Advisory Catalog

Gitea: Unbounded Arch package file metadata can cause resource amplification in Gitea package uploads

Gitea: draft release attachment disclosure via missing web authorization

Gitea: Release attachment extension allowlist bypass via web release edit form (variant of CVE-2025-68939)

Gitea: Token public-only scope bypassed on Limited-visibility owners (Repository + Package categories) — residual after CVE-2026-25714 / PR #37118

Gitea CVE-2026-20800 sibling endpoints not covered: revoked user still reads private repo objects via `/api/v1/user/starred` and private issue titles via `/api/v1/user/times`

Gitea: Webhooks created by a collaborator keep firing after their repo access is revoked → ongoing real-time exfiltration of private repo content

File Browser: Archive builder turns backslash filenames into path traversal (zip-slip)

File Browser: ScopedFs follows a dangling symlink on write, letting a scoped user create files outside their scope

Cloudreve: Non-admin remote download users can SSRF loopback/internal services and read imported responses

Skipper's routesrv-no-auth component: All routesrv API Endpoints Lack Authentication

Skipper: Unbounded Request Body Read in Admission Webhook Causes Memory Exhaustion DoS

kuma-dp connects to control plane without verifying TLS certificate when no CA is configured

Nuclio: Unauthenticated path traversal in spec.handler allows arbitrary file write in Dashboard container

Envoy Gateway: Wasm cache ServeHTTP reads mappingPath2Cache without lock

Envoy Gateway: OCI layer extraction allocates make([]byte, h.Size) from untrusted tar header

Envoy Gateway: Nil-dereference when SecurityPolicy targets TCPRoute without spec.authorization

Envoy Gateway: Wasm HTTP fetch decompresses gzip without output-size limit

Envoy Gateway custom backendRef cross-namespace ReferenceGrant bypass

kumactl connects to control plane without verifying TLS certificate when no CA is configured

open-feature-operator: Cross-namespace FeatureFlagSource and InProcessConfiguration resolution exposes spec contents on multi-tenant clusters

safeurl is Missing IPv6 CIDR Ranges in Blocklist

nebula-mesh: Web UI host creation ignores configured enrollment token TTL and mints 24-hour bearer enrollment tokens

nebula-mesh: Unauthenticated OIDC login endpoint allocates unbounded in-memory state entries without rate limiting

Hoverfly: Denial of Service via Goroutine Leak in Remote Post-Serve Actions

K3s: ZIP Archive Path Traversal Vulnerability in etcd Snapshot Decompression

SiYuan: Unauthenticated SQLite Data Exfiltration via Template Injection in /api/icon/getDynamicIcon

GoBGP confederation validation panics on empty AS_PATH attribute

GoBGP: BGP OPEN capability parser may read capability values outside declared CapLen boundaries

sigstore-go has a multi-log threshold bypass via single compromised log

OpenRun: Redirect URL validation bypass using  //host  paths leads to Open Redirect

nebula-mesh: Host revocation is not durable - blocked/offboarded hosts can regain a valid certificate

Note Mark: Unauthenticated disclosure of soft-deleted note metadata via deleted=true on public books

oasdiff does not enforce --allow-external-refs=false on the git-revision load path (SSRF / local file read)

KEDA has PostgreSQL connection string parameter injection via incomplete whitespace escaping

Kite has an authenticated cluster RBAC bypass in /api/v1/overview

netfoil has a domain name filter bypass via multiple questions

New API is vulnerable to CSRF through user email binding

Coder's workspace app CORS origin check can be bypassed via UUID-based subdomain spoofing

Coder vulnerable to stored HTML injection via workspace agent logs in AgentLogLine component

Suspended Coder users retain access to AI Bridge LLM proxy endpoints

Coder vulnerable to denial of service via unbounded request body in AI Bridge provider endpoints

Coder: Devcontainer recreate endpoint missing write authorization allows read-only roles to destroy containers

Coder's sub-agent app registration bypasses template port-sharing policy enforcement

Coder: Zip upload decompression lacks aggregate size limit, enabling denial of service

Coder's subdomain workspace app routing trusts unauthenticated X-Forwarded-Host header, enabling cross-app data access

Coder's unbounded memory allocation in provisioner file upload allows authenticated denial of service

CiliumLocalRedirectPolicy addressMatcher allows cross-namespace service traffic hijacking and can break service translation

GoFiber never set HSTS header in helmet middleware due to incorrect protocol check

Dragonfly scheduler v1 and v2 gRPC unauthenticated SSRF via attacker-controlled PeerHost in DownloadTinyFile

Gitea release asset dumps permit path traversal through crafted names