Advisory Catalog

Lemur user-update path stores plaintext passwords

Lemur Privilege Escalation: Non-admin role members can rewrite role membership via PUT /api/1/roles/<id>

Lemur: Crafted CRL/OCSP URLs in uploaded certificates lead to post-authentication SSRF

Lemur has an authorization bypass in StrictRolePermission / AuthorityCreatorPermission

justhtml: to_markdown() code-span blank-line breakout enables XSS

Mistune: Potential DoS via quadratic-time parsing in parse_link_text

Flask-Security has an Open Redirect issue

foreman-mcp-server Inserts Sensitive Information into Log File

motionEye Partial Authentication Bypass: Unauthenticated Admin Credential Theft via Path Traversal

motionEye: LFI → pass‑the‑hash admin → unsafe restore → unauth action exec (RCE)

motionEye's missing authentication on ActionHandler allows unauthenticated camera action execution

motionEye's Absolute Path Traversal in Media File Handlers Allows Arbitrary File Read

OpenStack Swift vulnerable to authenticated server-side request forgery

OctoPrint has possible file exfiltration via query parameters on upload endpoints

Glances has arbitrary file write and command execution via `secure_popen` redirection and chaining operators in AMP command configuration

OctoPrint has XSS in its Suppressed Command Notifications

OpenHarness remote project-context commands allow persistent prompt poisoning

OpenHarness remote resume commands expose other users' saved session snapshots

vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.22.1, the vLLM Dockerfile is vulnerable to a dependency confusion attack through the flashinfer-jit-cache package. The package is installed from a custom index (flashinfer.ai/whl/) using --extra-index-url, but the p

zeroconf: Unvalidated rdlength in record payload readers allows LAN-local cache corruption via crafted mDNS packet

Glances: XML-RPC Server Missing Host Header Validation Enables DNS Rebinding Attack

Glances: XML-RPC Multi-Origin CORS Configuration Silently Falls Back to Wildcard (Incomplete Fix for CVE-2026-33533)

Glances has Insecure Pickle Deserialization in its Version Cache that Leads to Arbitrary Code Execution

pypdf: Possible infinite loop when processing threads/articles in writer

Glances is Vulnerable to Command Injection via KVM/QEMU VM Domain Names in glances/plugins/vms/engines/virsh.py

motionEye: Authentication possible via password hash

motionEye's World-Readable Configuration File Exposes Admin Password Hash

motionEye has an Arbitrary File Read via Path Traversal in Picture/Movie Preview Endpoint

Chainlit contains a session hijacking vulnerability

Keras: DiskIOStore permits path traversal through crafted layer names

Langflow: PythonREPLComponent executes unsandboxed Python code, enabling authenticated RCE and privilege escalation

Apache Doris MCP Server is vulnerable to SQL Injection via metadata query path

BerriAI litellm: UI User Enumeration leads to System-Wide Information Disclosure

BerriAI litellm has SSRF via Unvalidated spec_path URL in MCP OpenAPI Spec Loader

BerriAI litellm has Security Feature Bypass in BannedKeywords and AzureContentSafety Guardrails via call_type Mismatch on Async Endpoints

BerriAI litellm: SSO Login Does Not Invalidate Previous UI Session Tokens

LiteLLM: SSO Debug Flow Has Improper Authentication

LiteLLM: MCP Proxy Has Improper Authentication