Advisory Catalog

SciTokens has an Authorization Bypass via Path Traversal in Scope Validation

SciTokens has an Authorization Bypass via Incorrect Scope Path Prefix Checking

Glances Vulnerable to Command Injection via Dynamic Configuration Values

Glances Vulnerable to Cross-Origin System Information Disclosure via XML-RPC Server CORS Wildcard

A critical security vulnerability in parisneo/lollms versions up to 2.2.0 allows any authenticated user to accept or reject friend requests belonging to other users. The `respond_request()` function in `backend/routers/friends.py` does not implement proper authorization checks, enabling Insecure Dir

A Server-Side Request Forgery (SSRF) vulnerability exists in parisneo/lollms versions prior to 2.2.0, specifically in the `/api/files/export-content` endpoint. The `_download_image_to_temp()` function in `backend/routers/files.py` fails to validate user-controlled URLs, allowing attackers to make ar

Giskard Agents have Server-side template injection via ChatWorkflow.chat() using non-sandboxed Jinja2 Environment

Home Assistant has stored XSS in history-graphs

Home Assistant has stored XSS in Map-card through malicious device name

LangChain Core has Path Traversal vulnerabilites in legacy `load_prompt` functions

Langflow: Authenticated Users Can Read, Modify, and Delete Any Flow via Missing Ownership Check

Changedetection.io Discloses Environment Variables via jq env Builtin in Include Filters

Azure Data Explorer MCP Server: KQL Injection in multiple tools allows MCP client to execute arbitrary Kusto queries

MLFlow allows Tracing + Assessments Access

Open WebUI has unauthorized deletion of knowledge files

Open WebUI's process_files_batch() endpoint missing ownership check, allows unauthorized file overwrite

vLLM has Hardcoded Trust Override in Model Files Enables RCE Despite Explicit User Opt-Out

C2C CI utils is vulnerable to DoS via pyasn dependency (CVE-2026-30922)

BentoML has Dockerfile Command Injection via system_packages in bentofile.yaml

Signify allows a remote attacker to escalate privileges via the signed_data.py and the context.py components

Modoboa has OS Command Injection

JustHTML is vulnerable to XSS via code fence breakout in <pre> content

Briefcase: Windows MSI Installer Privilege Escalation via Insecure Directory Permissions

Indico discloses local files resulting in Remote Code Execution through LaTeX injection

cbor2 has a Denial of Service via Uncontrolled Recursion in cbor2.loads

pyLoad SETTINGS Permission Users Can Achieve Remote Code Execution via Unrestricted Reconnect Script Configuration

langflow: /profile_pictures/{folder_name}/{file_name} endpoint file reading

langflow has Unauthenticated IDOR on Image Downloads

pydicom has a path traversal in FileSet/DICOMDIR ReferencedFileID allows file access outside the File-set root

skia-python vendors vulnerable libfreetype because of pinned cibuildwheel version

Intake has a Command Injection via shell() Expansion in Parameter Defaults

PyMuPDF has a path traversal in _main_.py

NLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File Overwrite

Unauthenticated remote shutdown in nltk.app.wordnet_app

Natural Language Toolkit (NLTK) has unbounded recursion in JSONTaggedDecoder.decode_obj() may cause DoS

DeepDiff has Memory Exhaustion DoS through SAFE_TO_IMPORT

dynaconf Affected by Remote Code Execution (RCE) via Insecure Template Evaluation in @jinja Resolver

PySpector has a Plugin Sandbox Bypass leads to Arbitrary Code Execution

Frigte has broken access control viewer user can delete admin and other users account

UltraJSON has an integer overflow handling large indent leads to buffer overflow or infinite loop

UltraJSON has a Memory Leak parsing large integers allows DoS

Langflow is Missing Ownership Verification in API Key Deletion (IDOR)

Ray Dashboard is vulnerable to path traversal through its static file handling mechanism

Denial of Service in pyasn1 via Unbounded Recursion

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to version 6.9.1, the GraphQL mutations "IndividualDeletionDeleteMutation" is intended to allow users to delete individual entity objects respectively. However, it was observed that this mutati

Uncontrolled recursion DoS in JustHTML() via deeply nested HTML

Apache Airflow: Execution API HITL Endpoints Missing Per-Task Authorization

Apache Airflow: Path of session token in cookie does not consider base_url - session hijacking via co-hosted applications

Apache Airflow: Wildcard DagVersion Listing Bypasses Per‑DAG RBAC and Leaks Metadata

Glances Central Browser Autodiscovery Leaks Reusable Credentials to Zeroconf-Spoofed Servers