Advisory Catalog

social-auth-core has a Session Fixation issue

social-auth-core has Login CSRF via Missing State Parameter in LoginRadius Backend

social-auth-core Vulnerable to Account Takeover via Identity Binding Flaw in Vend Backend

social-auth-core has an Improper Authentication issue

hpack: Unbounded variable integer decoding can cause run-away computation on malformed input

plone.app.contenttypes has a Denial of Service in File Upload due to excessive filename length

Mesop: Unauthenticated ANSI Escape Sequence Injection in CSP Reporting Endpoint

Streamlink: HTTPSession follows HTTP redirects into file:// URLs, reading local files

plone.app.dexterity has a Denial of Service due to excessive title or description length

Nautobot: Authorization bypass in approval workflow REST API allows self-approval and unauthorized activation of scheduled jobs

Nautobot: Stored cross-site scripting (XSS) in object create/edit form help text

MPXJ: Potential Path Traversal Vulnerability in Primavera P3 PRX and SureTrak STX readers

Home Assistant: mDNS Server-Side Request Forgery

MCP Atlassian: Reflected XSS in OAuth Setup Callback Handler

MCP Atlassian: Path traversal in upload_attachment allows arbitrary file read (incomplete fix for CVE-2026-27825)

MCP Atlassian: Insecure File Permissions on OAuth Token Storage

MCP Atlassian: Path traversal in upload_attachment allows arbitrary file read and exfiltration via MCP tool call

MCP Atlassian: Incomplete fix for GHSA-7r34-79r5-rcc9: redirect-based SSRF via unhooked requests session in Jira user-permission lookup

MCP Atlassian: Arbitrary File Read via Upload Attachment Tools

MCP Atlassian: OAuth fallback token storage writes plaintext access and refresh tokens with group-readable permissions

lightrag-hku: Stored Cross-Site Scripting (XSS) in the LightRAG WebUI chat/answer renderer via ingested content

lightrag-hku: Plaintext Passwords Compared Without Constant-Time Function

lightrag-hku: Sensitive Information Exposure Through Raw Exception Messages in API Error Responses

vLLM through 0.29.0 contains a resource exhaustion vulnerability in MooncakeConnector where rejected prefill requests create ownerless transfer placeholders that are never reclaimed. Attackers can send rejected requests to exhaust sender task pools, causing valid requests to be delayed by up to 480

Zapros has an Unbounded Content-Encoding decompression chain that allows denial of service

When a request to the Airflow core API carries both a session cookie and an explicit `Authorization: Bearer` token, Airflow resolves the caller from the cookie and ignores the bearer token, inverting the intended precedence of bearer over cookie. The request then executes -- and is recorded in the a

Apache Airflow's `/assets/events` API returned asset events for every Dag in the deployment, with no filter restricting them to the Dags the caller is authorized to read. Any authenticated user holding asset-read access could therefore enumerate asset events — including the source Dag ID, task ID, r

vLLM through 0.29.0 contains a memory corruption vulnerability in the Triton _bincount_kernel where prompt token IDs index the penalty prompt-presence bitset without bounds checking against vocabulary size. Attackers can submit multimodal audio requests with tokens equal to vocabulary size, causing

vLLM before 0.29.0 validates allowed_token_ids against tokenizer length instead of model output logits width in SamplingParams._validate_allowed_token_ids(). Attackers can supply token IDs above the output vocabulary that pass validation, causing LogitBiasState to corrupt GPU logits state and allow

Autobahn Python permessage-deflate bypasses maxMessagePayloadSize after inflation

AnyIO process-pool workers can block indefinitely on undrained stderr

OpenCVE: Server-Side Request Forgery (SSRF) in notifications

virtualenv writes prompt values into pyvenv.cfg without sanitizing line boundaries, allowing configuration injection

Soup Sieve: Polynomial-time ReDoS (O(n²)) in the `IDENTIFIER` / `VALUE` selector sub-patterns

Soup Sieve: Polynomial-time ReDoS (O(n²)) in the whitespace/comment trimming regex `RE_WS_END` (triggers on VALID selectors)

sanic chunked trailer request smuggling allows hidden second request execution

djust: WebSocket/runtime reconstructed request omits the client Host, causing host/subdomain TenantResolvers to misresolve the tenant on the live path

djust's Django model serialization has no sensitive-field denylist: password hashes, privilege flags, and PII on a public view attribute are sent to the client

djust is vulnerable to stored/reflected XSS via javascript: URLs in built-in component template tags

AsyncSSH: asyncio event-loop freeze via SSH maximum packet size = 0 in SSH_MSG_CHANNEL_OPEN / OPEN_CONFIRMATION

LiteLLM Proxy has server-side request forgery via the `user_config` request parameter

vLLM: Request-selected PyNvVideoCodec GPU decode bypasses static VRAM reservation

vLLM: Unauthenticated audio decompression-bomb DoS in /v1/chat/completions

Zope AccessControl vulnerable to information disclosure through Python string `format` and `format_map` functions

pymongo: PYTHON-5994 Use exact match for file ID in GridFS delete methods

Open WebUI: Users denied by the OAuth role policy can still sign in via token exchange

Open WebUI: Users denied by the OAuth domain allowlist or role policy can still sign in via token exchange

Open WebUI: Any authenticated user can hang the server via a cyclic chat message history

Open WebUI: Server-side fetches reach blocked and internal hosts via unvalidated HTTP redirect targets

Open WebUI: Any authenticated user can hang the server via message deletion in a cyclic chat tree