Advisory Catalog

SiYuan: getAttributeViewSearchTarget returns database row content to anonymous readers with no publish-access check, reopening the class closed one day earlier at the adjacent route

SiYuan: getBookmarkLabels returns every bookmark label in the workspace to anonymous readers, with no publish-access filtering

SiYuan: getUniqueFilename passes an unvalidated client-supplied path to the filesystem, giving anonymous readers an existence oracle over the entire host filesystem

SiYuan: Outline state for any document, including documents forbidden to readers, is returned by /api/storage/getOutlineStorage with no access check

SiYuan discloses an administrator's open documents and search terms to anonymous readers

SiYuan: Unauthenticated SQL injection in searchDocs via unescaped keyword (publish mode): cross-notebook read/write with statement stacking

OpenTelemetry-Go: BatchProcessor can busy-spin when export buffer is full

OpenTelemetry-Go: UTF-8 replacement rune bypasses attribute length truncation

Containerd has image-pull DoS via crafted OCI index graph amplification

Podman: Malformed Image can trick podman run into leaking host environment variables into the container

Cilium: Namespaced HTTPRoutes can redirect traffic to other namespaces

ixo Blockchain x/bonds DID-resolved payer drain + x/entity ICA authorization bypass

ZITADEL: MFA bypass via session reuse in Login V2

ZITADEL: Actions V1 sandbox escape: host file read via require()

Dozzle label filters do not restrict container event and statistics streams

podman quadlet install --replace does not fully replace the old file

Klever-Go: Validator registration accepts an unvalidated BLS public key → consensus liveness DoS

Klever-Go: Elasticsearch bulk / painless injection via on-chain account name -> explorer/indexer data forgery

Klever-Go: Zombie-order theft: `Buy` missing `IsClaimed` guard in native marketplace

Klever-Go Account takeover: `kleverUpdateAccountPermission` authorizes on attacker-controlled `RecipientAddr` instead of the authenticated caller

Klever-Go: Unauthenticated WebSocket /subscribe: no read-size limit, no connection cap, permissive origin -> remote node memory/goroutine exhaustion (DoS)

Klever-Go: /log controls global node logging

Traefik: BasicAuth singleflight coalescing reintroduces an unauthenticated username-enumeration timing oracle

Hatchet DurableTask WorkerStatus gRPC resolves caller-supplied durable-task UUIDs via ListSatisfiedEntries with no tenant_id filter

Hatchet: Cross-tenant durable callback payload disclosure in Hatchet V1 Dispatcher

Cloudreve: SSRF guard bypass: checkIP does not decode IPv6-transition wrappers (NAT64, IPv4-compatible, 6to4) reaching internal and cloud-metadata addresses

Gardener: Authorization Bypass via Group Subject Injection

Cloudreve: Privilege Scope Bypass: State-Mutating Admin Operations Accessible via Read-Only OAuth Scope

Cloudreve: Storage-quota TOCTOU race allows quota bypass and storage-based denial of service

Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode

Nuclei: Local File Read via Workflow File-Protocol Gate Bypass

Nuclei: Local File Read via MySQL Client Sandbox Bypass

Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass

Nuclei: Arbitrary Code Execution via Goja JavaScript Engine Vulnerability

Tinyauth: Unauthenticated login attempts can trigger global login lockdown denial of service

Tinyauth: forward-auth per-app ACL is matched case-sensitively against the (case-insensitive) hostname, letting an authenticated user reach apps they are not on the allowlist for

Tinyauth: User enumeration attack by timing oracle

KubeEdge: Command Injection in NodeUpgradeJob - RCE on edge nodes via v1alpha2 API

KubeEdge: Unbounded allocation in viaduct packer enables authenticated remote DoS against CloudHub

KubeEdge: keadm DecompressTarGz path traversal enables arbitrary file write on Windows during edge node join

OpenBao Skips Stricter Deny Policy for LIST operations

OpenBao's Recovery Mode Vulnerable To Token Leakage via Timing Attack

OpenBao's Templated Policies Allow Privilege Escalation via Wildcard Characters

OpenBao Agent Writes Secrets to Stdout

KubeEdge: ConfigUpdateJob updateFields enables remote shell injection and code execution on edge nodes

SIPGO: DoS via unvalidated WebSocket frame length

Fabio - Incomplete fix for CVE-2025-48865: operator-configured trust headers (clientip/tls/requestid) still strippable via the Connection header

Hatchet: Cross-Tenant Durable Task Event Log Disclosure via Missing Authorization Check

Hatchet: SSRF via Unsigned UnsubscribeURL in SNS UnsubscribeConfirmation Handler

SIPGO: DoS via unvalidated Content-Length in the stream parser