Advisory Catalog

OpenChoreo: Authorization bypass on WorkflowRun update allows cross-project takeover of workflow runs

Moov signedxml: Unauthenticated denial of service in exclusive XML canonicalization

Distrust compromised intermediate certificates in crypto/x509

agent-router: MCP session resume does not verify the embedded anti-hijacking subject; default Helm seed makes session IDs forgeable

Arcane: Delegated users:update permission allows admin account takeover via password reset (no privilege-hierarchy check)

Arcane: Environment access token bypasses the admin-required authorization gate on `/api/debug/pprof`

kin-openapi openapi3filter: nil-pointer panic in ValidateResponse on a response header declared with content

CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin

gomarkdown/markdown IsSafeURL panics on short URLs

Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation

SFTPGo source-side file-pattern filter bypass during copy operations

containerd: Unpack DoS via repeated opaque whiteouts

Distribution: Client `manifests.Get()` does not verify returned content against requested digest

containerd CRI plugin: Checkpoint restore bypasses destination security context

kin-openapi: Incomplete Fix for GHSA-p6wj-qrr4-pgh5: Three Unpatched nil-Items Panic Paths in openapi3filter

kin-openapi: Uncontrolled Recursion on Circular allOf/anyOf/oneOf Schemas Causes Fatal Process Crash

kin-openapi: YAML NaN/Inf Values Bypass Built-in Guards and Panic via OAS 3.1 Validation Path

Talos Linux: Support bundle does not redact registry credentials

KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication

Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks

kin-openapi: ValidationHandler security-requirement bypass via encoded-path operation confusion

kin-openapi deepObject query decoding repeatedly compiles an invariant regular expression

Dgraph: Zero Unauthenticated HTTP Admin removeNode Denial of Service

Vitess vttablet /twopcz reflected XSS

kin-openapi spec loader panics on a self-referential additionalProperties $ref (nil-pointer DoS)

kin-openapi: Unauthenticated panic (DoS) in openapi3filter legacy router via non-canonical/unsupported HTTP method on a static path

Gotify: Insufficiently Protected Password Change endpoint

Nezha Monitoring: Whole-instance DoS in Nezha dashboard: a member can crash the process for every tenant

kin-openapi: Nil-pointer dereference panic in openapi3filter for OpenAPI 3.1 array schemas missing items

FrankenPHP: Cross-request PHP session ID leak in worker mode when the session extension is a shared module

SFTPGo: Denial of service via malformed SSH channel request

Nginx UI: OTP secure-session step-up can be bypassed via MCP configuration tools

Nginx UI: Standalone short tokens survive administrative revocation in cache and authenticate again after account re-enable

Nginx UI: nginx config directive denylist (ValidateConfigFile) is bypassable via same-line ";" separation → authenticated directive injection (RCE on the official image)

Nginx UI: Casdoor SSO callback uses a constant `state` parameter (login CSRF)

Nginx UI OTP secure-session step-up is missing on sensitive mutation routes

Nginx UI: Account Takeover via Missing `RequireSecureSession` on User Management Endpoint

Nginx UI: TOTP / passkey enrolment requires no re-authentication, enabling persistent account takeover

Nginx UI: MCP `nginx_config_add` Bypasses Directive Validation — Authenticated RCE

Nginx UI: MCP nginx_config_add skips config directive validation → authenticated nginx directive injection (RCE on the official image)

Nginx UI: Auto backup name allows path traversal outside validated storage path

Nginx UI: MCP configuration tools bypass restricted directive validation and allow secondary authenticated users to execute NJS in Nginx worker context

Sliver: Unauthenticated Memory Exhaustion Denial of Service in Sliver HTTP(S) Listener PNG Decoder

Terragrunt catalog predictable temp symlink clobber

GitHub CLI allows attestation verification bypass through unescaped regex metacharacters

GitHub CLI allows path traversal through unescaped request URL components

GitHub CLI partially discloses authentication tokens in `gh auth status` output

Vikunja: Permissive Cross-domain Security Policy trusts every localhost origin which should not be trusted

Vikunja: Write-level project members can delete admin-tier link shares through an unloaded permission check

Vikunja: Explicit lower-permission share on a sub-project is silently overridden by an inherited parent permission (broken access control / privilege-management regression in v2.6.0)