Submit #862538: nextlevelbuilder GoClaw 3.13.2 Exposure of Sensitive Information to an Unauthorized Actor (CWE-200) [Accepted]
Submit #862538 / VDB-383813
Vuldb Submit
Submit #862537: unitedbyai DroidClaw 0.5.3 Authorization Bypass Through User-Controlled Key (CWE-639) [Accepted]
Submit #862537 / VDB-383396
Submit #862536: AstrBotDevs AstrBot [Needs Manual Input] (unreleased master branch after commit ae44b912) Incorrect Authorization (CWE-863) [Accepted]
Submit #862536 / VDB-383395
Submit #862512: AstrBotDevs AstrBot 4.25.5 Incorrect Authorization (CWE-863) [Accepted]
Submit #862512 / VDB-383394
Submit #862473: ZJONSSON node-unzipper 0.12.3 Path Traversal [Accepted]
Submit #862473 / VDB-383384
Submit #858829: TOTOLINK A720R V4.1.5cu.630_B20250509 Backdoor [Duplicate]
Submit #858829 / VDB-180225
Submit #799055: ggml-org whisper.cpp commit 95ea8f9b Reachable Assertion [Accepted]
Submit #799055 / VDB-383383
Submit #798905: ggml-org whisper.cpp v1.8.4-58 Heap-based Buffer Overflow [Accepted]
Submit #798905 / VDB-383382
Submit #798504: ggml-org llama.cpp (confirmed on commit e15efe0 / tag b8635+1) Uncontrolled Recursion [Accepted]
Submit #798504 / VDB-383354
Submit #798503: ggml-org llama.cpp confirmed on commit d006858 / 2025-04-03 and commit e15efe0 / tag b8635+1) Reachable Assertion [Accepted]
Submit #798503 / VDB-383353
Submit #873738: github jupyterlab-git Release-v1.9_cuda-12.6_ubuntu-24.04 https://github.com/iot-salzburg/gpu-jupyter/blob/20efdb2e9a3f4f0 [Duplicate]
Submit #873738 / VDB-377029
Submit #862468: GitHub spark V 2.9.4 SparkJava External Static Files Symlink Escape Allows Local File [Accepted]
Submit #862468 / VDB-383321
Submit #862453: mf-yang openclaw-cn 0.2.1 Server-Side Request Forgery (CWE-918) [Accepted]
Submit #862453 / VDB-383320
Submit #862452: mf-yang openclaw-cn 0.2.1 Exposure of Sensitive Information to an Unauthorized Actor (CWE-200) [Accepted]
Submit #862452 / VDB-383319
Submit #862451: NanoCoAI NanoClaw 2.0.64 Improper Authorization (CWE-285) [Accepted]
Submit #862451 / VDB-383075
Submit #862450: NanoCoAI NanoClaw 2.0.64 Missing Authentication for Critical Function (CWE-306) [Accepted]
Submit #862450 / VDB-383074
Submit #862424: NousResearch hermes-agent 9121834b31984c2125738c7243792cbd2dc79df6 (unreleased origin/main, post-v2026.6.5) Authentication Bypass by Spoofing (CWE-290) [Accepted]
Submit #862424 / VDB-383065
Submit #862203: Ne-Lexa php-zip 4.0.2 and prior Path Traversal: '../filedir' [Accepted]
Submit #862203 / VDB-382660
Submit #862025: Tenda CH22 V1.0.0.1 Buffer Overflow [Duplicate]
Submit #862025 / VDB-329902
Submit #862023: codeastro Online Classroom V1.0 SQL Injection [Accepted]
Submit #862023 / VDB-382637
Submit