Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-53342 State: PUBLISHED Published: 2025-08-14T18:21:56.161Z Last Updated: 2025-08-14T20:04:11.701Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: GoodLayers Products: Modernize Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GoodLayers Modernize allows Stored XSS. This issue affects Modernize: from n/a through 3.4.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/modernize/vulnerability/wordpress-modernize-theme-theme-3-4-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-53343 State: PUBLISHED Published: 2025-08-14T18:21:55.110Z Last Updated: 2025-08-14T20:03:47.683Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: GoodLayers Products: Modernize Problem Types: CWE-862 Description: Missing Authorization vulnerability in GoodLayers Modernize allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Modernize: from n/a through 3.4.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/modernize/vulnerability/wordpress-modernize-theme-theme-3-4-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-53347 State: PUBLISHED Published: 2025-08-14T18:21:54.102Z Last Updated: 2025-08-14T20:03:21.089Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Laborator Products: Kalium Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Laborator Kalium allows Cross Site Request Forgery. This issue affects Kalium: from n/a through 3.18.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/kalium/vulnerability/wordpress-kalium-theme-plugin-3-18-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-53348 State: PUBLISHED Published: 2025-09-09T16:25:33.561Z Last Updated: 2025-09-09T18:40:47.414Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Laborator Products: Kalium Problem Types: CWE-862 Description: Missing Authorization vulnerability in Laborator Kalium. This issue affects Kalium: from n/a through 3.18.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/kalium/vulnerability/wordpress-kalium-theme-3-18-3-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-53349 State: PUBLISHED Published: 2025-11-06T15:54:06.581Z Last Updated: 2025-11-13T10:33:42.394Z Vendors: Laborator Products: Kalium Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Laborator Kalium kalium allows Reflected XSS.This issue affects Kalium: from n/a through <= 3.18.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Theme/kalium/vulnerability/wordpress-kalium-theme-3-18-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-53350 State: PUBLISHED Published: 2025-10-22T14:32:31.360Z Last Updated: 2025-11-13T10:33:42.325Z Vendors: webjunk Products: Calendar Plus Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webjunk Calendar Plus calendar-plus allows Reflected XSS.This issue affects Calendar Plus: from n/a through <= 1.2.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/calendar-plus/vulnerability/wordpress-calendar-plus-plugin-1-2-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-53351 State: PUBLISHED Published: 2025-10-22T14:32:31.652Z Last Updated: 2025-11-13T10:33:42.329Z Vendors: Fidelo Software GmbH Products: Fidelo Snippet Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fidelo Software GmbH Fidelo Snippet thebing-snippet allows Reflected XSS.This issue affects Fidelo Snippet: from n/a through <= 1.12. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/thebing-snippet/vulnerability/wordpress-fidelo-snippet-plugin-1-12-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-53352 State: PUBLISHED Published: 2025-10-22T14:32:31.986Z Last Updated: 2025-11-13T10:33:42.326Z Vendors: G5Theme Products: Grid Plus Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in G5Theme Grid Plus grid-plus allows Reflected XSS.This issue affects Grid Plus: from n/a through <= 3.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/grid-plus/vulnerability/wordpress-grid-plus-plugin-3-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-53354 State: PUBLISHED Published: 2025-10-03T19:32:21.521Z Last Updated: 2025-10-03T19:42:40.273Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: zauberzeug Products: nicegui Problem Types: CWE-79 Description: NiceGUI is a Python-based UI framework. Versions 2.24.2 and below are at risk for Cross-Site Scripting (XSS) when developers render unescaped user input into the DOM using ui.html(). NiceGUI did not enforce HTML or JavaScript sanitization, so applications that directly combine components like ui.input() with ui.html() or ui.chat_message with HTML content without escaping may allow attackers to execute arbitrary JavaScript in the user’s
or ui.chat_message with HTML content without escaping may allow attackers to execute arbitrary JavaScript in the user’s browser. Applications that do not pass untrusted input into ui.html() are not affected. This issue is fixed in version 3.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/zauberzeug/nicegui/security/advisories/GHSA-8c95-hpq2-w46f - https://github.com/zauberzeug/nicegui/commit/4673dc35c94a0c7339e2164378b0977332e60775
CVE ID: CVE-2025-53355 State: PUBLISHED Published: 2025-07-08T19:49:34.966Z Last Updated: 2025-07-09T13:31:37.609Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Flux159 Products: mcp-server-kubernetes Problem Types: CWE-77 Description: MCP Server Kubernetes is an MCP Server that can connect to a Kubernetes cluster and manage it. A command injection vulnerability exists in the mcp-server-kubernetes MCP Server. The vulnerability is caused by the unsanitized use of input parameters within a call to child_process.execSync, enabling an attacker to inject arbitrary system commands. Successful exploitation can lead to remote code execution under the server process'
to inject arbitrary system commands. Successful exploitation can lead to remote code execution under the server process's privileges. This vulnerability is fixed in 2.5.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Flux159/mcp-server-kubernetes/security/advisories/GHSA-gjv4-ghm7-q58q - https://github.com/Flux159/mcp-server-kubernetes/commit/ab165f5a0eea917fef5dbae954506fff6f4bf514 - https://github.com/cyanheads/git-mcp-server/commit/0dbd6995ccdf76ab770b58013034365b2d06c4d9
CVE ID: CVE-2025-53357 State: PUBLISHED Published: 2025-07-30T14:17:58.803Z Last Updated: 2025-07-30T19:31:11.425Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: glpi-project Products: glpi Problem Types: CWE-639 Description: GLPI, which stands for Gestionnaire Libre de Parc Informatique, is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. In versions 0.78 through 10.0.18, a connected user can alter the reservations of another user. This is fixed in version 10.0.19. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/glpi-project/glpi/security/
10.0.19. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/glpi-project/glpi/security/advisories/GHSA-x9mj-822q-6cf8
CVE ID: CVE-2025-53358 State: PUBLISHED Published: 2025-07-02T15:38:35.195Z Last Updated: 2025-07-02T16:00:23.131Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Cinnamon Products: kotaemon Problem Types: CWE-22 Description: kotaemon is an open-source RAG-based tool for document comprehension. From versions 0.10.6 and prior, in libs/ktem/ktem/index/file/ui.py, the index_fn method accepts both URLs and local file paths without validation. The pipeline streams these paths directly and stores them, enabling attackers to traverse directories (e.g. ../../../../../.env) and exfiltrate sensitive files. This issue has been patched via commit 37cdc28, in version 0.1
e.g. ../../../../../.env) and exfiltrate sensitive files. This issue has been patched via commit 37cdc28, in version 0.10.7 which has not been made public at time of publication. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Cinnamon/kotaemon/security/advisories/GHSA-jw4w-xcvf-jq5x - https://github.com/Cinnamon/kotaemon/pull/755 - https://github.com/Cinnamon/kotaemon/commit/37cdc28ceb46e505d25221584daf1fe61e26b2cc
CVE ID: CVE-2025-53359 State: PUBLISHED Published: 2025-07-02T15:55:18.026Z Last Updated: 2025-07-03T13:18:13.420Z Vendors: rust-ethereum Products: ethereum Problem Types: CWE-754 Description: ethereum is a common ethereum structs for Rust. Prior to ethereum crate v0.18.0, signature malleability (according to EIP-2) was only checked for "legacy" transactions, but not for EIP-2930, EIP-1559 and EIP-7702 transactions. This is a specification deviation. The signature malleability itself is not a security issue and not as high of a risk if the ethereum crate is used on a single-implementation blockchain. This issue has been patched in version v0.18.0. A workaround for this issue involves manuall
-implementation blockchain. This issue has been patched in version v0.18.0. A workaround for this issue involves manually checking transaction malleability outside of the crate, however upgrading is recommended. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/rust-ethereum/ethereum/security/advisories/GHSA-3w94-vq2x-v5wr - https://github.com/rust-ethereum/ethereum/pull/67 - https://github.com/rust-ethereum/ethereum/commit/2dd9d1d5d0936ec7350093ff3a5a7169a349db77
CVE ID: CVE-2025-53360 State: PUBLISHED Published: 2025-11-18T16:12:15.116Z Last Updated: 2025-11-18T18:22:25.605Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: pluginsGLPI Products: databaseinventory Problem Types: CWE-284 Description: pluginsGLPI's Database Inventory Plugin "manages" the Teclib' inventory agents in order to perform an inventory of the databases present on the workstation. In versions prior to 1.0.3, any authenticated user could send requests to agents. This issue has been patched in version 1.0.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/pluginsGLPI/databaseinventory/security/advisories/GHSA-5j5
es: - CISA ADP Vulnrichment: References: - https://github.com/pluginsGLPI/databaseinventory/security/advisories/GHSA-5j5j-xr62-jr58 - https://github.com/pluginsGLPI/databaseinventory/commit/0a376a0c6f4142e11ea518faefe95c01b176fd87 - https://github.com/pluginsGLPI/databaseinventory/commit/7dcad1efb6ee84e9cffb3b446cdb47dc0be1091e - https://github.com/pluginsGLPI/databaseinventory/commit/e9d4474acdab4141a6f4798cdd406b0d04480269
CVE ID: CVE-2025-53363 State: PUBLISHED Published: 2025-08-22T15:18:01.533Z Last Updated: 2025-08-22T15:52:20.965Z Vendors: donknap Products: dpanel Problem Types: CWE-73, CWE-22 Description: dpanel is an open source server management panel written in Go. In versions 1.2.0 through 1.7.2, dpanel allows authenticated users to read arbitrary files from the server via the /api/app/compose/get-from-uri API endpoint. The vulnerability exists in the GetFromUri function in app/application/http/controller/compose.go, where the uri parameter is passed directly to os.ReadFile without proper validation or access control. A logged-in attacker can exploit this flaw to read sensitive files from the host sy
proper validation or access control. A logged-in attacker can exploit this flaw to read sensitive files from the host system, leading to information disclosure. No patched version is available as of this writing. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/donknap/dpanel/security/advisories/GHSA-gcqf-pxgg-gw8q
CVE ID: CVE-2025-53364 State: PUBLISHED Published: 2025-07-10T15:18:24.855Z Last Updated: 2025-07-10T15:52:47.570Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: parse-community Products: parse-server Problem Types: CWE-497 Description: Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Starting in 5.3.0 and before 7.5.3 and 8.2.2, the Parse Server GraphQL API previously allowed public access to the GraphQL schema without requiring a session token or the master key. While schema introspection reveals only metadata and not actual data, this metadata can still expand the potential attack surface. This vulne
ction reveals only metadata and not actual data, this metadata can still expand the potential attack surface. This vulnerability is fixed in 7.5.3 and 8.2.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/parse-community/parse-server/security/advisories/GHSA-48q3-prgv-gm4w - https://github.com/parse-community/parse-server/pull/9819 - https://github.com/parse-community/parse-server/pull/9820
CVE ID: CVE-2025-53365 State: PUBLISHED Published: 2025-07-04T22:03:46.893Z Last Updated: 2025-07-08T13:53:36.518Z Vendors: modelcontextprotocol Products: python-sdk Problem Types: CWE-248 Description: The MCP Python SDK, called `mcp` on PyPI, is a Python implementation of the Model Context Protocol (MCP). Prior to version 1.10.0, if a client deliberately triggers an exception after establishing a streamable HTTP session, this can lead to an uncaught ClosedResourceError on the server side, causing the server to crash and requiring a restart to restore service. Impact may vary depending on the deployment conditions, and presence of infrastructure-level resilience measures. Version 1.10.0 cont
ry depending on the deployment conditions, and presence of infrastructure-level resilience measures. Version 1.10.0 contains a patch for the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/modelcontextprotocol/python-sdk/security/advisories/GHSA-j975-95f5-7wqh - https://github.com/modelcontextprotocol/python-sdk/pull/967 - https://github.com/modelcontextprotocol/python-sdk/commit/7b420656de48cfdb90b39eb582e60b6d55c2f891
CVE ID: CVE-2025-53366 State: PUBLISHED Published: 2025-07-04T22:05:02.975Z Last Updated: 2025-07-08T13:52:28.447Z Vendors: modelcontextprotocol Products: python-sdk Problem Types: CWE-248 Description: The MCP Python SDK, called `mcp` on PyPI, is a Python implementation of the Model Context Protocol (MCP). Prior to version 1.9.4, a validation error in the MCP SDK can cause an unhandled exception when processing malformed requests, resulting in service unavailability (500 errors) until manually restarted. Impact may vary depending on the deployment conditions, and presence of infrastructure-level resilience measures. Version 1.9.4 contains a patch for the issue. Additional Analyst Notes: - CI
f infrastructure-level resilience measures. Version 1.9.4 contains a patch for the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/modelcontextprotocol/python-sdk/security/advisories/GHSA-3qhf-m339-9g5v - https://github.com/modelcontextprotocol/python-sdk/pull/822 - https://github.com/modelcontextprotocol/python-sdk/commit/29c69e6a47d0104d0afcea6ac35e7ab02fde809a
CVE ID: CVE-2025-53367 State: PUBLISHED Published: 2025-07-03T21:07:49.075Z Last Updated: 2025-11-04T21:11:47.600Z Vendors: DjvuNet Products: DjVuLibre Problem Types: CWE-787, CWE-125 Description: DjVuLibre is a GPL implementation of DjVu, a web-centric format for distributing documents and images. Prior to version 3.5.29, the MMRDecoder::scanruns method is affected by an OOB-write vulnerability, because it does not check that the xr pointer stays within the bounds of the allocated buffer. This can lead to writes beyond the allocated memory, resulting in a heap corruption condition. An out-of-bounds read with pr is also possible for the same reason. This issue has been patched in version 3.5
ondition. An out-of-bounds read with pr is also possible for the same reason. This issue has been patched in version 3.5.29. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://securitylab.github.com/advisories/GHSL-2025-055_DjVuLibre/ - https://github.blog/security/vulnerability-research/cve-2025-53367-an-exploitable-out-of-bounds-write-in-djvulibre - https://github.com/github/securitylab/tree/main/SecurityExploits/DjVuLibre/MMRDecoder_scanruns_CVE-2025-53367 - https://sourceforge.net/p/djvu/djvulibre-git/ci/33f645196593d70bd5e37f55b63886c31c82c3da - https://www.openwall.com/lists/oss-security/2025/07/03/1
CVE ID: CVE-2025-53368 State: PUBLISHED Published: 2025-07-03T19:34:50.057Z Last Updated: 2025-07-03T19:50:44.553Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L) Vendors: StarCitizenTools Products: mediawiki-skins-Citizen Problem Types: CWE-79 Description: Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. From versions 1.9.4 to before 3.4.0, page descriptions are inserted into raw HTML without proper sanitization by the Citizen skin when using the old search bar. Any user with page editing privileges can insert cross-site scripting (XSS) payloads into the DOM for other users who are searching for specific pages. This issue has been pat
site scripting (XSS) payloads into the DOM for other users who are searching for specific pages. This issue has been patched in version 3.4.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/StarCitizenTools/mediawiki-skins-Citizen/security/advisories/GHSA-rq6g-6g94-jfr4 - https://github.com/StarCitizenTools/mediawiki-skins-Citizen/commit/aedbceb3380bb48db6b59e272fc187529c71c8ca - https://github.com/StarCitizenTools/mediawiki-skins-Citizen/releases/tag/v3.4.0
CVE ID: CVE-2025-53369 State: PUBLISHED Published: 2025-07-03T19:57:55.147Z Last Updated: 2025-07-03T20:11:01.943Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L) Vendors: StarCitizenTools Products: mediawiki-extensions-ShortDescription Problem Types: CWE-79 Description: Short Description is a MediaWiki extension that provides local short description support. In version 4.0.0, short descriptions are not properly sanitized before being inserted as HTML using mw.util.addSubtitle, allowing any user to insert arbitrary HTML into the DOM by editing a page. This issue has been patched in version 4.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://
This issue has been patched in version 4.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/StarCitizenTools/mediawiki-extensions-ShortDescription/security/advisories/GHSA-p85q-mww9-gwqf - https://github.com/StarCitizenTools/mediawiki-extensions-ShortDescription/commit/bc4fdbaeb1dff127fb6d08c0d385b64aa128c8f8
CVE ID: CVE-2025-53370 State: PUBLISHED Published: 2025-07-03T19:45:32.163Z Last Updated: 2025-07-07T19:01:01.183Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L) Vendors: StarCitizenTools Products: mediawiki-skins-Citizen Problem Types: CWE-79 Description: Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. From versions 1.9.4 to before 3.4.0, short descriptions set via the ShortDescription extension are inserted as raw HTML by the Citizen skin, allowing any user to insert arbitrary HTML into the DOM by editing a page. This issue has been patched in version 3.4.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://g
This issue has been patched in version 3.4.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/StarCitizenTools/mediawiki-skins-Citizen/security/advisories/GHSA-prmv-7r8c-794g - https://github.com/StarCitizenTools/mediawiki-skins-Citizen/commit/c85a40bddc8651fff66df83a72debddcb34f0521 - https://github.com/StarCitizenTools/mediawiki-skins-Citizen/releases/tag/v3.4.0
CVE ID: CVE-2025-53371 State: PUBLISHED Published: 2025-07-10T17:26:02.512Z Last Updated: 2025-07-10T17:47:56.055Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H) Vendors: miraheze Products: DiscordNotifications Problem Types: CWE-400, CWE-918 Description: DiscordNotifications is an extension for MediaWiki that sends notifications of actions in your Wiki to a Discord channel. DiscordNotifications allows sending requests via curl and file_get_contents to arbitrary URLs set via $wgDiscordIncomingWebhookUrl and $wgDiscordAdditionalIncomingWebhookUrls. This allows for DOS by causing the server to read large files. SSRF is also possible if there are internal unprotected
. This allows for DOS by causing the server to read large files. SSRF is also possible if there are internal unprotected APIs that can be accessed using HTTP POST requests, which could also possibly lead to RCE. This vulnerability is fixed in commit 1f20d850cbcce5b15951c7c6127b87b927a5415e. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/miraheze/DiscordNotifications/security/advisories/GHSA-gvfx-p3h5-qf65 - https://github.com/miraheze/DiscordNotifications/commit/1f20d850cbcce5b15951c7c6127b87b927a5415e
CVE ID: CVE-2025-53372 State: PUBLISHED Published: 2025-07-08T14:54:42.419Z Last Updated: 2025-07-08T15:08:00.399Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: alfonsograziano Products: node-code-sandbox-mcp Problem Types: CWE-77 Description: node-code-sandbox-mcp is a Node.js–based Model Context Protocol server that spins up disposable Docker containers to execute arbitrary JavaScript. Prior to 1.3.0, a command injection vulnerability exists in the node-code-sandbox-mcp MCP Server. The vulnerability is caused by the unsanitized use of input parameters within a call to child_process.execSync, enabling an attacker to inject arbitrary system commands. Success
ut parameters within a call to child_process.execSync, enabling an attacker to inject arbitrary system commands. Successful exploitation can lead to remote code execution under the server process's privileges on the host machine, bypassing the sandbox protection of running code inside docker. This vulnerability is fixed in 1.3.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/alfonsograziano/node-code-sandbox-mcp/security/advisories/GHSA-5w57-2ccq-8w95 - https://github.com/alfonsograziano/node-code-sandbox-mcp/commit/e461a74ecb189b268daac0d972c467b49b2abdd2
CVE ID: CVE-2025-53373 State: PUBLISHED Published: 2025-07-07T15:38:42.320Z Last Updated: 2025-07-07T15:47:18.889Z Vendors: ahmed-elgaml11 Products: Natours Problem Types: CWE-640 Description: Natours is a Tour Booking API. The attacker can easily take over any victim account by injecting an attacker-controlled server domain in the Host header when requesting the /forgetpassword endpoint. This vulnerability is fixed with commit 7401793a8d9ed0f0c250c4e0ee2815d685d7a70b. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ahmed-elgaml11/Natours/security/advisories/GHSA-8gmw-7p75-58qv - https://github.com/ahmed-elgaml11/Natours/commit/7401793a8d9ed0f0c250c4e0ee28
/security/advisories/GHSA-8gmw-7p75-58qv - https://github.com/ahmed-elgaml11/Natours/commit/7401793a8d9ed0f0c250c4e0ee2815d685d7a70b