Advisory Catalog

pypdf: Possible long runtimes for zero-only width values in cross-reference streamsuntimes for zero-only width values in cross-reference streams

pypdf: Possible large memory usage for large offsets for layout mode text

libusb before version 1.0.30 contains a one-byte out-of-bounds read vulnerability in parse_iad_array() in descriptor.c that allows attackers to trigger a denial of service by supplying a malformed USB descriptor whose bLength equals size minus one, causing the bounds check to use the original buffer

libusb before version 1.0.30 contains a NULL pointer dereference vulnerability that allows attackers to crash applications by supplying a malformed USB configuration descriptor where an interface claims bNumEndpoints greater than zero but is followed by a class-specific descriptor whose bLength exce

Bugsink: Project scoping missing in sourcemap and debug-file lookup

vllm has Improper Resource Shutdown or Release

Apache Airflow FAB Auth Manager contains an LDAP filter injection vulnerability

hermes-agent has a sandbox issue

hermes-agent has an Injection issue

hermes-agent has an Injection issue

instagrapi: Unsafe signup challenge path handling in instagrapi

aiograpi: Unsafe signup challenge path handling

Flask-Security-Too OAuth reauthentication freshness bypass via cross- user OAuth identity acceptance

Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks

Pydantic AI: SSRF cloud-metadata blocklist bypass via IPv4-mapped IPv6 (Incomplete fix of CVE-2026-25580)

SQLAdmin: Authorization Bypass on `ajax_lookup`

FlaskBB: SSRF in get_image_info() via unrestricted avatar URL

pyload-ng: SSRF via HTTP Redirect Bypass in parse_urls API

Mobile Verification Toolkit (MVT): Path Traversal via unsanitized File identifiers in iOS Backup processing

MLflow authenticated users can enumerate any registered model versions due to lack of per-model permissions checks

Apache Airflow Amazon provider: Prevent unauthorized access to team-scoped secrets in AWS Secrets Manager and SSM Parameter Store backends

Regression in pymdownx.snippets reintroduces sibling-prefix path traversal bypass despite restrict_base_path

Strawberry GraphQL: Default GraphiQL may expose HTTP headers in URLs

Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix

NiceGUI: Unauthenticated log-volume denial of service in dynamic resource routes

eduMFA: Unauthenticated Failcounter Increment on Resolver Tokens via /validate/check

Microsoft APM: Windows absolute-path tar member overwrite during legacy-bundle probing in `apm install`

Weblate: Stored HTML injection in editor search preview

Open WebUI: Unauthenticated endpoint can trigger embedding generation (cost/DoS)

Open WebUI has an Indirect Object Reference (IDOR) in user notes

Open WebUI Vulnerable to Unauthenticated RAG Configuration Disclosure

Open WebUI: Mass Assignment via FeedbackForm extra=allow Allows Feedback User ID Spoofing and Evaluation Data Manipulation

Open WebUI: Sharing models for others to use (read permission) also exposes model details (system prompt leakage)

Open WebUI has an IDOR vulnerability in the pin_channel_message API endpoint

Open WebUI has an IDOR vulnerability in the update_message_by_id API endpoint

Open WebUI: Authenticated users can bypass model access control via exposed query parameter [AI-ASSISTED]

Open WebUI Exposes System Prompt to Regular User [Non-Admin]

Open WebUI vulnerable to blind server side request forgery (SSRF) via the PDF generate function

Open WebUI missing authorization check at the model update function - models from other users can be updated

Open WebUI's API key endpoint restrictions bypassed via `x-api-key` header — full message processing on restricted endpoints

Open WebUI Vulnerable to Cross-Site Request Forgery (CSRF) via Image URL Manipulation

Open WebUI has stored XSS via unsanitized Office/Excel/DOCX file preview rendering ({@html} without DOMPurify)

pyLoad Has Incomplete Fix for CVE-2026-33509 -storage_folder Bypass via Session Directory in pyLoad

Home Assistant MCP Server: YAML config backups written under www/ are served unauthenticated at /local/

Amazon SageMaker Python SDK is missing integrity verification in its Triton inference handler

Open WebUI has Stored Cross-Site Scripting In Profile Picture

dbt MCP Server Transmits All MCP Tool Arguments Including Raw SQL and --vars Credentials to dbt Labs Telemetry by Default Without Redaction

dbt MCP Server has an Argument Injection in dbt CLI Tool Wrappers via node_selection and resource_type Parameters

Mistune Image Directive CSS Injection Vulnerability

Mistune TOC Anchor Injection XSS