CWE-706 Use of Incorrectly-Resolved Name or Reference

vm2 Custom Module Resolver Can Bypass the External Package Allowlist by Loading a Colliding Host Package

Duplicate Advisory: vm2 Custom Module Resolver Can Bypass the External Package Allowlist by Loading a Colliding Host Package

NLTK: Stable FrameNet and NKJP readers parse outside-root XML

Traefik has an StripPrefixRegex Middleware Authorization Bypass via Path/RawPath Desync

File Browser: Colliding username normalization gives two users the same home directory

Open WebUI: Any authenticated user can read other users' private notes via Socket.IO

Starlette: Unvalidated request path concatenated into authority poisons request.url.hostname

cp: -R reads device nodes as streams, destroying device semantics

Duplicate Advisory: uutils coreutils Uses Incorrectly-Resolved Name or Reference

pyLoad Has Incomplete Fix for CVE-2026-33509 -storage_folder Bypass via Session Directory in pyLoad

Duplicate Advisory: OpenClaw: Zalo replay dedupe keys could suppress messages across chats or senders

OpenClaw: Zalo webhook replay cache cross-target messageId scope bypass

Hickory DNS's Record Cache Accepts AUTHORITY-Section NS from Sibling Zone via Parent-Pool Zone-Context Elevation

OpenFGA has Improper Policy Enforcement

Duplicate Advisory: OpenClaw Bypasses DM Policy Separation via Synology Chat Webhook Path Collision

OpenClaw: Synology Chat reply delivery could be rebound through username-based user resolution.

OpenClaw's system.run allowlist can be bypassed through an unregistered time dispatch wrapper

fast-jwt: Cache Confusion via cacheKeyBuilder Collisions Can Return Claims From a Different Token (Identity/Authorization Mixup)

srvx is vulnerable to middleware bypass via absolute URI in request line

h3: Missing Path Segment Boundary Check in `mount()` Causes Middleware Execution on Unrelated Prefix-Matching Routes

WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection

opennextjs-cloudflare has SSRF vulnerability via /cdn-cgi/ path normalization bypass

File Browser has a Path-Based Access Control Bypass via Multiple Leading Slashes in URL

Singluarity ineffectively applies selinux / apparmor LSM process labels

Apptainer ineffectively applies selinux and apparmor --security options