rexpository

vLLM 0.19.0 before 0.24.0 Audio Decompression Bomb DoS via Chat Completions

ImageMagick before 7.1.2-32 Policy Bypass via -script Operation

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Code Injection via MVG Decoder

ImageMagick before 7.1.2-32 TOCTOU Symlink Race Path Policy Bypass via magick script

SurrealDB 3.0.0 before 3.3.0 Cross-Tenant Record Read via RETURN FETCH

SiYuan before v3.8.4 Missing Authorization via siyuan-send-windows

SiYuan before v3.8.4 Stored XSS via Unescaped Flashcard Content

OpenClaw before 2026.8.2 Denial of Service via Browser Relay

OpenClaw before 2026.7.1 Authentication Bypass via Memory Dreaming

Netty 4.2.11 through 4.2.17 QUIC Hostname Verification Bypass