Information disclosure.

KiviCare – Clinic & Patient Management System (EHR) < 4.5.5 - Unauthenticated Patient Data Disclosure

• KiviCare
• Information disclosure
• Broken access control

Ash.Resource.Validation.Confirm leaks a confirmed field's stored value in the atomic mismatch error

• Information disclosure

>=2.17.20, <3.32.2 · fixed in 3.32.2

Route handler return value echoed into AshTypescript error response

• Information disclosure

>=0.15.0, <0.18.0 · fixed in 0.18.0

RPC error handler fails open in AshTypescript, disclosing unredacted errors

• Information disclosure

>=0.8.0, <0.18.0 · fixed in 0.18.0

WordPress Print Barcode Labels for your WooCommerce products/orders plugin <= 4.0.0 - Sensitive Data Exposure vulnerability

• UKR Solution Print Barcode Labels for your WooCommerce products/orders
• Information disclosure

oasdiff actions resolve external $refs by default, enabling SSRF and disclosure of structured files on pull-request runs

• oasdiff-action
• Information disclosure
• Server-side request forgery (SSRF)

extension.vn 2FA Authenticator Extension Background Service Worker chrome.runtime.onMessageExternal.addListener information disclosure

• extension.vn 2FA Authenticator Extension
• Information disclosure
• Broken access control

vidIQ Vision for YouTube Extension postMessage window.addEventListener information disclosure

• vidIQ Vision for YouTube Extension
• Information disclosure
• Broken access control

HCL Connections is vulnerable to an information disclosure vulnerability

• HCLSoftware Connections
• Information disclosure

Ebyte NA111-M Cleartext Storage of Sensitive Information

• Ebyte NE2-D11 Firmware
• Information disclosure

sambitraj Student Management System Password aca.sql cleartext storage

• sambitraj Student Management System
• Information disclosure
• CWE-310

code-projects Simple Inventory System Database Backup File inventorymanagement.sql information disclosure

• code-projects Simple Inventory System
• Information disclosure
• Broken access control

AshPhoenix Form.Auto leaks submitted params in an unknown _union_type error message

• Information disclosure

>=1.2.17, <2.3.25 · fixed in 2.3.25

AshAi vectorize change leaks raw embedding-provider errors, including credentials, in a user-facing error

• Information disclosure

>=0.1.0, <1.0.0 · fixed in 1.0.0

AshAi echoes raw tool exception messages into the conversation, disclosing internal details

• Information disclosure

>=0.6.0, <1.0.0 · fixed in 1.0.0

Incomplete redaction re-attaches the original error path in AshGraphql, leaking internal field names

• Information disclosure

>=1.9.0, <1.11.0 · fixed in 1.11.0

Cloaked plaintext leaks through a non-sensitive action argument in AshCloak

• Information disclosure

>=0.1.0, <0.4.0 · fixed in 0.4.0

Linux Foundation Magma InitialUEMessage information disclosure

• Linux Foundation Magma
• Information disclosure
• Broken access control

Admidio before 5.0.12 Authentication Bypass via RSS feeds

• admidio
• Information disclosure

SiYuan before v3.8.1 Information Disclosure via Publish Access

• siyuan
• Information disclosure

SiYuan before v3.8.1 Path Traversal via /api/template/render

• siyuan
• Information disclosure

browser-use web-ui 2.0.0 through 3.0.0 Cleartext API Key Storage

• browser-use web-ui
• Information disclosure

Sensitive fields nested in embedded values are not redacted in AshPaperTrail versions

• Information disclosure

>=0.3.0, <0.7.0 · fixed in 0.7.0

Sensitive attribute values stored in a non-sensitive public changes map in AshPaperTrail

• Information disclosure

>=0.1.1, <0.7.0 · fixed in 0.7.0

HEL Online Classroom: AI-powered Online Classrooms <= 1.0.3 - Unauthenticated BigBlueButton API Secret Disclosure

• HEL Online Classroom: AI-powered Online Classrooms
• Information disclosure

free5GC AUSF uses non-constant-time authentication comparisons and logs XRES* in 5G-AKA

• Information disclosure
• CWE-208

<1.4.5 · fixed in 1.4.5

Hermes Agent 0.16.0 < 0.17.0 Credential Store Overwrite via File-Write Tool

• NousResearch hermes-agent
• Information disclosure

Private Weblate projects vulnerable to observable object existence disclosure via globally scoped object lookups

• Information disclosure

<2026.7 · fixed in 2026.7

Buffa has a Use-After-Free in OwnedView via Unsound 'static Lifetime Promotion in Deref

• Information disclosure
• Memory corruption

<0.7.0 · fixed in 0.7.0

piccolo-admin has a privilege escalation issue - admin to superuser via session-token disclosure in GET /api/tables/sessions/.

• Information disclosure
• Privilege escalation

<1.14.0 · fixed in 1.14.0

StarRocks Query Detail Endpoint Returns Every User's Query History

• starrocks
• Information disclosure

WWBN AVideo through 30.0 Information Disclosure via report4.json.php

• WWBN AVideo
• Information disclosure

Information disclosure in Open-Xchange GmbH OX Dovecot Pro and others

• Open-Xchange GmbH OX Dovecot Pro
• Open-Xchange GmbH OX Dovecot CE
• Information disclosure

Information disclosure in Open-Xchange GmbH OX Dovecot Pro and others

• Open-Xchange GmbH OX Dovecot Pro
• Open-Xchange GmbH OX Dovecot CE
• Information disclosure

Information disclosure in Open-Xchange GmbH OX Dovecot Pro and others

• Open-Xchange GmbH OX Dovecot Pro
• Open-Xchange GmbH OX Dovecot CE
• Information disclosure

WP User Frontend < 4.3.10 - Unauthenticated User Email and Phone Disclosure via User Directory

• User Frontend
• Information disclosure

Wazuh discloses cleartext cluster key to low-privilege API users via GET /cluster/local/config

• wazuh
• Information disclosure
• Hard-coded credentials

WatchGuard Dimension Web UI Authentication Brute-Force Due to Missing Rate Limiting

• WatchGuard Dimension
• Information disclosure
• Authentication bypass

WatchGuard Dimension Session Hijack via Exposed Session Tokens in Diagnostic Logs

• WatchGuard Dimension
• Information disclosure
• Privilege escalation

Wazuh: RBAC permission-effect check in mask_sensitive_config allows low-privilege users to read cluster.key

• wazuh
• Information disclosure
• Broken access control

Insecure storage of sensitive information in Genetec Inc. Synergis Softwire

• Genetec Inc. Synergis Softwire
• Information disclosure

Trilium unauthenticated share-search discloses password-protected and hidden shared notes

• Trilium
• Information disclosure
• Broken access control

Trilium arbitrary file read and denial of service via file:// URLs in the automatic image-download feature

• Trilium
• Path traversal
• Denial of service

KMS master key exposure via unredacted credential serialization in driver settings string

• MongoDB C# Driver
• Information disclosure

Potential for logging sensitive data in Spring Cloud Stream

• Spring Cloud Stream
• Information disclosure

Potential for logging sensitive data in Spring Cloud Function Azure

• Spring Cloud Function
• Information disclosure

Potential for logging sensitive data in Spring Cloud Function AWS

• Spring Cloud Function
• Information disclosure

Spring for GraphQL Information Exposure in GraphiQL support

• Spring for GraphQL
• Information disclosure

CVE-2026-75889 CVE Record

• Grafana Alloy
• Information disclosure

openssl_encrypt (pip package openssl-encrypt) versions <= 1.4.8 do not redact the keyserver bearer token passed as the positional argument to 'keyserver set-token' in the --debug argv dump, because...

• Information disclosure

<1.4.9 · fixed in 1.4.9

openssl-encrypt before 1.4.9 fails to redact the file password in its --debug argv dump when the password is supplied via bundled short-option spellings (e.g. -apHunter2) or abbreviated long-option...

• Information disclosure

<1.4.9 · fixed in 1.4.9

openssl_encrypt (pip package openssl-encrypt) versions 1.4.8 and earlier store an mTLS client private key in cleartext within a world-readable (0644) SharedPreferences file via the desktop GUI's Se...

• Information disclosure

<1.4.9 · fixed in 1.4.9

MongoDB Connector for BI mongodrdl Logs TLS Private-Key Password When Duplicate Options Are Supplied

• MongoDB BI Connector
• Information disclosure

OpenRemote before 1.28.0 Cross-Realm Information Disclosure via Notification API

• openremote
• Information disclosure

Airtable MCP CLI before 0.2.5 Credential Disclosure via Unvalidated Configured Endpoint

• airtable-mcp-cli
• Information disclosure

User Enumeration in Seres Software's syWEB

• Seres Software syWEB
• Information disclosure

Finale Lite < 2.21.0 - Subscriber+ Campaign Configuration Disclosure via wcct_quick_view_html

• Finale Lite
• Information disclosure

LearnPress – Sepay Payment < 4.0.3 - Unauthenticated Order Status Disclosure

• LearnPress
• Information disclosure

Workeera Remote Tech Job Board < 1.0.6 - Subscriber+ Arbitrary File Read via Candidate Profile Mass Assignment

• Workeera
• Information disclosure

WP OAuth Server < 6.3.1 - Unauthenticated OAuth Token and User Data Disclosure via Debug Log File

• WP OAuth Server ( Login with WordPress )
• Information disclosure