CWE-668 Exposure of Resource to Wrong Sphere

vLLM: Scale-out disaggregated multimodal transport trusts caller-supplied features

vm2: Sandboxed code can read and write host-realm memory via Node's shared Buffer pool

vm2 exposes host HTTPS credentials and TLS traffic through globalAgent

Duplicate Advisory: vm2 exposes host HTTPS credentials and TLS traffic through globalAgent

djust's observability endpoints are network-exposed: the localhost gate is an opt-in middleware the docs omit, and the views enforce only DEBUG

OpenChoreo: Unauthenticated access to data-plane operations via OpenChoreo cluster-gateway management APIs

Craft CMS: Authenticated leak of secret environment variables

Duplicate Advisory: Craft CMS: Authenticated leak of secret environment variables

Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket

Electron: ProtocolResponse.url reuses the default session cache instead of the registering session

Flyto2 Core: ${env.VAR} interpolation reads any env secret despite env.get being denylisted

proot-distro has a Container Isolation Bypass via Crafted Restore Archive

OpenShift GitOps Operator Namespace Isolation Break

File Browser: Improper Access Control Occurs via Pre-Created Public Share for a Non-existent Path

runc vulnerable to container breakout through process.cwd trickery and leaked fds

OpenFGA has cache-key delimiter injection in shared-iterator and v2 iterator that caches enables intra-store authorization-decision poisoning

PraisonAI SandlockSandbox falls back to unrestricted subprocess execution when Landlock is unavailable

@andrea9293/mcp-documentation-server: Web UI API binds to all interfaces without authentication by default

ViewComponent: Reused Component Instances Retain Stale Render Context

open-feature-operator: Cross-namespace FeatureFlagSource and InProcessConfiguration resolution exposes spec contents on multi-tenant clusters

Steeltoe's static JWKS cache shared across schemes and never invalidated

OpenClaw: Sandboxed session spawn could expose the real workspace path to child prompts

TYPO3 ke_search path traversal from arbitrary table configuration input

PraisonAI has Memory State Leakage and Path Traversal in MultiAgent Context Handling

NodeVM observability builtins leak host process and HTTP request data