Advisory Catalog

Glances's Default CORS Configuration Allows Cross-Origin Credential Theft

Glances has Incomplete Secrets Redaction: /api/v4/args Endpoint Leaks Password Hash and SNMP Credentials

Glances has a Command Injection via Process Names in Action Command Templates

Glances exposes the REST API without authentication

pyOpenSSL DTLS cookie callback buffer overflow

Authlib: Fail-Open Cryptographic Verification in OIDC Hash Binding

Authlib Vulnerable to JWE RSA1_5 Bleichenbacher Padding Oracle

FastMCP OAuth Proxy token reuse across MCP servers

MLflow has a command injection in mlflow/sagemaker/__init__.py

SimpleEval: Objects (including modules) can leak dangerous modules through to direct access inside the sandbox

Scrapy: Arbitrary Module Import via Referrer-Policy Header in RefererMiddleware

PyJWT accepts unknown `crit` header extensions

CairoSVG vulnerable to Exponential DoS via recursive <use> element amplification

Black: Arbitrary file writes from unsanitized user input in cache file name

Magic Wormhole: "wormhole receive" allows arbitrary local file overwrite

Graphiti vulnerable to Cypher Injection via unsanitized node_labels in search filters

multipart vulnerable to ReDoS in `parse_options_header()`

OpenCTI has Semi-Blind SSRF via Unvalidated External URL in Data Ingestion Feature

SGLangs `replay_request_dump.py` contains an insecure pickle.load() without validation and proper deserialization

Tornado has cookie attribute injection via .RequestHandler.set_cookie

Tornado is vulnerable to DoS due to too many multipart parts

Black is the uncompromising Python code formatter. Black provides a GitHub action for formatting code. This action supports an option, use_pyproject: true, for reading the version of Black to use from the repository pyproject.toml. A malicious pull request could edit pyproject.toml to use a direct U

MCP Atlassian has SSRF via unvalidated X-Atlassian-Jira-Url / X-Atlassian-Confluence-Url headers

Azure MCP Server has Server-Side Request Forgery issue that allows authorized attacker to elevate privileges over a network

NLTK has Arbitrary File Read via Absolute Path Input in nltk.util.filestring()

Glances has SQL Injection via Process Names in TimescaleDB Export

Glances Exposes Unauthenticated Configuration Secrets

Apache Airflow Providers Http has Unsafe Pickle Deserializatio leading to RCE via HttpOperator

x402 SDK Security Advisory

mcp-memory-service's Wildcard CORS with Credentials Enables Cross-Origin Memory Theft

SageMaker Python SDK replaced eval() with safe parser in JumpStart search functionality

Plane is Vulnerable to Unauthenticated Workspace Member Information Disclosure

Plane has SSRF via Incomplete IP Validation in Webhook URL Serializer

LangGraph checkpoint loading has unsafe msgpack deserialization

RAGAS has an Arbitrary File Read vulnerability

xgrammar vulnerable to DoS via multi-layer nesting

Python-Markdown has an Uncaught Exception

pyLoad has an Arbitrary File Write via Path Traversal in edit_package()

Fickling missing RCE-capable modules in UNSAFE_IMPORTS

Fickling has `always_check_safety()` bypass: pickle.loads and _pickle.loads remain unhooked

changedetection.io has Zip Slip vulnerability in the backup restore functionality

changedetection.io vulnerable to XPath - Arbitrary File Read via unparsed-text()

Authlib: Setting `alg: none` and a blank signature appears to bypass signature verification

IRRd: web UI host header injection allows password reset poisoning via attacker-controlled email links

NLTK has a Path Traversal issue

BentoML Vulnerable to Arbitrary File Write via Symlink Path Traversal in Tar Extraction

OpenViking contains a Path Traversal vulnerability

Django vulnerable to Uncontrolled Resource Consumption

OpenChatBI has a Path Traversal Vulnerability in save_report Tool

CocoIndex Doris target connector didn't verify table name when constructing ALTER TABLE statements