Dependency on Vulnerable Third-Party Component

NETGEAR ProSAFE Network Management System Tomcat Remote Code Execution Vulnerability

• RCE

netgear · prosafe network management software 300May 23, 2024

Net::Dropbear versions before 0.14 for Perl contains a vulnerable version of libtomcrypt

• Pre-auth

atrodo · net::dropbearApr 21, 2026

Vulnerable Components in Azure Access OS

• Pre-auth

azure-access · blu-ic2 firmwareOct 25, 2025

Busybox 1.31.1 - Multiple Known Vulnerabilities

• Pre-auth

azure-access · blu-ic2 firmwareOct 25, 2025

Traefik affected by TLS ClientAuth Bypass on HTTP/3

• Pre-auth
• Auth bypass

Go · github.com/traefik/traefikFeb 20, 2026

GFI Archiver Telerik Web UI Remote Code Execution Vulnerability

• pre-auth RCE

gfi · archiverDec 11, 2024

Perl versions from 5.9.4 before 5.40.4-RC1, from 5.41.0 before 5.42.2-RC1, from 5.43.0 before 5.43.9 contain a vulnerable version of Compress::Raw::Zlib

• Pre-auth

perl · perlMar 29, 2026

UnQLite versions through 0.06 for Perl uses a potentially insecure version of the UnQLite library

• Pre-auth

tokuhirom · unqliteMar 4, 2026

Image::WebP versions before 0.3.0 for Perl bundle a vulnerable version of libwebp

• Pre-auth

zapad · image::webpJul 24, 2026

IO::Compress::Brotli versions prior to 0.007 for Perl have an integer overflow in the bundled Brotli C library

• Pre-auth

timlegge · io::compress::brotliMay 29, 2025

Perl CryptX before version 0.087 contains a dependency that may be susceptible to an integer overflow

• Pre-auth

mik · cryptxJun 11, 2025

CryptX for Perl before version 0.065 contains a dependency that may be susceptible to malformed unicode

• Pre-auth

mik · cryptxJun 11, 2025

Archive::Unzip::Burst from 0.01 through 0.09 for Perl contains a bundled InfoZip library that is affected by several vulnerabilities

• Pre-auth

etj · archive::unzip::burstJun 11, 2025

HCL DFXAnalytics is affected by an Insecure Security Header configuration vulnerability

• Pre-auth

hcltech · dfxanalyticsMay 6, 2026

HCL BigFix Service Management (SM) is susceptible to a Configuration – 'Insecure Use of Base Image Version'

• Pre-auth

hcltech · bigfix service managementMay 20, 2026

FrankenPHP has delayed propagation of security fixes in upstream base images

• Pre-auth

Go · github.com/dunglas/frankenphpFeb 5, 2026

hermes-management is vulnerable to RCE due to Apache commons-jxpath

• pre-auth RCE

Maven · pl.allegro.tech.hermes:hermes-managementSep 17, 2024

CVE-2025-24357 Malicious model remote code execution fix bypass with PyTorch < 2.6.0

• pre-auth RCE

PyPI · vllmApr 23, 2025

Fiona affected by CVE-2023-45853 related to MiniZip madler-zlib

• Pre-auth

PyPI · fionaJul 16, 2024

Axios supply chain attack - dependency in @lightdash/cli may resolve to compromised axios versions

• Pre-auth

npm · @lightdash/cliApr 2, 2026

Vasion Print (formerly PrinterLogic) Use of Outdated, End-Of-Life, and Vulnerable Third-Party Components

• Pre-auth

vasion · virtual appliance applicationSep 19, 2025

PostgreSQL Upgrade from v10 to v17.4 in AxxonSoft Axxon One (C-Werk) 2.0.8 and earlier to Address Multiple Vulnerabilities

• pre-auth RCE

axxonsoft · axxon oneSep 10, 2025

SAML authentication bypass due to missing validation on unsigned SAML messages

• Pre-auth
• Auth bypass

Maven · com.linecorp.centraldogma:centraldogma-server-auth-samlFeb 26, 2024

Traefik affected by Go HTTP Request Smuggling Vulnerability

• Pre-auth

Go · github.com/traefik/traefik/v2Apr 18, 2025

File Browser has risk of HTTP Request/Response smuggling through vulnerable dependency

• Pre-auth

Go · github.com/filebrowser/filebrowser/v2Nov 13, 2025