Advisory Catalog

Open WebUI's Insecure Direct Object Reference (IDOR) allows access to other users' memories

Open WebUI vulnerable to Path Traversal in `POST /api/v1/audio/transcriptions`

Unauthenticated SSRF Vulnerability in Streamlit on Windows (NTLM Credential Exposure)

pypdf: Possible infinite loop during recovery attempts in DictionaryObject.read_from_stream

Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function

MobSF has SQL Injection in its SQLite Database Viewer Utils

Deluge 1.3.15 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the URL field. Attackers can paste a buffer of 5000 characters into the 'From URL' field during torrent addition to trigger an application crash.

Deluge 1.3.15 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Webseeds field. Attackers can paste a buffer of 5000 bytes into the Webseeds field during torrent creation to trigger an application crash.

NiceGUI's unvalidated chunk size parameter in media routes can cause memory exhaustion

Improper Authentication and Origin Validation Error in pyload-ng

Denial of service via non-terminating SYLT frame parsing loop in tinytag

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in nltk

JustHTML Affected by Mutation XSS via Literal Text Serialization in Raw Text Elements (style/script)

Stored XSS in PySpector HTML Report Generation leads to Javascript Code Execution

pypdf has inefficient decoding of array-based streams

Apache Airflow: DAG authorization bypass

Improper S3 ownership verification in Bedrock AgentCore Starter Toolkit

AWS API MCP File Access Restriction Bypass

Stored XSS in Memray-generated HTML reports via unescaped command-line metadata

Glances's REST/WebUI Lacks Host Validation and Remains Exposed to DNS Rebinding

Vanna has a SQL injection in the remove_training_data function

fickling's `platform` module subprocess invocation evades `check_safety()` with `LIKELY_SAFE`

fickling modules linecache, difflib and gc are missing from the unsafe modules blocklist

ha-mcp has XSS via Unescaped HTML in OAuth Consent Form

ha-mcp OAuth 2.1 DCR mode enables network reconnaissance via an error oracle

Copyparty has unexpected JavaScript execution via crafted URL to folder with `.prologue.html`

pypdf: manipulated stream length values can exhaust RAM

django-unicorn affected by component state manipulation via unvalidated attribute access

copyparty: volflag `nohtml` did not block javascript in svg files

An issue pertaining to CWE-312: Cleartext Storage of Sensitive Information was discovered in lesspass lesspass v9.6.9 which allows attackers to obtain sensitive information.

Apache Airflow AWS Auth Manager has Host Header Injection Leading to SAML Authentication Bypass

mcp-memory-service Vulnerable to System Information Disclosure via Health Endpoint

django-allauth has an open redirect vulnerability

eml_parser: Path Traversal in Official Example Script Leads to Arbitrary File Write

changedetection.io has Reflected XSS in its RSS Tag Error Response

Wagtail Vulnerable to Cross-site Scripting in simple_translation admin interface

Wagtail Vulnerable to Cross-site Scripting in TableBlock class attributes

pypdf vulnerable to inefficient decoding of ASCIIHexDecode streams

MS-Agent vulnerable to Command Injection

Products.isurlinportal has possible open redirect when using more than 2 forward slashes

lxml-html-clean has <base> tag injection through default Cleaner configuration

lxml-html-clean has CSS @import Filter Bypass via Unicode Escapes

Gradio has an Open Redirect in its OAuth Flow

Gradio: Mocked OAuth Login Exposes Server Credentials and Uses Hardcoded Session Secret

Indico has a missing access check in the event series management API

pypdf: Manipulated RunLengthDecode streams can exhaust RAM

pillow-heif: Integer Overflow in Encode Path Buffer Validation Leads to Heap Out-of-Bounds Read

AWS CLI: cli_history database does not restrict file permissions on Unix systems

wger: IDOR in nutritional_values endpoints exposes private dietary data via direct ORM lookup

wger: IDOR in RepetitionsConfig and MaxRepetitionsConfig API leak other users' workout data