Advisory Catalog

misp-modules has nsafe remote resource fetching in expansion

vLLM: extract_hidden_states speculative decoding crashes server on any request with penalty parameters

Granian vulnerable to DoS via WSGI response header panic

wger: trainer_login open redirect - ?next= parameter not validated against host

Lemur: LDAP Authentication Globally Disables TLS Certificate Verification When LDAP_USE_TLS Is Enabled

PyLoad vulnerable to unauthenticated traceback disclosure via global exception handler in WebUI

Keylime has a hardcoded attestation challenge nonce that allows replay attacks

ciguard: SCA HTTP client reads response body without size cap

PyLoad Vulnerable to Path Traversal via Package Folder Name

Ethyca Fides has a Privacy Request Identity Verification Bypass Vulnerability via Duplicate Detection

wireshark-mcp vulnerable to arbitrary file write via export_objects when WIRESHARK_MCP_ALLOWED_DIRS is not configured

requests-hardened is Vulnerable to Server-Side Request Forgery

JupyterHub has cross-origin form POSTs bypass XSRF (CWE-352)

OpenStack Horizon has Incorrect Behavior Order

Django has an Improper Handling of Length Parameter Inconsistency

Jupyter Server has an open redirection vulnerability in `next` query parameter

ogham-mcp had credentials embedded in published PyPI sdists -- Neon postgres URLs and Voyage API key

pyload-ng: non-admin SETTINGS users can disable outbound TLS peer verification via unrestricted `ssl_verify` config (incomplete fix for CVE-2026-33509 / -35463 / -35464 / -35586)

Pillow has a PDF Parsing Trailer Infinite Loop (DoS)

Pillow has an integer overflow when processing fonts

Pillow has a heap buffer overflow with nested list coordinates

OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. Prior to versions 6.10.5 and 7.0.0-rc3, OpenC3 COSMOS contains a design flaw in the save_tool_config() function that allows saving tool configuration files at arbitrary locations i

PPTAgent: Arbitrary File Write via `save_generated_slides`

PPTAgent: Arbitrary File Write + Directory Creation via markdown_table_to_image

Prefect Unauthenticated Event Injection via /api/events/in WebSocket

Prefect Auth Bypass via endswith() Health Check Exemption

MindsDB has an Improper Access Control Issue

SGLang has an Improper Input Validation/Injection Issue

AstrBot Makes Use of Hard-coded Password

CKAN has Unauthenticated Authorization Bypass in `datastore_search_sql`

Weblate Vulnerable to Authenticated SSRF via Project Backup Import bypassing validate_repo_url

Weblate Doesn't Invalidate API Token on Password Change

apache-airflow-providers-smtp: No certificate validation on SMTP STARTTLS connections in SMTP provider

mcpo-simple-server has a Path Traversal issue

CKAN has CSRF exemption primed by anonymous requests

CKAN has no certificate validation on STMP connection

beets has a Cross-site Scripting vulnerability

notes-mcp has a Path Traversal issue

sqlite-mcp has an Injection issue

mkdocs-mcp-plugin has a Path Traversal issue

mcp-url-downloader has a Server-Side Request Forgery issue

kaggle-mcp has a Path Traversal issue

pip Vulnerable to Inclusion of Functionality from Untrusted Control Sphere

wlc: print_html outputs API data without HTML escaping

Apache Airflow's asset dependency graph did not restrict nodes by the viewer's DAG read permissions

Apache Airflow's authenticated /ui/dags endpoint did not enforce per-DAG access control on embedded Human-in-the-Loop (HITL) and TaskInstance record

OpenC3 COSMOS is Vulnerable to Self-XSS Through the Command Sender

justhtml has sanitization bypass in custom policies and programmatic DOM

nbconvert has an Arbitrary File Read via Path Traversal in HTMLExporter Image Embedding

nbconvert has an Arbitrary File Write via Path Traversal in Cell Attachment Filenames