rexpository

PraisonAI Platform before 0.1.9 Authorization Bypass via Label Endpoints

PraisonAI before 4.6.78 Missing Webhook Signature Verification

PraisonAI before 4.6.78 Authentication Bypass via Host Header Spoofing

PraisonAI before 4.6.78 Code Injection via API deployment generator

vLLM 0.22.1 before 0.28.0 Incomplete Artifact Pin Propagation

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Code Injection via MVG Decoder

ImageMagick before 7.1.2-32 Policy Bypass via -script Operation

ImageMagick before 7.1.2-32 TOCTOU Symlink Race Path Policy Bypass via magick script

SurrealDB 3.0.0 before 3.3.0 Cross-Tenant Record Read via RETURN FETCH

ImageMagick before 7.1.2-26 Policy Bypass via script operation