Advisory Catalog

Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest

free5GC's UDR nudr-dr DELETE amf-subscriptions panics on missing UE state via nil interface type assertion (single authenticated request)

free5GC's UDR nudr-dr DELETE amf-subscriptions panics on missing subsId when UE state exists (nil pointer dereference)

free5GC's BSF concurrent PUT /nbsf-management/v1/subscriptions/{subId} crashes the BSF process via concurrent map read/write on Subscriptions

free5GC's PCF npcf-policyauthorization POST /app-sessions panics on suppFeat=1 with missing AfRoutReq via nil pointer dereference

gitsign verify accepts signatures over go-git-normalized bytes, enabling trust confusion on malformed commits

in-toto-golang and in-toto-python have inconsistent negation behavior

Volcano's webhook server vulnerable to OOM due to unbounded HTTP request body size

gitsign --verify panics on empty-certificate PKCS7 and exits 0, bypassing exit-code callers

ExternalSecrets vulnerable to privilege escalation with secret overwriting

MCP Registry has an unauthenticated SSRF: HTTP namespace verification dials 6to4 / NAT64 / site-local IPv6 addresses, bypassing private-address allowlist

MCP Registry vulnerable to stored XSS in catalogue UI via attribute-quote breakout in publisher-controlled `websiteUrl`

MCP Registry has open redirect via protocol-relative path in trailing-slash middleware

Ech0 allows PUT /api/echo/like/:id unauthenticated: anonymous callers to modify any echo's fav_count

Ech0's Unauthenticated Like Endpoint Enables Arbitrary Engagement Metric Inflation

Ech0's RSS feed renders unescaped tag names and raw-HTML markdown, stored XSS against subscribers

Ech0 comment model's Email field returned on public /api/comments endpoints

gittuf's policy can be rolled back to prior valid versions

FileBrowser Vulnerable to Stored XSS via SVG File in Public Share (Missing CSP Header)

ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check

Daptin's Session Management Vulnerability Leads to Insufficient Session Expiration After Password Change

Kubetail has a Cross-Site WebSocket Hijacking issue that allows attacker to read Kubernetes logs from authenticated users

go-ipld-prime's DAG-CBOR and DAG-JSON decoders have unbounded recursion depth

Free5GC AMF Bypasses UE Security Capabilities on NGAP PathSwitchRequest

Gotenberg allows Chromium URL conversion routes to read arbitrary files under /tmp via file:// scheme

Gotenberg has arbitrary PDF read via stampExpression and watermarkExpression in merge, split, and convert routes

Gotenberg's DNS rebinding bypasses SSRF validation on Chromium URL conversion routes

ShellHub has crash-DoS via field injection in filter and sort-by parameters

ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data

ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace

axonflow-sdk-go: Webhook signing-key (HMAC-SHA256) not exposed by SDK type, preventing signature verification

Kyverno policy-reporter-ui has XSS via Stored Property Values in PropertyCard Component

Hatchet affected by cross-tenant information disclosure in `listTasksByDAGIds`

kube-router: GoBGP gRPC Admin Port Exposed on Node Primary IP Without Authentication, Allowing Cluster-Wide BGP Route Injection

Hugo's Node tool execution allows file system access outside the project directory

Velocidex Velociraptor has an Incorrect Authorization issue

Nginx-UI Settings API Exposes Protected Secrets

Velocidex Velociraptor has an off-by-one error

Velocidex Velociraptor has an authorization bypass vulnerability

Prometheus vulnerable to stored XSS via crafted histogram bucket label values in the old web UI heatmap display

Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call

PocketBase vulnerable to account pre-hijacking via OAuth2 unverfied->verified autolinking upgrade

Nginx-UI: Authenticated settings disclosure exposes node.secret and enables trusted-node authentication abuse, backup exfiltration, and restore-based nginx-ui state rollback

Fiber vulnerable to XSS in AutoFormat Content Negotiation

MinIO vulnerable to Path Traversal via msgpack Body in `ReadMultiple` Storage-REST Endpoint

External Secrets Operator has Namespace Isolation Bypass in CAProvider ConfigMap Resolution for SecretStore

ots has a negative expire override that can bypass its secret retention policy

nuts-node has JWT type confusion in v1 access token introspection that allows VP replay as access token

apko `DiscoverKeys` has a panic on non-rsa jwks key that causes crash during key discovery

Distribution's tag deletion bypasses `storage.delete.enabled` configuration