Free plan, no credit card, first error in minutes.
Create a Project for FreeDiscover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
An argument injection vulnerability in the Claude Agent SDK for Python allows arbitrary command execution at CLI startup when an application passes untrusted input as a session ID. Users are advised to upgrade to the latest package version.
Exposing Pipecat's development runner to untrusted networks allows unauthenticated callers to create bot sessions and paid Daily rooms. This can lead to unauthorized bot interactions, local resource exhaustion, and consumption of third-party service quotas.
A path traversal vulnerability in ClickMigrate allows an attacker who controls the migration name argument to create a file in an arbitrary writable location outside the intended migrations directory.
Apprise HTTP notification plugins and loaders follow redirects by default while re-sending configured authentication headers. If a configured destination is compromised or subjected to a man-in-the-middle attack, secrets can be leaked to an arbitrary cross-origin host.
A path traversal vulnerability in Shiny for Python allows unauthenticated remote attackers to probe file existence and JSON validity via bookmark restoration, or read arbitrary files when server-side bookmarking and file inputs are configured.
An authorization bypass in pacioli's document-layer consent gate allows nested operations to cancel caller-specified pre-existing documents without human consent markers or denial audit entries.
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.