Advisory Catalog

vLLM has remote code execution vulnerability in the tool call parser for Qwen3-Coder

vllm API endpoints vulnerable to Denial of Service Attacks

Copier's safe template has arbitrary filesystem read/write access

Withdrawn Advisory: Python-Future Module Arbitrary Code Execution via Unintended Import of test.py

PyLoad vulnerable to SQL Injection via API /json/add_package in add_links parameter

Keras vulnerable to CVE-2025-1550 bypass via reuse of internal functionality

SKOPS Card.get_model happily allows arbitrary code execution

copyparty allows Regex Denial of Service (ReDoS) in the upload listing

pyjwt v2.10.1 was discovered to contain weak encryption. NOTE: this is disputed by the Supplier because the key length is chosen by the application that uses the library (admittedly, library users may benefit from a minimum value and a mechanism for opting in to strict enforcement).

OpenEXR Heap-Based Buffer Overflow in Deep Scanline Parsing via Forged Unpacked Size

An issue was discovered in Couchbase Sync Gateway before 3.2.6. In sgcollect_info_options.log and sync_gateway.log, there are cleartext passwords in redacted and unredacted output.

Bugsink path traversal via event_id in ingestion

Skops may allow MethodNode to access unexpected object fields through dot notation, leading to arbitrary code execution at load time

Skops has Inconsistent Trusted Type Validation that Enables Hidden `operator` Methods Execution

NULL Pointer Dereference in µD3TN via non-singleton destination Endpoint Identifier allows remote attacker to reliably cause DoS

LF Edge eKuiper is a lightweight IoT data analytics and stream processing engine running on resource-constraint edge devices. In versions before 2.2.1, there is a critical SQL Injection vulnerability in the getLast API functionality of the eKuiper project. This flaw allows unauthenticated remote att

Calibre Web and Autocaliweb have a ReDoS vulnerability

FastAPI Guard has a regex bypass

Aim vulnerable to Cross-site Scripting

`pyLoad` has Path Traversal Vulnerability in `json/upload` Endpoint that allows Arbitrary File Write

Cadwyn vulnerable to XSS on the docs page

ExecuTorch vulnerable to Heap-based Buffer Overflow attack

pyLoad is vulnerable to attacks that bypass localhost restrictions, enabling the creation of arbitrary packages

Dagster vulnerable to Path Traversal attack through its /logs endpoint

LlamaIndex vulnerable to Path Traversal attack through its encode_image function

Lord of Large Language Models vulnerable to Observable Discrepancy attack via authenticate_user function

Transformers vulnerable to ReDoS attack through its SETTING_RE variable

LlamaIndex has an XML Entity Expansion vulnerability in its sitemap parser

LlamaIndex is vulnerable to Path Traversal attack through its ObsidianReader class

LlamaIndex has Incomplete Documentation of Program Execution related to JsonPickleSerializer component

MCP Python SDK vulnerability in the FastMCP Server causes validation error, leading to DoS

MCP Python SDK has Unhandled Exception in Streamable HTTP Transport, Leading to Denial of Service

Pillow vulnerability can cause write buffer overflow on BCn encoding

ChangeDetection.io XSS in watch overview

pycares has a Use-After-Free Vulnerability

protobuf-python has a potential Denial of Service issue

An issue in the openc3-api/tables endpoint of OpenC3 COSMOS before 6.1.0 allows attackers to execute a directory traversal.

A credential leak in OpenC3 COSMOS before v6.0.2 allows attackers to access service credentials as environment variables stored in all containers.

Salt vulnerable to arbitrary event injection

Salt has minion event bus authorization bypass vulnerability

BackendAI vulnerable to Exposure of Sensitive Information to an Unauthorized Actor

Backend.AI Missing Authorization vulnerability

Skyvern has a Jinja runtime leak

Jupyter Core on Windows Has Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

AstrBot Has Path Traversal Vulnerability in /api/chat/get_file

Apache Superset: Improper authorization bypass on row level security via SQL Injection

Gradio Allows Unauthorized File Copy via Path Manipulation

vLLM has a Weakness in MultiModalHasher Image Hashing Implementation

LLama-Index CLI OS command injection vulnerability

Issue with Amazon Redshift Python Connector and the BrowserAzureOAuth2CredentialsProvider plugin