manus-use

phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta Account Enumeration via Guest Comment Endpoint

phpMyFAQ 4.2.0-alpha before 4.2.0-beta Missing Authorization via deleteGroup API

phpMyFAQ 3.2.0-alpha before 4.1.9 and 4.2.0-alpha before 4.2.0-beta TOTP 2FA Bypass via SSO Callbacks

GitPython 3.1.30 before 3.2.0 Command Injection via Remote.pull() Refspec

Better Auth @better-auth/sso before 1.7.3 Authentication Bypass via Personal SSO Providers

Heym 0.0.55 before 0.0.121 Credential Theft via error_workflow_id Field

FreeRDP before 3.32.0 Heap Out-of-Bounds Write in AVC444 YUV444 Combine

Nezha 2.0.13 before 2.3.15 Denial of Service via /api/v1/ws/transfer WebSocket

Nodemailer 3.0.0 before 10.0.13 ReDoS via SMTP AUTH Mechanism Detection Regexes

Nodemailer 3.0.0 before 10.0.10 Denial of Service via SMTP Reply Parsing