Information disclosure in flatpak-builder lets a crafted build manifest read sensitive host files and embed their contents into resulting build artifacts, because source download definitions that specify local file:// URIs bypass the tool's directory confinement checks. Exploitation requires a developer or CI system to actually process the untrusted manifest (user interaction per CVSS UI:R), so it is not remotely triggerable without someone initiating a build; no public exploit identified at time of analysis. Red Hat rates it moderate at CVSS 6.1, and the affected package ships in Red Hat Enterprise Linux 8, 9, and 10, with CI/CD pipelines that auto-build community-submitted manifests representing the highest-value target.
HTML injection in FreeScout's LogsMonitor administrator alert emails lets an unauthenticated remote attacker plant markup that executes when an administrator opens the notification, because the spoofed client IP recorded during failed logins is written into the email body without escaping. Exploitation requires the non-default APP_CLOUDFLARE_IS_USED setting to be enabled, so that the attacker-controlled CF-Connecting-IP header is trusted and persisted in the activity log; the instance must also have LogsMonitor email alerts active and the admin must view the message in an HTML-capable client (blind attack, no attacker feedback). CVSS 3.1 base score is 6.1 (assessed vector AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N); there is no public exploit identified at time of analysis and the issue is fixed in FreeScout 1.8.235.
Authenticated SQL injection in Brocade SANnav before 3.0.0a allows an attacker with low privileges and adjacent-network access to the SANnav management plane to supply malicious values in specific external API inventory REST API query parameters, which are then used in SQL queries. The vendor rates this as moderate severity with CVSS 4.0 score 6.1; the independent assessment matches an authenticated, adjacent-network profile (PR:L, AV:A, UI:N) with limited confidentiality impact under scope change. No public exploit identified at time of analysis, and no CISA KEV entry is provided.
Improper JavaScript context tracking in Go's html/template package fails to treat the `yield` keyword as a regular-expression preceder, so a regexp literal that follows `yield` inside a template-literal expression is mis-escaped instead of being correctly recognized and neutralized. Only applications that server-render HTML with html/template and whose trusted template source actually contains this specific yield-plus-regexp construct are meaningfully exposed, and a victim must load the rendered page (CVSS PR:N - no authentication required, but UI:R - user interaction required). No public exploit code identified at time of analysis; fixes ship in Go 1.27.2 and Go 1.26.9.
Incorrect context-sensitive output escaping in Go's html/template package can enable cross-site scripting when a template contains a JavaScript template literal with consecutive "${...}" expressions followed by a regular-expression literal, because the package fails to reset its context-tracking state when entering a new expression. As a result, the following regex literal is not recognized as such and is escaped in the wrong JavaScript context, allowing attacker-influenced data rendered into that spot to break out of the JavaScript string/expression context. The issue affects applications built with Go 1.27.x before 1.27.2 and Go 1.26.x before 1.26.9, is fixed by those releases, and is rated CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N in the independent assessment; no public exploit code or confirmed active exploitation was identified at time of analysis, and a victim must load the rendered page for the XSS to fire.
Cross-site scripting (CWE-79) in the Web UI of IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 - including their container editions - lets an attacker inject arbitrary JavaScript into pages rendered by the interface, which can execute in the browser of an authenticated administrator or operator with an active trusted session and potentially disclose credentials or session data. The injection itself requires no authentication (the supplied vector is PR:N), but the payload is only harmful when a victim loads the crafted content (UI:R), so exploitation depends on a successful lure, a poisoned page, or injection into a view the victim already opens. IBM rates this 8.2 (scope changed, high confidentiality and integrity impact); no public exploit code or active exploitation has been identified at time of analysis, though the faulted UI is a high-value administrative target. Note a vector discrepancy: the published CVSS marks AV:L whereas the independent assessment scores AV:N, so defenders should confirm with IBM whether the affected UI is reachable remotely or only from a local/management network, since that materially changes exposure.
Stored cross-site scripting in IBM Guardium Data Protection 12.2 lets an unauthenticated attacker who can influence traffic on a database that Guardium monitors plant a malicious script that later executes in the browser of a logged-in Guardium operator when the Quick Search results grid renders the stored payload (CWE-79). IBM rates this CVSS 9.3 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N), but an independent reassessment places it at CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N because the victim must actively open the Quick Search grid and hold an authenticated, privileged console session - a real limiting factor the vendor's UI:N rating does not capture. Exploitation therefore requires two conditions together: attacker-controlled data must reach the monitored database traffic Guardium ingests, and a Guardium user must subsequently view those results; no public exploit code has been identified at time of analysis and the issue is not confirmed actively exploited (CISA KEV).
Denial of service in TightVNC Server for Windows before 2.8.88: a local authenticated user can trigger an integer underflow in WinCursorShapeUtils::trimTransparent() by causing a zero-width or zero-height cursor to be processed on the DXGI capture path, crashing the server and potentially causing a limited out-of-bounds memory read. No public exploit identified at time of analysis, and because the vector requires local authenticated access rather than remote reachability, the assessed risk is medium-severity and low real-world priority despite the memory-corruption flavor. The vendor has released a fix in version 2.8.88.
An authenticated tenant (PR:L) can abuse OpenStack Mistral's workflow membership API to grant a third project read and execution access to another project's private workflow without the owner's consent. Exploitation requires an existing, already-accepted share of the target workflow plus a third project under the attacker's control or collusion to accept the forged membership, which causes the new membership row to be written with the accepting project's ID instead of the original owner's - leaving the owner unable to see or revoke it. The result is a multi-tenant authorization bypass (CWE-863) confined to confidentiality and execution of the specifically shared workflow; no public exploit code has been identified at time of analysis. Per the independent assessment this is a genuine but moderate-priority flaw, not a high-severity issue, and it only affects multi-tenant deployments that actively use Mistral workflow sharing.
FFmpeg 9.0.2 and earlier, when compiled with libssh support, fail to verify SSH host keys in the sftp:// protocol handler, allowing an on-path attacker to impersonate a legitimate SFTP server and capture passwords embedded in sftp:// URLs, serve forged media, or receive uploaded output. The issue is conditional rather than broadly exploitable: it only affects applications that actually invoke the sftp:// handler with password-bearing URLs, and the attacker must already hold a privileged man-in-the-middle position (ARP, DNS, or routing spoofing) at the moment of connection. No public exploit code or confirmed active exploitation was identified at the time of analysis.
Embedded NUL bytes in field and collection names are silently discarded by the MongoDB C++ Driver, causing the driver and the calling application to resolve the same name to different targets. An authenticated actor (CVSS 4.0 vector includes PR:L, i.e. valid database credentials are required) who can influence a name passed to the driver's collection API can make the application read values from an unintended field or rename an unintended collection, operating strictly within the privileges already held by the application's database credentials. Exploitation depends on the calling application forwarding an attacker-influenced name without rejecting embedded NUL bytes; no public exploit code has been identified at time of analysis, and the issue is scoped to applications built on the affected C++ driver rather than to other MongoDB language drivers. Base score is 6.0 (CVSS 4.0), assessed as a bounded data-integrity/disclosure issue rather than a top-tier emergency.
Unbounded memory buffering in msgpack5 before 6.1.0 allows a remote peer to exhaust the memory of a Node.js or browser process that feeds attacker-controlled data into the library's streaming decoder. Because the reserved MessagePack byte 0xc1 is classified as incomplete rather than invalid input, the decoder holds every subsequent byte in its internal buffer list while waiting for a continuation that can never arrive; the defect is fixed in 6.1.0. This is a moderate-severity availability issue (CVSS 5.9, network-reachable, no authentication or user interaction required, availability-only impact) and no public exploit code was identified at time of analysis. Only deployments that stream untrusted MessagePack input into the decoder are realistically exposed; applications that decode trusted or fully buffered and validated input, or that already bound stream size and duration, are not meaningfully affected.
Quadratic CPU consumption in the msgpack5 streaming decoder (versions prior to 6.1.0) lets a remote peer block the Node.js event loop by fragmenting a single valid MessagePack array or map across many small chunks. The decoder reparses the incomplete container from the beginning on every arriving chunk, so completed elements are decoded repeatedly and processing cost grows quadratically with the number of chunks. Exploitation requires the application to use the streaming Decoder path and accept untrusted, attacker-fragmented input - a condition rated high complexity (AC:H) - and the impact is limited to availability, with no confidentiality or integrity effect; no public exploit code was identified at time of analysis.
Privilege escalation in Brocade Fabric OS (versions before 9.2.2d and 10.0.0 through 10.0.0a1) allows an authenticated low-privileged user on the adjacent management network to bypass authorization controls in the account management interface and assign administrative roles to other accounts. Exploitation requires specific conditions and high attack complexity (AC:H), but successful attacks can yield high integrity and availability impact. No public exploit identified at time of analysis; vendor advisory and fixed versions are available.
Denial of service in IBM Guardium Data Protection 12.2.2 allows remote unauthenticated attackers to degrade availability by racing concurrent unsynchronized writes to a shared map. The supplied CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, base 7.5) describes availability-only impact with no confidentiality or integrity loss; our assessment refines attack complexity to AC:H because the non-deterministic race window reduces reliability below AC:L. No public exploit identified at time of analysis, and a vendor patch is available via IBM Support node 7288627, so patched or non-12.2.2 deployments are not exposed.
GnuTLS 3.8.13 rejects legitimate CA certificates during X.509 certificate-chain validation, causing TLS handshakes to fail and producing a denial-of-service condition for any application that relies on the library to establish secure connections. The defect is a version-specific regression triggered simply by running the affected 3.8.13 build in a chain-validating role (client or server), so it does not require attacker-crafted input; CISA's SSVC framework records Exploitation: none and no public exploit code has been identified at time of analysis. Independent analysis rates the availability impact as Low (A:L) rather than the High implied by the 7.5 score published with the CVE, and the practical consequence is loss of availability for TLS-dependent services rather than code execution or data disclosure.
Denial of service affecting IBM DataPower Gateway builds 10.5.0.0 through 10.5.0.22, 10.6.0.0 through 10.6.0.10, 10.6.1 through 10.6.6, and 11.0.0.0 through 11.0.0.2, where a crafted GraphQL request containing a malformed variable causes a NULL pointer dereference that crashes or hangs the affected service. The flaw is network-reachable and requires no authentication (PR:N) and no user interaction (UI:N), but the HIGH attack complexity (AC:H) means the attacker must craft input that reliably reaches the dereference, so opportunistic mass exploitation is unlikely. Impact is availability-only with no data disclosure or modification, and no public exploit identified at time of analysis; this is a moderate, availability-only issue rather than a top-tier priority.
Denial of service in IBM DataPower Gateway (10.5.0.0 through 10.5.0.22, 10.6.0.0 through 10.6.0.10, 10.6.1 through 10.6.6, and 11.0.0.0 through 11.0.0.2) allows a remote unauthenticated attacker to degrade or stall request processing by submitting input that forces worst-case algorithmic complexity during linked-list traversal. Rated CVSS 5.9 (AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H), the flaw is an availability-only issue: the CVSS AC:H rating reflects that the attacker must craft input to hit the pathological code path rather than simply flooding the gateway with arbitrary traffic, and impact is confined to service degradation or denial with no confidentiality or integrity effect. No public exploit identified at time of analysis, and a vendor patch is available.
Credential-header leakage in the Ruby Mechanize gem before 2.14.1 allows sensitive headers to be forwarded to a lower-trust destination during redirect following, because Mechanize::HTTP::Agent#response_redirect considered a redirect same-origin whenever the host matched, without comparing scheme or port. A same-host HTTPS-to-HTTP downgrade can put caller-supplied Authorization (or Proxy-Authorization) and Cookie (or Cookie2) headers on the wire in cleartext, and a same-host redirect to a different port can deliver a caller-supplied Cookie to an unrelated service listening there. Per the assessed vector (CVSS 5.9, CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) the impact is confidentiality-only with no integrity or availability effect, and no public exploit was identified at time of analysis; the practical risk is limited because the consuming application must explicitly inject its own credential headers and an attacker must control or man-in-the-middle the redirect response, while cookies held in Mechanize#cookie_jar are scoped correctly and are not leaked. Vendor-released patch: 2.14.1.
A certificate-validation defect in GnuTLS 3.8.13 causes the library to reject legitimate, valid X.509 certificates presented by genuine peers, producing availability failures for deployments that rely on GnuTLS certificate authentication. The issue is scored 7.5 (HIGH) purely on availability impact (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) and is reachable in the ordinary certificate-handling path rather than through attacker-supplied malicious input. There is no confirmed active exploitation (not listed in CISA KEV) and no public exploit code identified at time of analysis; risk is concentrated entirely in the narrow version scope of GnuTLS 3.8.13.
OS command injection in the PAM session-cleanup path of Brocade Fabric OS (before 9.2.2d, and 10.0.0 through 10.0.0a1) lets an authenticated user whose directory- or AAA-supplied username or profile identifier contains shell metacharacters execute arbitrary commands as root when their remote SSH session terminates. Three prerequisites must hold simultaneously: the switch must authenticate users against an external directory or AAA service (LDAP/RADIUS/TACACS+) rather than local accounts only, the attacker must be able to set or influence the username/profile identifier in that directory, and the attacker must be able to establish and then close an authenticated SSH session - so switches using only local authentication are not exposed. No public exploit has been identified at time of analysis; vendor-released patch: 9.2.2d for the 9.x branch, with the corresponding fixed 10.0.x release described in the Broadcom/Brocade advisory at https://support.broadcom.com/external/content/SecurityAdvisories/0/39147.
Information disclosure in the BackWPup WordPress plugin before 5.7.7 lets unauthenticated remote attackers download a complete backup archive - database dump, site files, credentials and secret keys - left behind in the plugin's working directory by an interrupted restore. Exploitation is conditional: it requires the site to run a webserver that does not enforce .htaccess restrictions (explicitly NGINX) plus an interrupted restore that left the archive in place, which is why the assessed vector carries AC:H despite PR:N, AV:N. No public exploit code was identified at time of analysis and the issue is not confirmed as actively exploited (CISA KEV), so this rates as a genuine but conditional information-disclosure flaw rather than an emergency, though the high confidentiality impact of leaked database and secret-key material warrants prompt patching.
A malformed-BSON out-of-bounds read in the MongoDB Python Driver (PyMongo) can terminate the host Python process when the native C accelerator (_cbson) is loaded. The flaw is reachable only when an application itself passes attacker-controlled BSON into the documented bson.decode() or decode_all() APIs with a truncated regular-expression element that lacks a trailing NUL byte; the driver's normal MongoDB wire-protocol query path never reaches this code, and installations running the pure-Python fallback are unaffected. Both the vendor CVSS 4.0 score (5.9, AV:L/AV:N-derived local vector, PR:N/UI:N, VA:H) and the independent CVSS 3.1 assessment (AV:L, PR:N, UI:N, C:N/I:N/A:H) agree this is an availability-only, denial-of-service condition with no data exposure or code execution, making it a moderate issue that most deployments can deprioritize; no public exploit code has been identified at time of analysis and the CVE is not in CISA KEV.
Out-of-bounds memory access in the MongoDB C Driver can be induced when an embedding C/C++ application passes a length smaller than the five-byte BSON document minimum to bson_reserve_buffer and then performs an affected append or comparison operation, causing unsigned integer underflow and out-of-bounds access that may terminate the process or read or corrupt adjacent memory. Exploitation is not possible against the library in isolation or default usage: the application must forward an undersized, potentially attacker-influenced length into the reservation call and later exercise an affected operation. No public exploit identified at time of analysis; vendor CVSS 4.0 score is 5.9 with AV:L/AT:P/PR:N, and the independent assessment rates it moderate-severity and condition-dependent.
Docker Sandboxes can forward an unrecognized client-supplied credential in an alternate authentication header alongside the credential injected by the host egress proxy, potentially authenticating an outbound request to an attacker-controlled upstream account and exposing data included in that request. The proxy scrubs alternate credentials only when their values match known sentinel values, so untrusted code already running inside an authorized sandbox can bypass that removal if the targeted upstream service accepts another supported auth header. This is a local, moderate-severity confidentiality issue requiring sandbox code execution and credential injection to be enabled; no public exploit identified at time of analysis.
Docker Sandboxes credential-injection proxies can fail open and expose host-managed credentials - OAuth access and refresh tokens and a derived Anthropic API key - to code already running inside an authorized sandbox, defeating the masking control that is meant to keep those secrets outside the sandbox boundary. Exploitation requires an attacker to already have code executing in a sandbox configured to proxy host-managed credentials (PR:L) and depends on an edge condition where a proxied response-body read returns data together with an error, causing affected handlers to forward unmasked bytes instead of redacting them; because that error-plus-data condition is not guaranteed on every request (AT:P), reliability is limited and sandboxes that do not use credential injection are not affected. The vendor CVSS 4.0 base score is 5.9 and our independent assessment is CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:N/C:H/I:N/A:N; no public exploit code or CISA KEV entry was identified at the time of analysis, and the primary limiting factor on real-world risk is that the attacker must operate from within the sandbox trust boundary.
MongoDB C Driver contains an off-by-one heap write in its BSON bulk document writer that can corrupt adjacent memory or crash the process when a serialized document ends at a precise buffer boundary. This medium-severity (CVSS 4.0 base 5.9) issue requires an embedding application to use the BSON bulk-writer API and an attacker to influence document sizes to hit that exact cumulative boundary; the local, unauthenticated attack is difficult to trigger and writes only a single zero byte, so the realistic impact is process termination or limited heap corruption rather than code execution. No public exploit code or active exploitation has been identified at the time of analysis.
Denial of service in MariaDB Connector/Node.js versions 3.3.0 through 3.5.3 occurs when a Node.js application connects over TCP to a MariaDB or MySQL server with TLS enabled in the zero-configuration mode (ssl: true, or an ssl object whose rejectUnauthorized is not false, and no ssl.ca supplied) while client_ed25519 is negotiated as the authentication plugin and a password is configured. Under those conditions, any server or network attacker presenting a self-signed certificate drives the connector into a code path that throws an uncaught ReferenceError from the socket data handler; because Node.js terminates the process on an uncaught exception by default, the client application crashes, resulting in a remote denial of service. The issue is rated moderate (CVSS 5.9, AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H), is not confirmed as actively exploited (CISA KEV) and no public exploit code has been identified at time of analysis; the requirement for a specific combination of TLS, CA, and authentication-plugin settings places meaningful constraints on exploitability, and the vendor-released patch is version 3.5.4.
Denial of service in GlavSoft TightVNC Server for Windows (versions before 2.8.88) allows unauthenticated remote attackers to crash the service by triggering a NULL pointer dereference in the Win8ScreenDriver component. The crash occurs when the DXGI Desktop Duplication driver fails to re-initialize-such as after a GPU reset, display hot-plug, or session change-leaving the internal pointer m_drvImpl NULL, which is then dereferenced without a check by functions like executeDetection() and grabFb(). The vector is rated AV:N/AC:H/PR:N (CVSS 5.9, A:H only) because the environmental failure cannot be commanded on demand, and no public exploit identified at time of analysis.
Improper certificate validation in the hMailServer webmail S/MIME handler (versions 6.3.2 through 6.3.5) allows a remote unauthenticated attacker to have their own encryption key silently added to the recipient set of messages a victim later sends to a target correspondent, exposing those messages to anyone holding the attacker's private key. The webmail keeps the signing certificate from any opened S/MIME-signed message even when the server finds the chain untrusted, stores it under the certificate's first listed e-mail address rather than the message's From address, and appends it alongside any legitimate certificate already held for that address; the attacker still needs to independently obtain a copy of the later ciphertext (for example through mailbox or network interception) to decrypt it. Exploitation requires the S/MIME feature to be in active use and a user to open the crafted signed message, and no public exploit code or confirmed active exploitation was identified at time of analysis; the vendor has released hMailServer 6.3.6 as the fix.
Encoding-handling flaw in Coraza WAF 3.0.0 through 3.7.0 corrupts the output of the t:jsDecode transformation whenever a payload contains JavaScript octal escape sequences, allowing attackers to smuggle XSS or SQL injection syntax past WAF rules that depend on jsDecode for normalization. Because the transformation emits null bytes (and, for high bytes, clamped or saturated values) instead of the real decoded characters, a rule that inspects the transformed value never sees the attack string, while the downstream browser or application does decode it correctly and executes it. The estimated severity is CVSS 5.8 (AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N), exploitation requires that the deployment actually load jsDecode-based rules such as the OWASP CRS and that the protected application itself be vulnerable to the hidden payload; there is no confirmed active exploitation (not listed in CISA KEV), although a reproducible proof-of-concept script does accompany the advisory, and no authentication or user interaction is needed to send the request.
Arbitrary file and directory deletion in Brocade Fabric OS before 10.0.1 lets an authenticated operator who already holds USB management privileges break out of the intended USB mount point through path manipulation in the REST API USB storage handling and remove files or directories anywhere on the switch local root filesystem. The attack surface is narrow: the interface is reachable only from the adjacent management network (AV:A), requires a high-privileged account (PR:H), and the vendor vector includes an additional attack requirement (AT:P), so this is a trusted-operator or stolen-admin-credential scenario rather than an anonymous remote attack. No public exploit identified at time of analysis; the vendor rates the issue 5.7 under CVSS 4.0 and the independent assessment treats it as a medium-severity, low-to-moderate priority issue that affects integrity only, not an emergency.
Denial of service in SumatraPDF 3.6.1 and earlier, and in pre-release 3.7.0.20369, occurs when the reader falls back to its legacy IE-based HTML/CHM backend - a path taken only when Microsoft WebView2 is absent or cannot initialize - and opens an attacker-crafted CHM file. The signed host component of an its:// URL is accepted by ParseProtoUrl() and then used directly as an index into the gHtmlWindows collection by FindHtmlWindowById(), so a negative or otherwise out-of-range window identifier triggers an out-of-bounds pointer read, an invalid object callback dereference, and termination of the SumatraPDF process. Exploitation is local and requires the victim to open the malicious document (user interaction, unauthenticated per PR:N in the assessed vector); no public exploit code or active exploitation has been identified at time of analysis, and impact is limited to a crash of a single process rather than code execution, data disclosure, or persistence.
Denial of service in FFmpeg through 9.0.2 allows a crafted MPEG-DASH manifest whose SegmentTemplate element declares an empty media attribute (media="") to drive the DASH demuxer into an unbounded loop, consuming CPU indefinitely and hanging the process that is decoding the stream. Per the supplied CVSS 4.0 vector the issue is unauthenticated (PR:N) but requires user interaction (UI:P), because a victim or a host application must actively open or stream the attacker-supplied .mpd manifest; impact is confined to availability, with no confidentiality or integrity effect, and our independent assessment characterizes it as a medium-severity availability-only flaw (CWE-835) rather than a critical one. No public exploit code and no confirmed active exploitation were identified at time of analysis, though the vulnerable source paths are public and an upstream fix is already committed.
Denial-of-service in FFmpeg through 9.0.2: demuxing a crafted MP4/MOV file containing tens of thousands of minimal pssh boxes triggers uncontrolled recursion in av_encryption_init_info_free(), exhausting the stack and crashing the process, with additional quadratic CPU consumption. No authentication or privileges are required (PR:N), but exploitation is local (AV:L), demands passive user interaction (UI:P) to feed the file into an FFmpeg-based pipeline, and is high complexity (AC:H). Impact is availability-only; there is no code execution or data exposure. The issue is tracked as CWE-674 (uncontrolled recursion), and an upstream fix is proposed in FFmpeg PR 24593; no public exploit code or CISA KEV entry was identified at time of analysis.
Fabric OS switch admin passwords can be exposed in Brocade SANnav before 3.0.1 when the host suffers an out-of-memory condition and sensitive credentials are written to a memory swap file. Exploitation requires an authenticated admin with local access to the server hosting the SANnav virtual machine and the ability to read that swap file, making this a local, high-complexity confidentiality issue rather than a remotely reachable compromise; no public exploit identified at time of analysis. Upgrading to 3.0.1 addresses the flaw.
Parsing a crafted APEv2 tag with the music-metadata library before 11.16.0 can force a disproportionate Uint8Array allocation from an attacker-controlled tag-item size field, and repeated or concurrent parsing of such files can exhaust the host process's memory. The flaw is reachable by any Node.js application, service, or bundled front end that hands attacker-supplied .ape/MP3-with-APEv2 media to the parser; it is fixed in 11.16.0. The demonstrated impact is availability loss only - the assessed vector is CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (6.2) with no confidentiality or integrity effect, and no public exploit code or confirmed active exploitation was identified at time of analysis.
Cleartext storage of sensitive information in IBM Guardium Data Protection 12.0, 12.1, and 12.2 application logs allows a local, authenticated low-privileged user with read access to those log files to obtain limited sensitive data (CWE-532). IBM rates this at a CVSS 3.1 base score of 3.1, but the network attack vector in the vendor vector overstates real-world reachability: exploitation depends on an existing local foothold on the appliance and on sensitive values being written to logs only intermittently or conditionally, so impact is confined to limited confidentiality disclosure with no integrity or availability effect. There is no public exploit identified at time of analysis, and a vendor patch is available.
Opening a crafted MOBI file in SumatraPDF 3.7.0.22298 triggers an out-of-bounds read that reliably terminates the application with a native access violation. The bug is a signed/unsigned narrowing flaw in src/MobiDoc.cpp: an attacker-supplied mobiHdr.hdrLen value above INT_MAX becomes negative during the upper-bound check, and when the EXTH flag is set that same original unsigned value is reused as a pointer offset, driving DecodeExthHeader() past the end of the record buffer. Only denial of service has been demonstrated - no code execution, information disclosure, or integrity impact - and the CVSS vector (AV:L/PR:N/UI:R, C:N/I:N/A:H) reflects that the victim must actively open the malicious file locally; no public exploit has been identified at time of analysis and this CVE is not in CISA KEV. Several third-party tags (RCE, Information Disclosure, Microsoft) are inconsistent with the technical evidence and the assessed vector and should be discounted.
Uncontrolled memory allocation in the music-metadata Node.js library (versions prior to 11.16.0) lets an attacker who supplies a truncated ID3v2 audio file force the parser to reserve up to ~268 MiB based on a header that declares a large tag body which is not actually present. The parser allocates the full declared size before confirming those bytes exist, then silently catches the resulting EndOfStreamError and returns a normal metadata object, so the failure is invisible to the calling application. Impact is limited to availability (assessed CVSS 3.1 AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L): each crafted file produces a bounded, transient allocation that is freed once the read fails, so meaningful denial of service requires high volume or concurrency; no public exploit code was identified at time of analysis, and the vendor shipped a fix in 11.16.0.
Opening a specially crafted Microsoft Reader (.lit) ebook in SumatraPDF 3.7.0.22298 terminates the application deterministically: an integer overflow in LitParseHeader() allows a tuned header to compute a negative section offset that is later dereferenced, producing an out-of-bounds read and a crash. Per the authoritative assessment, impact is denial of service only - the supplied evidence demonstrates no code execution, information disclosure, arbitrary read, or integrity impact, despite RCE and Information Disclosure tags appearing alongside this record. Exploitation is not remote or automatable: it requires local delivery of the malicious .lit file and the user actively opening it (CVSS AV:L/UI:R, PR:N), and no public exploit code has been identified at time of analysis; the issue is not listed in CISA KEV.
Denial of service in the npm package music-metadata before 11.16.0 lets unauthenticated remote attackers crash or exhaust memory in any application that parses untrusted Matroska, WebM, or MKA input - a 34-byte file can trigger an ~128 MiB allocation, a 70-byte file a 500 MiB allocation, and (demonstrated only via the parseFile API on Node.js 26.7.0) a 48-byte file an uncatchable V8 fatal abort that exits with code 133. The flaw carries availability impact only and is remotely reachable with no authentication and no user interaction beyond the application ingesting the file (assessed CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H; the originally reported score of 6.2 used an AV:L vector). No confirmed active exploitation (not in CISA KEV) and no public exploit code identified at time of analysis, though the upstream advisory documents minimal crafted inputs that deterministically reproduce the allocation behavior, so deployment of the fixed version is the priority for anything that accepts user-supplied media.
OS command injection in Brocade Fabric OS account management affects versions before 9.2.2d and 10.0.0 through 10.0.0a1. An authenticated administrator with adjacent management-network access can instigate account deletion, and if the target account has a malformed name containing shell metacharacters-accepted by older Fabric OS builds-the internal cryptographic-key cleanup routine may execute injected commands. This is a medium-severity (CVSS 4.0 base 5.4) issue with low-to-moderate real-world risk because exploitation requires admin privileges, adjacent access, an operator UI action, and the non-default precondition of a pre-existing malformed account name; no public exploit has been identified at time of analysis.
Application termination in SumatraPDF 3.7.0.22298 is reachable when a user opens an attacker-crafted LIT (Microsoft Reader) file, because file-controlled offset and size fields in src/LitDoc.cpp overflow, narrow to negative values, or wrap before incomplete bounds checks, yielding invalid pointer reads and a deterministic crash. The attack path is local and requires the victim to open the malicious document (AV:L/AC:L/PR:N/UI:R, availability-only impact with no confidentiality or integrity loss), and exploitation is further gated by the victim using this specific build and handling the uncommon LIT format. No public exploit code and no confirmed active exploitation were identified at time of analysis, and no EPSS data was supplied, so this remains a moderate-severity denial-of-service condition rather than a high-priority memory-corruption or code-execution threat.
Unbounded parsing of user and group database files in github.com/moby/sys/user (versions ≤ v0.4.0) allows a local, authenticated attacker who can influence the contents of an /etc/passwd- or /etc/group-style file to exhaust process memory and terminate it via Out Of Memory conditions. The defect is a CWE-400 uncontrolled resource consumption issue scored CVSS 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H), with impact confined to availability - no confidentiality or integrity loss is assessed. The most practical exploitation path documented is containerd/runc processing untrusted container image content (related to containerd CVE-2026-47262 / GHSA-jpcc-p29g-p8mq), though any application that hands attacker-influenced user/group files to the library is exposed. No public exploit code has been identified at time of analysis, and the issue is not confirmed actively exploited (CISA KEV); a vendor fix and an upstream patch commit are available.
Sanitizer bypass in svg-sanitizer (darylldoyle/svg-sanitizer) before 1.0.0 allows a crafted SVG href built from a DTD-defined XML entity to pass isHrefSafeValue() after entity expansion yet survive serialization as the original entity reference, which HTML5 named-character-reference resolution then converts to whitespace inside a javascript: URL. When an application embeds the sanitized SVG inline as HTML, an authenticated content submitter (CVSS 3.1 vector indicates PR:L) can therefore obtain script execution in the embedding page's origin, but only if a victim activates the link (UI:R); severity is moderate (CVSS 3.1 base 5.4, Medium) and no public exploit code or confirmed active exploitation was identified at time of analysis. Applications that render sanitized SVG only as a referenced <img>/external resource or inside an isolated context are not exposed.
SQL injection (CWE-89) in IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 allows a remote attacker holding a valid low-privileged session to inject SQL through standard authenticated functionality, enabling unauthorized modification of backend data and partial denial of service. The vendor-assigned CVSS 3.1 score is 5.4 (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L), so confidentiality is not assessed as impacted; the practical barrier is the requirement for credentials, not a special configuration. No public exploit code and no confirmed active exploitation (CISA KEV) were identified at time of analysis, and IBM has published a fix via its support portal.
An authorization flaw in Katello's Flatpak Remote Repositories API allows an authenticated user who is permitted to view flatpak remotes in one organization to retrieve flatpak remote repository records - including the stored credentials for that remote - belonging to a different organization. The same unscoped lookup is reused by the mirror action, so a user with edit rights on a product in their own organization can create a repository configured with another organization's flatpak remote URL and its stored remote credentials. Exploitation requires an authenticated account holding the flatpak-remote view permission, the flatpak remote feature to be in active use, and a multi-organization Red Hat Satellite 6 / Katello deployment; no public exploit code has been identified at time of analysis, and the flaw is a medium-priority authenticated authorization issue rather than an emergency.
Stored/reflected cross-site scripting in the administrative Web UI of IBM DataPower Gateway (10.5.0.0 through 10.5.0.22, 10.6.0.0 through 10.6.0.10, 10.6.1 through 10.6.6, and 11.0.0.0 through 11.0.0.2) lets an authenticated user whose input is rendered back into UI pages embed arbitrary JavaScript that executes in the browser of another, potentially more-privileged user, enabling credential or session disclosure inside the trusted management session. The flaw is not self-executing: it requires a low-privileged authenticated position (PR:L) plus a second victim who views the injected content (UI:R), and there is no public exploit identified at time of analysis, nor is it listed in CISA KEV. At CVSS 5.4 (CWE-79) this is a genuine but non-urgent issue, with realistic risk confined to deployments whose management Web UI is reachable by multiple users of differing privilege levels.
Cross-site scripting in the IBM Security Verify Access (10.0 through 10.0.9.2) and IBM Verify Identity Access (11.0 through 11.0.3) Web UI allows an authenticated user to embed arbitrary JavaScript into a field that is later rendered to another user, so the payload executes within that victim's trusted session (scope change, S:C) and can lead to credential or session disclosure. The CVSS vector (AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N, score 5.4) confirms remote reachability but requires a valid low-privileged account plus victim interaction; there is no availability impact and the exposure is limited to data reachable inside the victim's session. No public exploit code exists and there is no confirmed active exploitation (CISA KEV) at the time of analysis; a vendor patch is available per the IBM advisory.