Advisory Catalog

Netfoil doesn't decrement TTL

Fiber: CORS wildcard origins matched without a dot boundary, allowing credentialed cross-origin reads

anacrolix torrent has unbounded recursion in the bencode decoder that causes stack-overflow crash and CPU-exhaustion DoS

charmbracelet/soft-serve: Race in `SetPrivate` leaves a private repository readable by unauthenticated users

charmbracelet/soft-serve HTTP responses disclose the existence and names of private repositories

knative.dev/pkg admission webhooks allow unbounded request-body memory exhaustion

Go JOSE: Panics in JSON parsing

Go JOSE: Panic during CBC-HMAC processing

Echo: HTTPS Redirect and HSTS Bypass via Unconditional Trust of Forwarded Scheme Headers

Echo static file middleware route protection bypass via encoded dot-dot traversal

Echo has a Static Middleware Double-Unescape Path Traversal

Echo has Open Redirect via Control-Character Prefix Defeating sanitizeURI

Echo has Arbitrary Scheme Injection in WWWRedirect/NonWWWRedirect Middlewares via X-Forwarded-Proto

Echo vulnerable to Reflected Cross-Site Scripting (XSS) via unsanitized JSONP callback in Context.JSONP / Context.JSONPBlob

Echo has Rate Limiter Bypass via Spoofed X-Forwarded-For Header in Default Configuration

Echo has CSRF Protection Bypass via MethodOverride Rewriting POST to Safe Method

Echo: Reverse Proxy Forwards Attacker-Supplied X-Real-IP to Upstream by Default

Neko: Authorization bypass in legacy WebRTC input handling

SiYuan: MCP file tool's blocklist is incomplete relative to the HTTP file API it claims to align with, exposing publish-mode passwords and other sensitive workspace files

chi: Client IP spoofing in ClientIPFromXFF via X-Forwarded-For

Echo: X-Real-IP extractor trusts the header value instead of the sending peer

Echo: BodyDump can discard BodyLimit overflow errors for unknown-length requests

SiYuan: Missing consistency check between packageName and repoURL/repoHash in bazaar package install allows overwriting an existing, trusted plugin

SiYuan: authFilePublishAccess distinguishes hidden and forbidden documents from public and nonexistent ones, and issues a publish-auth cookie for documents it reports as forbidden

SiYuan: The publish filter for database backlinks consults the forbidden list instead of the visibility list, disclosing hidden-tier documents to anonymous readers

SiYuan: The publish filter for local storage returns the administrator's entire storage map with only three keys sanitized

agent-router: MCP session resume does not verify the embedded anti-hijacking subject; default Helm seed makes session IDs forgeable

Arcane: Environment access token bypasses the admin-required authorization gate on `/api/debug/pprof`

SFTPGo source-side file-pattern filter bypass during copy operations

containerd: Unpack DoS via repeated opaque whiteouts

Distribution: Client `manifests.Get()` does not verify returned content against requested digest

kin-openapi deepObject query decoding repeatedly compiles an invariant regular expression

kin-openapi spec loader panics on a self-referential additionalProperties $ref (nil-pointer DoS)

kin-openapi: Unauthenticated panic (DoS) in openapi3filter legacy router via non-canonical/unsupported HTTP method on a static path

Gotify: Insufficiently Protected Password Change endpoint

Nezha Monitoring: Whole-instance DoS in Nezha dashboard: a member can crash the process for every tenant

SFTPGo: Denial of service via malformed SSH channel request

Nginx UI: Standalone short tokens survive administrative revocation in cache and authenticate again after account re-enable

Nginx UI: Auto backup name allows path traversal outside validated storage path

Terragrunt catalog predictable temp symlink clobber

Vikunja: Write-level project members can delete admin-tier link shares through an unloaded permission check

Vikunja: Explicit lower-permission share on a sub-project is silently overridden by an inherited parent permission (broken access control / privilege-management regression in v2.6.0)

Vikunja: Webhooks and link shares survive every revocation path, so a removed collaborator keeps a live feed

Vikunja: Saved filter creation with an empty filter string recalculates task positions across all tenants

Vikunja: WebSocket authentication ignores server-side session state, so revoked sessions keep receiving live pushes

Nginx UI: Bundled reverse proxy can bypass IP allowlists and enable shared login lockout

Vikunja: Assignee email addresses disclosed to read-only project members via the task assignees endpoint

Vikunja: Cross-project task disclosure through subtask expansion

Vikunja: CalDAV relation creation bypasses TaskRelation.CanCreate, allowing an unauthorized write into any task by known UID

Vikunja: Link-share token can enumerate users through the v2 API