Advisory Catalog

Graphiti vulnerable to Cypher Injection via unsanitized node_labels in search filters

multipart vulnerable to ReDoS in `parse_options_header()`

OpenCTI has Semi-Blind SSRF via Unvalidated External URL in Data Ingestion Feature

SGLangs `replay_request_dump.py` contains an insecure pickle.load() without validation and proper deserialization

SGLang's encoder parallel disaggregation system is vulnerable to unauthenticated remote code execution through the disaggregation module

SGLang's multimodal generation module is vulnerable to unauthenticated remote code execution through the ZMQ broker

Tornado has cookie attribute injection via .RequestHandler.set_cookie

ha-mcp has XSS via Unescaped HTML in OAuth Consent Form

ha-mcp OAuth 2.1 DCR mode enables network reconnaissance via an error oracle

Copyparty has unexpected JavaScript execution via crafted URL to folder with `.prologue.html`

Copyparty ftp/sftp: Sharing a single file did not fully restrict source-folder access

Tornado is vulnerable to DoS due to too many multipart parts

Black is the uncompromising Python code formatter. Black provides a GitHub action for formatting code. This action supports an option, use_pyproject: true, for reading the version of Black to use from the repository pyproject.toml. A malicious pull request could edit pyproject.toml to use a direct U

pypdf: manipulated stream length values can exhaust RAM

django-unicorn affected by component state manipulation via unvalidated attribute access

MCP Atlassian has an arbitrary file write leading to arbitrary code execution via unconstrained download_path in confluence_download_attachment

MCP Atlassian has SSRF via unvalidated X-Atlassian-Jira-Url / X-Atlassian-Confluence-Url headers

Azure MCP Server has Server-Side Request Forgery issue that allows authorized attacker to elevate privileges over a network

copyparty: volflag `nohtml` did not block javascript in svg files

NLTK has Arbitrary File Read via Absolute Path Input in nltk.util.filestring()

vLLM has SSRF Protection Bypass

Glances has SQL Injection via Process Names in TimescaleDB Export

Glances Exposes Unauthenticated Configuration Secrets

An issue pertaining to CWE-312: Cleartext Storage of Sensitive Information was discovered in lesspass lesspass v9.6.9 which allows attackers to obtain sensitive information.

Apache Airflow AWS Auth Manager has Host Header Injection Leading to SAML Authentication Bypass

Apache Airflow Providers Http has Unsafe Pickle Deserializatio leading to RCE via HttpOperator