CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

Dio: Cross-origin redirect leaks sensitive request headers in `dio_http2_adapter`

Apprise forwards configured auth headers across cross-origin HTTP redirects

Vikunja: Assignee email addresses disclosed to read-only project members via the task assignees endpoint

Vikunja: Cross-project task disclosure through subtask expansion

Contao: Protected page content is disclosed to anonymous visitors after contao.search.index_protected is disabled

Vikunja: Link-share token can enumerate users through the v2 API

Duplicate Advisory: Vikunja: Link-share token can enumerate users through the v2 API

Vikunja: Any user can enumerate every team and its members by attaching arbitrary teams to a throwaway project

Duplicate Advisory: Vikunja: Any user can enumerate every team and its members by attaching arbitrary teams to a throwaway project

Vikunja: Read-only project members can obtain any link share's access hash via the single-share read endpoint (v1 and v2) and escalate to the share's permission level

Duplicate Advisory: Vikunja: Read-only project members can obtain any link share's access hash via the single-share read endpoint (v1 and v2) and escalate to the share's permission level

0xJacky/nginx-ui /api/nodes Leaks Cluster Node Tokens and Allows Cross-Node Impersonation as initUser

Mechanize sends credential headers to another origin after a meta refresh

Mechanize sends credential headers to another host after an HTTP redirect

PraisonAI: AgentOS defaults to network-exposed no-auth mode, allowing unauthenticated agent invocation and instruction disclosure

Duplicate Advisory: PraisonAI: AgentOS defaults to network-exposed no-auth mode, allowing unauthenticated agent invocation and instruction disclosure

PraisonAI: Jobs API is unauthenticated by default and allows attacker-controlled webhook SSRF

MariaDB Connector/Node.js exposes uninitialized process memory through malformed GeoJSON parameters

PraisonAI: ContextGatherer include resolution permits absolute and traversal reads outside the workspace

PraisonAI: Project custom command templates can read outside-workspace files into model prompts

PraisonAI: FastContext path resolution permits absolute and traversal reads outside the workspace

PraisonAI: CodeAgent Executes LLM-Generated Code Without Sandboxing and Leaks All Environment Secrets

PraisonAI: DNS rebinding bypass in `web_crawl` SSRF protection allows internal response disclosure

Docling: Crafted DoclingDocument JSON embeds local image files into converted output

Payload external upload trust validation issue