Advisory Catalog

Caddy: Remote Admin Authorization Bypass on PKI Endpoints via Prefix-Based Path Matching

Caddy CVE-2026-30852 Fix Bypass

Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing `konghq.com/gatewayclass-unmanaged: 'true'` annotation

Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint

Envoy AI Proxy - MCP Message Smuggling Vulnerability

Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations

Mailpit: Concurrent map read & write in proxy CSS rewriter - remote unauth crash (fatal error: concurrent map read and map write)

Mailpit: Path traversal & arbitrary file write in mailpit dump --http via attacker-controlled message IDs

Mailpit has an incomplete fix for GHSA-6jxm: HTML check still permits SSRF to private/loopback/IMDS via missing IP-filter dialer

Caddy: Remote Admin Authorization Bypass in `/config` API via Array Index Normalization

go-git: Crafted repositories may modify main and submodule .git directories

Algernon: Auto-refresh SSE event server binds to all interfaces with Access-Control-Allow-Origin: * and no authentication

OpenTelemetry eBPF Instrumentation: Log enricher writev path can overread and overwrite user buffers

OpenTelemetry eBPF Instrumentation: CappedConcurrentHashMap leaks keys after removals

OpenTelemetry eBPF Instrumentation: CPU-mismatch fallback uses 256-byte buffer with 8KB size

OpenTelemetry eBPF Instrumentation: Unbounded BPF internal metrics replay can exhaust CPU

OpenTelemetry eBPF Instrumentation: Redis error text is exported in span status messages

OpenTelemetry eBPF Instrumentation: Unsafe fastelf parsing allows malformed ELF to crash agent

Docker: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap

Arcane Backend: OS Command Injection in Volume Browser ListDirectory via path query parameter

Mattermost doesn't enforce slash command trigger-word uniqueness during command updates

Mattermost doesn't verify channel membership when processing AI-assisted message rewrites

Mattermost doesn't validate the X-Requested-With header on the burn-on-read reveal endpoint

Mattermost doesn't check public/private permissions

Mattermost doesn't prevent disclosure of created user password

Mattermost doesn't limit the size of the request body on the start meeting API endpoint

Mattermost does not verify remote cluster channel access when processing shared channel membership removals

Mattermost doesn't check the create_post channel permission during post edit operations

Mattermost doesn't validate 7zip archive structure before processing

Mattermost doesn't validate the response body of proxied images

arnika is affected by medium-severity issues in UDP rotation, PQC handling, and KMS TLS

slack-go `SecretsVerifier` accepts empty signing secret without precondition

Default kuma-cp leaks admin token cross-origin via CORS wildcard + LocalhostIsAdmin

Portainer missing authorization on custom template file endpoint, which exposes template content

Portainer has a path traversal in backup archive extraction that allows arbitrary file write

podinfo: cross-site scripting vulnerability in the /echo and /api/echo endpoints

Fleet: IP spoofing allows bypassing API rate limiting

Fleet vulnerable to OS command injection in software packages

Fleet has a rate limiting bypass via untrusted client IP headers

Grafana: SQL Expressions Read File From Disk

Grafana: Users can generate Service Account tokens after permissions removal

SiYuan has broken access control in `/api/search/{searchAsset,searchTag,searchWidget,searchTemplate}` publish-mode

SiYuan: Broken access control in `/api/tag/getTag` — Reader role can mutate `Conf.Tag.Sort` and persist to disk

Traefik: Gateway API TraefikService backend accepts rest@internal, allowing unauthorized exposure of the REST provider despite providers.rest.insecure=false

go-billy: Lack of depth and cycle detection in symlink resolution may lead to infinite loops and resource exhaustion

HashiCorp Nomad vulnerable to symlink attack

HashiCorp Nomad’s exec2 task driver vulnerable to a symlink attack

Crabbox contains a path traversal vulnerability in the Islo provider's workspace path resolution

Gryph Agents Payload Filter Fails to Strip Tool Payload for Sensitive Content

Casdoor: Arbitrary file write possible through Local File System storage provider