VulnCheck

Hermes WebUI < 0.51.788 Unauthenticated RCE via Terminal API

NVIDIA SIL GEN3C Unauthenticated RCE via Pickle Deserialization in Inference API

Perry < 0.5.1159 Path Traversal via ArtifactReady WebSocket

Perry < 0.5.1166 JWT Expiration Bypass via verify_decode

Laravel-Mediable < 7.0.0 Stored XSS via SVG File Upload

Laravel-Mediable < 7.0.0 Path Traversal via File::sanitizePath()

WACRM Authorization Bypass via Automation Engine Endpoint

Typemill < 2.24.0 Path Traversal via ControllerApiImage::getPagemedia()

Medplum < 5.1.14 SSRF via FHIR Subscription Endpoint

KanaDojo < 0.1.18 Command Injection via patchNotesData.json in release.yml