CWE-829.

Altair: DOM-based XSS via attacker-controlled script URLs in the iframe sandbox

• altair
• altair-graphql altair-express-middleware
• Cross-site scripting (XSS)
• CWE-829

eosphoros-ai DB-GPT HuggingFace Adapter hf_adapter.py exec_module inclusion of functionality from untrusted control sphere

• eosphoros-ai DB-GPT
• CWE-829

myshell-ai AIlice HuggingFace Model Wrapper AModelCausalLM.py LoadModel_PEFT inclusion of functionality from untrusted control sphere

• myshell-ai AIlice
• CWE-829

Mistral Vibe before 3.0.3 RCE via Repository-Configured gpg.program

• mistralai mistral-vibe
• CWE-829

Mistral Vibe before 2.25.7 Code Execution via Git Filter Drivers

• mistralai mistral-vibe
• CWE-829

IRISPowerscan Insufficient restriction of untrusted scripts allows arbitrary code execution

• I.R.I.S S.A. IRISPowerscan
• CWE-829

Refitter: Unrestricted OpenAPI references permit build-host SSRF and file inclusion

• christianhelle refitter
• Server-side request forgery (SSRF)
• CWE-829

Monkeytype: fork PR can execute code with elevated GITHUB_TOKEN

• monkeytype
• CWE-829

FlexNet Publisher lmadmin Rogue Vendor Daemon Vulnerability

• Revera FlexNet Publisher
• CWE-829

Wildfly: wildfly-iiop: wildfly-ejb3: wildfly: authentication bypass on iiop ejb invocations as csiv2 ittprincipalname accepted without transport binding

• Red Hat Fuse 7
• Red Hat JBoss Enterprise Application Platform 7
• CWE-829

Wildfly-ejb: wildfly-iiop-openjdk: eap iiop listeners may permit unauthed deserialization

• Red Hat JBoss Enterprise Application Platform 7
• Red Hat JBoss Enterprise Application Platform 8
• CWE-829

Openjdk-orb: incomplete fix for cve-2026-15560,unauthed class loading via iiop in eap

• Red Hat JBoss Enterprise Application Platform 7
• Red Hat JBoss Enterprise Application Platform 8
• CWE-829

RSS feed could redirect its subscription to a local file or network share

• Mozilla Thunderbird
• CWE-829

Displaying a message could load an attacker-chosen URL through an OpenPGP key attachment

• Mozilla Thunderbird
• CWE-829

vLLM: Request-controlled mm_processor_kwargs.code_revision allows remote code execution

• Code injection
• CWE-829

>=0.7.3, <0.31.0 · fixed in 0.31.0

NVIDIA TensorRT-LLM: NVIDIA TensorRT-LLM for any platform contains a vulnerability in KvCacheAwareRouter…

• NVIDIA TensorRT-LLM
• CWE-829

Mistral Vibe before 3.0.3 RCE via Git Filter Drivers in Worktree Mode

• mistralai mistral-vibe
• CWE-829

InternScience InternAgent LoRA Loading experiment.py train inclusion of functionality from untrusted control sphere

• InternScience InternAgent
• CWE-829

CloudPirates Open Source Helm Charts: pull_request_target workflow vulnerable to cache poisoning and OIDC token theft

• CloudPirates-io helm-charts
• CWE-829

Black: GitHub Action installs unvalidated required-version from pyproject.toml

• CWE-829

<26.10.1 · fixed in 26.10.1

Roundcube Webmail: Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 passes potentially unsafe content…

• Roundcube Webmail
• CWE-829

mk-oracle: Local privilege escalation via insecure Oracle Home library loading

• Checkmk
• CWE-426
• CWE-829

Argo CD: A Kustomize Helm config home can run commands in the repo-server

• argoproj argo-cd
• CWE-829

This issue was addressed by enforcing library validation on the affected binaries.

• Apple Xcode
• CWE-829

Ivanti Connect Secure: Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts…

• Ivanti Connect Secure
• CWE-829

Claude Code: Plugin Hash Pin Bypass Allows Bypass of Hash Pinning

• CWE-494
• CWE-829

<2.1.179 · fixed in 2.1.179

JetBrains Junie CLI: In JetBrains Junie CLI before 26.8.3 code execution was possible via an untrusted…

• JetBrains Junie CLI
• CWE-829

Gitea reusable workflow secret exposure in pull_request_target

• Gitea
• Code injection
• CWE-829

.NET Remote Code Execution Vulnerability

• Microsoft .NET 10.0 runtime
• Microsoft .NET 8.0 runtime
• CWE-829

Microsoft Exchange Server Elevation of Privilege Vulnerability

• Microsoft Exchange Server 2016 Cumulative Update 23
• Microsoft Exchange Server 2019 Cumulative Update 14
• CWE-829

Microsoft Office SharePoint Remote Code Execution Vulnerability

• Microsoft SharePoint Server Subscription Edition
• CWE-829

Windows Common Log File System Driver Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• CWE-829

Salty documentation workflow executes fork-controlled Python build hooks with deployment secrets

• saltyorg docs
• Code injection
• CWE-829

Omarchy: omarchy-theme-set in Omarchy 4 before 4.0.1 allows code execution via a third-party theme…

• Omarchy
• CWE-829

Aegisub executes arbitrary code through automatically loaded Automation scripts

• TypesettingTools Aegisub
• CWE-158
• CWE-829

Dell Secure Connect Gateway (SCG) Policy Manager: Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16…

• Dell Secure Connect Gateway (SCG) Policy Manager
• CWE-829

PraisonAI: Unsafe Dynamic Module Loading Leads to Arbitrary Code Execution via tools.py in AgentFlow

• CWE-693
• CWE-829

<1.6.78 · fixed in 1.6.78

mk-oracle: Local privilege escalation via malicious Oracle Instant Client

• Checkmk
• CWE-426
• CWE-829

Docling imports plugin entry points before the allow_external_plugins check

• CWE-696
• CWE-829

>=2.27.0, <2.131.0 · fixed in 2.131.0

Ghost: Remote Code Execution via Theme Translation Files

• Path traversal
• Code injection

>=6.10.3, <6.64.0 · fixed in 6.64.0

knowns OS Command Injection via Insecure LSP Binary Path Config in .knowns/config.json

• Command injection
• Code injection

<0.30.0 · fixed in 0.30.0

auto-changelog: code execution via untrusted in-repository configuration (handlebarsSetup/plugins), plus argument injection, path traversal, and SSRF

• cookpete auto-changelog
• Path traversal
• Command injection

RCE via calcext:data-mappings, sql provider and jdbc connector

• The Document Foundation LibreOffice
• CWE-829

Mitel MiVoice Office 400 Music on Hold WAV File Upload Code Execution

• Mitel MiVoice Office 400
• Code injection
• Unrestricted file upload

Mitel MiVoice Office 400 Shared Object Hijacking Leading to Arbitrary Code Execution

• Mitel MiVoice Office 400
• Path traversal
• CWE-426

C4illin ConvertX: In ConvertX before 0.19.0, converters/calibre.ts does not block recipe files…

• C4illin ConvertX
• CWE-829

NetBox Device Type Library: Arbitrary Code Execution on CI Runner Through Malicious requirements.txt, .pre-commit-hooks-config.yaml, and .gitmodules Files

• netbox-community devicetype-library
• Code injection
• CWE-494

CVE-2026-104056

• Authlib
• CWE-345
• CWE-346

vm2 CLI provides no sandbox isolation - host-realm require() is reachable from sandboxed scripts

• CWE-453
• CWE-829

<3.11.7 · fixed in 3.11.7

vm2 Custom Module Resolver Can Bypass the External Package Allowlist by Loading a Colliding Host Package

• Broken access control
• CWE-706

<3.11.7 · fixed in 3.11.7

JetBrains IntelliJ IDEA: In JetBrains IntelliJ IDEA before 2026.2.3 rCE via Structural Search script constraints…

• JetBrains IntelliJ IDEA
• CWE-829

baserCMS Users Community BcAddonMigrator: When converting baserCMS4-style addons to baserCMS5-style ones…

• baserCMS Users Community BcAddonMigrator
• CWE-829

Fireware OS Code Injection in BOVPN Over TLS Client Allows Remote Code Execution

• WatchGuard Fireware OS
• Code injection
• Weak cryptography or TLS

Kube-compare: container:// reference extraction runs the image entrypoint and silently escalates to sudo

• Red Hat OpenShift Container Platform 4.19
• Red Hat OpenShift Container Platform 4.20
• CWE-829

Network UPS Tools: A PWN Request in make-dist workflow can execute PR-controlled code with write-scoped GITHUB_TOKEN

• networkupstools nut
• CWE-829

Kiro IDE Allows Agentic Writes to Global Configurations While Working in Untrusted Workspaces

• Amazon Kiro IDE
• CWE-349
• CWE-829

Apache Doris: JDBC driver URL validation bypass leads to remote code execution

• Apache Software Foundation Apache Doris
• CWE-829

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

• IBM Financial Transaction Manager (FTM) for RedHat OpenShift
• CWE-829

GNU Emacs: GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file…

• GNU Emacs
• CWE-829

Joplin: KaTeX `trust:true` enables URL-allowlist bypass leading to NTLMv2 credential theft via UNC path on Windows

• laurent22 joplin
• Information disclosure
• Hard-coded credentials