Aikido Vulnerability Database

github.com/jhump/protoreflect is vulnerable to Uncaught Exception in versions 1.0.0 - 1.16.0.

@newrelic/browser-agent is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor in versions 1.259.0 - 1.264.0.

github.com/go-gitea/gitea is vulnerable to Cross-Site Scripting (XSS) in versions 1.20.0 - 1.22.1.

litellm is vulnerable to SQL Injection in versions 1.44.8 - 1.44.16.

langchain is vulnerable to Insertion of Sensitive Information into Log File in versions 0.1.0 - 0.2.17.

ng2-pdfjs-viewer is vulnerable to Cross-site Scripting in all versions.

@adobe/aio-lib-state is vulnerable to Insertion of Sensitive Information into Log File in versions 1.0.0 - 5.0.0.

webdav-servlet is vulnerable to Use of Weak Hash in versions 1.0.0 - 1.2.69.

github.com/hashicorp/vault is vulnerable to Insertion of Sensitive Information into Log File in versions 1.17.3 - 1.17.4.

fluent-bit is vulnerable to Memory Leak in versions 1.0.0 - 3.1.6.

github.com/Clickhouse/Clickhouse-go/v2 is vulnerable to Uncaught Exception in versions 2.0.0 - 2.28.1.

adminjs is vulnerable to Generation of Error Message Containing Sensitive Information in versions 3.3.0 - 7.8.11.

github.com/siderolabs/go-api-signature is vulnerable to Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in versions 0.1.0 - 0.3.4.

django-allauth is vulnerable to Authentication Bypass by Capture-replay in versions 0.61.1 - 64.1.0.

litellm is vulnerable to Improper Input Validation in versions 1.40.15 - 1.44.8.

@syncfusion/ej2-grids is vulnerable to Cross-site Scripting (XSS) in versions 16.3.32 - 26.2.10.

radix-vue is vulnerable to Cross-site Scripting (XSS) in versions 0.1.20 - 1.9.4.

nats-py is vulnerable to Memory Leak in versions 1.0.0 - 2.8.0.