Advisory Catalog

Wagtail: Improper restriction handling on descendant collections in Documents and Images API

django CMS: Missing authorization in `render_object_structure` discloses non-PageContent placeholder structure to low-privileged staff

django CMS: Broken access control in page *Duplicate* allows reading the content of any page (cross-site / restriction bypass)

django CMS: Stored XSS in edit-mode plugin exception rendering

Wagtail: Improper restriction handling on Pages admin API

django CMS: Structure endpoint bypasses page-view permission

django CMS: Clipboard copy IDOR discloses unauthorized plugin content

Zoo Design Studio: Memory-corruption in memory handling of lib-kcl

Zoo Design Studio: Recursive KCL parsing is vulnerable to denial-of-service

django CMS: Page cache ignores plugin-declared Vary headers (disclosure & poisoning)

asteval has a Sandbox Escape via BaseException Subclasses

asteval Sandbox Escape: arbitrary native memory read/write via numpy ctypes in default asteval Interpreter

Banks: Path traversal in `DirectoryPromptRegistry.set()` allows arbitrary file write outside the registry root

WebOb: Open redirect in Location header normalization via leading C0 control / space characters

aiosmtplib: STARTTLS response injection

langgraph-api: Incomplete assistant authorization in LangGraph Server run creation

langgraph-api: Relative webhook targets in LangGraph Server can reach in-process routes without authentication

stigmem-node has blind SSRF via unvalidated webhook subscription delivery_address

linuxfabrik-lib: Arbitrary root file read via live --test argument (lib.lftest) across sudoers-whitelisted plugins (LPE)

devpi-server may leak database contents

Lemur: Missing authorization check on POST /certificates/<id>/export for plugins with requires_key = False

Lemur: Sub-CA creation never checks `AuthorityPermission` on the parent authority

Lemur: SSRF protection in certificate revocation checking bypassable via HTTP redirects and DNS rebinding (incomplete fix for GHSA-54vg-pfh7-jq95)

MobSF Vulnerable to Arbitrary File Read via Path Traversal in ZIP Uploads

MobSF's CSRF checks not enforced after Django migration

MobSF Vulnerable to Zip Bomb Denial of Service via Per-File Size Limit Bypass in ZIP/APK Extraction

Copyparty vulnerable to file/dirkey confusion

vLLM: SSRF + arbitrary local file read in MiMoV2OmniMultiModalProcessor `_fetch_image` and audio loader bypass MediaConnector protections

vLLM: Derender endpoints decode caller-supplied GenerateResponse token IDs without output bounds

Glances: as_dict_secure() Value-Level Bypass Leaks Credentials in URL Values via /api/4/config

sqlparse: Generated Python and PHP snippets allow SQL string breakout through unescaped backslashes

Glances: REST API CORS Credentials Guard Uses Exact-Match Instead of Membership Test — Bypassed by Any Multi-Origin Allowlist Containing the Wildcard

openssl_encrypt before 1.4.0 imports Python's non-cryptographic 'random' module (Mersenne Twister PRNG) at line 15 of openssl_encrypt/modules/pqc.py. No direct calls to random.* were present in the code, so no cryptographic operation is currently affected; however, the import creates a hazard that f

openssl_encrypt versions before 1.4.6 contain a key derivation flaw in sequential XOR composition mode where the last stage cancels out during key generation. When configured with a single KDF and no prior hashing stage, attackers can bypass memory-hard key derivation and perform offline password cr

ContextForge: DNS TOCTOU race condition causes SSRF protection bypass (`/admin/gateways/test`)

vLLM: Completion prompt lists fan out into unbounded engine requests

vLLM: Cross-User Data Leak Vulnerability

vLLM: Incomplete CVE-2025-62164 remediation can be bypassed by concurrent prompt parts

vLLM: ReDoS via structured_outputs.regex in the lm-format-enforcer backend (no compile timeout) — missed sibling of GHSA-rwxx-mrjm-wc2m

vLLM: Unauthenticated Internal Path and Username Disclosure via Validation Error Messages

Material for MkDocs: DOM XSS in search suggestions via query parameter

Apache Airflow missing team context permits cross-team Dag actions and XCom reads

Apache Airflow Task SDK fails to mask list-shaped JSON Variables

Apache Airflow bulk endpoints log Variable and Connection secrets in cleartext

Apache Airflow environment-variable secrets backend permits cross-team credential use

Apache Airflow Config API exposes team-scoped sensitive configuration values

Apache Airflow exposes dict-valued var.json secrets in Rendered Templates

Apache Airflow XCom API permits unsafe deserialization through JSON string literals

Apache Airflow Variables UI fails to mask sensitive values in deeply nested iterables

Prowler: Stored XSS in HTML reports through unescaped cloud resource tags