Advisory Catalog

An issue in fohrloop dash-uploader v.0.1.0 through v.0.7.0a2 allows a remote attacker to execute arbitrary code via the dash_uploader/httprequesthandler.py, dash_uploader/upload.py in the Upload function and max_file_size parameter, dash_uploader/configure_upload.py components

PraisonAI's symlink-extraction bypass of `_safe_extractall` writes outside `dest_dir`

PraisonAI has unsafe tool resolution in `ToolExecutionMixin.execute_tool`: undeclared `__main__` callables execute

PraisonAI ships and generates a legacy API server with authentication disabled by default, allowing unauthenticated workflow execution

netbox-data-flows has stored XSS in ObjectAlias names rendered inside DataFlow tables

OpenStack Cyborg uses rule:allow (check_str='@') as the default policy for multiple API endpoints

Microsoft APM CLI's plugin.json component paths escape plugin root and copy arbitrary host files during install

Postorius is vulnerable to XSS

Diffusers has a `trust_remote_code` bypass via `custom_pipeline` and local custom components

Diffusers has a `trust_remote_code` bypass via `custom_pipeline` and local custom components

Aegra has cross-user run injection in /threads/{thread_id}/runs (IDOR)

Kiota abstractions RedirectHandler leaks Cookie/Proxy-Authorization headers on cross-host redirect

PraisonAI has unauthenticated RCE via `tool_override.py` (CVE-2026-40287 patch bypass)

PraisonAI has an SSRF bypass

GitPython: Newline injection in config_writer().set_value() enables RCE via core.hooksPath

python-multipart has Denial of Service via unbounded multipart part headers

Mako vulnerable to path traversal via backslash URI on Windows in TemplateLookup

JupyterLab's command linker attributes in HTML enable one-click command execution from untrusted content

Granian vulnerable to unauthenticated DoS via WebSocket subprotocol header panic

wger: CSV/TSV formula injection in gym member export (first_name/last_name)

GitPython reference APIs has a path traversal vulnerability that allows arbitrary file write and delete outside the repository

Lemur: LDAP Filter Injection enables post-authentication privilege escalation

Mistune has a ReDoS in LINK_TITLE_RE that allows denial of service via crafted Markdown input

vLLM Vulnerable to Remote DoS via Special-Token Placeholders

PyLoad vulnerable to Path Traversal via Package Folder Name in set_package_data

changedetection.io has an Arbitrary Local File Read via a crafted backup restore

Twisted has a Denial of Service (DoS) in twisted.names via Crafted DNS Compression Pointer Chains

JupyterLab has an Extension Manager API/GUI Policy Discrepancy, allowing 3rd party (malicious) extensions install via POST request

OpenStack Ironic has an Incorrect Resource Transfer Between Spheres

edx-enterprise has SSRF via SAML metadata URL in sync_provider_data endpoint

Jupyter Server's Authentication Cookies Remain Valid After Password Reset and Server Restart

Jupyter Server has a CORS Origin Validation Bypass via `re.match()` in `allow_origin_pat`

Jupyter Server: Path Traversal via incorrect startswith() root directory check allows access to sibling directories

pyload-ng: non-admin SETTINGS users can redirect all outbound traffic through an attacker-controlled proxy via unrestricted `proxy.*` config (incomplete fix for CVE-2026-33509 / -35463 / -35464 / -35586)

changedetection.io project has an XXE vulnerability

Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)

IKUS Rdiffweb allows an attacker with any valid or stolen access token to act as other users

pyp2spec is Vulnerable to Code Injection

OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. Prior to version 7.0.0-rc3, the Script Runner widget allows users to execute Python and Ruby scripts directly from the openc3-COSMOS-script-runner-api container. Because all the do

OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. Prior to versions 6.10.5 and 7.0.0-rc3, the OpenC3 password change functionality allows a user to change their password without providing the old password, by accepting a valid ses

PPTAgent: Arbitrary Code Execution via Python eval() of LLM-Generated Code with Builtins in Scope

Langflow: Prompt injection in Langflow Smart Transform can lead to code execution

OpenStack Ironic Python Agent Includes Functionality from Untrusted Control Sphere

OpenStack Keystone has an Incorrect Authorization Issue

Jupyter Notebook Vulnerable to Authentication Token Theft via CommandLinker XSS

Pallets Click, versions 8.3.2 and below, contain a command injection vulnerability in the click.edit() function, allowing attackers to pass arbitrary OS commands from an unprivileged account.

CKAN has Unauthenticated SQL Injection and Authorization Bypass in `datastore_search_sql`

pygeoapi 0.23.x: Unauthenticated SSRF via OGC API - Processes Subscriber

pygeoapi 0.23.x: Path Traversal in STAC FileSystemProvider

OpenStack Ironic is Vulnerable to Inclusion of Functionality from Untrusted Control Sphere