Advisory Catalog

llm CLI tool contains a code injection vulnerability via `--functions` command-line argument

imgaug contains an insecure deserialization vulnerability in BackgroundAugmenter class within multicore.py module

Horovod contains an insecure deserialization vulnerability in its KVStore HTTP server component

Guardrails AI contains a code injection vulnerability in its Hub package installation mechanism

Open Source Kubectl MCP Server vulnerable to arbitrary code execution via user interaction with crafted HTML page

PySyft server-side arbitrary Python execution after code approval

pgAdmin 4 server mode has an authorization vulnerability affecting Server Groups, Servers, Shared Servers, Background Processes, and Debugger modules

Open WebUI has a CORS misconfiguration and session validation issue

Open WebUI Vulnerable to Arbitrary File Upload and Path Traversal

Open WebUI has an LDAP Empty Password Authentication Bypass

dash-uploader has a directory traversal vulnerability

PraisonAI MCP `tools/call` path-traversal => RCE via Python `.pth` injection

Compromise of PyTorch Lightning PyPi Package Versions

misp-modules website - Missing CSRF protection in the website home blueprint

wger: cross-tenant password reset and plaintext disclosure via gym=None bypass

Rucio has SQL Injection in FilterEngine PostgreSQL Query Builder via DID Search API

Rucio has SQL Injection in FilterEngine Oracle JSON Path via DID Search API

django-s3file is vulnerable to relative path traversal

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. In versions 6.6.0 through 6.9.12, there is a privilege escalation vulnerability that can be exploited by unauthenticated attackers to query the API as any existing user, including the default admin a

Langflow Knowledge Bases API is Vulnerable to Path Traversal

FireFighter has unauthenticated SSRF in its Raid jira_bot endpoint that allows IAM credential theft

ArchiveBox Vulnerable to RCE via unvalidated per-crawl config overrides in AddView

OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. From version 6.7.0 to before version 7.0.0-rc3, a SQL injection vulnerability exists in the Time-Series Database (TSDB) component of COSMOS. The tsdb_lookup function in the cvt_mod

Sentry's improper authentication on SAML SSO process allows user identity linking

NVIDIA NVFlare Dashboard: Authorization bypass through user-controlled key via user management and authentication system

GitPython: Unsafe option check validates multi_options before shlex.split transformation

LiteLLM has SQL Injection in Proxy API key verification

Codechecker has an authentication bypass for certain API calls

Pipecat: Remote Code Execution by Pickle Deserialization Through LivekitFrameSerializer

A critical remote code execution vulnerability exists in the unauthenticated REST API endpoint /99/ImportSQLTable in H2O-3 version 3.46.0.9 and prior. The vulnerability arises due to insufficient security controls in the parameter blacklist mechanism, which only targets MySQL JDBC driver-specific da

PraisonAI has an incomplete fix for CVE-2026-34935 - OS Command Injection

OpenViking: Unauthenticated remote bot control via OpenAPI HTTP routes

UEFI Firmware Parser has a heap out-of-bounds write in tiano decompressor ReadCLen

UEFI Firmware Parser has a stack out-of-bounds write in tiano decompressor MakeTable

Upsonic: remote code execution vulnerability in its MCP server/task creation functionality

Multiple security fixes in justhtml

excel-mcp-server has a Path Traversal issue

Google Agent Development Kit (ADK) has a Code Injection and Missing Authentication vulnerability

aws-mcp has a Command Injection Remote Code Execution Vulnerability

gramps-webapi: Zip Slip Path Traversal in Media Archive Import

ajenti.plugin.core has password bypass when 2FA is activated

PraisonAI Browser Server allows unauthenticated WebSocket clients to hijack connected extension sessions

PraisonAI has critical RCE via `type: job` workflow YAML

justhtml includes multiple security fixes

PraisonAI vulnerable to arbitrary file write via path traversal in `praisonai recipe unpack`

parisneo/lollms vulnerable to stored XSS in the social feature

PraisonAI Vulnerable Untrusted Remote Template Code Execution

PraisonAI Vulnerable to Server-Side Request Forgery via Unvalidated webhook_url in Jobs API

PraisonAIAgents has an OS Command Injection via shell=True in Memory Hooks Executor (memory/hooks.py)

Apache Airflow: JWT token still valid after logout