CWE-345 Insufficient Verification of Data Authenticity

ckan-mcp-server: DataStore Table UI resource does not validate postMessage origin (in) and posts to targetOrigin "*" (out)

Pipecat: Public exposure of Pipecat’s development runner can allow unauthenticated bot session creation

OmniFaces: Forged combined-resource IDs and related output/push boundaries

Vikunja: OIDC email-fallback account linking ignores email_verified, enabling local-account takeover

Langflow: IP Spoofing Bypass via `X-Forwarded-For` Allowing Remote Configuration Write

PraisonAI: AgentMail webhook lacks signature verification, allowing unauthenticated message injection and sender spoofing

MCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP server

PyJWT accepts inconsistent OKP x/d JWKs, causing public/private key identity confusion

JupyterLab: Cross-site scripting (XSS) in JupyterLab via notebook cells pasted from the system clipboard

PyJWT: PyJWKClient follows redirects when fetching JWKS

Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag

undici vulnerable to caching and replay of unsafe HTTP method responses

Electron: Sandboxed preload code cache can be poisoned by a compromised renderer

FriendsOfFlarum OAuth: Unauthenticated account takeover via unverified email trust in Discord OAuth provider

Picklescan missing detection when calling pytorch function torch.jit.unsupported_tensor_ops.execWrapper

AnyCable: Pusher REST API Does Not Verify Request Body MD5 Enabling Signed-Request Replay with Arbitrary Body

Netty has Insufficient Bailiwick Validation for NS Records

Netty Vulnerable to DNS Cache Poisoning via Missing Bailiwick Checks in CNAME Records

libp2p: PeerStore accepts attacker-signed PeerRecords for a victim peer ID and stores certified attacker addresses

libp2p: Gossipsub StrictSign accepts attacker-signed messages as a victim RSA peer ID

RMCP: Missing Resource Field Validation in OAuth Protected Resource Metadata Discovery

djust: Unsigned client state snapshot is restored as trusted view state (privilege escalation / state injection)

Picklescan is missing detection when calling pytorch function torch.utils._config_module.load_config

CKAN MCP Server: Cache-key canonicalization collision enables cache confusion / poisoning

OpenChoreo: Unauthenticated build/workflow trigger via git-provider confusion (webhook signature bypass)