Advisory Catalog

Agenta is an open-source LLMOps platform. A Server-Side Template Injection (SSTI) vulnerability exists in versions prior to 0.86.8 in Agenta's API server evaluator template rendering. Although the vulnerable code lives in the SDK package, it is executed server-side within the API process when runnin

Agenta is an open-source LLMOps platform. In Agenta-API prior to version 0.48.1, a Python sandbox escape vulnerability existed in Agenta's custom code evaluator. Agenta used RestrictedPython as a sandboxing mechanism for user-supplied evaluator code, but incorrectly whitelisted the `numpy` package a

Copyparty vulnerable to reflected XSS via setck parameter

OpenLIT is an open source platform for AI engineering. Prior to version 1.37.1, several GitHub Actions workflows in OpenLIT's GitHub repository use the `pull_request_target` event while checking out and executing untrusted code from forked pull requests. These workflows run with the security context

pypdf: Manipulated FlateDecode XFA streams can exhaust RAM

psd-tools: Compression module has unguarded zlib decompression, missing dimension validation, and hardening gaps

mcp-server-git : Path traversal in git_add allows staging files outside repository boundaries

Rucio WebUI has a Stored Cross-site Scripting (XSS) Vulnerability in its Custom RSE Attribute

Rucio WebUI has a Stored Cross-site Scripting (XSS) vulnerability its Identity Name

Rucio WebUI has Stored Cross-site Scripting (XSS) in RSE Metadata

Rucio WebUI Vulnerable to Stored Cross-site Scripting (XSS) through Custom Rule Function

Rucio WebUI has Username Enumeration via Login Error Message

Rucio WebUI has a Reflected Cross-site Scripting Vulnerability

LangGraph: BaseCache Deserialization of Untrusted Data may lead to Remote Code Execution

OpenFUN Richie Observable Timing Discrepancy in its sync_course_run_from_request function

Fickling has safety check bypass via REDUCE+BUILD opcode sequence

zae-limiter: DynamoDB hot partition throttling enables per-entity Denial of Service

changedetection.io is Vulnerable to SSRF via Watch URLs

changedetection.io Vulnerable to Reflected XSS in RSS Single Watch Error Response

Flask-Reuploaded vulnerable to Remote Code Execution via Server-Side Template Injection

pypdf has a possible infinite loop when loading circular /Prev entries in cross-reference streams

Bugsink is vulnerable to Stored XSS via Pygments fallback in stacktrace rendering

Fickling: OBJ opcode call invisibility bypasses all safety checks

NiceGUI vulnerable to XSS via Code Injection during client-side element function execution

MindsDB: Path Traversal in /api/files Leading to Remote Code Execution

Apache Superset: Read-Only Bypass via Improper Input Validation on PostgreSQL Connections

Apache Superset allows authenticated users to view sensitive data without explicit permissions

Apache Superset Improper Authorization allows low-privileged users to bypass access controls

Apache Superset allows privileged users to conduct error-based SQL Injection

Apache Superset: Incomplete DISALLOWED_SQL_FUNCTIONS default list for ClickHouse engine

Apache Airflow exposes sensitive information in its log files

Apache Airflow vulnerable to Code Injection in the web-server context via LogTemplate table

OpenEXR has heap-buffer-overflow via signed integer underflow in ImfContextInit.cpp

yt-dlp: Arbitrary Command Injection when using the `--netrc-cmd` option

ormar is vulnerable to SQL Injection through aggregate functions min() and max()

datapizza-ai has unsafe deserialization via pickle.loads() in RedisCache

datapizza-ai: Server-Side Template Injection in ChatPromptTemplate via Jinja2 Template Handler

Isso affected by Stored XSS via comment website field