Advisory Catalog

Calibre Web and Autocaliweb have a ReDoS vulnerability

eKuiper API endpoints handling SQL queries with user-controlled table names.

Mezzanine CMS vulnerable to Cross-site Scripting

FastAPI Guard has a regex bypass

Ollama vulnerable to Cross-Domain Token Exposure

Aim vulnerable to Cross-site Scripting

Dagster Local File Inclusion vulnerability

`pyLoad` has Path Traversal Vulnerability in `json/upload` Endpoint that allows Arbitrary File Write

Starlette has possible denial-of-service vector when parsing large files in multipart forms

Cadwyn vulnerable to XSS on the docs page

WebSSH Cross-site Scripting vulnerability

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to version 6.6.6, an IDOR vulnerability in the GrapQL `NotificationLineNotificationMarkReadMutation` and `NotificationLineNotificationDeleteMutation` mutations of OpenCTI allows an authenticate

pyLoad vulnerable to XSS through insecure CAPTCHA

AIOHTTP is vulnerable to HTTP Request/Response Smuggling through incorrect parsing of chunked trailer sections

Indico vulnerability allows attackers to bulk dump user details

py-libp2p is vulnerable to DoS attacks through use of large RSA keys