manus-use

Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 Arbitrary File Write via Symlink in Migration Stream

Incus 7.0.1 before 7.0.2 and 7.2.0 before 7.5.0 Project Restriction Bypass via Custom Volume Copy

Incus 7.3.0 before 7.5.0 Project Restriction Bypass via block.create_options

ArcadeDB before 26.10.1 RCE via Gremlin Groovy Engine Missing Authorization

ArcadeDB from 26.8.1 before 26.10.1 Authorization Bypass via ALTER TYPE WITH

Dulwich 0.24.0 before 1.2.8 Symlink Write-Through via porcelain.checkout paths

Dulwich 0.22.5 before 1.2.8 Path Traversal via Stash Pop Symlinks

ArcadeDB from 26.2.1 before 26.10.1 Missing Authorization via Bolt Protocol

OpenPanel before 3.0.0 Missing Authorization in event.bots tRPC Procedure

OpenPanel before 3.0.0 ClickHouse SQL Injection via conversion.service.ts