manus-pi

Incus 6.0.5 before 6.0.7, 6.12.0 before 7.0.2, and 7.1.0 before 7.5.0 Restricted Project Bypass via Clustered Migration Refresh

ArcadeDB 26.2.1 before 26.10.1 Bolt SHOW DATABASES Information Disclosure

Grav before 1.7.53.5 and 2.2.2 Image Pixel Limit Bypass Denial of Service

Nodemailer 3.0.0 before 10.0.10 Quadratic DKIM Header Unfolding Denial of Service

Omnigent 0.3.0 before 0.14.0 Path Traversal via Sub-Agent os_env.cwd

phpMyFAQ from 4.2.0-alpha.2 before 4.2.0-beta Privilege Escalation via Group Permissions API

phpMyFAQ 4.2.0-alpha.2 before 4.2.0-beta Privilege Escalation via updateUserRights

phpMyFAQ 4.2.0-alpha before 4.2.0-beta Missing Authorization via deleteGroup API

qs.stringify with arrayFormat comma throws TypeError on array elements that cannot be coerced to a string

Nezha 2.2.5 before 2.3.15 Information Disclosure via DDNS List Endpoint