Advisory Catalog

imgproxy has integer overflow in imgproxy ICO loader that causes denial of service and may permit remote code execution

Echo: Rejected WebSocket upgrades can bypass Echo route-level access controls

Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation

KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication

Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks

Dgraph: Zero Unauthenticated HTTP Admin removeNode Denial of Service

Vitess vttablet /twopcz reflected XSS

Nginx UI: Authenticated Remote Code Execution via Backup Restore App Config Overwrite

Vikunja: Link-share token reads any tenant's kanban buckets and enumerates usernames/IDs instance-wide (BOLA)

Homer: Hardcoded Default Admin Password 'sipcapture' With No Forced Change on First Login

Homer: Complete Authentication Bypass When coordinator.jwt.secret Is Empty (Default)

gitea-runner: workflow container.options passes host namespaces and capability flags to job container when privileged mode is disabled

SiYuan: Unauthenticated SQL injection in searchDocs via unescaped keyword (publish mode): cross-notebook read/write with statement stacking

ixo Blockchain x/bonds DID-resolved payer drain + x/entity ICA authorization bypass

OpenBao's Recovery Mode Vulnerable To Token Leakage via Timing Attack

kcp front-proxy does not strip inbound X-Remote-* identity headers, allowing any authenticated client to inject groups/warrants and impersonate system:masters in any workspace

RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr

RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow

RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser

Traefik HTTP/3 Backend NTLM Connection Reuse

rclone serve s3: --auth-proxy without --auth-key authenticates nobody - full SigV4 signature bypass

rclone: RC per-server auth-proxy bypass

Semaphore U: OS Command Injection

OpenChoreo: cluster-gateway internal proxy performs no caller authentication and is not read-only — data-plane Secret disclosure and arbitrary Kubernetes mutation

SiYuan: SQL injection in backlink/mention search via unescaped stored and client input (publish mode): first-order (client keyword) and second-order (stored document title) breakout on read-write handle

SiYuan: Unauthenticated SQL execution and REGEXP injection via fullTextSearchAssetContent (publish mode): reader-reachable raw SQL (method 2) and unescaped REGEXP (method 3) on read-write asset-content DB

SiYuan: Unauthenticated arbitrary SQL execution via searchEmbedBlock (publish mode) : reader-reachable raw statement on read-write handle, cross-notebook read/write

OpenChoreo: Unauthenticated access to data-plane operations via OpenChoreo cluster-gateway management APIs

Centrifugo: Client-forgeable headers emulation lets any client spoof headers forwarded to proxy backends

SeaweedFS: Unauthenticated filer IAM gRPC service grants S3 administrative control

free5GC NRF nnrf-nfm lacks NF Profile input validation — enables NF Registration Poisoning with arbitrary service endpoints

Klever: Integer overflow in split-royalty validation enables unbounded minting of KLV (native token)

Klever: Marketplace settlement mints KLV when referral % + royalty % exceed the bid (negative seller share silently skipped)

Gitea: Remote Code Execution via diffpatch Git Hook Installation

Kyverno's NamespacedGeneratingPolicy generator.apply() namespace argument unvalidated -- background controller creates RoleBindings in any namespace including kube-system

Dgraph Alpha group stores can be replaced via unauthenticated external snapshot import

New API: Integer overflow in quota billing yields negative charges (self-crediting)

New API: User List API Leaks Root User Access Token Leading to Privilege Escalation

SeaweedFS: Unauthenticated SSRF with response read-back via VolumeServer.FetchAndWriteNeedle

Traefik: Authentication Bypass via Path Traversal in ReplacePathRegex Middleware

vault-addr annotation SSRF -- webhook makes outbound HTTP call to attacker URL during admission; vault-serviceaccount enables cluster-wide SA token theft via TokenRequest API

Wings exposes node configuration secrets through egg configuration-file templating

Logging operator has Fluentd configuration injection that allows remote code execution

prebid-server's request forgery vulnerability allows for possible host environment data extraction

goshs --no-delete WebDAV MOVE bypass allows file deletion/overwrite

goshs SFTP authentication bypass via empty password (incomplete fix of CVE-2026-40884)

kin-openapi: ValidationHandler.Load() Fail-Open Authentication Bypass via NoopAuthenticationFunc Default

Gitea: Public-only repository tokens can update private PR head branches

Gitea Actions Artifacts V4 signed URL HMAC ambiguity allows cross-repository artifact read and cross-task upload-state write

Gitea Docker image: `REVERSE_PROXY_TRUSTED_PROXIES = *` default lets any source IP impersonate any user via `X-WEBAUTH-USER`