manus-use

ArcadeDB before 26.8.1 Authentication Bypass via Async Command

Grav before 1.0.13 API-key scope cap bypass via DemoController

Grav before 1.0.13 API Key Scope Bypass via InvitationsController

Grav 1.0.6 through 1.0.11 Privilege Escalation via Scoped API Keys

GitPython before 3.1.54 Remote Code Execution via --template

Network-AI SandboxPolicy before 5.15.1 Blocklist Bypass via Quote Mismatch

filebrowser before 2.63.19 Out-of-Scope File Deletion via Symlink

GitPython before 3.1.54 Remote Code Execution via kwarg value smuggling

GitPython before 3.1.56 Arbitrary File Truncation via Commit.count

Grav before 1.0.13 API-key scope cap bypass via ReportsController