Все уязвимости

Vite: `server.fs.deny` bypassed with queries

baserCMS: Encoded path traversal bypass in the theme file API

Zimbra Collaboration Suite Email HTML Sanitizer Bypass via Hostname Canonicalization

Varnish Cache before 8.0.1 and Varnish Enterprise before 6.0.16r12, in certain unchecked req.url sce

fast-uri vulnerable to URI scheme spoofing via percent-encoded scheme decoding

n8n before 2.41.4 and 2.42.1 Send-and-Wait HMAC Signature Bypass via Waiting-Webhook

ProjectSend 2.0.0 before 2.7.0 Path Validation Bypass via Orphan File Import/Delete

OpenNext Cloudflare: Cache interception can bypass middleware protection for encoded paths

PeaZip before 11.3.0, in a non-default configuration, is vulnerable to OS command injection via a fi

Crafted Git build source can bypass certain policy validation

OpenClaw before 2026.8.1 Authentication Bypass via File URL

PyJWT: Non-canonical signature segments enable raw-token revocation bypass

stoatchat before 0.15.5 Username Validation Bypass via Unicode Sanitization

Lemonldap::NG::Handler versions from 2.0.0 before 2.16.10, from 2.17.0 before 2.21.6, from 2.22.0 before 2.23.4 for Perl allow an equivalent spelling of a path to bypass the locationRules that restrict it

Input Leap (aka input-leap) through 3.0.3, when the non-default --enable-drag-drop option is used on

django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in

cosmicstack-labs mercury-agent Shell Command Execution permissions.ts checkShellCommand validate before canonicalize

SEP sesam before 5.2.0.24 mishandles User Authorization with MFA. If AD authentication is configured

jupyterlab: PyPI extension blocklist package-name canonicalization bypass

NextAuth.js: Email normalizer validates the address before Unicode normalization, allowing a homoglyph @ bypass

Fedify has an LD-Signature Bypass via JSON-LD Named-Graph Restructuring

Hono has incorrect IP matching in ipRestriction() for IPv4-mapped IPv6 addresses

Vite has a `server.fs.deny` bypass with queries

Ash.Type.CiString validates length and match constraints before case folding, allowing constraint bypass

The cohttp package before 6.3.0 for OCaml allows directory traversal.

CSS sanitizer bypass in Pentestify report themes allows forced outbound requests

AnythingLLM: Password recovery accepts one recovery code twice after whitespace normalization

Guzzle: Noncanonical cookie domain keeps subdomain scope

Guzzle: Noncanonical host can bypass host-based checks

Copier: Percent-encoded dot segments in template URLs can allow trusted-prefix escape (Incomplete fix for trust-prefix bypass)