Advisory Catalog

LangChain vulnerable to arbitrary code execution

LangChain vulnerable to arbitrary code execution

LangChain vulnerable to arbitrary code execution

llama-index vulnerable to arbitrary code execution

Tornado vulnerable to HTTP request smuggling via improper parsing of `Content-Length` fields and chunk lengths

Scancode.io Reflected Cross-Site Scripting (XSS) in license endpoint

FaucetSDN Ryu Denial of Service Vulnerability

FaucetSDN Ryu Denial of Service Vulnerability

apache-airflow-providers-apache-drill Improper Input Validation vulnerability

GitPython vulnerable to remote code execution due to insufficient sanitization of input arguments

Authenticated Local Privilege Escalation vulnerability in Intel Optimization for Tensorflow

The WireGuard client 0.5.3 on Windows insecurely configures the operating system and firewall such that traffic to a local network that uses non-RFC1918 IP addresses is blocked. This allows an adversary to trick the victim into blocking IP traffic to selected IP addresses and services even while the

Sentry vulnerable to incorrect credential validation on OAuth token requests

Excessive Iteration in gRPC

wger Workout Manager Cross-site Scripting vulnerability

wger Workout Manager Cross-Site Request Forgery vulnerability

ScanCode.io command injection in docker image fetch process

Privilege escalation via ApiTokensEndpoint

Vyper has incorrectly allocated named re-entrancy locks

Apache Airflow Execution with Unnecessary Privileges

langchain Code Injection vulnerability

RDiffWeb vulnerable to Allocation of Resources Without Limits or Throttling

pyca/cryptography's wheels include vulnerable OpenSSL

MindsDB can be made to not verify SSL certificates

mlflow vulnerable to OS Command Injection

Sydent does not verify email server certificates

Float point exception (FPE) in paddlepaddle

Command injection in PaddlePaddle

Null pointer dereference in PaddlePaddle

Heap buffer overflow in PaddlePaddle

Use after free in PaddlePaddle

copyparty vulnerable to reflected cross-site scripting via k304 parameter

ecrecover can return undefined data if signature does not verify

Improper authorization on debug and artifact file downloads

Removal of e-Tugra root certificate

Denial of service in neutron

Keylime's registrar vulnerable to Denial-of-service attack via a single open connection

Open Babel has out-of-bounds write in MSI translationVectors[]

Open Babel has out-of-bounds write in MOPAC IN translationVectors[] (Tv atom)