Advisory Catalog

Fabio - Incomplete fix for CVE-2025-48865: operator-configured trust headers (clientip/tls/requestid) still strippable via the Connection header

Hatchet: Cross-Tenant Durable Task Event Log Disclosure via Missing Authorization Check

Hatchet: SSRF via Unsigned UnsubscribeURL in SNS UnsubscribeConfirmation Handler

Dasel: Selector lexer panics on trailing whitespace in `parseCurRune`

Dasel: Unbounded recursion in JSON and XML readers causes unrecoverable stack-overflow DoS

nginx ignition has TOTP Reuse During Validity Window

k8saudit shipped rules do not detect privileged/sensitive settings on init or ephemeral containers

Obot: MCP Registry API readable without authentication

Process Compose: Browser DNS rebinding lets websites control local process-compose MCP tools

AnyCable: Telemetry Subsystem Contains Hardcoded Authentication Token and Transmits CLI Arguments Including Secrets

AnyCable: Pusher REST API Does Not Verify Request Body MD5 Enabling Signed-Request Replay with Arbitrary Body

Capsule: hostnameRegexHandler.OnUpdate validates stale (old) Tenant regex, allowing invalid AllowedHostnames regex to bypass webhook validation

Capsule: Malformed ForbiddenAnnotations.Regex can bypass Tenant validation and trigger namespace admission panic

Caddy: rewrite placeholder re-expansion, unbounded body buffer DoS, and fileHidden case-sensitivity bypass

OpenTelemetry-Go: Log gRPC exporter ignores env TLS certs, bypassing mTLS/pinning

oras-go: Blind SSRF via unvalidated Link header URL in pagination allows internal network probing

OpenFGA: ListUsers returns a deliberately-excluded user when a `but not` exclusion under a type-bound wildcard is intersected (`and`) with another relation that also grants that user

Netmaker has a boolean‑based SQL Injection

ZITADEL: Improper Role Revocation on Granted Projects during Multiple Role Deletions

ZITADEL: Auto-linking by email: IdP-side email verification is not checked

ZITADEL: Missing Token Expiration (`exp`) Validation in JWT IdP Provider

rclone archive/zip: Zip Slip via unsanitized zip entry names lets a malicious archive escape its own namespace

rclone: Directory metadata (chmod/chown/chtimes) applied through a planted symlink in rclone local --links escapes the destination

rclone local: crafted Range request against a translated symlink panics (DoS)

rclone: source object names can escape the configured root on upload

Traefik: ForwardAuth identity spoofing via dot-form header alias

Traefik: respondingTimeouts.readTimeout is not applied to HTTP/3, leaving slow-body uploads unbounded

Excelize: Negative shared-string index causes panic in GetCellValue and GetRows

webhookd: Unrestricted HTTP Header to Shell Variable Injection

containerd: CRI ExecSync Goroutine Leak Leads to Node-Level Denial of Service

LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint

LF Edge eKuiper: SSRF in External Service

gRPC-Go: xDS RBAC HTTP Filter bypass via mixed-case Header Matching and gRFC A41 validation evasion

Infracost: Terraform Cloud and registry token disclosure via unvalidated hostname

Infracost: Arbitrary file read via config-template readFile symlink traversal

SiYuan: Notebook name, document count, size and timestamps are returned for any notebook, including notebooks hidden from readers, by /api/notebook/getNotebookInfo

SiYuan: Database view structure (all view names, layout types and per-field visibility) is returned to anonymous readers by /api/av/getAttributeViewFieldViews

Snowflake drivers writes sensitive information to logs

SiYuan: Tag labels from password-protected documents are returned to readers who have not entered the password

SiYuan: Static-file routes bypass the publish-access controls enforced on the REST API, exposing templates, snippets and export artifacts to anonymous readers

SiYuan: getEncryptedNotebookStatus discloses names and current lock/unlock state of all encrypted notebooks to anonymous readers

SiYuan: Missing publish-access filter on the HPath/path-resolution endpoints discloses the private document tree to anonymous readers

SiYuan: Missing publish-access filter on getAttributeViewKeysByID discloses database column schema, plus two unscoped block-ID enumeration oracles (publish mode)

SiYuan: Absolute filesystem path and OS username disclosure via resolveAssetPath

SiYuan: Missing publish-access filter on getBlockAttrs and batchGetBlockAttrs discloses block attributes (name, alias, memo, custom fields) of protected documents

SiYuan: Missing publish-access check on getBlockBreadcrumb, getRefText, and getBlockTreeInfos discloses content and metadata of protected/forbidden documents

SiYuan: Password (protected) tier omitted in the attribute-view/database publish filter: Reader receives rows of protected documents without the password (publish mode)

SiYuan: Missing publish-access filter on getFileAnnotation discloses private PDF annotations of forbidden/protected documents (publish mode)

SiYuan: Missing authorization on refreshBacklink allows anonymous readers to trigger persistent server-side writes and unauthenticated resource amplification (publish mode)

SiYuan: Cross-boundary metadata disclosure via getBlockInfo (publish mode): reader-reachable document title/root info for publish-forbidden docs; sibling getDocInfo is filtered