Advisory Catalog

uv has differential in tar extraction with PAX headers

reflex-dev/reflex has an Open Redirect vulnerability

Wasmtime: Memory leak in C API with `externref` and `anyref` types

A weakness has been identified in Open Asset Import Library Assimp 6.0.2. This affects the function Q3DImporter::InternReadFile of the file assimp/code/AssetLib/Q3D/Q3DLoader.cpp. Executing a manipulation can lead to heap-based buffer overflow. The attack needs to be launched locally. The exploit ha

A vulnerability was identified in Open Asset Import Library Assimp 6.0.2. Affected by this vulnerability is the function ODDLParser::getNextSeparator in the library assimp/contrib/openddlparser/include/openddlparser/OpenDDLParserUtils.h. Such manipulation leads to heap-based buffer overflow. The att

A vulnerability was determined in Open Asset Import Library Assimp 6.0.2. Affected is the function Q3DImporter::InternReadFile of the file assimp/code/AssetLib/Q3D/Q3DLoader.cpp. This manipulation causes allocation of resources. The attack is restricted to local execution. The exploit has been publi

DataChain Vulnerable to Deserialization of Untrusted Data from Environment Variables

Weblate is a web based localization tool. An open redirect exists in versions 5.13.2 and below via the redir parameter on .within.website when Weblate is configured with Anubis and REDIRECT_DOMAINS is not set. An attacker can craft a URL on the legitimate domain that redirects a victim to an attacke

JupyterLab LaTeX typesetter links did not enforce `noopener` attribute

Open Babel has NULL pointer dereference in ChemKinFormat::ReadReactionQualifierLines

Open Babel has out-of-bounds write (overlapping memcpy) in zipstream basic_unzip_streambuf::underflow

Open Babel has Use-after-free in GAMESS GAMESSOutputFormat::ReadMolecule

ml-logger deserialization vulnerability

Fides has a Lack of Brute-Force Protections on Authentication Endpoints

Fides' Admin UI User Password Change Does Not Invalidate Current Session

Weblate has a long session expiry when verifying second factor

MobSF Path Traversal in GET /download/<filename> using absolute filenames

Exiv2 has quadratic performance in ICC profile parsing in JpegBase::readMetadata

Exiv2 Segmentation Faults in Exiv2::EpsImage::writeMetadata() via crafted EPS file

Litestar has potential log injection in exception logging

MaterialX Null Pointer Dereference in MaterialXCore Shader Generation due to Unchecked implGraphOutput

MaterialX Null Pointer Dereference in getShaderNodes due to Unchecked nodeGraph->getOutput return

WebSSH Cross-site Scripting vulnerability

AIOHTTP is vulnerable to HTTP Request/Response Smuggling through incorrect parsing of chunked trailer sections

Transformers's Improper Input Validation vulnerability can be exploited through username injection

Langchain-Chatchat vulnerable to path traversal

Langchain-Chatchat vulnerable to path traversal

Langchain-Chatchat has a Path Traversal vulnerability

pyspur Incomplete Filtering of Special Elements allowed by SingleLLMCallNode function

Upsonic is vulnerable to Path Traversal attack through its os.path.join function

Upsonic has vulnerability in Pickle Handler component that can lead to deserialization

pywasm3 has Improper Restriction of Operations within the Bounds of a Memory Buffer

Weblate exposes personal IP address via e-mail

Vantage6 Server JWT secret not cryptographically secure

vantage6 lacks brute-force protection on change password functionality

Potential Timing Side-Channel Vulnerability in vLLM’s Chunk-Based Prefix Caching

Vyper's `slice()` may elide side-effects when output length is 0

Vyper's `concat()` builtin may elide side-effects for zero-length arguments

Flask uses fallback key instead of current signing key

OpenStack Ironic fails to restrict paths used for file:// image URLs

AWorld OS Command Injection vulnerability

markdownify allows large headline prefixes such as <h9999999>, which causes memory consumption

A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. Affected is the function Assimp::MD3Importer::ValidateSurfaceHeaderOffsets of the file code/AssetLib/MD3/MD3Loader.cpp of the component File Handler. The manipulation leads to heap-based buffer ov

A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. Affected is the function Assimp::MD2Importer::InternReadFile in the library code/AssetLib/MD2/MD2Loader.cpp of the component Malformed File Handler. The manipulation of the argument Name leads to

A vulnerability classified as problematic was found in WebAssembly wabt 1.0.36. Affected by this vulnerability is the function BinaryReaderInterp::BeginFunctionBody of the file src/interp/binary-reader-interp.cc. The manipulation leads to null pointer dereference. The attack can be launched remotely

Django TomSelect incomplete escaping of dangerous characters in widget attributes

A vulnerability was found in WebAssembly wabt 1.0.36. It has been declared as critical. This vulnerability affects the function BinaryReaderInterp::GetReturnCallDropKeepCount of the file wabt/src/interp/binary-reader-interp.cc. The manipulation leads to heap-based buffer overflow. The attack can be

PyTorch: Manipulation of the argument scale/zero_point leads to improper initialization via Quantized Sigmoid Module

PyTorch Tuple Handler is Vulnerable to Memory Corruption through Manipulation of None Argument

Vyper's sqrt doesn't define rounding behavior