Advisory Catalog

praktor: Path traversal in Telegram file uploads allows writing outside the agent workspace uploads/ directory (stored instruction injection)

Kubeflow Pipelines: Pipeline archive upload allows decompression bomb to exhaust server memory

Kubeflow Pipelines: Run-log endpoint permits unauthorized access to pod logs

imgproxy has out-of-bounds heap read/write in ICO loader BMP header reconstruction that allows unauthenticated remote worker crash

imgproxy has unbounded memory allocation in ICO loader that allows unauthenticated memory-exhaustion DoS via crafted data_size field

cert-manager: Direct ACME Challenge resources can bypass Issuer DNS01 solver policy and use ClusterIssuer DNS credentials

Daptin: ParseAcceptLanguage `_` separator bypass enables >250x CPU amplification via Accept-Language header in LanguageMiddleware

Echo's middleware.Static: `%2F`-encoded path bypasses route/group middleware guarding a statically-served path

Atlantis: OS command injection through PR-controlled Terraform workspace enables RCE during plan

FileBrowser: Symlink following escapes user scope allowing arbitrary file read outside the served directory

Go JOSE: DoS when parsing JWKs that contain RSA keys

CTFer.io's CTFd Terraform Provider allows a local or remote attacker to read team passwords in state as non sensitive values

compress zstd: Panic on two-block frames

Wails: wildcardPatternToRegex allows Origin bypass via suffix match in BindingsAllowedOrigins

Echo: WebSocket proxy can retain connections and handlers after client disconnect

Echo: Decompress permits unbounded gzip expansion in v4

Echo: BodyDump captures request and response bodies without size limits in v4

SiYuan: A parser differential between the WebSocket keepalive exemption and the session quarantine allows unauthenticated access to the broadcast event stream

OpenChoreo: Authorization bypass on WorkflowRun update allows cross-project takeover of workflow runs

Moov signedxml: Unauthenticated denial of service in exclusive XML canonicalization

Arcane: Delegated users:update permission allows admin account takeover via password reset (no privilege-hierarchy check)

kin-openapi openapi3filter: nil-pointer panic in ValidateResponse on a response header declared with content

gomarkdown/markdown IsSafeURL panics on short URLs

containerd CRI plugin: Checkpoint restore bypasses destination security context

kin-openapi: Incomplete Fix for GHSA-p6wj-qrr4-pgh5: Three Unpatched nil-Items Panic Paths in openapi3filter

kin-openapi: Uncontrolled Recursion on Circular allOf/anyOf/oneOf Schemas Causes Fatal Process Crash

kin-openapi: YAML NaN/Inf Values Bypass Built-in Guards and Panic via OAS 3.1 Validation Path

kin-openapi: ValidationHandler security-requirement bypass via encoded-path operation confusion

kin-openapi: Nil-pointer dereference panic in openapi3filter for OpenAPI 3.1 array schemas missing items

FrankenPHP: Cross-request PHP session ID leak in worker mode when the session extension is a shared module

Nginx UI: OTP secure-session step-up can be bypassed via MCP configuration tools

Nginx UI: nginx config directive denylist (ValidateConfigFile) is bypassable via same-line ";" separation → authenticated directive injection (RCE on the official image)

Nginx UI: Casdoor SSO callback uses a constant `state` parameter (login CSRF)

Nginx UI OTP secure-session step-up is missing on sensitive mutation routes

Nginx UI: Account Takeover via Missing `RequireSecureSession` on User Management Endpoint

Nginx UI: TOTP / passkey enrolment requires no re-authentication, enabling persistent account takeover

Nginx UI: MCP `nginx_config_add` Bypasses Directive Validation — Authenticated RCE

Nginx UI: MCP nginx_config_add skips config directive validation → authenticated nginx directive injection (RCE on the official image)

Nginx UI: MCP configuration tools bypass restricted directive validation and allow secondary authenticated users to execute NJS in Nginx worker context

Sliver: Unauthenticated Memory Exhaustion Denial of Service in Sliver HTTP(S) Listener PNG Decoder

Vikunja: Permissive Cross-domain Security Policy trusts every localhost origin which should not be trusted

Nginx UI: Unauthenticated signed-request body staging can exhaust temporary storage

Vikunja: Planka migration retains an unbounded aggregate of attacker-served attachments and can OOM the API

Vikunja: Unbounded CSV row cardinality permits API process termination

Vikunja: Unbounded nested task-filter recursion permits API process termination

Vikunja: Denial of service via decompression bomb in the data import

Vikunja: Unbounded image decode on avatar and project-background uploads enables decode/resize amplification

Vikunja: Read-only project members can obtain any link share's access hash via the single-share read endpoint (v1 and v2) and escalate to the share's permission level

Vikunja: Every /api/v2 pre-auth endpoint is unthrottled on a stock install while its /api/v1 twin is rate limited

Vikunja: Plaintext storage of password-reset/email-confirm tokens in database enables account takeover on DB read access