Advisory Catalog

Keras: TorchModuleWrapper can deserialize unsafe PyTorch pickle data

SurrealDB before 1.0.1 sets default table permissions to FULL instead of NONE, allowing SELECT, CREATE, UPDATE, and DELETE operations on tables without explicit permissions. Attackers with database access or unauthenticated users on publicly exposed instances can perform unrestricted operations on u

PocketSphinx: Buffer overflows in language and acoustic model loading code

PRoot-Distro has Path Traversal in proot-distro copy — Arbitrary Read, Write, and Persistent Code Execution Outside Container Rootfs

Langflow: Unauthenticated Flow Execution via Webhook Authentication Bypass

Flask-Reuploaded: Extension-denylist bypass via case-folding asymmetry in name-override path (incomplete-fix variant of CVE-2026-27641)

meta-ads-mcp: X-Pipeboard-Token Header Auth Bypass Reuses Operator Meta Token

meta-ads-mcp: Server-Side Request Forgery (SSRF) in `upload_ad_image` via Unrestricted `image_url` Fetch

sh _uid does not drop supplementary groups (incomplete privilege drop)

plone.restapi: Stored XSS by spoofing mime type

plone.app.textfield: Stored XSS by spoofing mime type

Prompty: Arbitrary file read via file reference expansion

Snowflake Connector for Python improperly verifies TLS hostnames

dd-trace-py: Improper parsing of W3C baggage headers may lead to DoS

django-haystack: Remote Code Execution via `eval()` in Elasticsearch Result Deserialization

GPT Researcher MCP STDIO configuration allows remote command execution

Pixeldrain API key shared with unverified thirdparty sites

TensorZero Gateway: Arbitrary file read and SSRF in internal object storage endpoint

FiftyOne App server uses wildcard CORS (Access-Control-Allow-Origin: *), enabling cross-origin reads of local server data

MCP Python SDK: WebSocket server transport does not support Host/Origin validation

MCP Python SDK: Experimental task handlers allow any client to access and cancel other clients' tasks

MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principal

PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters

LangBot: Authenticated RCE Via MCP Configuration

garminconnect Has Insecure Permission Assignment for Garmin OAuth Token Store

LightRAG is Vulnerable to Authentication Bypass: hardcoded DEFAULT_TOKEN_SECRET and public /auth-status defeat LIGHTRAG_API_KEY protection

LightRAG: CORS Wildcard + Credentials Enables Any-Origin Credentialed Requests