Advisory Catalog

wlc: print_html outputs API data without HTML escaping

LiteLLM has SQL Injection in Proxy API key verification

Ray: Remote Code Execution via Parquet Arrow Extension Type Deserialization

LiteLLM: Server-Side Template Injection in /prompts/test endpoint

Codechecker has an authentication bypass for certain API calls

Apache Airflow's asset dependency graph did not restrict nodes by the viewer's DAG read permissions

Apache Airflow's authenticated /ui/dags endpoint did not enforce per-DAG access control on embedded Human-in-the-Loop (HITL) and TaskInstance record

Pipecat: Remote Code Execution by Pickle Deserialization Through LivekitFrameSerializer

A critical remote code execution vulnerability exists in the unauthenticated REST API endpoint /99/ImportSQLTable in H2O-3 version 3.46.0.9 and prior. The vulnerability arises due to insufficient security controls in the parameter blacklist mechanism, which only targets MySQL JDBC driver-specific da

verl's math_equal() Vulnerable to Arbitrary Code Execution via Unsafe eval()

OpenC3 COSMOS is Vulnerable to Self-XSS Through the Command Sender

justhtml has sanitization bypass in custom policies and programmatic DOM

Poetry has Path Traversal in tar extraction on Python 3.10.0 - 3.10.12 and 3.11.0 - 3.11.4

InstructLab Includes Functionality from Untrusted Control Sphere

InstructLab vulnerable to Path Traversal

lxml: Default configuration of iterparse() and ETCompatXMLParser() allows XXE to local files

nbconvert has an Arbitrary File Read via Path Traversal in HTMLExporter Image Embedding

nbconvert has an Arbitrary File Write via Path Traversal in Cell Attachment Filenames

Glances has CQL Injection in its Cassandra Export Module via Unsanitized Config Values

Glances has SSRF in IP Plugin via public_api leading to credential leakage

Glances: Cross-Origin Information Disclosure via Unauthenticated REST API (/api/4) due to Permissive CORS

LMDeploy has Server-Side Request Forgery (SSRF) via Vision-Language Image Loading

AWS Encryption SDK for Python: Key commitment policy bypass via shared key cache

python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback

pip has an interpretation conflict due to handling both concatenated tar and ZIP files as ZIP files

Apache Doris MCP Server vulnerable to SQL Injection via improper query context neutralization

FastChat has a Content Moderation Bypass via Arena Side-by-Side Views

FastChat has Denial of Service Through Blocking Event Loop in Model Workers (Incomplete Fix for ff66426)

AgentScope vulnerable to Server-Side Request Forgery