Advisory Catalog

Gradio Vulnerable to Arbitrary File Deletion

Gradio Vulnerable to Denial of Service (DoS) via Crafted HTTP Request

H2O Vulnerable to Denial of Service (DoS) and File Write

Gradio Vulnerable to Denial of Service (DoS) via Crafted Zip Bomb

H2O Vulnerable to Denial of Service (DoS) via `/3/ParseSetup` Endpoint

H2O Vulnerable to Denial of Service (DoS) via `/3/Parse` Endpoint

LiteLLM Vulnerable to Denial of Service (DoS)

Aim Vulnerable to Denial of Service (DoS)

PostQuantum-Feldman-VSS'S Dependency Vulnerability in gmpy2 Leading to Interpreter Crash

Arbitrary Code Execution via Crafted Keras Config for Model Loading

Django vulnerable to Allocation of Resources Without Limits or Throttling

dmlc/dgl Vulnerable to Remote Code Execution by Pickle Deserialization via rpc.recv_request()

Rembg CORS misconfiguration

Spotipy's cache file, containing spotify auth token, is created with overly broad permissions

Malciously crafted QPY files can allows Remote Attackers to Cause Denial of Service in Qiskit

Home Assistant does not correctly validate SSL for outgoing requests in core and used libs

Label Studio allows Server-Side Request Forgery in the S3 Storage Endpoint

Label Studio has a Path Traversal Vulnerability via image Field

A Local File Inclusion (LFI) vulnerability exists in the /load-workflow endpoint of modelscope/agentscope version v0.0.4. This vulnerability allows an attacker to read arbitrary files from the server, including sensitive files such as API keys, by manipulating the filename parameter. The issue arise

Mitmweb API Authentication Bypass Using Proxy Server

MobSF Local Privilege Escalation

MobSF Partial Denial of Service (DoS)

MobSF Stored Cross-Site Scripting (XSS)

CKAN has an XSS vector in user uploaded images in group/org and user profiles

snowflake-connector-python vulnerable to SQL Injection in write_pandas

snowflake-connector-python vulnerable to insecure deserialization of the OCSP response cache

vllm: Malicious model to RCE by torch.load in hf_model_weights_iterator

uniapi version 1.0.7 contained an information harvesting script.

ASTEVAL Allows Maliciously Crafted Format Strings to Lead to Sandbox Escape

ASTEVAL Allows Malicious Tampering of Exposed AST Nodes Leads to Sandbox Escape

try/except* clauses could allow bypass RestrictedPython via type confusion bug in the CPython interpreter

lunasvg v3.0.0 was discovered to contain a allocation-size-too-big bug via the component plutovg_surface_create.

Cross-Site Request Forgery in CodeChecker API

nbgrader's `frame-ancestors: self` grants all users access to formgrader

Indico Insecure Access

Django has a potential denial-of-service vulnerability in IPv6 validation

pgAdmin has Incorrect Default Permissions

Apache Airflow Fab Provider Insufficient Session Expiration vulnerability

NiceGUI On Air authentication issue

Letta (previously MemGPT) incorrect access control vulnerability

changedetection.io Vulnerable to Improper Input Validation Leading to LFR/Path Traversal

Amazon Redshift Python Connector vulnerable to SQL Injection

pyrage vulnerable to malicious plugin names, recipients, or identities causing arbitrary binary execution

djoser Authentication Bypass

Apache Superset: SQLLab Improper readonly query validation allows unauthorized write access

python-libarchive directory traversal

OpenCTI is an open-source cyber threat intelligence platform. In versions below 6.2.18, because the function to limit the rate of OTP does not exist, an attacker with valid credentials or a malicious user who commits internal fraud can break through the two-factor authentication and hijack the accou

luigi Arbitrary File Write via Archive Extraction (Zip Slip)

Apache Superset: Lower privilege users are able to create Role when FAB_ADD_SECURITY_API is enabled

Django denial-of-service in django.utils.html.strip_tags()