| N/A | Tool call execution through user prompt injection (CSRF) of the llama-server Web UI |
| N/A | User prompt CSRF on Mistral Le Chat |
| N/A | User prompt CSRF on Grok |
| CVE-2026-62995 GHSA-5jhw-7jv7-qcqq | joserfc accepts JWT with padding, leading to JWT malleability |
| CVE-2026-50571, GHSA-f4hw-w632-m6wh | Risk of reflected cross site scripting and Content-Security-Policy bypass in the WebSub intent verification |
| N/A | Host-ambiguous requests through $http_host in NGINX |
| N/A | Host-ambiguous requests through Debian's NGINX proxy_params |
| N/A | Pass-the-permission-ticket vulnerability in UMA 2.0 |
| N/A | Arbitrary code execution through kitty-open.desktop file association |
| CVE-2023-28371 | Arbitrary file write (through directory traversal) in Stellarium |
| CVE-2023-27986 | Emacs Lisp injection in Emacs |
| CVE-2023-27985 | Shell command injection in Emacs |
| CVE-2023-26314 | Arbitrary code execution through dangerous file association in Debian Mono package |
| N/A | DNS rebinding vulnerability on Hetty's API |
| CVE-2022-27820 | Lack of X.509 TLS certificate validation in OWASP ZAP |
| CVE-2022-26505 | DNS rebinding in ReadyMedia/MiniDLNA |
| CVE-2022-28108 | CSRF on Selenium standalone server |
| CVE-2022-28109 | DNS rebinding on Selenium standalone server |
| CVE-2021-33516 | DNS rebinding in GUPnP |
| CVE-2021-32563 | Local program invocation without confirmation through Thunar command-line argument |
| N/A | Local program invocation without confirmation through PCManFM command-line argument |
| N/A | Local program invocation without confirmation through PCManFM-Qt command-line argument |
| N/A | File type description spoofing in Firefox and Thunderbird |
| N/A | Firefox and Thunderbird accept special Freedesktop MIME types |
| CVE-2021-31718 | DNS rebinding in npupnp |
| CVE-2021-29462 | DNS rebinding in pupnp |
| CVE-2021-4138 | DNS rebinding in GeckoDriver |
| N/A | DNS rebinding and CSRF on Samsung TV DIAL implementation |
| N/A | DNS rebinding vulnerability in Samsung SmartTV UPnP |
| CVE-2020-26961 | DoH RFC1918 addresses protection bypass using IPv4-mapped address in Firefox |
| CVE-2020-24373 | CSRF in Freebox Server UPnP MediaServer |
| CVE-2020-24374 | DNS rebinding in Freebox v5 modem Web UI |
| CVE-2020-24375 | DNS rebinding in Freebox Server UPnP MediaServer |
| CVE-2020-24376 | DNS rebinding in Freebox UPnP IGD |
| CVE-2020-24377 | DNS rebinding in Freebox Server Web UI |
| CVE-2020-15660 | CSRF to RCE in geckodriver |
| CVE-2020-15271 | Code injection in lookatme |
| CVE-2019-7653 | Code injection in python-rdflib-tools Debian package |
| N/A | CSRF in several YunoHost/BriqueInternet applications |
| CVE-2018-10992 | Shell command injection in lilypond |
| CVE-2017-17523 | Shell command injection in lilypond |
| CVE-2017-18266 | Argument injection in xdg-open |
| CVE-2017-17512 | Argument injection in sensible-browser |