VulnCheck

Perry < 0.5.1166 JWT Expiration Bypass via verify_decode

WACRM Authorization Bypass via Automation Engine Endpoint

Typemill < 2.24.0 Path Traversal via ControllerApiImage::getPagemedia()

Medplum < 5.1.14 SSRF via FHIR Subscription Endpoint

Spatie Laravel Media Library < 11.23.0 File Upload Restriction Bypass via FileAdder.php

Spatie Laravel Media Library < 11.23.0 SSRF via addMediaFromUrl()

KanaDojo < 0.1.18 Command Injection via patchNotesData.json in release.yml

KanaDojo < 0.1.18 Sandbox Escape RCE via messages.cjs

OpenMed < 1.5.2 Remote Code Execution via PII Model Loading

Tiptap for PHP < 2.1.1 DoS via Malformed href Attribute