Advisory Catalog

Vikunja vulnerable to authenticated cross-tenant kanban-bucket relocation via `project_view_id` mass-assignment

Vikunja has cross-tenant IDOR in kanban move-task endpoint via unauthorized body task_id

Vikunja vulnerable to Improper Authorization and Authorization Bypass Through User-Controlled Key

Vikunja has an incomplete fix for CVE-2026-35595: Write-only user can detach shared project from parent hierarchy via parent_project_id=0

Vikunja has a project duplication bypasses write-permission check on the target parent project

Pocket-ID has an Open Redirect on the OIDC /authorize page via unvalidated redirect_uri with prompt=none

Aqua's archive extraction follows attacker-planted symlinks, allowing writes outside the install directory

Klever: Integer overflow in split-royalty validation enables unbounded minting of KLV (native token)

Klever: Marketplace settlement mints KLV when referral % + royalty % exceed the bid (negative seller share silently skipped)

KubeVela Terraform remote loader DoS via unbounded file read

Hatchet allows cross-tenant write/DoS to other tenants' workers via Dispatcher gRPC UpsertWorkerLabels and Unsubscribe

Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

Crossplane's TOCTOU between cosign verification and image fetch in xpkg.CachedClient allows tag-based package install to bypass signature check

Kargo has Open Redirect in UI OIDC Login Flow via redirectTo Query Parameter

Gitea: Remote Code Execution via diffpatch Git Hook Installation

Cloudreve WebDAV (`/dav`) has Path Traversal / Broken Access Control — scoped DAV credential escapes its configured account root

Kyverno's NamespacedGeneratingPolicy generator.apply() namespace argument unvalidated -- background controller creates RoleBindings in any namespace including kube-system

genieacs-mcp: DNS rebinding reaches local GenieACS MCP Streamable HTTP transport

Trivy has a path traversal via a crafted vulnerability database or other downloaded artifacts

Echo: Encoded slash (%2F) bypasses route-level protection and exposes static files

mcp-shell — Security Disabled by Default in Bare-Binary Deploy Path + Shell Interpreter in Secure-Mode Allowlist

mcp-shell has a Secure Mode Allowlist Bypass via Default `/bin/bash` Executable

mcp-shell has a Secure Mode Allowlist Bypass via Git Shell Alias

Cloudreve's remote download file paths can escape the selected destination directory

Cloudreve has Broken Access Control - Revoked Share Access Still Allows Signed File URL Generation via Cached context_hint

3X-UI Vulnerable to Authenticated Arbitrary File Write via Database Import and Xray Log Path Manipulation

Gorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key

netfoil vulnerable to improper handling of untrusted DoH response data

kin-openapi has uncontrolled resource consumption in openapi3filter deepObject query parameter decoding

kin-openapi openai3filter: nil-pointer panic in ConvertErrors on malformed multipart/form-data body enables unauthenticated DoS

Atlantis Workspace Handling has Path Traversal that Allows Out-of-Bounds Directory Deletion/Creation

Mailpit: WebSocket origin check bypass via percent-encoded path (regression of CVE-2026-22689)

Mailpit: SMTP DATA line reader buffers over-limit input before size enforcement

Fleet: ORDER BY column injection on activity list endpoints

Fleet: Unauthenticated download of in-house iOS app binaries via predictable URLs

Fleet: SQL injection in Okta conditional access endpoint allows host-controlled compromise of the Fleet database

Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution

Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header

OpenTofu has high CPU usage when using K8S remote state backend or when parsing specifically crafted TLS certificates from untrusted or compromised servers

Ember has unneutralized terminal escape/control sequences from Caddy logs injected into the operator's TUI

Coder: Stored HTML injection via unescaped ApplicationName and LogoURL appearance settings

Coder: Login endpoint user enumeration via timing-defense placeholder in password comparison

Dgraph Alpha group stores can be replaced via unauthenticated external snapshot import

vouch-proxy has an Unbounded Multipart Cookie Allocation DoS

OpenTelemetry-Go: Unsynchronized baggage map can panic under concurrent access

Velero vulnerable to file path traversal when extracting from backup's tarball

BuildKit has a possible runtime DoS via unbounded group parsing

BuildKit: Custom frontend could bypass Seccomp/AppArmor

Uprobe gadgets: unprivileged container's ld.so.cache causes high CPU utilization and container startup DoS

moby/go-archive: Crafted tar archive can write outside the extraction directory