Advisory Catalog

ONNX: Heap-Buffer-Overflow READ in Gemm Version Converter Adapter via Undersized Input Shape

Hugging Face Datasets folder-based builders allow path traversal through file_name metadata

BlenderMCP path traversal in download_polyhaven_asset allows arbitrary file writes

AWS Bedrock AgentCore: Improper neutralization of argument delimiters in the Python SDK install_packages()

AWS API MCP Server Security Policy Bypass via Startup Initialization Failure

JupyterLab: Cross-site scripting (XSS) via crafted settings file (`overrides.json`)

JupyterLab: Image viewer allows XSS when opening malicious image in new browser tab

JupyterLab: PyPI extension blocklist package-name canonicalization bypass

JupyterLab PluginManager lock-rule enforcement bypass

JupyterLab: Allowlist/blocklist check in `PyPIExtensionManager.install()` not enforced for direct callers (missing `await`)

GitPython: Environment-variable exfiltration via os.path.expandvars() on Repo.clone_from() URL

Capstone is a disassembly framework. Versions prior to 6.0.0-Alpha8 and 5.0.8 have a NULL pointer dereference in `modRMRequired()` and `decode()` when disassembling 3DNow! opcodes (`0F 0F`) in builds compiled with `-DCAPSTONE_X86_REDUCE`, allowing a remote attacker to crash any application using the

GitPython: command injection via unguarded Git options in `Repo.archive()`, `git.ls_remote()`, and arbitrary file overwrite via `Repo.iter_commits()` / `Repo.blame()`

GitPython: Command Injection via git long-option prefix abbreviation bypass of CVE-2026-42215 blocklist

GitPython unsafe clone option gate bypass through joined short options

Home Assistant Core vulnerable to Path Traversal via backup upload during onboarding