Advisory Catalog

OpenStack Cyborg's Accelerator Request (ARQ) API does not enforce project ownership at any layer

OpenStack Cyborg uses rule:allow (check_str='@') as the default policy for multiple API endpoints

Microsoft APM CLI's plugin.json component paths escape plugin root and copy arbitrary host files during install

OSGeo GDAL vulnerable to out-of-bounds read

OSGeo GDAL vulnerable to heap-based buffer overflow

A vulnerability was identified in OSGeo gdal up to 3.13.0dev-4. This issue affects the function SWnentries of the file frmts/hdf4/hdf-eos/SWapi.c. Such manipulation of the argument DimensionName leads to heap-based buffer overflow. The attack must be carried out locally. The exploit is publicly avai

A vulnerability was determined in OSGeo gdal up to 3.13.0dev-4. This vulnerability affects the function memmove of the file frmts/hdf4/hdf-eos/SWapi.c of the component HDF-EOS Grid File Handler. This manipulation causes out-of-bounds read. The attack is restricted to local execution. The exploit has

Postorius is vulnerable to XSS

BentoML has Information Disclosure in `bentoml build` via symlink traversal in the build context

Diffusers has a `trust_remote_code` bypass via `custom_pipeline` and local custom components

docling-graph has SSRF via Missing Internal IP Validation in URLInputHandler

Diffusers has a `trust_remote_code` bypass via `custom_pipeline` and local custom components

Aegra has cross-user run injection in /threads/{thread_id}/runs (IDOR)

Kiota abstractions RedirectHandler leaks Cookie/Proxy-Authorization headers on cross-host redirect

Compromise of PyTorch Lightning PyPi Package Versions

Weblate vulnerable to XSS via crafted Markdown

Weblate Vulnerable to Private Translation Enumeration via Screenshot API

Playwright Capture permits access to local files and internal network resources during page capture

axonflow-sdk-python: Webhook signing-key (HMAC-SHA256) not exposed by SDK type, preventing signature verification

pyquorum: Timing side‑channel in mul_mod

misp-modules website - Missing CSRF protection in the website home blueprint

misp-modules has nsafe remote resource fetching in expansion

PraisonAI has unauthenticated RCE via `tool_override.py` (CVE-2026-40287 patch bypass)

PraisonAI has an SSRF bypass

aiograpi has dependency on vulnerable orjson 3.11.4 (CVE-2025-67221)

GitPython: Newline injection in config_writer().set_value() enables RCE via core.hooksPath

python-multipart has Denial of Service via unbounded multipart part headers

vLLM: extract_hidden_states speculative decoding crashes server on any request with penalty parameters

Mako vulnerable to path traversal via backslash URI on Windows in TemplateLookup

JupyterLab's command linker attributes in HTML enable one-click command execution from untrusted content

Granian vulnerable to DoS via WSGI response header panic

Granian vulnerable to unauthenticated DoS via WebSocket subprotocol header panic

Magic Wormhole: receive, with --output pointing at an existing directory can be path-traversed

wger: trainer_login open redirect - ?next= parameter not validated against host

wger: cross-tenant password reset and plaintext disclosure via gym=None bypass

wger: CSV/TSV formula injection in gym member export (first_name/last_name)

GitPython reference APIs has a path traversal vulnerability that allows arbitrary file write and delete outside the repository

Lemur: LDAP Filter Injection enables post-authentication privilege escalation

Lemur: LDAP Authentication Globally Disables TLS Certificate Verification When LDAP_USE_TLS Is Enabled

PyLoad vulnerable to unauthenticated traceback disclosure via global exception handler in WebUI