Advisory Catalog

Open Redirect Bypass in miniflux-v2

Traefik Kubernetes Ingress NGINX provider fails open when auth-secret resolution fails

go.qbee.io/transport: Symlink-chain path traversal in tar extraction (one level outside destination)

Grafana Operator: Privilege escalation from namespace admin to cluster admin via GrafanaDashboard jsonnetLib fileName

Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag

Blocky DNSSEC validation bypass and validation-cache scope pollution

containerd CRI checkpoint restore CDI annotation smuggling

Arbitrary host CRI log file read via symlink following in CRI checkpoint restore

containerd CRI — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull

containerd: CRI checkpoint import allows local image tag poisoning

containerd image-triggered runtime DoS via unbounded group parsing

Hugo: security.http.urls deny rules bypassed by alternate IPv4 encodings (SSRF)

Hugo: Symlink confinement bypass in os.ReadFile

Hugo: XSS via unescaped code-fence language in default code block renderer

OpenTofu: Possible arbitrary file read during certain git operations via a maliciously crafted URL

Entire CLI: Path traversal in checkpoint session metadata allows arbitrary file write during resume/rewind

OpenFGA: OIDC audience validation skipped when --authn-oidc-audience is unset

Tilt: Missing authentication on the network-exposed Tilt HUD server

Tilt: Cross-site WebSocket hijacking of the Tilt HUD stream

Tilt: Unauthenticated pprof debug endpoints on the Tilt HUD server

Canonical MicroCeph: path traversal issue in the remote-import AP

Lack of limit on tile sizes in x/image/tiff in golang.org/x/image

Panic on VP8 alpha channel size mismatch in x/image/webp in golang.org/x/image

Daytona: Path traversal in sandbox volume id mounts arbitrary host paths into the sandbox — cross-tenant data access and host escape

MCP Toolbox for Databases: authenticated authorization bypass

googleapis/mcp-toolbox: authentication bypass vulnerability in the generic opaque token validation path (validateOpaqueToken)

googleapis/mcp-toolbox: authentication bypass vulnerability in the generic opaque token validation path (validateOpaqueToken)

OpenFGA Improper Policy Enforcement

opentelemetry-collector-contrib: githubreceiver silently ignores configured required_headers authentication

opentelemetry-collector-contrib sentryexporter: Path traversal in Sentry exporter via attacker-controlled service.name reaches privileged Sentry API endpoints with operator bearer token

Podman: WORKDIR symlink traversal vulnerability

Heimdall: Forwarded Header Injection via Unsanitized Host Header in Proxy Mode

Heimdall: IP Spoofing via Unvalidated Forwarding Headers

ZITADEL: Missing Token Audience Validation (`aud`) in JWT IdP Provider

ZITADEL: Missing Token Lifecyle Validation (`exp` and `iat`) in JWT IdP Provider

ZITADEL: Missing client_id binding in OIDC authorization code exchange and refresh token flows (RFC 6749 Section 4.1.3 violation)

ZITADEL: Cross-Tenant User Leakage via Recycled Identifiers

Docker MCP Gateway: Argument injection via OCI image label YAML

Gotenberg: SSRF via LibreOffice document processing

ZITADEL: Server-Side Request Forgery (SSRF) and Denylist Bypass in Outgoing HTTP Components

Capsule: Incomplete fix of CVE-2026-30963: singular/plural typo leaves namespaces/finalize unprotected

Gitea: Open Redirect via redirect_to

Gitea: Stored XSS via glTF `extensionsRequired` in Gitea 3D File Viewer

Gitea: Public-only tokens bypass private-resource restrictions on `/api/v1/user` self routes

Gitea: API Fork Missing CanCreateOrgRepo Check Allows Org Secret Exfiltration

Daytona: Cross-tenant data leak in notification WebSocket gateway via unverified organizationId join

Traefik: Kubernetes Gateway crossProviderNamespaces bypass allows HTTPRoute outside the allowlist to expose internal Traefik services

Gitea: Token scope bypass on web archive download endpoint

Gitea: Missing repository-unit authorization on issue-template API endpoints

Gitea: Incomplete CVE-2025-68941 fix: /user/orgs missing checkTokenPublicOnly + switch-case logic flaw