geochen (VulDB User)

Pixelfed OAuth Scope ApiV1Controller.php instancePeers missing authentication

NginxProxyManager nginx-proxy-manager Validate Route certificate.js internalCertificate.validate missing authentication

mealie-recipes Mealie Recipe Action Trigger controller_group_recipe_actions.py payload.model_dump server-side request forgery

chatwoot Shopify OAuth callbacks_controller.rb server-side request forgery

cheshire-cat-ai Cheshire Cat AI custom_auth_handler.py _authorize_http_key missing authentication

StackStorm st2 NoOp RBAC backend actionexecutions.py privileges management

StackStorm st2 API Key auth.py privileges management

Casdoor upload-resource API resource.go missing authentication

Faveo Helpdesk Logo SettingsController.php unlink path traversal

provectus kafka-ui Groovy Code MessagesController.java executeSmartFilterTest code injection