VulnCheck

AIT-DSN < 2.2.2 Missing Authentication via SLE API Routes

AIT-GUI < 2.5.1 Missing Authentication via Sessions.create()

SuperPlane < 0.30.0 SMTP Header Injection via Webhook Event Title

SuperPlane < 0.27.0 Broken Object Level Authorization via CanvasService gRPC

Apache Traffic Server: HTTP/2 Content-Length truncation lets a client trigger backend worker-pool exhaustion

OPNsense < 26.1.9 Stored XSS via Certificate Description Field

OPNsense < 26.1.9 Stored XSS via Firewall Rule Description Field

FirmaCheck < 1.3.16 DLL Hijacking via Unvalidated OpenSSL Configuration Path

Flarum < 1.8.16 Session Persistence via Improper Access Token Revocation

Flarum < 1.8.16 Password Reset Token Expiry Bypass via POST /reset