Advisory Catalog

OpenStack Neutron: Neutron port RBAC policy bypass allows project managers to set trusted device owners on shared networks

OpenStack oslo.messaging does not verify RabbitMQ broker hostname during TLS handshake

LMCache: 16-bit multimodal hash collision can poison KV cache entries

GPTCache: File and image cache keys collide because BufferedReader.peek() only reads the buffered prefix

Strawberry GraphQL's Bypass of MaxAliasesLimiter via Fragment Spreads leading to GraphQL Alias Amplification

Strawberry GraphQL has a Circular Fragment Reference DOS

WebOb: Location header normalization during redirect leads to open redirect - again

Streamlit @st.cache_data hash collision via fixed sampling seed and PIL P-mode palette omission

MLflow: Deterministic sampling in dataset digest enables predictable collisions

ms-swift: Image Cache Hash Collision via Missing Dimension Metadata

OpenStack Ironic allows file overwrite via directory traversal during deployment with a crafted ISO image

OpenStack Mistral allows Arbitrary Remote Code Execution when the API is exposed

Gradio: Audio cache key ignores metadata when saving numpy audio outputs

SGLang is Vulnerable to DoS via the data_hash Function

OpenStack Ironic allows Boot Script Injection

Jupyter Enterprise Gateway: Kubernetes Manifest Injection in Jinja2 Template Rendering

Jupyter Enterprise Gateway: Jinja2 Template Server Side Template Injection resulting in Remote Code Execution

Jupyter Enterprise Gateway: ContainerProcessProxy._enforce_prohibited_ids Bypass

Docling Core: Unsafe remote filename resolution

Docling Core: Insufficient validation of image reference URIs

Docling: Unsafe URI and Path Handling in HTML Backend

Docling: Potential Path Traversal via LaTeX \includegraphics and \input Commands

Docling: Unsafe XML Entity Expansion in USPTO Patent Backend

Docling: Unsafe Archive Extraction and XML Parsing in METS-GBS Backend

Docling: Unsafe Playwright-based HTML Rendering

malla: Stored XSS via Meshtastic node names in multiple frontend pages

mlrun: DataFrame hash collisions can cause dataset artifact path conflicts and silent data corruption

Docling: Unsafe Zip Extraction in EasyOCR Model Download

Duplicate Advisory: jupyter-server is vulnerable to CORS origin validation bypass when the `allow_origin_pat` configuration is used

Django: UpdateCacheMiddleware may disclose cached responses due to case-sensitive Cache-Control handling

Django fails to prevent reuse of a partially-initialized connection after a failed `STARTTLS` handshake

Django: signed cookies are vulnerable to salt namespace collisions

huggingface/transformers: Arbitrary Code Execution During Model Initialization in the LightGlue Model Loading Path

Django: has_vary_header may expose cached responses when Vary values contain whitespace

daphne: WebSocket handshake header smuggling through autobahn splitlines() mishandling of non-standard line separators

daphne: Unauthenticated attackers can cause excessive memory consumption by sending arbitrarily large WebSocket messages/frames

Django: UpdateCacheMiddleware may disclose private cached responses by omitting Authorization from Vary

MLflow: Environment variable injection in AI Gateway secrets enables server-side credential exfiltration

Code Index MCP is vulnerable to Uncontrolled Resource Consumption

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Versions prior to 7.260227.0 are vulnerable to XSS in the rendering of email-message observable body data. The content of the body field isn't appropriately sanitized when being rendered. Does requir

AIOHTTP is vulnerable to cross-origin redirect with per-request cookies

AIOHTTP is Vulnerable to Deserialization of Untrusted Data