CWE-913.

Google Chrome: Improper resource control in WebCodecs in Google Chrome prior to 157.0.8103.38 allowed a…

• Google Chrome
• CWE-913

Metalama: Unsafe deserialization over Metalama's Visual Studio inter-process named pipe enables local code execution

• Insecure deserialization
• CWE-913

<2025.1.18 || >=2026.0.1-preview, <2026.0.25 || >=2026.1.0-preview, <2026.1.19 · fixed in 2025.1.18, 2026.0.25, 2026.1.19

a2ui-project a2ui Renderer root.js Root.renderComponentTree dynamically-determined object attributes

• a2ui
• Broken access control
• CWE-913

A flaw was found in GStreamer Editing Services (gst-editing-services).

• GStreamer project gst-editing-services
• CWE-913

code-projects Online Reviewer System User Profile Update btn_functions.php dynamically-determined object attributes

• code-projects Online Reviewer System
• Broken access control
• CWE-913

agno-agi agno Agent Orchestration Layer exec dynamically-managed code resources

• agno
• CWE-913

Path Traversal leading to Remote Code Execution in Ollama

• Ollama
• Path traversal
• CWE-913

vm2 contains a sandbox escape vulnerability

• CWE-693
• CWE-913

<3.12.1 · fixed in 3.12.1

vm2: Sandbox Escape (NodeVM)

• CWE-913

<3.11.8 · fixed in 3.11.8

vm2: Default VM can mutate host TypedArray and ArrayBuffer intrinsics after the host-prototype pollution fix

• Prototype pollution
• CWE-913

>=3.11.0, <3.11.8 · fixed in 3.11.8

vm2: NodeVM `require.external` without an explicit `require.root` grants unrestricted host filesystem access and full RCE

• CWE-913

<3.11.7 · fixed in 3.11.7

vm2 sandbox escape via WebAssembly.compileStreaming Promise species bypass

• CWE-693
• CWE-913

>=3.10.1, <3.11.7 · fixed in 3.11.7

Jeebase UserService info updateUser dynamically-determined object attributes

• Jeebase
• Broken access control
• CWE-913

vm2: NodeVM nesting guard accepts array-shaped require and permits host RCE

• CWE-913

>=3.11.4, <3.11.7 · fixed in 3.11.7

vm2 sandbox escape on Node.js 26 through a stale PromiseThenLookupChain protector

• CWE-693
• CWE-913

>=3.10.2, <3.11.7 · fixed in 3.11.7

Duplicate Advisory: Sandbox Escape (NodeVM)

• CWE-913

<=3.11.7 · no fixed version yet

Duplicate Advisory: Default VM can mutate host TypedArray and ArrayBuffer intrinsics after the host-prototype pollution fix

• CWE-913

>=3.11.0, <=3.11.7 · no fixed version yet

Duplicate Advisory: NodeVM `require.external` without an explicit `require.root` grants unrestricted host filesystem access and full RCE

• CWE-913

<=3.11.6 · no fixed version yet

Duplicate Advisory: NodeVM nesting guard accepts array-shaped require and permits host RCE

• CWE-913

>=3.11.4, <=3.11.6 · no fixed version yet

Sentry Seer vulnerability allows attacker-controlled input to be executed in a privileged environment

• Functional Software, Inc. Sentry Seer
• Other injection
• Code injection

a2ui-project a2ui Message Parsing message-processor.ts processMessages dynamically-determined object attributes

• a2ui
• Broken access control
• CWE-913

IBM MQ Resource Adapter IVT message-driven bean is vulnerable to remote code execution via JNDI injection

• IBM MQ
• CWE-913

Apache Nutch: Unauthenticated remote code execution (RCE) via JEXL injection in Nutch Server (Nutch REST API)

• Apache Software Foundation Apache Nutch
• Code injection
• Broken access control

Apache Impala: RCE via External Data Source Class Loading

• Apache Software Foundation Apache Impala
• CWE-913

Eleveo Quality Management Conversation events dynamically-determined object attributes

• Eleveo Quality Management
• Broken access control
• CWE-913

gouguoa edit_personal Endpoint Index.php update dynamically-determined object attributes

• gouguoa
• Broken access control
• CWE-913

Spring Framework Safety Guard Bypass via SpEL Expression Compilation

• Spring Framework
• CWE-913

Arc Enterprise cluster FSM applyRegisterFile accepts arbitrary file paths without validation, enabling cluster-wide path-traversal worm primitive

• Basekick-Labs arc
• Path traversal
• CWE-345

Google Chrome: Improper resource control in Linux Toolkit Theming in Google Chrome prior to…

• Google Chrome
• CWE-913

asteval Sandbox Escape: arbitrary native memory read/write via numpy ctypes in default asteval Interpreter

• CWE-693
• CWE-749

<1.0.9 · fixed in 1.0.9

Acm-search-v2-rhel9: search-v2-operator: search cr imageoverride/arguments/envvar flow unsanitized into pods running impersonating sa

• Red Hat Advanced Cluster Management for Kubernetes 2.11
• Red Hat Advanced Cluster Management for Kubernetes 2.13
• CWE-913

vm2: Sandbox Breakout Using Dangerous Host Proto Mutators

• CWE-913

<3.11.6 · fixed in 3.11.6

Electerm WebSocket `upgrade-func` and `fs` handlers allow arbitrary method/function invocation due to missing method-name allowlist

• electerm
• CWE-913

PraisonAI MCP `tools/call` path-traversal => RCE via Python `.pth` injection

• Path traversal
• Code injection

<4.6.34 · fixed in 4.6.34

LangGraph Checkpoint: Unsafe JSON deserialization in checkpoint loading

• Insecure deserialization
• CWE-913

<4.1.1 · fixed in 4.1.1

Crawl4AI: AST Sandbox Escape via gi_frame.f_back Chain - Pre-Auth RCE in Docker API

• Code injection
• CWE-913

<0.8.7 · fixed in 0.8.7

vm2 sandbox escape via JSPI-backed Promise `.finally()` species bypass

• CWE-913

<3.11.4 · fixed in 3.11.4

vm2 has a CVE-2023-37903 patch bypass: nesting:true without explicit require still allows full RCE

• CWE-913

<3.11.4 · fixed in 3.11.4

vm2 is Vulnerable to Sandbox Breakout Through Promise Species

• CWE-913

<3.11.4 · fixed in 3.11.4

vm2 has a Sandbox Escape issue

• CWE-913

<3.11.4 · fixed in 3.11.4

An issue was discovered in all versions of PCManFM-Qt starting from 1.1.0.

• LXQt PCManFM-Qt
• CWE-913

LiteLLM has a sandbox escape in custom-code guardrail

• Code injection
• CWE-420

>=1.81.8, <1.83.10 · fixed in 1.83.10

Plack::Middleware::XSendfile versions through 1.0053 for Perl can allow client-controlled path rewriting

• MIYAGAWA Plack::Middleware::XSendfile
• Information disclosure
• CWE-441

z-9527 admin User Update Endpoint user.js dynamically-determined object attributes

• z-9527 admin
• Broken access control
• CWE-913

gougucms User Registration Login.php reg_submit dynamically-determined object attributes

• gougucms
• Broken access control
• CWE-913

NocoBase Affected by Sandbox Escape to RCE via console._stdout Prototype Chain Traversal in Workflow Script Node

• CWE-913

<2.0.28 · fixed in 2.0.28

Graphiti Affected by Arbitrary Method Execution via Unvalidated Relationship Names

• CWE-913

<1.10.2 · fixed in 1.10.2

Apache Airflow Providers Http has Unsafe Pickle Deserializatio leading to RCE via HttpOperator

• CWE-913

<6.0.0 · fixed in 6.0.0

n8n Has Expression Escape Vulnerability Leading to RCE

• CWE-913

<1.123.17 || >=2.0.0, <2.5.2 · fixed in 1.123.17, 2.5.2

Crafter CMS has Improper Control of Dynamically-Managed Code Resources

• CWE-913

>=4.0.0, <4.5.0 · fixed in 4.5.0

SandboxJS has Sandbox Escape via Unprotected AsyncFunction Constructor

• Code injection
• CWE-693

<0.8.26 · fixed in 0.8.26

vm2 has a Sandbox Escape

• Code injection
• CWE-693

<3.10.2 · fixed in 3.10.2

Signal K Server has Unauthenticated State Pollution leading to Remote Code Execution (RCE)

• Command injection
• CWE-913

<2.19.0 · fixed in 2.19.0

Picklescan does not block ctypes

• CWE-184
• CWE-913

<0.0.33 · fixed in 0.0.33

n8n Vulnerable to Remote Code Execution via Expression Injection

• CWE-913

>=0.211.0, <1.120.4 || >=1.121.0, <1.121.1 · fixed in 1.120.4, 1.121.1

SamuNatsu HaloBot Inter-plugin API index.js html_renderer dynamically-managed code resources

• SamuNatsu HaloBot
• CWE-913

Ivanti Endpoint Manager: Improper control of dynamically managed code resources in Ivanti Endpoint Manager prior…

• Ivanti Endpoint Manager
• CWE-913

Improper Sandboxing in Google Apigee's JavaCallout Policy Allows for Remote Code Execution

• Google Cloud Apigee hybrid Javacallout policy
• CWE-913

youlaitech youlai-mall orders improper control of dynamically-identified variables

• youlaitech youlai-mall
• CWE-913
• CWE-914

youlaitech youlai-mall addresses deleteAddress improper control of dynamically-identified variables

• youlaitech youlai-mall
• CWE-913
• CWE-914