CWE-1188 Initialization of a Resource with an Insecure Default

Duplicate Advisory: PraisonAI: Prompt Injection Defense Bypassed for HIGH-Level Threats

Docling has arbitrary file read/write (and command execution when shell-escape is enabled) when rendering untrusted TikZ with the opt-in Tectonic engine

vm2 CLI provides no sandbox isolation - host-realm require() is reachable from sandboxed scripts

Electron: <webview> can enable Node.js integration in Web Workers despite embedder restrictions

Obot: Server-Side Request Forgery via remote MCP server URL

Nuxt OG Image has unauthenticated SSRF via `fonts[].path` URL parameter

NLTK: Default ENFORCE=False Disables All pathsec Security Controls

Duplicate Advisory: [CWE-1188] Default ENFORCE=False Disables All pathsec Security Controls

lmdeploy: Hardcoded trust_remote_code=True is an implicit unsafe remote-code load path with no user opt-out

mcp-shell has a Secure Mode Allowlist Bypass via Default `/bin/bash` Executable

Spring Web Services: Wss4jSecurityInterceptor disables WS-I BSP validation by default

OpenAM Insecure SSO Cookie Initialization

Active Storage has possible arbitrary file read and remote code execution in Active Storage variant processing

DNS Rebinding Protection Disabled by Default in Model Context Protocol Go SDK for Servers Running on Localhost

praisonai-platform 0.1.4 still boots on the hardcoded JWT secret dev-secret-change-me (default-open production guard)

praisonai-platform: default JWT signing secret 'dev-secret-change-me' enables token forgery

npm PraisonAI MCPServer exposes unauthenticated HTTP tools/call

praisonai: recipe serve auth middleware silently disables itself when no secret is set

Model Context Protocol (MCP) Python SDK does not enable DNS rebinding protection by default

Kimai: Default APP_SECRET in Docker Image Enables Cookie Forgery and Account Takeover

SiYuan: Stored XSS to RCE via attribute-view cell rendering in genAVValueHTML()

SiYuan: Stored XSS to RCE via CSS-snippet <style> breakout in renderSnippet()

SiYuan: Path Traversal via Double URL Encoding in /assets/*path (publish mode arbitrary file─read), Incomplete fix of CVE-2026-41894

Better Auth has insecure cryptographic defaults in oidcProvider: alg=none advertised and plain PKCE accepted by default

Milvus: Unauthenticated Access to Restful API on Metrics Port (9091) Leads to Critical System Compromise