Submit #837600: Browserbase Browserbase Skills latest main branch prior to fix (tested May 2026) Information Disclosure / Insecure File Permissions [Accepted]
Submit #837600 / VDB-372613
Vuldb Submit
Submit #837582: langflow-ai/langflow - `Langflow bundle URL loading` - `custom component discovery/import path` <=1.9.3 Remote Code Execution / Untrusted Code Loading [Accepted]
Submit #837582 / VDB-372612
Submit #837578: FlowiseAI/Flowise - `packages/components/nodes/documentloaders/S3/S3.ts` - `S3Directory / S3File document loader temporary-file handling` 3.1.2 Path Traversal / Arbitrary Local File Write / Unsafe Cleanup [Accepted]
Submit #837578 / VDB-372611
Submit #837577: coollabsio/coolify - `Coolify deployment image parsing / Docker pull command construction` - `Docker image reference fields` v4.x OS Command Injection [Accepted]
Submit #837577 / VDB-372609
Submit #837561: COMFAST CF-WR631AX V3-V2.7.0.8 OS Command Injection [Accepted]
Submit #837561 / VDB-372608
Submit #837554: appwrite - `src/Appwrite/Platform/Modules/Avatars/Http/Favicon/Get.php` - `utopia-php/fetch redirect handling` <=1.9.0 Server-Side Request Forgery via Redirect [Duplicate]
Submit #837554 / VDB-224696
Submit #837553: activepieces Component: see affected components below 0.83.1 Server-Side Request Forgery (SSRF) [Accepted]
Submit #837553 / VDB-372607
Submit #837203: Radware Cyber Controller <=~10.11.0 Cross Site Scripting [Accepted]
Submit #837203 / VDB-372606
Submit #837175: Kortix AI Suna < 0.8.39 DOM-XSS, Open Redirect [Accepted]
Submit #837175 / VDB-372605
Submit #836674: EDIMAX BR6478ACV2 BR6478ACV2_v1.23 Command Injection [Accepted]
Submit #836674 / VDB-372604
Submit #836673: EDIMAX BR6478ACV2 BR6478ACV2_v1.23 Command Injection [Accepted]
Submit #836673 / VDB-372603
Submit #836672: EDIMAX BR6478ACV2 BR6478ACV2_v1.23 Command Injection [Accepted]
Submit #836672 / VDB-372602
Submit #836669: EDIMAX BR6478ACV2 BR6478ACV2_v1.23 Command Injection [Accepted]
Submit #836669 / VDB-372601
Submit #836668: EDIMAX BR6478ACV2 BR6478ACV2_v1.23 Buffer Overflow [Accepted]
Submit #836668 / VDB-372600
Submit #836273: DCMTK 3.7.0 and below Heap-based Buffer Overflow [Accepted]
Submit #836273 / VDB-372599
Submit #836105: lemonldap lemonldap-ng ca7af863ac5f60d127ba01e8661c0365be374d4b Open Redirect [Accepted]
Submit #836105 / VDB-372598
Submit #811291: litellm <= 1.82.2 Exposure of Sensitive Information to an Unauthorized Actor (CWE-200) [Accepted]
Submit #811291 / VDB-372561
Submit #811290: litellm latest Server-Side Request Forgery (SSRF) (CWE-918) [Accepted]
Submit #811290 / VDB-372560
Submit #811288: litellm <= 1.82.5 Incorrect Authorization (CWE-863) [Accepted]
Submit #811288 / VDB-372559
Submit #811287: litellm <= 1.82.2 Insufficient Session Expiration (CWE-613) [Accepted]
Submit #811287 / VDB-372558
Submit