OpenPanel versions prior to 3.0.0 have a sandbox escape vulnerability in the JavaScript runtime validator. This flaw allows a project member with write access to bypass the AST allowlist by aliasing the Function constructor, enabling arbitrary code execution within the worker process. The vulnerability has a high severity score of 8.8 CVSS v3.1.
OpenPanel versions prior to 3.0.0 have an improper escaping vulnerability in the sankey.service.ts component. Authenticated project members can supply backslashes in event names to break ClickHouse string literals. This causes parse errors in the chart.sankey procedure, disabling the Sankey chart endpoint for the project.
OpenPanel versions prior to 3.0.0 contain an SQL injection vulnerability that allows authenticated users to read data across tenant boundaries. By supplying a crafted property parameter to profile.values, attackers can inject SQL SELECT expressions with custom FROM/WHERE clauses, bypassing project_id scoping to access other projects' profiles, events, and sessions.
OpenPanel versions prior to 3.0.0 contain a SQL injection vulnerability in the profileColumnAccess function within cohort.service.ts. This flaw allows project-read members to inject SQL by providing unescaped profile filter column names. Exploitation can enable attackers to submit specially crafted cohort.preview filters that include subqueries within argMax, cityHash64, or comparison clauses, potentially exposing data from other tenants in the ClickHouse database.
OpenPanel versions before 3.0.0 have a missing authentication vulnerability that allows unauthenticated attackers to access the Bull Board dashboard on the worker HTTP port. Attackers can query queue data and invoke APIs to add, retry, or clean jobs without authentication.
OpenPanel versions before 3.0.0 have a missing authorization vulnerability in the onboarding.project tRPC mutation. This flaw allows non-admin organization members to create projects and mint write-type ingestion credentials, bypassing intended admin-only restrictions. Exploitation enables attackers to obtain plaintext secrets, inject fake analytics events, poison business metrics, and consume the organization's usage budget.
OpenPanel versions prior to 3.0.0 have a missing authorization vulnerability that permits unauthenticated attackers to read annotations from any project. This occurs via the public reference.getChartReferences tRPC procedure, which can be invoked with guessable slug-based project IDs to access cross-tenant annotation data such as titles, descriptions, and dates.
DOMPurify versions from 3.4.4 up to but not including 3.4.17 contain a vulnerability where the SAFE_FOR_TEMPLATES feature can be bypassed. This allows attackers to preserve template expressions in attached shadow roots when using certain DOMPurify return modes. By splitting expressions across text nodes separated by disallowed elements, attackers can cause these expressions to merge after sanitization and be evaluated by downstream template engines, leading to cross-site scripting (XSS).
OpenPanel versions prior to 3.0.0 have a missing authorization vulnerability in the event.bots tRPC procedure. This flaw allows unauthenticated attackers to send anonymous requests with a projectId and retrieve bot-event details such as names, types, and paths. The vulnerability exposes information for private or password-protected projects by only verifying the existence of a shareOverview row, thereby revealing internal routes.
OpenPanel versions prior to 3.0.0 have an information disclosure vulnerability that allows users with read-level access to a project to retrieve argon2id hashes of ingestion credentials. This occurs via the client.list tRPC query, which returns full Client rows including the secret column. This exposure enables offline verification of leaked secrets without generating audit trails.
OpenPanel versions prior to 3.0.0 have an SQL injection vulnerability in the ConversionService.getConversion function. This flaw allows project-read members and share-link holders to inject arbitrary ClickHouse SQL via unescaped event names and dates. Exploitation can bypass project_id scoping by injecting conditions like OR 1=1, enabling unauthorized access to other tenants' analytics data.
OpenPanel versions before 3.0.0 have an SQL injection vulnerability that allows authenticated users to bypass tenant scoping. This occurs because unescaped profile filter names are injected into a JOIN subquery, enabling attackers to manipulate the query and read events from all projects. The vulnerability has a CVSS score of 6.5, indicating a medium severity impact.
OpenPanel versions before 3.0.0 have an information exposure vulnerability where sensitive data such as database connection URLs and email template information are written to standard output logs. This includes database credentials in migration startup logs and password-reset tokens when certain environment variables are unset. Unauthorized users with access to these logs can obtain this sensitive information.
A cross-site scripting (XSS) vulnerability exists in Argilla up to version 2.8.0 in an unknown function within the Sandbox.vue component. The vulnerability arises from improper handling of the 'template' argument, allowing remote attackers to execute script code. The issue has been publicly disclosed, but no official response or patch has been provided by the project at this time. The vulnerability has a low CVSS score of 2.4 and requires high privileges and user interaction for exploitation.
WWBN AVideo versions prior to 29.5.0 have a local file inclusion (LFI) vulnerability. This flaw allows unauthenticated attackers to include and execute PHP files outside the intended locale directory by exploiting crafted Accept-Language headers. The vulnerability arises due to insufficient sanitization of traversal sequences like ....// in the setLanguage() function, enabling bypass of single-pass removal mechanisms.
A command injection vulnerability exists in apache-airflow-providers-ssh versions before 7.0.1 in the SSHRemoteJobOperator. The operator incorrectly quotes environment parameter values only once, allowing shell syntax like $(...) to be executed on the remote SSH host. This enables a user who can trigger a DAG but cannot author DAGs to execute arbitrary commands on the remote host as the SSH user. Upgrading to version 7.0.1 or later mitigates this issue.
SourceCodester Online Food Ordering System 1.0 contains a path traversal vulnerability in the unlink function of admin/delete.php. This flaw allows remote attackers to manipulate the image_name argument to delete arbitrary files. Public exploit code is available, and the vulnerability has a medium severity rating with a CVSS score of 6.5.
Parse Server versions before 8.6.105 and 9.0.0 before 9.10.5-alpha.6 contain a vulnerability where the owning object reference in $relatedTo relation queries is not properly validated. This allows a client with read access to at least one object of the owning class to bypass owning-object ACL checks by supplying a query operator instead of an object ID, potentially disclosing which readable objects are linked to owning objects it cannot read.
DOMPurify versions before 3.4.17 contain a cross-site scripting (XSS) vulnerability. This flaw allows attackers to bypass the SMIL attributeName=href guard when parsing application/xhtml+xml content because attribute names are not properly lowercased. An attacker can craft SVG content with animate or set elements using attributeName="href" and a javascript: URI to execute scripts when users click the sanitized link.
CVE-2026-76654 is an NTLM coercion vulnerability affecting Windows nodes in Kubernetes environments. It occurs when a pod's volumeMount subPath is set to a symbolic link pointing to an attacker-controlled network share. The kubelet resolves the symlink and attempts NTLM authentication to the share, exposing the NetNTLMv2 hash of the kubelet's running account. This hash could be cracked or relayed to impersonate the node if it is domain-joined.