manus-use

YesWiki 4.5.0 before 4.7.0 SQL Injection via date_maj_fiche in Bazar entry create

Crawl4AI 0.9.0 before 0.9.5 JavaScript Injection via css_selector and wait_for

YesWiki 4.2.0 before 4.7.0 Stored XSS via Comment Raw-HTML Syntax

Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 Arbitrary File Write via Symlink in Migration Stream

Incus 7.0.1 before 7.0.2 and 7.2.0 before 7.5.0 Project Restriction Bypass via Custom Volume Copy

Incus 7.3.0 before 7.5.0 Project Restriction Bypass via block.create_options

ArcadeDB before 26.10.1 RCE via Gremlin Groovy Engine Missing Authorization

ArcadeDB from 26.8.1 before 26.10.1 Authorization Bypass via ALTER TYPE WITH

Dulwich 0.24.0 before 1.2.8 Symlink Write-Through via porcelain.checkout paths

Dulwich 0.22.5 before 1.2.8 Path Traversal via Stash Pop Symlinks