.5.0.
The ci4ms Backup::restore function improperly extracts ZIP archives without validating file paths, allowing authenticated users with backup create permission to perform a Zip Slip attack. This enables writing files outside the intended directory, including placing PHP files in the web root, leading to remote code execution (RCE). The vulnerable route is exempt from CSRF protection, allowing cross-site request forgery attacks against logged-in administrators. A patch is available in version 0.31.5.0.
A stored DOM-based Cross-Site Scripting (XSS) vulnerability exists in the backup module of ci4-cms-erp/ci4ms prior to version 0.31.5.0. This vulnerability allows an attacker to inject malicious scripts into the filename field via a manipulated SQL backup file. Successful exploitation can lead to full account takeover and privilege escalation for all user roles.
A SQL Injection vulnerability exists in the @nocobase/database package (versions prior to 2.0.39) due to unsafe string concatenation in recursive eager loading queries. An attacker with permission to create records in a tree collection with string-type primary keys can inject arbitrary SQL by crafting malicious primary key values. This flaw allows injection in the recursive Common Table Expression (CTE) query construction, potentially exposing sensitive data or causing runtime errors.
Langfuse versions from 3.68.0 up to but not including 3.167.0 contain a role-based access control vulnerability in the LLM connection update flow. A user with the 'member' role in a project could update an LLM connection to redirect test requests to an attacker-controlled URL, causing exposure of the plaintext provider LLM API key. This flaw has been fixed in version 3.167.0.
A server-side Expression Language (EL) injection vulnerability in OmniFaces prior to versions 1.14.2, 2.7.32, 3.14.16, 4.7.5, and 5.2.3 allows remote code execution. The flaw affects applications using CDNResourceHandler with wildcard CDN mappings, where an attacker can craft resource request URLs containing EL expressions that are evaluated on the server. This vulnerability has been patched in the specified fixed versions.