Advisory Catalog

Apache Superset's chart visualization has a stored Cross-Site Scripting (XSS) vulnerability

PyPDF's Manipulated FlateDecode streams can exhaust RAM

OMERO.web displays unecessary user information when requesting password reset

TinyScientist has Path Traversal Vulnerability in PDF Review Function (CWE-22)

uv allows ZIP payload obfuscation through parsing differentials

An issue in Ollama v0.1.33 allows attackers to delete arbitrary files via sending a crafted packet to the endpoint /api/pull.

Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability

MaterialX Lack of MTLX Import Depth Limit Leads to DoS (Denial-Of-Service) Via Stack Exhaustion

MaterialX Stack Overflow via Lack of MTLX XML Parsing Recursion Limit

OpenEXR Out-Of-Memory via Unbounded File Header Values

OpenEXR ScanLineProcess::run_fill NULL Pointer Write In "reduceMemory" Mode

OpenEXR Out of Bounds Heap Read due to Bad Pointer Arithmetic in LossyDctDecoder_execute

MS SWIFT Deserialization RCE Vulnerability

MS SWIFT WEB-UI RCE Vulnerability

copyparty Reflected XSS via Filter Parameter

Pyload log Injection via API /json/add_package in add_name parameter

copyparty has DOM-Based XSS vulnerability when displaying multimedia metadata

Assemblyline 4 service client vulnerable to Arbitrary Write through path traversal in Client code

Calibre Web and Autocaliweb have OS Command Injection vulnerability

Mezzanine CMS vulnerable to Cross-site Scripting

Cross-Domain Token Exposure in server.auth.getAuthorizationToken in Ollama 0.6.7 allows remote attackers to steal authentication tokens and bypass access controls via a malicious realm value in a WWW-Authenticate header returned by the /api/pull endpoint.

Dagster Local File Inclusion vulnerability

Starlette has possible denial-of-service vector when parsing large files in multipart forms

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to version 6.6.6, an IDOR vulnerability in the GrapQL `NotificationLineNotificationMarkReadMutation` and `NotificationLineNotificationDeleteMutation` mutations of OpenCTI allows an authenticate

Indico vulnerability allows attackers to bulk dump user details

py-libp2p is vulnerable to DoS attacks through use of large RSA keys

Roundup is vulnerable to XSS through interactions between URLs and issue tracker templates

Transformers is vulnerable to ReDoS attack through its DonutProcessor class

LlamaIndex vulnerable to data loss through hash collisions in its DocugamiReader class

fastapi-guard is vulnerable to ReDoS through inefficient regex

LlamaIndex vulnerability in its ObsidianReader class can lead to Path Traversal exploit

LlamaIndex vulnerable to DoS attack through uncontrolled recursive JSON parsing

Transformers vulnerable to ReDoS attack through its get_imports() function

Transformers's ReDoS vulnerability in get_configuration_file can lead to catastrophic backtracking

LlamaIndex vulnerability in ArxivReader class can cause MD5 hash collisions

HKUDS LightRAG allows Path Traversal via function upload_to_input_dir

MLFlow SSRF via gateway_proxy_handler

urllib3 does not control redirects in browsers and Node.js

urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation

Mezzanine CMS has a Stored Cross-Site Scripting (XSS) vulnerability in the displayable_links_js function

python-a2a has a path traversal in the create_workflow function

Weblate lacks rate limiting when verifying second factor

A cross-site scripting (XSS) vulnerability in OpenC3 COSMOS before v6.0.2 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the URL parameter.

Salt's worker process vulnerable to denial of service through file read operation

Salt's file contents overwrite the VirtKey class

Salt allows arbitrary directory creation or file deletion

Salt vulnerable to directory traversal attack in minion file cache creation

Salt's on demand pillar functionality vulnerable to arbitrary command injections

Salt's salt.auth.pki module does not properly authenticate callers

Nautobot may allows uploaded media files to be accessible without authentication