Advisory Catalog

Dasel: Selector lexer panics on trailing whitespace in `parseCurRune`

Dasel: Unbounded recursion in JSON and XML readers causes unrecoverable stack-overflow DoS

nginx ignition has Unauthenticated Admin Account Creation via Onboarding Race Condition

nginx ignition has ParseAcceptLanguage `_` separator bypass that enables ~75x CPU amplification via Accept-Language header in i18nMiddleware

nginx ignition has TOTP Reuse During Validity Window

k8saudit shipped rules do not detect privileged/sensitive settings on init or ephemeral containers

Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState

Obot: Server-Side Request Forgery via remote MCP server URL

Obot: MCP Registry API readable without authentication

Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion

Perses's unvalidated project parameter enables filesystem path traversal

Perses's missing authorization in datasource proxy allows cross-scope secret disclosure

Perses's project query parameter authorization bypass exposes cross-project resources

Process Compose: Browser DNS rebinding lets websites control local process-compose MCP tools

Convoy: Cross-Tenant Source IDOR Leaks Plaintext Message Broker Credentials

AnyCable: Telemetry Subsystem Contains Hardcoded Authentication Token and Transmits CLI Arguments Including Secrets

AnyCable: Pusher REST API Does Not Verify Request Body MD5 Enabling Signed-Request Replay with Arbitrary Body

ToolHive: containerized MCP servers can reach host services via host.docker.internal, enabling lateral movement

kcp front-proxy does not strip inbound X-Remote-* identity headers, allowing any authenticated client to inject groups/warrants and impersonate system:masters in any workspace

zot: Bearer authentication maps DELETE to push scope, allowing unauthorized deletion

Capsule: hostnameRegexHandler.OnUpdate validates stale (old) Tenant regex, allowing invalid AllowedHostnames regex to bypass webhook validation

Capsule: Tenant owner bypasses Capsule's forbidden namespace/service/node label and annotation enforcement

Capsule: Malformed ForbiddenAnnotations.Regex can bypass Tenant validation and trigger namespace admission panic

Caddy: rewrite placeholder re-expansion, unbounded body buffer DoS, and fileHidden case-sensitivity bypass

CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP

CoreDNS: Unauthenticated memory exhaustion in custom transports

OpenTelemetry-Go: Log gRPC exporter ignores env TLS certs, bypassing mTLS/pinning

OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs

oras-go: Blind SSRF via unvalidated Link header URL in pagination allows internal network probing

oras-go: Arbitrary file write outside file.Store root via symlink-chain bypass in tar extraction (pushDir)

Skipper has OPA body-authz bypass: truncated_body mitigation fails open on chunked/HTTP-2 (incomplete fix GHSA-8qqm-fp2q-v734)

RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client

RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr

RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocation

RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow

RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fields

RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration

RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser

RabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter Injection

RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiation

Pocketbase: Unhandled panic in worker goroutines

OpenFGA: ListUsers returns a deliberately-excluded user when a `but not` exclusion under a type-bound wildcard is intersected (`and`) with another relation that also grants that user

emp3r0r has an unauthenticated HTTP Polling DoS

Nezha: OAuth2 redirect_uri Host header injection regression when dashboard_host is empty

Netmaker has a boolean‑based SQL Injection

ZITADEL: Improper Role Revocation on Granted Projects during Multiple Role Deletions

ZITADEL: Unauthorized Token Privilege Escalation in OAuth2 Token Exchange

ZITADEL: Auto-linking by email: IdP-side email verification is not checked

ZITADEL: Missing Token Expiration (`exp`) Validation in JWT IdP Provider

Traefik: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') and Incorrect Authorization