Katriel Moses

Ground Station prior to 0.6.0 Unauthenticated DoS via service_control Socket.IO

OpenChamber 1.11.7 Path Traversal File Read via allowOutsideWorkspace Parameter

OpenChamber 1.11.7 Unauthenticated RCE via /api/fs/exec

SuperPlane < 0.30.0 SMTP Header Injection via Webhook Event Title

SuperPlane < 0.27.0 Broken Object Level Authorization via CanvasService gRPC

Milkdown < 7.21.3 DOM XSS via innerHTML Assignment

Milkdown < 7.21.3 Stored XSS via javascript: URL in link href

QueryWeaver Authentication Bypass via Email Signup Token Issuance for Existing Accounts

Hermes WebUI < 0.51.788 Unauthenticated RCE via Terminal API

Perry < 0.5.1159 Path Traversal via ArtifactReady WebSocket