Advisory Catalog

Semaphore UI: CSRF vulnerability on password change endpoint - No CSRF token or password confirmation

ffuf denial of service (OOM) via HTTP response decompression bomb

SiYuan: Stored and reflected XSS in SiYuan through an SVG sanitizer bypass

OpenChoreo: Authenticated OS command injection via OpenChoreo Workflow Plane templates enables code execution in privileged pods

OpenChoreo: Cross-project command execution and wirelog view access via OpenChoreo openchoreo-api exec and wirelogs endpoints

Mailpit: SMTP command parser buffers unbounded command lines before syntax rejection

SeaweedFS: Filer JWT allowed_prefixes literal prefix match allows cross-tenant access to sibling paths

Mailpit: Thumbnail generation decodes unbounded image dimensions before scaling

Siyuan: Authenticated path traversal in /snippets/ static handler (serveSnippets) leaks conf/conf.json secrets and siyuan.db

SiYuan: SQL Query in Block Search Exposes Hidden Published Document Content

gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation

free5GC AUSF authentication contexts can be overwritten by concurrent requests for the same SUPI

SeaweedFS: Path traversal in the S3 gateway X-Amz-Copy-Source header allows cross-bucket object read

klever-go: SFT add-quantity `int64` overflow bypasses a finite per-nonce MaxSupply

Portainer has Unauthenticated Restore Endpoint that Allows Admin Takeover on Uninitialized Instances

klever-go: Percentage-transfer royalty skips the source debit at exactly-100% splits

alos-http has unauthenticated remote DoS: malformed path starting with "?" triggers out-of-bounds panic in sanitizeRequestPath, crashing entire server

Incus has a project restriction bypass in instance copy across projects

Incus has a project restriction bypass for custom volume copy across projects

Bifrost's SSRF deny-list is incomplete: isPublicIP permits CGNAT, IPv6 6to4/NAT64, and site-local in FetchAndEncodeURL

Vikunja has cross-tenant IDOR in kanban move-task endpoint via unauthorized body task_id

Vikunja vulnerable to Improper Authorization and Authorization Bypass Through User-Controlled Key

KubeVela Terraform remote loader DoS via unbounded file read

Crossplane's TOCTOU between cosign verification and image fetch in xpkg.CachedClient allows tag-based package install to bypass signature check

Cloudreve WebDAV (`/dav`) has Path Traversal / Broken Access Control — scoped DAV credential escapes its configured account root

genieacs-mcp: DNS rebinding reaches local GenieACS MCP Streamable HTTP transport

Trivy has a path traversal via a crafted vulnerability database or other downloaded artifacts

Echo: Encoded slash (%2F) bypasses route-level protection and exposes static files

mcp-shell — Security Disabled by Default in Bare-Binary Deploy Path + Shell Interpreter in Secure-Mode Allowlist

mcp-shell has a Secure Mode Allowlist Bypass via Default `/bin/bash` Executable

mcp-shell has a Secure Mode Allowlist Bypass via Git Shell Alias

3X-UI Vulnerable to Authenticated Arbitrary File Write via Database Import and Xray Log Path Manipulation

kin-openapi has uncontrolled resource consumption in openapi3filter deepObject query parameter decoding

kin-openapi openai3filter: nil-pointer panic in ConvertErrors on malformed multipart/form-data body enables unauthenticated DoS

Atlantis Workspace Handling has Path Traversal that Allows Out-of-Bounds Directory Deletion/Creation

Fleet: SQL injection in Okta conditional access endpoint allows host-controlled compromise of the Fleet database

Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header

vouch-proxy has an Unbounded Multipart Cookie Allocation DoS

moby/go-archive: Crafted tar archive can write outside the extraction directory

uniget CLI: Metadata signature verification only runs when UNIGET_IGNORE_METADATA_SIGNATURE is set

New API: Unauthenticated payment webhooks allow memory and disk DoS via unbounded body reads and full-body logging

Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket

Authorizer: Zero-click account takeover via OAuth identity linking to unverified email accounts

Argo Workflows: ArtifactGC.PodSpecPatch bypasses Strict/Secure template reference allow-list (Incomplete fix for CVE-2026-31892)

SeaweedFS: Path traversal in the S3 and Iceberg REST gateways allows cross-bucket access

go-git: Worktree operations may follow symlinks

Traefik: Incomplete fix for CVE-2026-33433 + CVE-2026-39858 cross-cohort: headerField underscore-variant identity spoofing in BasicAuth / DigestAuth / ForwardAuth

Traefik: Kubernetes Ingress NGINX RewriteTarget Path Traversal Allows Route-Level Authentication Bypass

Traefik: Gateway API route identity collision allows cross-namespace backend hijacking

Traefik: Cross-user response poisoning via proxied CONNECT on Traefik's shared backend keep-alive pool