VulnScope — package-centric CVE lookup- HIGH7.5CVE-2026-54695Pipecat: Telephony WebSocket `/ws` Unauthenticated Call-Control Abuse via Attacker-Supplied Call SID
- LOW2.2BBOT: Symlink-Following Arbitrary Write via github_workflows Module
- LOW3.1BBOT: Server-Side Request Forgery (SSRF) in docker_pull module via WWW-Authenticate realm parsing
- HIGH8.0Strimzi: Cross-namespace privilege escalation via `Kafka.spec.entityOperator`
- HIGH7.5HAPI FHIR: Incomplete fix for CVE-2026-45367: DSTU2 FHIRPathEngine.matches() missing RegexTimeout protection allows ReDoS
- HIGH7.5handlebars.java FileTemplateLoader Path Traversal
- HIGH7.6LangChain4j: SQL injection via metadata filters in langchain4j-mariadb and langchain4j-pgvector
- HIGH8.4pdfkit: Path traversal in from_string
- HIGH7.7Open WebUI: SSRF Protection Bypass in Playwright Web Loader via HTTP Redirects
- HIGH7.7Open WebUI: Path traversal / SSRF in terminal server proxy via encoded path traversal
- HIGH7.6Open WebUI: Stored XSS to Account Takeover via Model Profile Images
- HIGH7.1Open WebUI: Forged model meta.knowledge allows cross-user file read and deletion
- HIGH8.7Open WebUI: Stored XSS in Mermaid Markdown Preview
- HIGH8.3Open WebUI: Forged chat-file link allows cross-user file read and deletion
- HIGH8.5Open WebUI: Redirect-Bypass SSRF in OAuth `_process_picture_url` (incomplete-fix sibling of CVE-2026-45401)
- HIGH8.3yt-dlp: Arbitrary code execution via manifest downloads with aria2c
- HIGH8.6Crawl4AI: SSRF via proxy settings in the Docker server bypasses the crawl-URL SSRF check
- HIGH7.5Crawl4AI: SSRF filter bypass in Docker server via IPv6 transition forms (NAT64 / 6to4 / unspecified / v4-mapped)
- HIGH8.3yt-dlp: Dangerous file type creation via insufficient filename sanitization (Bypass of CVE-2024-38519)
- HIGH7.5vLLM: Security Check Bypass via assert Statement in Activation Function Loading Allows Arbitrary Code Execution
- HIGH8.8Langflow: IDOR/BOLA in Monitor API — Missing Ownership Enforcement on 7 Endpoints
- HIGH7.5Natural Language Toolkit (NLTK): URL-Encoded Path Traversal in nltk.data.load() Allows Arbitrary Local File Read
- HIGH7.5Starlette: request.form() limits silently ignored for application/x-www-form-urlencoded enable DoS
- LOW3.7Starlette: Unvalidated request path concatenated into authority poisons request.url.hostname
- HIGH7.5python-multipart: Quadratic-time querystring parsing with semicolon separators causes CPU denial of service