Advisory Catalog

python-ldap is Vulnerable to Improper Encoding or Escaping of Output and Improper Null Termination

python-ldap has sanitization bypass in ldap.filter.escape_filter_chars

Python Social Auth - Django has unsafe account association

BBOT's gitlab.py exposes globally configured "gitlab" API key

BBOT's git_clone.py can expose users' GitHub API keys to an attacker-controlled webserver

Synapse's invalid device keys degrade federation functionality

vLLM: Resource-Exhaustion (DoS) through Malicious Jinja Template in OpenAI-Compatible Server

python-socketio vulnerable to arbitrary Python code execution (RCE) through malicious pickle deserialization in certain multi-server deployments

clearml is vulnerable to Path Traversal through its `safe_extract` function

NiceGUI has a Reflected XSS

marimo vulnerable to proxy abuse of /mpl/{port}/

Django vulnerable to partial directory traversal via archives

SPDK is vulnerable to buffer overflow in the NVMe-oF target component

mkdocs-include-markdown-plugin susceptible to unvalidated input colliding with substitution placeholders

Apache Airflow: Connection sensitive details exposed to users with READ permissions

Open Babel has out-of-bounds read in PQS lowerit (pre-buffer read)

Open Babel has NULL pointer dereference in CACAO CacaoFormat::SetHilderbrandt

pytorch v2.8.0 was discovered to contain an integer overflow in the component torch.nan_to_num-.long().

ml-logger file handler allows reading arbitrary files

PyTorch before 3.7.0 has a bernoulli_p decompose function in decompositions.py even though it lacks full consistency with the eager CPU implementation, negatively affecting nn.Dropout1d, nn.Dropout2d, and nn.Dropout3d for fallback_random=True.

In PyTorch before 2.7.0, bitwise_right_shift produces incorrect output for certain out-of-bounds values of the "other" argument.

In PyTorch before 2.7.0, when torch.compile is used, FractionalMaxPool2d has inconsistent results.

In PyTorch before 2.7.0, when inductor is used, nn.Fold has an assertion error.

In PyTorch through 2.6.0, when eager is used, nn.PairwiseDistance(p=2) produces incorrect results.

ml-logger has path traversal in the file argument

Llama Stack could potentially allow for remote code execution

pip's fallback tar extraction doesn't check symbolic links point to extraction directory

wangxutech MoneyPrinterTurbo 1.2.6 allows path traversal via /api/v1/download/ URIs such as /api/v1/download//etc/passwd.

mcp-kubernetes-server has a Command Injection vulnerability

Hugging Face Transformers library has Regular Expression Denial of Service

Flask App Builder has an Authentication Bypass vulnerability when using non AUTH_DB methods

Indico vulnerable to Cross-Site Scripting via LaTeX math code

Indico may disclose unauthorized user details access via legacy API

Infrahub: Deleted and expired API tokens can still authenticate

SGLang Remote Code Execution Vulnerability via Unsafe Deserialization in update_weights_from_tensor

copyparty: Sharing a single file does not fully restrict access to other files in source folder

Fides Webserver API Rate Limiting Vulnerability in Proxied Environments

xgrammar vulnerable to denial of service by huge enum grammar

Local Deep Research's API keys are stored in plain text

MobSF Vulnerable to Arbitrary File Write (AR-Slip) via Absolute Path in .a Extraction

Eventlet affected by HTTP request smuggling in unparsed trailers

The PCRE2 library is a set of C functions that implement regular expression pattern matching. In version 10.45, a heap-buffer-overflow read vulnerability exists in the PCRE2 regular expression matching engine, specifically within the handling of the (*scs:...) (Scan SubString) verb when combined wit

mitmproxy binaries embed a vulnerable python-hyper/h2 dependency

h2 allows HTTP Request Smuggling due to illegal characters in headers

Withdrawn Advisory: Microsoft Knack ReDoS Vulnerability in the Introspection Module

Withdrawn Advisory: Microsoft Knack ReDoS Vulnerability in the Introspection Module

Copier's safe template has filesystem write access outside destination path

Apache Superset allows authenticated users to discover metadata about datasources they don't have permission to access

Apache Superset has bypass of `DISALLOWED_SQL_FUNCTIONS` that allows execution of blocked SQL functions

Apache Superset data query improperly discloses database schema information to low-privileged guest user