Advisory Catalog

Glances has CQL Injection in its Cassandra Export Module via Unsanitized Config Values

AWS Encryption SDK for Python: Key commitment policy bypass via shared key cache

python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback

pip has an interpretation conflict due to handling both concatenated tar and ZIP files as ZIP files

Apache Doris MCP Server vulnerable to SQL Injection via improper query context neutralization

FastChat has a Content Moderation Bypass via Arena Side-by-Side Views

FastChat has Denial of Service Through Blocking Event Loop in Model Workers (Incomplete Fix for ff66426)

AgentScope vulnerable to Server-Side Request Forgery

AgentScope vulnerable to Server-Side Request Forgery

AgentScope vulnerable to Server-Side Request Forgery

AgentScope Vulnerable to Remote Code Injection

Langflow: DoS Through Lack of File Size Restriction via Deprecated Unauthenticated File Upload API

apache-airflow-providers-keycloak: Missing OAuth 2.0 State and PKCE Enables Login CSRF and Session Fixation

pretalx mail templates vulnerable to email injection via unescaped user-controlled placeholders

LangChain Text Splitters: HTMLHeaderTextSplitter.split_text_from_url SSRF Redirect Bypass

Authlib: Cross-site request forging when using cache

pypdf: Manipulated FlateDecode image dimensions can exhaust RAM

pypdf: Possible long runtimes for wrong size values in incremental mode

pypdf: Manipulated FlateDecode predictor parameters can exhaust RAM

Home Assistant Command-line Interface: Handling of user-supplied Jinja2 templates

wger has Stored XSS via Unescaped License Attribution Fields

pyLoad has a Session Cookie Security Downgrade via Untrusted X-Forwarded-Proto Header Spoofing (Global State Race Condition)

LangSmith SDK: Streaming token events bypass output redaction

PySpector has a Plugin Code Execution Bypass via Incomplete Static Analysis in PluginSecurity.validate_plugin_code

python-multipart affected by Denial of Service via large multipart preamble or epilogue data

pypdf has long runtimes for wrong size values in cross-reference and object streams

Weblate: Prefix-Based Repository Boundary Check Bypass via Symlink/Junction Path Prefix Collision

Weblate: SSRF via the webhook add-on using unprotected fetch_url()

Weblate: SSRF via Project-Level Machinery Configuration

Weblate: Authenticated SSRF via redirect bypass of ALLOWED_ASSET_DOMAINS in screenshot URL uploads

Weblate: JavaScript localization CDN add-on allows arbitrary local file read outside the repository

Weblate: Improper access control for the translation memory in API

Apache Airlfow: Sensitive Azure Service Bus connection string (and possibly other providers) exposed to users with view access

Giskard has Unsandboxed Jinja2 Template Rendering in ConformityCheck

Open WebUI has Blind Server Side Request Forgery in its Image Edit Functionality

mitmproxy has an LDAP Injection

MetaGPT has an eval injection in metagpt/strategy/tot.py

A Cross-site Scripting (XSS) vulnerability was identified in the `from_dict` method of the `AppLollmsMessage` class in parisneo/lollms prior to version 2.2.0. The vulnerability arises from the lack of sanitization or HTML encoding of the `content` field when deserializing user-provided data. This al

rembg server is vulnerable to Server-Side Request Forgery (SSRF) and a weak default CORS configuration

pypdf: Manipulated XMP metadata entity declarations can exhaust RAM

GeoNode contains a server-side request forgery vulnerability in the service registration endpoint

GeoNode versions 4.0 before 4.4.5 and 5.0 before 5.0.2 contain a server-side request forgery vulnerability that allows authenticated users with document upload permissions to trigger arbitrary outbound HTTP requests by providing a malicious URL via the doc_url parameter during document upload. Attac

ajenti.plugin.core has race conditions in 2FA

xrootd has path traversal in directory listing that allows access to the parent directory via trailing ".." pattern

PraisonAI: Coarse-Grained Tool Approval Cache Bypasses Per-Invocation Consent for Shell Commands

PraisonAI Vulnerable to Sensitive Environment Variable Exposure via Untrusted MCP Subprocess Execution

Rembg has a Path Traversal via Custom Model Loading

OpenStack Keystone: Restricted application credentials can create EC2 credentials

PraisonAIAgents: Path Traversal via Unvalidated Glob Pattern in list_files Bypasses Workspace Boundary

PraisonAI: Unauthenticated Information Disclosure of Agent Instructions via /api/agents in AgentOS