Advisory Catalog

Mattermost doesn't authenticate Atlassian Connect installed callbacks, allowing a remote unauthenticated attacker to inject a rogue sharedSecret

Grafana: Path traversal in the Tempo and Loki data source plugins

OpenBao: Transit secrets engine crashes on key creation with `derived: true` for asymmetric key types

OpenBao: LDAPi ldaputil (wrong escape func)

Grafana Tempo vulnerable to an out-of-memory crash

Mailpit: Incomplete SSRF protection in Link Check API via IPv6 transition mechanisms

Open Redirect Bypass in miniflux-v2

Traefik Kubernetes Ingress NGINX provider fails open when auth-secret resolution fails

go.qbee.io/transport: Symlink-chain path traversal in tar extraction (one level outside destination)

Grafana Operator: Privilege escalation from namespace admin to cluster admin via GrafanaDashboard jsonnetLib fileName

containerd: CRI checkpoint import allows local image tag poisoning

containerd image-triggered runtime DoS via unbounded group parsing

Hugo: Symlink confinement bypass in os.ReadFile

Hugo: XSS via unescaped code-fence language in default code block renderer

Entire CLI: Path traversal in checkpoint session metadata allows arbitrary file write during resume/rewind

OpenFGA: OIDC audience validation skipped when --authn-oidc-audience is unset

Canonical MicroCeph: path traversal issue in the remote-import AP

Daytona: Path traversal in sandbox volume id mounts arbitrary host paths into the sandbox — cross-tenant data access and host escape

opentelemetry-collector-contrib: githubreceiver silently ignores configured required_headers authentication

opentelemetry-collector-contrib sentryexporter: Path traversal in Sentry exporter via attacker-controlled service.name reaches privileged Sentry API endpoints with operator bearer token

Podman: WORKDIR symlink traversal vulnerability

ZITADEL: Missing Token Audience Validation (`aud`) in JWT IdP Provider

ZITADEL: Missing Token Lifecyle Validation (`exp` and `iat`) in JWT IdP Provider

Capsule: Incomplete fix of CVE-2026-30963: singular/plural typo leaves namespaces/finalize unprotected

Gitea: Open Redirect via redirect_to

Daytona: Cross-tenant data leak in notification WebSocket gateway via unverified organizationId join

Traefik: Kubernetes Gateway crossProviderNamespaces bypass allows HTTPRoute outside the allowlist to expose internal Traefik services

Gitea: Token scope bypass on web archive download endpoint

Gitea: Missing repository-unit authorization on issue-template API endpoints

Gitea: Incomplete CVE-2025-68941 fix: /user/orgs missing checkTokenPublicOnly + switch-case logic flaw

Caddy: stripHTML template function bypass

Hugo: Symlink confinement bypass in resources.Get

Hugo: security.http.urls allow-list bypass via HTTP redirects

Hugo: XSS via text/html content files

File Browser: FilePath traversal in download-as-zip/tar via Windows-style backslash separators in stored filenames

File Browser: Symlink following lets scoped users read, overwrite, and share files outside their filebrowser scope

Fleet: Observer-level enrollment secret extraction via ORDER BY oracle on Apple MDM commands endpoint

Fleet has observer-level enrollment secret extraction via ORDER BY oracle on labels host-listing endpoint

Mattermost doesn't restrict role_updated websocket event broadcasts to members of the affected team or channel

Mattermost doesn't validate that a username returned during bot registration belongs to a bot account

Mattermost doesn't enforce PermissionInviteUser when setting AllowOpenInvite or AllowedDomains during team creation

Mattermost doesn't require system-level permission when patching protected default system roles

Mattermost doesn't sanitize the Remote Cluster API response on PATCH operations

gorest InMemorySecret2FA race condition allows process crash via concurrent map access (CWE-362)

OpenFGA has cache-key delimiter injection in shared-iterator and v2 iterator that caches enables intra-store authorization-decision poisoning

free5GC UDR has improper `ueId` validation in EE subscription handlers that allows arbitrary identifier persistence

nebula-mesh: Newly-minted operator API key exposed in redirect URL (Referer, history, proxy logs)

Incus has a Nil-Pointer Dereference Panic via Instance Backup Import (volume omitted)

nebula-mesh: Session and OIDC state cookies lack the Secure attribute

nebula-mesh: Decrypted CA private key persists in heap after signing