Advisory Catalog

geopandas SQL Injection Vulnerability in to_postgis() Allows Information Disclosure

Salt Authentication Protocol Version Downgrade Allows Minion Impersonation

Salt junos Module Vulnerable to Code Injection via Specially Crafted YAML Payload

Unfurl's unbounded zlib decompression allows decompression bomb DoS

AutoGPT is Vulnerable to RCE via Disabled Block Execution

vLLM vulnerable to Server-Side Request Forgery (SSRF) through MediaConnector

PyTorch Vulnerable to Remote Code Execution via Untrusted Checkpoint Files

MobSF has Stored XSS via Manifest Analysis - Dialer Code Host Field

Python-Multipart has Arbitrary File Write via Non-Default Configuration

BentoML has a Path Traversal via Bentofile Configuration

protobuf affected by a JSON recursion depth bypass

Sentencepiece has a a heap overflow issue

orjson does not limit recursion for deeply nested JSON documents

Wheel Affected by Arbitrary File Permission Modification via Path Traversal in wheel unpack

An issue in ollama v.0.12.10 allows a remote attacker to cause a denial of service via the fs/ggml/gguf.go, function readGGUFV1String reads a string length from untrusted GGUF metadata

An issue in ollama v.0.12.10 allows a remote attacker to cause a denial of service via the GGUF decoder

Chainlit contain a server-side request forgery (SSRF) vulnerability

Chainlit versions prior to 2.9.4 contain an arbitrary file read vulnerability in the /project/element update flow. An authenticated client can send a custom Element with a user-controlled path value, causing the server to copy the referenced file into the attacker’s session. The resulting element id

ChatterBot Vulnerable to Denial of Service via Database Connection Pool Exhaustion

WeasyPrint has a Server-Side Request Forgery (SSRF) Protection Bypass via HTTP Redirect

pyasn1 has a DoS vulnerability in decoder

Weblate wlc path traversal vulnerability: Unsanitized API slugs in download command

Apache Airflow proxy credentials for various providers might leak in task logs

Apache Airflow secrets in rendered templates could contain parts of sensitive values when truncated

Keras vulnerable to DoS via Malicious .keras Model (HDF5 Shape Bomb Causes Petabyte Allocation in KerasFileEditor)

jaraco.context Has a Path Traversal Vulnerability

GuardDog Path Traversal Vulnerability Leads to Arbitrary File Overwrite and RCE

GuardDog Zip Bomb Vulnerability in safe_extract() Allows DoS

Azure Core is vulnerable to deserialization of untrusted data

LangChain versions up to and including 0.3.1 contain a regular expression denial-of-service (ReDoS) vulnerability in the MRKLOutputParser.parse() method (libs/langchain/langchain/agents/mrkl/output_parser.py). The parser applies a backtracking-prone regular expression when extracting tool actions fr

LlamaIndex (run-llama/llama_index) versions up to and including 0.12.2 contain an uncontrolled resource consumption vulnerability in the VannaPack VannaQueryEngine implementation. The custom_query() logic generates SQL statements from a user-supplied prompt and executes them via vn.run_sql() without

LlamaIndex (run-llama/llama_index) versions up to and including 0.11.6 contain an unsafe deserialization vulnerability in BGEM3Index.load_from_disk() in llama_index/indices/managed/bge_m3/base.py. The function uses pickle.load() to deserialize multi_embed_store.pkl from a user-supplied persist_dir w

Label Studio is vulnerable to full account takeover by chaining Stored XSS + IDOR in User Profile via custom_hotkeys field

MLFlow is vulnerable to DNS rebinding attacks due to a lack of Origin header validation

ComfyUI-Manager is Vulnerable to CRLF Injection in Configuration Handler

vLLM is vulnerable to DoS in Idefics3 vision models via image payload with ambiguous dimensions

Fickling vulnerable to detection bypass due to "builtins" blindness

Fickling has Static Analysis Bypass via Incomplete Dangerous Module Blocklist

Fickling vulnerable to use of ctypes and pydoc gadget chain to bypass detection

Fickling Blocklist Bypass: cProfile.run()

Fickling has a bypass via runpy.run_path() and runpy.run_module()

vLLM introduced enhanced protection for CVE-2025-62164

Authlib has 1-click Account Takeover vulnerability

picklescan has Arbitrary file read using `io.FileIO`

NiceGUI apps which use `ui.sub_pages` vulnerable to zero-click XSS

Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)

Parsl Monitoring Visualization Vulnerable to SQL Injection

AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb

ComfyUI-Manager has an Unprotected Alternate Channel (CWE-420)

Langflow Missing Authentication on Critical API Endpoints