Advisory Catalog

OSGeo GDAL vulnerable to out-of-bounds read

OSGeo GDAL vulnerable to heap-based buffer overflow

A vulnerability was identified in OSGeo gdal up to 3.13.0dev-4. This issue affects the function SWnentries of the file frmts/hdf4/hdf-eos/SWapi.c. Such manipulation of the argument DimensionName leads to heap-based buffer overflow. The attack must be carried out locally. The exploit is publicly avai

A vulnerability was determined in OSGeo gdal up to 3.13.0dev-4. This vulnerability affects the function memmove of the file frmts/hdf4/hdf-eos/SWapi.c of the component HDF-EOS Grid File Handler. This manipulation causes out-of-bounds read. The attack is restricted to local execution. The exploit has

aiograpi has dependency on vulnerable orjson 3.11.4 (CVE-2025-67221)

Magic Wormhole: receive, with --output pointing at an existing directory can be path-traversed

Paramiko rsakey.py allows the SHA-1 algorithm

ciguard: Web UI is missing HTTP defence-in-depth headers

ciguard: discover_pipeline_files follows symlinks out of scan root

ciguard: Container image runs as root (no USER directive)

Microdot has HTTP response splitting in Response.set_cookie()

Langchain-Chatchat Uses Insufficiently Random Values

Langchain-Chatchat has a Race Condition in its OpenAI-Compatible File Upload API

Langchain-Chatchat Uses a Broken or Risky Cryptographic Algorithm

Django Uses Cache Containing Sensitive Information

Django Uses Persistent Cookies Containing Sensitive Information

Prefect Git Argument Injection in GitRepository Pull Steps

Prefect SSRF Bypass via DNS Rebinding in validate_restricted_url

mem0ai mem0 has an Improper Input Validation Issue

django-mdeditor is Missing Authentication for Critical Function

auto-favicon has a Server-Side Request Forgery issue

Wooey has an Incorrect Privilege Assignment issue

vLLM makes Use of Uninitialized Resource

AstrBot has Incomplete Filtering of Special Elements

verl's math_equal() Vulnerable to Arbitrary Code Execution via Unsafe eval()

Poetry has Path Traversal in tar extraction on Python 3.10.0 - 3.10.12 and 3.11.0 - 3.11.4

Langflow vulnerable to injection

Langflow: Cleartext Storage of Authentication Settings in Project Creation Endpoint

Langflow has an Information Leak through Incomplete API Key Redaction

RAGAS has SSRF via Multi-Modal Faithfulness Collections Module

Apache Airflow Exposes Secrets in Variables Saved as JSON Dictionaries

Neo4j Labs MCP Servers: SSRF and Data Modification via read_only Mode Bypass Through CALL Procedures

langchain-openai: Image token counting SSRF protection can be bypassed via DNS rebinding

Weblate: Improper access control for pending tasks in API

pyLoad's Session Not Invalidated After Permission Changes

Giskard has a Regular Expression Denial of Service (ReDoS) in RegexMatching Check

MetaGPT affected by server-side request forgery in metagpt/utils/common.py

MetaGPT has an eval injection via a cross-site request forgery attack

Wasmtime is a runtime for WebAssembly. In 43.0.0, cloning a wasmtime::Linker is unsound and can result in use-after-free bugs. This bug is not controllable by guest Wasm programs. It can only be triggered by a specific sequence of embedder API calls made by the host. Specifically, the following step

In Ubuntu, Subiquity version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, Subiquity could include certain user credentials, such as the user's plaintext Wi-Fi password, in the attached logs.

Django vulnerable to privilege abuse in ModelAdmin.list_editable

PyBlade: SSTI/RCE via Bypassed AST Validation in sandbox.py

AIOHTTP's C parser (llhttp) accepts null bytes and control characters in response header values - header injection/security bypass

AIOHTTP has HTTP response splitting via \r in reason phrase

AIOHTTP leaks Cookie and Proxy-Authorization headers on cross-origin redirect

AIOHTTP has late size enforcement for non-file multipart fields causes memory DoS

AIOHTTP has CRLF injection through multipart part content type header construction

AIOHTTP Affected by Denial of Service (DoS) via Unbounded DNS Cache in TCPConnector

cryptography has incomplete DNS name constraint enforcement on peer names

Hugging Face Smolagents has an Injection issue