Advisory Catalog

pyspider Cross-Site Request Forgery (CSRF) via the Flask endpoints

Double-Free Vulnerability in uD3TN BPv7 Caused by Malformed Endpoint Identifier allows remote attacker to reliably cause DoS

Synapse can be forced to thumbnail unexpected file formats, invoking external, potentially untrustworthy decoders

Synapse allows a a malformed invite to break the invitee's `/sync`

Synapse allows unsupported content types to lead to memory exhaustion

Synapse denial of service through media disk space consumption

MobSF vulnerability allows SSRF due to the allow_redirects=True parameter

Denial of service (DoS) via deformation `multipart/form-data` boundary

Python package "zhmcclient" stores passwords in clear text in its HMC and API logs

PyJWT Issuer field partial matches allowed

check-jsonschema default caching for remote schemas allows for cache confusion

aiocpa contains credential harvesting code

MLflow's excessive directory permissions allow local privilege escalation

OpenStack Neutron can use an incorrect ID during policy enforcement

virtualenv allows command injection through activation scripts for a virtual environment

Deserialization of Untrusted Data in Hugging Face Transformers

Deserialization of Untrusted Data in Hugging Face Transformers

Deserialization of Untrusted Data in Hugging Face Transformers

Tornado has an HTTP cookie parsing DoS vulnerability

Litestar allows unbounded resource consumption (DoS vulnerability)

HTML Cleaner allows crafted scripts in special contexts like svg or math to pass through

aiohttp has a memory leak when middleware is enabled when requesting a resource with a non-allowed method

OpenCTI May Bypass Introspection Restriction

Apache Airflow: Sensitive configuration values are not masked in the logs by default

TorchGeo Remote Code Execution Vulnerability

LightGBM Remote Code Execution Vulnerability

pywasm3 contains a Use-After-Free in ForEachModule

wasm3 uncontrolled memory allocation vulnerability

pywasm3 has an Invalid Memory Read, Leading to DoS and Potential Code Execution

wasm3 139076a is vulnerable to Denial of Service (DoS).

changedetection.io path traversal using file URI scheme without supplying hostname

Access control vulnerable to user data deletion by anonynmous users

Waitress vulnerable to DoS leading to high CPU usage/resource exhaustion

A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240628 allows for a Denial of Service (DOS) attack. When uploading a file, if an attacker appends a large number of characters to the end of a multipart boundary, the system will continuously process each character, rendering ChuanhuChatGPT ina

An arbitrary file read vulnerability exists in gaizhenbiao/chuanhuchatgpt version 20240628 due to insufficient validation when loading prompt template files. An attacker can read any file that matches specific criteria using an absolute path. The file must not have a .json extension and, except for

Reachable Assertion in BPv7 parser in µD3TN v0.14.0 allows attacker to disrupt service via malformed Extension Block

pyLoad vulnerable to remote code execution by download to /.pyload/scripts using /flashgot API

An issue in assimp v.5.4.3 allows a local attacker to execute arbitrary code via the CallbackToLogRedirector function within the Assimp library.

curl_cffi bundles a version of libcurl affected by High Severity vulnerability

MySQL Connector/Python connector takeover vulnerability

Starlette Denial of service (DoS) via multipart/form-data

Gradio uses insecure communication between the FRP client and server

Gradio has a race condition in update_root_in_config may redirect user traffic

Gradio lacks integrity checking on the downloaded FRP client

Gradios's CORS origin validation is not performed when the request has a cookie

xhtml2pdf Denial of Service via crafted string

DeepSpeed Remote Code Execution Vulnerability

Django vulnerable to denial-of-service attack via the urlize() and urlizetrunc() template filters

OpenC3 Path Traversal via screen controller (`GHSL-2024-127`)

RestrictedPython information leakage via `AttributeError.obj` and the `string` module