Advisory Catalog

onnx Vulnerable to Path Traversal via Symlink

FastMCP: Missing Consent Verification in OAuth Proxy Callback Facilitates Confused Deputy Vulnerabilities

FastMCP has a Command Injection vulnerability - Gemini CLI

Claude SDK for Python: Memory Tool Path Validation Race Condition Allows Sandbox Escape

Claude SDK for Python has Insecure Default File Permissions in Local Filesystem Memory Tool

alerta-server has potential SQL Injection vulnerability in Query String Syntax (q=) API

Nautobot: Management of users via REST API does not apply configured password validators

Mlflow: Command Injection when serving models with enable_mlserver=True

OpenStack Glance is affected by Server-Side Request Forgery (SSRF)

SciTokens has an Authorization Bypass via Path Traversal in Scope Validation

SciTokens has an Authorization Bypass via Incorrect Scope Path Prefix Checking

SciTokens is vulnerable to SQL Injection in KeyCache

Apache Airflow Provider for Databricks: TLS Certificate Verification is Disabled in Databricks Provider K8s Token Exchange

Telnyx has malicious code in PyPI versions 4.87.1 and 4.87.2

Slippers Vulnerable to Cross-Site Scripting (XSS) in `attrs` Template Tag

Glances Vulnerable to Command Injection via Dynamic Configuration Values

Glances Vulnerable to Cross-Origin System Information Disclosure via XML-RPC Server CORS Wildcard

MLflow Command Injection vulnerability

MLFlow path traversal vulnerability

A critical security vulnerability in parisneo/lollms versions up to 2.2.0 allows any authenticated user to accept or reject friend requests belonging to other users. The `respond_request()` function in `backend/routers/friends.py` does not implement proper authorization checks, enabling Insecure Dir

A Server-Side Request Forgery (SSRF) vulnerability exists in parisneo/lollms versions prior to 2.2.0, specifically in the `/api/files/export-content` endpoint. The `_download_image_to_temp()` function in `backend/routers/files.py` fails to validate user-controlled URLs, allowing attackers to make ar

A vulnerability in parisneo/lollms, up to and including version 2.2.0, allows unauthenticated users to upload and process files through the `/api/files/extract-text` endpoint. This endpoint does not enforce authentication, unlike other file-related endpoints, and lacks the `Depends(get_current_activ

OpenCC has an Out-of-bounds read when processing truncated UTF-8 input

Giskard Agents have Server-side template injection via ChatWorkflow.chat() using non-sandboxed Jinja2 Environment