Advisory Catalog

Mistune: XSS via unescaped class option in Admonition directive

Mistune inline_parser: quadratic-time parsing on long runs of `**x**` and `***x***` emphasis pairs

Mistune: Arbitrary File Read via Include directive path traversal

Mistune: XSS via percent-encoded javascript URI bypass in safe_url()

Mistune plugins/formatting: quadratic-time parsing on long runs of `~~x~~`, `==x==`, and `^^x^^` markers (strikethrough / mark / insert)

setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) on macOS APFS/HFS+

Copier has a trust-prefix bypass via path traversal that runs tasks unprompted

BBOT's `github_workflows` module could be induced to write a downloaded artifact outside its configured output directory: its path-containment check did not resolve `..`, so a crafted `CODE_REPOSITORY` URL could traverse out of the intended folder. The write is bounded to two directory levels above

BBOT's Symlink guard bypass in unarchive module allows planting symlinks during extraction

A vulnerability was found in bentoml OpenLLM 0.6.30. This affects the function async_run_command of the file src/openllm/common.py of the component Model Repository Directory Name Handler. Performing a manipulation of the argument cmd results in command injection. Attacking locally is a requirement.

Flask-Security-Too: WebAuthn reauthentication freshness bypass via cross-user assertion

ha-mcp: Add-on settings and policy routes are reachable without authentication at the bare root path

aiosmtplib vulnerable to SMTP command injection via CR/LF in sender/recipient address

Cognee allows non-superusers to overwrite global LLM configuration

Serena: Unauthenticated Flask dashboard on fixed port enables DNS rebinding → memory poisoning → RCE

Django: DomainNameValidator permits newline characters that may enable HTTP header injection

Django: GDALRaster may over-read heap memory when constructed from bytes

Django: cache middleware may expose private responses when unrelated request cookies are present

ONNX has Null Pointer Dereference in Upsample Version Converter Adapter (Zero Inputs)