VulnCheck

Laravel-Mediable < 7.0.0 Path Traversal via File::sanitizePath()

WACRM Authorization Bypass via Automation Engine Endpoint

Typemill < 2.24.0 Path Traversal via ControllerApiImage::getPagemedia()

Medplum < 5.1.14 SSRF via FHIR Subscription Endpoint

KanaDojo < 0.1.18 Command Injection via patchNotesData.json in release.yml

KanaDojo < 0.1.18 Sandbox Escape RCE via messages.cjs

Tiptap for PHP < 2.1.1 DoS via Malformed href Attribute

LIVE555 < 2026.04.22 RTSP Server Authorization Bypass via Session Token

AdGuard Home Authentication Bypass via Path Traversal in Admin-Token Cookie

KissFFT Integer Overflow Heap Buffer Overflow via kiss_fftndr_alloc()