Advisory Catalog

ZITADEL: Missing client_id binding in OIDC authorization code exchange and refresh token flows (RFC 6749 Section 4.1.3 violation)

Docker MCP Gateway: Argument injection via OCI image label YAML

Gotenberg: SSRF via LibreOffice document processing

Gitea: Stored XSS via glTF `extensionsRequired` in Gitea 3D File Viewer

Gitea: Public-only tokens bypass private-resource restrictions on `/api/v1/user` self routes

Gitea: API Fork Missing CanCreateOrgRepo Check Allows Org Secret Exfiltration

Gitea: Authorization Bypass via "Allow edits from maintainers" allows unauthorized commits to any readable repo

Gitea: OAuth2 access token scope enforcement bypass via HTTP Basic authentication

Gogs: Overwriting critical files results in a denial of service

Gitea: Git Smart HTTP Skips Repository Token Scopes for Bearer Tokens

Daytona: Cross-org IDOR in organization role update/delete — any org owner can rewrite or destroy another org's roles

Caddy: FastCGI header normalization bypass in `forward_auth copy_headers`

Caddy: Windows `file_server` path authorization bypass via encoded backslash

Daytona: Public sandbox previews remain accessible for up to one hour after being made private

Traefik: HTTP/3 mTLS bypass via exact SNI TLSOptions lookup for wildcard and mixed-case hosts

Traefik: SNICheck ignores wildcard TLSOptions mappings, allowing domain-fronted mTLS bypass

Filestash allows attackers to escalate privileges via sending a crafted request

linx-server has an issue in the uploadPostHandler component that allows attackers to cause a Denial of Service (DoS) via a crafted POST request

statping-ng allows attackers to escalate privileges to Administrator and access sensitive components

File Browser has a Command Execution Allowlist Bypass via Shell Metacharacter Injection

File Browser has incorrect access control for public directory shares via rule path rebasing

File Browser has a DoS Vulnerability via Public Login API

File Browser: Improper Access Control Occurs via Pre-Created Public Share for a Non-existent Path

File Browser: Cross-user unauthorized share-link deletion via unbounded prefix match in DeleteWithPathPrefix

Radius Controller May Delete a Container Resource via an Injected Deployment Annotation (Multi-Tenant Installs)

Mattermost doesn't sanitize FileInfo.Name received from federated peers during shared channel file sync

Mattermost doesn't require role-management authorization when setting the scheme_admin flag on group syncable link and patch endpoints

Go-Attestation: Hash injection into trusted measurement list via unskipped SignatureHeaderSize vendor bytes in parseEfiSignatureList()

Chisel has an ACL Bypass via Post-Handshake SSH Channel ExtraData Injection

AWS Advanced Go Wrapper has Privilege Escalation in Aurora PostgreSQL instance

DevGuard has improper authorization on public assets

Arc: Unauthenticated access to Go debug pprof endpoints leaks runtime state and enables CPU-burn DoS

Traefik has a StripPrefix Route-Level Auth Bypass via Path Normalization

Apache Answer: AdminToken not invalidated after admin deactivation

OpenTelemetry Operator for Kubernetes's ServiceMonitor bearerTokenFile reads arbitrary local file and sends contents as bearer auth

Anyquery has Path Traversal through `clear_plugin_cache`, Allowing Arbitrary Directory Deletion

Nezha has cross-site GET request that can trigger stored cron commands on a victim's agents

Dex: Token-exchange endpoint is missing AllowedConnectors enforcement

Arc has an authenticated arbitrary local-file read via DuckDB I/O functions that bypasses RBAC table-level checks

nebula-mesh: GET /api/v1/audit-log discloses all entries to any operator

nebula-mesh's web UI lacks CSRF tokens on /ui/* mutating endpoints

nebula-mesh: Web UI and API responses lack security headers (CSP, X-Frame-Options, HSTS, etc.)

nebula-mesh: Host advanced overrides allow YAML injection into agent config.yml

Klever-Go KVM: Unauthenticated remote node crash (nil-pointer DoS) in klever-go P2P transaction interceptor (txVersionChecker nil RawData) - potential chain halt

klever-go: REST API slow-header connection exhaustion via Gin Engine.Run

klever-go: Unbounded goroutine spawn on direct-message ingress enables peer-driven DoS

Klever-Go KVM: Hash-array amplification in P2P resolver request handling

Omni: Reader-level users can retrieve imported cluster CA keys via ResourceService

Omni has a TOCTOU race condition that allows multiple concurrent uses of a single-use SAML session token

Klever-Go P2P MultiDataInterceptor leaks global throttler slots on malformed compressed batches (DoS)