Threat database

CVE-2026-114519 is a missing authorization vulnerability in Roskus Prospero Flow CRM versions from 2.0.0 up to but not including 5.26.0. It allows users with a basic role to read account details of other users within their company and, from version 3.5.0 onward, to delete those accounts. The vulnerability arises because the API routes for reading and deleting users only validate the JSON Web Token but do not enforce permission checks. Notably, users in the default company can delete any account across companies. This can lead to unauthorized access to personal data and deletion of accounts, including administrative ones.

Mistune versions before 3.3.0 have a path traversal vulnerability in the opt-in Include directive. This flaw allows attackers to read arbitrary local files by providing relative or absolute paths. Exploitation can lead to disclosure of sensitive files such as /etc/passwd and injection of unescaped HTML or script content into rendered Markdown output.

Mistune versions before 3.3.0 contain a critical path traversal vulnerability in the RST include directive. This flaw allows attackers to read arbitrary files by using relative or absolute paths in markdown include directives. Exploitation can lead to exposure of sensitive files such as credentials or environment data embedded in rendered HTML.

Mistune before 3.3.0 contains an algorithmic complexity vulnerability in the inline link parser that allows unauthenticated attackers to exhaust CPU by submitting long runs of unmatched '[' characters. Attackers can send small markdown payloads that trigger O(N^2) parse_link_text and parse_link_label probing, occupying rendering workers for 30+ seconds per 16 KB input.

Mistune versions from 3.2.1 up to but not including 3.3.0 contain a CSS injection vulnerability via the unvalidated figwidth option in the figure directive. This allows attackers controlling markdown input to inject arbitrary CSS style declarations, potentially causing victim browsers to send requests to attacker-controlled servers and leak attribute values. The vulnerability has a medium severity with a CVSS 4.0 score of 5.3.

Mistune versions before 3.3.0 have a cross-site scripting (XSS) vulnerability in the Include directive. This directive emits included HTML content as raw block_html tokens without proper neutralization. An attacker who can place a readable HTML file on the system can exploit this by referencing it with an include directive combined with path traversal, leading to stored script execution when escape=False is set.

Mistune versions 3.0.0 up to but not including 3.3.0 contain a denial of service vulnerability caused by inefficient regular expression handling in the parse_link_text function. This flaw allows attackers to craft markdown input with deeply nested square brackets, triggering quadratic parsing time and potentially exhausting server CPU resources.

Mistune from 3.0.0 before 3.3.0 contains an algorithmic complexity vulnerability in the inline link parser's parse_link_text function that allows unauthenticated attackers to exhaust CPU with unbalanced brackets. Attackers can submit Markdown containing many unbalanced '[' or '![' characters, forcing repeated unbounded forward scans and tying up worker processes for minutes.

Mistune versions before 3.3.0 have an inefficient algorithmic complexity vulnerability in the parse_link_text function. This flaw allows remote attackers to cause denial of service by submitting markdown with long runs of unmatched square brackets. The vulnerability triggers repeated forward scans that stall worker processes for minutes, leading to service disruption.

The LiteLLM project's release pipeline was compromised on October 21, 2026, resulting in the distribution of malicious versions of the LiteLLM PyPI package and Docker images. The compromised version 1.107.0 contained malware that steals credentials, secrets, environment variables, and other sensitive data from affected systems. The malware executes automatically on Python startup by placing malicious files in the Python library directory. The attack impacted all PyPI wheels for LiteLLM 1.107.0 and Docker images tagged with v1.107.0 and related tags. The malicious packages have been removed, and users are advised to stop affected deployments, isolate infected systems, and rotate exposed secrets. The recommended clean version is LiteLLM 1.106.2.

A memory corruption vulnerability exists in the web-based management interface of AOS-8. Successful exploitation could allow an authenticated low privilege attacker with local access to view some system files and interrupt the normal operation of the affected service.

A buffer overflow vulnerability exists in AOS-8 that could allow an authenticated attacker with administrative access to cause denial of service. Successful exploitation could allow an attacker to crash the system, preventing it from rebooting without manual intervention and disrupting network operations.

An arbitrary file deletion vulnerability exists in the command line interface of AOS-10 that could allow an authenticated attacker with administrative privileges to cause a denial of service. Successful exploitation could allow an attacker to crash the system, preventing it from rebooting without manual intervention and disrupting normal operation of the affected device.

An authentication bypass vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to make limited unauthorized modifications to certain settings of the affected system.

A stored cross-site scripting (XSS) vulnerability exists in the web-based management interface of AOS that could allow an authenticated remote attacker with high privileges to inject malicious scripts. Successful exploitation could allow an attacker to execute arbitrary script code in the context of another authenticated user's browser session.

An authentication bypass in the PAPI protocol of AOS-10 allows an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation allows an attacker to change the state of certain settings of a vulnerable system.

An unauthenticated command injection vulnerability exists in the command line interface of AOS-10. Successful exploitation could allow an attacker with physical access to execute arbitrary commands as a privileged user on the underlying operating system leading to complete system compromise.

A buffer overflow vulnerability exists in the API of AOS-10 that could allow an authenticated adjacent attacker with high privileges to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.

An unauthenticated buffer overflow vulnerability exists in the command line interface of AOS-8. Successful exploitation could allow an unauthenticated remote attacker to disrupt the availability of the affected interface, along with limited access to or modification of some system data.

A sensitive information disclosure vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated adjacent attacker to access limited information handled by the affected service. Successful exploitation could allow an attacker to view some information and to disrupt the availability of the affected service.