Advisory Catalog

Caddy Defender trusted proxy client IP bypass

FileBrowser Quantum: unauthenticated user share share info

Dasel: Denial of service in dasel selector lexer due to infinite loop on unterminated regex literal

Dasel: Index-out-of-range panic in dasel selector lexer on trailing backslash in quoted string

Coder: PKCS#7 signature bypass in Azure instance identity allows unauthenticated agent token theft

Coder: Unauthenticated SSRF via Azure Instance Identity Endpoint

MCP Gateway: Authority-injection and JWT/session bypass via the unauthenticated router hair-pin "router-key" / "mcp-init-host" path

GitHub CLI: GitHub Actions log output in `gh run view` allows terminal escape sequence injection

Caddy: Remote Admin Authorization Bypass on PKI Endpoints via Prefix-Based Path Matching

Caddy CVE-2026-30852 Fix Bypass

Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing `konghq.com/gatewayclass-unmanaged: 'true'` annotation

Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint

Kopia: RCE via SSH ProxyCommand Injection

Envoy AI Proxy - MCP Message Smuggling Vulnerability

Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation

Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations

Mailpit: Unauthenticated remote memory-exhaustion DoS via unlimited SMTP DATA and /api/v1/send body sizes

Mailpit: Concurrent map read & write in proxy CSS rewriter - remote unauth crash (fatal error: concurrent map read and map write)

Mailpit: Path traversal & arbitrary file write in mailpit dump --http via attacker-controlled message IDs

Mailpit has an incomplete fix for GHSA-6jxm: HTML check still permits SSRF to private/loopback/IMDS via missing IP-filter dialer

Caddy: Remote Admin Authorization Bypass in `/config` API via Array Index Normalization

MCP Registry: OCI validator skips ownership check on upstream rate limits

zrok copy writes attacker-controlled WebDAV paths outside the destination root

go-git: Crafted repositories may modify main and submodule .git directories

gohttp is vulnerable to directory traversal via a crafted request

go-git: Improper single-quote escaping in go-git SSH transport

Algernon: Auto-refresh SSE event server binds to all interfaces with Access-Control-Allow-Origin: * and no authentication

Algernon: handler.lua discovery walks parent directories above the server root

Algernon: Single-file mode unconditionally enables debug mode

OpenTelemetry eBPF Instrumentation: Memcached payload length overflow can crash OBI

OpenTelemetry eBPF Instrumentation: MongoDB parser panics on malformed wire messages

OpenTelemetry eBPF Instrumentation: Log enricher writev path can overread and overwrite user buffers

OpenTelemetry eBPF Instrumentation: CappedConcurrentHashMap leaks keys after removals

OpenTelemetry eBPF Instrumentation: Java TLS ioctl kprobe allows kernel memory disclosure

OpenTelemetry eBPF Instrumentation: CPU-mismatch fallback uses 256-byte buffer with 8KB size

OpenTelemetry eBPF Instrumentation: Unbounded BPF internal metrics replay can exhaust CPU

OpenTelemetry eBPF Instrumentation: Postgres BIND parsing can panic on malformed payloads

OpenTelemetry eBPF Instrumentation: Redis error text is exported in span status messages

OpenTelemetry eBPF Instrumentation: Unsafe fastelf parsing allows malformed ELF to crash agent

Docker: Race condition in docker cp allows bind mount redirection to host path

Docker: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap

Docker: `PUT /containers/{id}/archive` executes container binary on the host

TinyIce: Missing authentication on WebRTC ingest endpoint allows unauthorized stream injection

Dozzle: Pre-auth SSRF with response-body reflection via POST /api/notifications/test-webhook (default no-auth deploy)

iskorotkov/avro: CPU Exhaustion in Decoder

iskorotkov/avro: Integer Overflow in Decoder

Arcane Backend: Unauthenticated reflected XSS via SVG color parameter enables admin account takeover

Arcane Backend: OS Command Injection in Volume Browser ListDirectory via path query parameter

Arcane Backend: Missing admin authorization on git repository endpoints allows non-admin users to exfiltrate stored Git credentials and tamper with GitOps configs

Caddy: Unsafe Unicode Handling in FastCGI splitPos Allows Execution of Non-PHP Files