CVE-2022-36038

CircuitVerse is an open-source platform which allows users to construct digital logic circuits online. A remote code execution (RCE) vulnerability in CircuitVerse allows authenticated attackers to execute arbitrary code via specially crafted JSON payloads. This issue may lead to Remote Code Execution (RCE). A patch is available in commit number 7b3023a99499a7675f10f2c1d9effdf10c35fb6e. There are currently no known workarounds.

• CWE-502

• https://github.com/CircuitVerse/CircuitVerse/commit/7b3023a99499a7675f10f2c1d9effdf10c35fb6ePatch, Third Party Advisory
• https://github.com/CircuitVerse/CircuitVerse/security/advisories/GHSA-8c8q-4h7g-4rp3Patch, Third Party Advisory
• https://github.com/CircuitVerse/CircuitVerse/commit/7b3023a99499a7675f10f2c1d9effdf10c35fb6ePatch, Third Party Advisory
• https://github.com/CircuitVerse/CircuitVerse/security/advisories/GHSA-8c8q-4h7g-4rp3Patch, Third Party Advisory

Published

Sep 6, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-36032ReactPHP HTTP is a streaming HTTP client and server implemen…5.3
• CVE-2022-36033jsoup is a Java HTML parser, built for HTML editing, cleanin…6.1
• CVE-2022-36034nitrado.js is a type safe wrapper for the Nitrado API. Possi…7.5
• CVE-2022-36035Flux is a tool for keeping Kubernetes clusters in sync with …7.8
• CVE-2022-36036mdx-mermaid provides plug and play access to Mermaid in MDX.…7.8
• CVE-2022-36037kirby is a content management system (CMS) that adapts to ma…5.4
• CVE-2022-36039Rizin is a UNIX-like reverse engineering framework and comma…7.8
• CVE-2022-3604The Contact Form Entries WordPress plugin before 1.3.0 does …7.8
• CVE-2022-36040Rizin is a UNIX-like reverse engineering framework and comma…7.8
• CVE-2022-36041Rizin is a UNIX-like reverse engineering framework and comma…7.8
• CVE-2022-36042Rizin is a UNIX-like reverse engineering framework and comma…7.8
• CVE-2022-36043Rizin is a UNIX-like reverse engineering framework and comma…7.8