Advisory Catalog

Pillow has an integer overflow when processing fonts

Pillow has a heap buffer overflow with nested list coordinates

IKUS Rdiffweb allows an attacker with any valid or stolen access token to act as other users

pyp2spec is Vulnerable to Code Injection

OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. Prior to version 7.0.0-rc3, the Script Runner widget allows users to execute Python and Ruby scripts directly from the openc3-COSMOS-script-runner-api container. Because all the do

OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. From version 6.7.0 to before version 7.0.0-rc3, a SQL injection vulnerability exists in the Time-Series Database (TSDB) component of COSMOS. The tsdb_lookup function in the cvt_mod

OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. Prior to versions 6.10.5 and 7.0.0-rc3, OpenC3 COSMOS contains a design flaw in the save_tool_config() function that allows saving tool configuration files at arbitrary locations i

OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. Prior to versions 6.10.5 and 7.0.0-rc3, the OpenC3 password change functionality allows a user to change their password without providing the old password, by accepting a valid ses

PPTAgent: Arbitrary File Write via `save_generated_slides`

PPTAgent: Arbitrary Code Execution via Python eval() of LLM-Generated Code with Builtins in Scope

PPTAgent: Arbitrary File Write + Directory Creation via markdown_table_to_image

Prefect Git Argument Injection in GitRepository Pull Steps

Prefect SSRF Bypass via DNS Rebinding in validate_restricted_url

Prefect Unauthenticated Event Injection via /api/events/in WebSocket

Prefect Auth Bypass via endswith() Health Check Exemption

MindsDB has an Improper Access Control Issue

Langflow: Prompt injection in Langflow Smart Transform can lead to code execution

SGLang has an Improper Input Validation/Injection Issue

mem0ai mem0 has an Improper Input Validation Issue