Advisory Catalog

BBOT: Server-Side Request Forgery (SSRF) in docker_pull module via WWW-Authenticate realm parsing

Bleach: URI sanitization allows disallowed URI schemes with Unicode > U+00A0 in output

python-multipart: Negative Content-Length in parse_form buffers the entire body in memory

python-multipart: Semicolon treated as querystring field separator enables parameter smuggling

aiohttp: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connections

aiohttp: Payload Response Resources Are Not Closed After Mid-Body Disconnect

aiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence

aiohttp: CRLF injection in multipart headers

Dulwich doesn't sanitize commit subjects in `porcelain.format_patch`

MySQL MCP Server is Vulnerable to SQL Injection Through its mysql URI Handler

zilliztech deep-searcher has an Incorrect Privilege Assignment issue

Vantage6: No limit on emails sent for password/MFA reset

bytedance InfiniStore: Denial of Service via Non-Cryptographic Hashing in InfiniStore KV Map

kas's late signature validation may allow unnoticed repository manipulations

OpenStack Neutron: Neutron port RBAC policy bypass allows project managers to set trusted device owners on shared networks

LMCache: 16-bit multimodal hash collision can poison KV cache entries

GPTCache: File and image cache keys collide because BufferedReader.peek() only reads the buffered prefix

Streamlit @st.cache_data hash collision via fixed sampling seed and PIL P-mode palette omission

MLflow: Deterministic sampling in dataset digest enables predictable collisions

ms-swift: Image Cache Hash Collision via Missing Dimension Metadata

Gradio: Audio cache key ignores metadata when saving numpy audio outputs

SGLang is Vulnerable to DoS via the data_hash Function

mlrun: DataFrame hash collisions can cause dataset artifact path conflicts and silent data corruption

Django: UpdateCacheMiddleware may disclose cached responses due to case-sensitive Cache-Control handling

Django fails to prevent reuse of a partially-initialized connection after a failed `STARTTLS` handshake

Django: signed cookies are vulnerable to salt namespace collisions

Django: has_vary_header may expose cached responses when Vary values contain whitespace

Django: UpdateCacheMiddleware may disclose private cached responses by omitting Authorization from Vary

Code Index MCP is vulnerable to Uncontrolled Resource Consumption

FoundationAgents MetaGPT: Deserialization through flawed argument mapping via Message.check_instruct_content()

SGLang: Reachable Assertion via  lora_path  in LoRAManager enables remote Denial of Dervice

kas checks out SHA-like git branches as valid commits

Apache Airflow has an Incorrect Authorization issue

Apache Airflow has an Improper Authorization issue

hermes-agent has an Injection issue

hermes-agent has an Injection issue

AstrBot: Manipulation of astr_main_agent's session_id parameter leads to authorization bypass

Aider has an SSRF vulnerability through its AWS EC2 Metadata Endpoint

Aider is vulnerable to Code Injection via editor_coder.run function

PyJWKClient unbounded JWKS endpoint requests via attacker-controlled kid values (DoS)

pretix vulnerable to Authorization Bypass Through User-Controlled Key

Bugsink: Issue bulk actions can affect another project’s issue if its UUID is known

Bugsink: Issue event views can show an event from another project if its UUID is known

hermes-agent has an Incorrect Comparison

Crawlee for Python: SSRF via sitemap-derived URLs

AstrBot: File upload vulnerability in the function post_file of the file astrbot/dashboard/routes/chat.py

Open WebUI: Read-Only Users Can Toggle Note Pin Status via Incorrect Permission Check (Write via Read-Only Access)

dbt MCP Server Logs Tool Arguments Including SQL Queries and Credentials in Plaintext Without Redaction When File Logging Is Enabled

A vulnerability has been found in OSGeo gdal up to 3.13.0dev-4. Affected by this issue is the function GDSDfldsrch of the file frmts/hdf4/hdf-eos/GDapi.c of the component Grid File Handler. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has

OSGeo gdal has a heap-based buffer overflow