Advisory Catalog

Ansible galaxy-importer Path Traversal vulnerability

AIOHTTP has problems in HTTP parser (the python one, not llhttp)

vantage6-server node accepts non-whitelisted algorithms from malicious server

Aiohttp has inconsistent interpretation of `Content-Length` vs. `Transfer-Encoding` differing in C and Python fallbacks

Label Studio Object Relational Mapper Leak Vulnerability in Filtering Task

Remarshal expands YAML alias nodes unlimitedly, hence Remarshal is vulnerable to Billion Laughs Attack

Apache Airflow vulnerable to Exposure of Sensitive Information to an Unauthorized Actor

Apache Airflow allows authenticated and DAG-view authorized users to modify some DAG run detail values when submitting notes

piccolo SQL Injection via named transaction savepoints

AsyncSSH Rogue Session Attack

AsyncSSH Rogue Extension Negotiation

esptool allows attackers to view sensitive information via weak cryptographic algorithm

Label Studio has Hardcoded Django `SECRET_KEY` that can be Abused to Forge Session Tokens

PyArrow: Arbitrary code execution when loading a malicious data file

An issue was discovered in Couchbase Server 7.2.0. There is a private key leak in debug.log while adding a pre-7.0 node to a 7.2 cluster.

Ethyca Fides HTML Injection Vulnerability in HTML-Formatted DSR Packages

Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds write was found in Exiv2 version v0.28.0. The vulnerable function, `BmffImage::brotliUncompress`, is new in v0.28.0, so earlier versions of Exiv2 are _not_ aff

Django Denial of service vulnerability in django.utils.encoding.uri_to_iri

Django Denial-of-service in django.utils.text.Truncator

Pillow Denial of Service vulnerability

Django potential denial of service vulnerability in UsernameField on Windows

transmute-core unsafe YAML deserialization vulnerability

Synapse vulnerable to leak of remote user device information

Possible Infinite Loop when PdfWriter(clone_from) is used with a PDF

Apache Airflow Celery provider Insertion of Sensitive Information into Log File vulnerability

twisted.web has disordered HTTP pipeline response

Command Injection in pip when used with Mercurial

Werkzeug DoS: High resource usage when parsing multipart/form-data containing a large part with CR/LF character at the beginning

dtale vulnerable to Remote Code Execution through the Custom Filter Input

Nautobot vulnerable to exposure of hashed user passwords via REST API

Fides JavaScript Injection Vulnerability in Privacy Center URL

Fides Information Disclosure Vulnerability in Config API Endpoint

Fides Server-Side Request Forgery Vulnerability in Custom Integration Upload

Apache Airflow vulnerable to Exposure of Sensitive Information

WebAssembly wabt 1.0.33 has an Out-of-Bound Memory Read in in DataSegment::IsValidRange(), which lead to segmentation fault.

WebAssembly wabt 1.0.33 contains an Out-of-Bound Memory Write in DataSegment::Drop(), which lead to segmentation fault.

Wagtail CRX CodeRed Extensions vulnerable to Path Traversal

Django Grappelli Open Redirect vulnerability

Langchain SQL Injection vulnerability

Langchain Server-Side Request Forgery vulnerability

PDM Trojan Lockfile

modoboa Cross-site Scripting vulnerability

modoboa Cross-site Scripting vulnerability

modoboa Cross-Site Request Forgery vulnerability

Home Assistant vulnerable to account takeover via auth_callback login

mycli has Inadequate Encryption Strength

Viewing wget extractor output while logged in as an admin allows archived JS to execute in the admins context

Wagtail vulnerable to disclosure of user names via admin bulk action views

LangChain Server Side Request Forgery vulnerability