Advisory Catalog

joserfc's PBES2 p2c Unbounded Iteration Count enables Denial of Service (DoS)

OpenEXR's CompositeDeepScanLine integer-overflow leads to heap OOB write

Gradio has SSRF via Malicious `proxy_url` Injection in `gr.load()` Config Processing

Gradio is Vulnerable to Absolute Path Traversal on Windows with Python 3.13+

Ajenti has potential Remote Code Execution

Agenta is an open-source LLMOps platform. A Server-Side Template Injection (SSTI) vulnerability exists in versions prior to 0.86.8 in Agenta's API server evaluator template rendering. Although the vulnerable code lives in the SDK package, it is executed server-side within the API process when runnin

Rucio WebUI Vulnerable to Stored Cross-site Scripting (XSS) through Custom Rule Function

Rucio WebUI has a Reflected Cross-site Scripting Vulnerability

changedetection.io is Vulnerable to SSRF via Watch URLs

Fickling: OBJ opcode call invisibility bypasses all safety checks

MindsDB: Path Traversal in /api/files Leading to Remote Code Execution

Apache Superset: Read-Only Bypass via Improper Input Validation on PostgreSQL Connections

Apache Superset Improper Authorization allows low-privileged users to bypass access controls

Apache Airflow vulnerable to Code Injection in the web-server context via LogTemplate table

yt-dlp: Arbitrary Command Injection when using the `--netrc-cmd` option

MLflow Tracking Server Artifact Handler Directory Traversal Remote Code Execution Vulnerability

Google Cloud Vertex AI has a a vulnerability involving predictable bucket naming

Google Cloud Vertex AI SDK affected by Stored Cross-Site Scripting (XSS)

D-Tale affected by Remote Code Execution through the /save-column-filter endpoint

Open WebUI vulnerable to Stored XSS via iFrame embeds in response messages

Open WebUI vulnerable to Stored XSS via iFrame in citations model

OpenStack Nova calls qemu-img without format restrictions for resize

Picklescan (scan_pytorch) Bypass via dynamic eval MAGIC_NUMBER

NVIDIA NeMo Framework Deserializes Untrusted Data

NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution

Apache Arrow: Potential use-after-free when reading IPC file with pre-buffering

pretix unsafely evaluates variables in emails

Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Avro Java SDK when generating specific records from untrusted Avro schemas. This issue affects Apache Avro Java SDK: all versions through 1.11.4 and version 1.12.0. Users are recommended to upgrade to version 1.12.1

Keras has a Local File Disclosure via HDF5 External Storage During Keras Weight Loading

Pillow affected by out-of-bounds write when loading PSD images

cryptography Vulnerable to a Subgroup Attack Due to Missing Subgroup Validation for SECT Curves

Emmett-Core: Unhandled CookieError Exception Causing Denial of Service

Litestar's CORS origin allowlist has a bypass due to unescaped regex metacharacters in allowed origins

MCP-Salesforce's arbitrary attribute access leads to disclosure of Salesforce auth token

Pydantic AI has Stored XSS via Path Traversal in Web UI CDN URL

Pydantic AI has Server-Side Request Forgery (SSRF) in URL Download Handling

NiceGUI's Path Traversal via Unsanitized FileUpload.name Enables Arbitrary File Write

pgadmin4 affected by a Restore restriction bypass via key disclosure vulnerability

Boltz contains an insecure deserialization vulnerability in its molecule loading functionality

Django has an SQL Injection issue

Django has Inefficient Algorithmic Complexity

Django has an SQL Injection issue

Django has Inefficient Algorithmic Complexity

SageMaker Python SDK has Insecure TLS Configuration

SageMaker Python SDK has Exposed HMAC

Khoj has an IDOR in Notion OAuth Flow that Enables Index Poisoning

Hugging Face Text Generation Inference vulnerable to Uncontrolled Resource Consumption

mlflow Creates of Temporary File in Directory with Insecure Permissions

Lollms has an Improper Access Control vulnerability

OpenCTI 3.3.1 is vulnerable to a directory traversal attack via the static/css endpoint. An unauthenticated attacker can read arbitrary files from the filesystem by sending crafted GET requests with path traversal sequences (e.g., '../') in the URL. For example, requesting /static/css//../../../../.