Advisory Catalog

praktor: Path traversal in Telegram file uploads allows writing outside the agent workspace uploads/ directory (stored instruction injection)

Netfoil doesn't decrement TTL

Arc has unauthenticated application log disclosure via `/api/v1/logs`

Kubeflow Pipelines: Pipeline archive upload allows decompression bomb to exhaust server memory

Kubeflow Pipelines: Run-log endpoint permits unauthorized access to pod logs

Fiber: CORS wildcard origins matched without a dot boundary, allowing credentialed cross-origin reads

imgproxy has integer overflow in imgproxy ICO loader that causes denial of service and may permit remote code execution

imgproxy has out-of-bounds heap read/write in ICO loader BMP header reconstruction that allows unauthenticated remote worker crash

imgproxy has unbounded memory allocation in ICO loader that allows unauthenticated memory-exhaustion DoS via crafted data_size field

anacrolix torrent has unbounded recursion in the bencode decoder that causes stack-overflow crash and CPU-exhaustion DoS

charmbracelet/soft-serve: Race in `SetPrivate` leaves a private repository readable by unauthenticated users

charmbracelet/soft-serve HTTP responses disclose the existence and names of private repositories

cert-manager: Direct ACME Challenge resources can bypass Issuer DNS01 solver policy and use ClusterIssuer DNS credentials

Daptin: ParseAcceptLanguage `_` separator bypass enables >250x CPU amplification via Accept-Language header in LanguageMiddleware

knative.dev/pkg admission webhooks allow unbounded request-body memory exhaustion

Go JOSE: Panics in JSON parsing

Go JOSE: Panic during CBC-HMAC processing

Echo: HTTPS Redirect and HSTS Bypass via Unconditional Trust of Forwarded Scheme Headers

Echo static file middleware route protection bypass via encoded dot-dot traversal

Echo has a Static Middleware Double-Unescape Path Traversal

Echo has Open Redirect via Control-Character Prefix Defeating sanitizeURI

Echo has Arbitrary Scheme Injection in WWWRedirect/NonWWWRedirect Middlewares via X-Forwarded-Proto

Echo's middleware.Static: `%2F`-encoded path bypasses route/group middleware guarding a statically-served path

Echo vulnerable to Reflected Cross-Site Scripting (XSS) via unsanitized JSONP callback in Context.JSONP / Context.JSONPBlob

Echo has Rate Limiter Bypass via Spoofed X-Forwarded-For Header in Default Configuration

Echo has CSRF Protection Bypass via MethodOverride Rewriting POST to Safe Method

Echo: Reverse Proxy Forwards Attacker-Supplied X-Real-IP to Upstream by Default

Caddy has an RFC 7230 §6.1 compliance issue / Hop-by-hop headers that leak through

Avoid quadratic complexity when coalescing text nodes in html in golang.org/x/net

Check all ancestor namespace transitions when rendering raw text in html in golang.org/x/net

Neko: Authorization bypass in legacy WebRTC input handling

Atlantis: OS command injection through PR-controlled Terraform workspace enables RCE during plan

FileBrowser: Symlink following escapes user scope allowing arbitrary file read outside the served directory

Go JOSE: DoS when parsing JWKs that contain RSA keys

CTFer.io's CTFd Terraform Provider allows a local or remote attacker to read team passwords in state as non sensitive values

compress zstd: Panic on two-block frames

SiYuan: MCP file tool's blocklist is incomplete relative to the HTTP file API it claims to align with, exposing publish-mode passwords and other sensitive workspace files

Wails: wildcardPatternToRegex allows Origin bypass via suffix match in BindingsAllowedOrigins

chi: Client IP spoofing in ClientIPFromXFF via X-Forwarded-For

Echo: X-Real-IP extractor trusts the header value instead of the sending peer

Echo: WebSocket proxy can retain connections and handlers after client disconnect

Echo: Decompress permits unbounded gzip expansion in v4

Echo: Rejected WebSocket upgrades can bypass Echo route-level access controls

Echo: BodyDump can discard BodyLimit overflow errors for unknown-length requests

Echo: BodyDump captures request and response bodies without size limits in v4

SiYuan: Missing consistency check between packageName and repoURL/repoHash in bazaar package install allows overwriting an existing, trusted plugin

SiYuan: A parser differential between the WebSocket keepalive exemption and the session quarantine allows unauthenticated access to the broadcast event stream

SiYuan: authFilePublishAccess distinguishes hidden and forbidden documents from public and nonexistent ones, and issues a publish-auth cookie for documents it reports as forbidden

SiYuan: The publish filter for database backlinks consults the forbidden list instead of the visibility list, disclosing hidden-tier documents to anonymous readers

SiYuan: The publish filter for local storage returns the administrator's entire storage map with only three keys sanitized