Advisory Catalog

Transformers Deserialization of Untrusted Data vulnerability

llama-index-core Prompt Injection vulnerability leading to Arbitrary Code Execution

LiteLLM has Server-Side Template Injection vulnerability in /completions endpoint

gaizhenbiao/chuanhuchatgpt is vulnerable to improper access control, allowing unauthorized access to the `config.json` file. This vulnerability is present in both authenticated and unauthenticated versions of the application, enabling attackers to obtain sensitive information such as API keys (`open

Aim Cross-Site Request Forgery vulnerability allows user to delete runs and perform other operations

Aim Web API vulnerable to Remote Code Execution

Gradio allows users to access arbitrary files

yt-dlp: `--exec` command injection when using `%q` in yt-dlp on Windows (Bypass of CVE-2023-40581)

DIRAC: Unauthorized users can read proxy contents during generation

Ryu Infinite Loop vulnerability

NVIDIA NeMo framework for Ubuntu contains a vulnerability in tools/asr_webapp where an attacker may cause an allocation of resources without limits or throttling. A successful exploit of this vulnerability may lead to a server-side denial of service.

wasmtime is a runtime for WebAssembly. The 19.0.0 release of Wasmtime contains a regression introduced during its development which can lead to a guest WebAssembly module causing a panic in the host runtime. A valid WebAssembly module, when executed at runtime, may cause this panic. This vulnerabili

pgAdmin Remote Code Execution (RCE) vulnerability

Mobile Security Framework (MobSF) vulnerable to SSRF in firebase database check

Voilà Local file inclusion

Pillow buffer overflow vulnerability

Piccolo Admin's raw SVG loading may lead to complete data compromise from admin page

aliyundrive-webdav vulnerable to Command Injection

Saleor: Customers' addresses leak when using Warehouse as a `Pickup: Local stock only` delivery method

Cross site scripting (XSS) in JupyterHub via Self-XSS leveraged by Cookie Tossing

Gradio's CI vulnerable to Command Injection

GeoNode: Stored XSS to full account takeover

Lektor does not sanitize database path traversal

gradio Server-Side Request Forgery vulnerability

Apache Airflow Improper Preservation of Permissions vulnerability

LangChain's XMLOutputParser vulnerable to XML Entity Expansion

Unauthenticated views may expose information to anonymous users

ansys-geometry-core OS Command Injection vulnerability

PaddlePaddle allows arbitrary file read via paddle.vision.ops.read_file

SSRF Vulnerability on assetlinks_check(act_name, well_knowns)

Gradio applications running locally vulnerable to 3rd party websites accessing routes and uploading files

ESPHome vulnerable to Authentication bypass via Cross site request forgery

GoogleOAuthenticator.hosted_domain incorrectly verifies membership of an Google organization/workspace

`qiskit_ibm_runtime.RuntimeDecoder` can execute arbitrary code

Dynamic Variable Evaluation in qiskit-ibm-runtime

Jupyter Server Proxy's Websocket Proxying does not require authentication

Black vulnerable to Regular Expression Denial of Service (ReDoS)

Denial of service via regular expression

XSS via the "Snapshot Test" feature in Classic Webcam plugin settings

RCE in TranformGraph().to_dot_graph function

Information leakage in YAQL