Advisory Catalog

NLTK: WekaClassifier passes an unvalidated caller-controlled model path to the weka JVM, bypassing nltk.pathsec containment

copyparty FTP: upload outside defined volumes (limited path traversal)

Shiny for Python has path traversal in bookmark restore

pacioli: A submit consent marker licensed cancellation of caller-named pre-existing documents

pyload-ng: getUserData/get_userdata exposed at Perms.ANY allow any authenticated account to brute-force the administrator password

pyLoad: Rate-Limit Bypass and Audit-Log Spoofing via Trusted Client-Controlled `X-Forwarded-For` Header

pyLoad: Privilege revocation and password change through the REST API do not invalidate the user's session

pyLoad: Api.set_user_permission never invalidates the target's session

pyLoad WindowsPhoneNotify addon: non-admin SETTINGS user triggers SSRF via unguarded http.client notification host

pyLoad: Tar extraction creates device nodes and FIFOs (member types not filtered; tarfile extractall without filter=)

pyLoad has an authentication bypass in API key validation (check_apikey cache)

pyLoad: Unauthenticated access to /web/<path:filename> bypasses authentication on sensitive templates and leaks internal error details via exception attribute typo

pyLoad: Lack of Input Size Validation Leads to Denial of Service (DoS) and Process Termination

Strawberry GraphQL: Synchronous permission checks can treat an awaitable authorization result as truthy

Strawberry legacy graphql-ws retains naturally completed subscription slots

Banks: Symlink traversal and arbitrary file disclosure/overwrite in DirectoryPromptRegistry

Banks: User-controlled prompt input can be parsed as privileged chat messages

Indico: Cross-Site-Scripting in minutes editor

MongoDB Python Driver: Out-of-bounds read in BSON decoding via a malformed Regex element

Indico: Cross-Site-Scripting in link fields

Indico: Missing access check in legacy session export API

Indico: Incomplete Server-Side Request Forgery (SSRF) check

CairoSVG: Quadratic-time DoS parsing a crafted SVG <path>

datamodel-code-generator: Protobuf weak-import path traversal allows files to be written outside the temporary directory

Pydantic AI Web chat UI (`Agent.to_web()`, `clai web`): the local chat endpoint does not validate the `Host` header

Pydantic AI Web chat UI (`Agent.to_web()`, `clai web`): a website visited by the developer can trigger agent runs and server-side tool execution on the local chat endpoint

Pydantic AI OpenTelemetry instrumentation: retry prompt content is not redacted when `include_content=False`

Pydantic AI: Unbounded memory use when downloading remote content via web_fetch or FileUrl

Pydantic AI: Event loop blocked by quadratic title extraction in `web_fetch`

Pydantic AI OpenTelemetry instrumentation: exception events on tool and agent run spans include content when `include_content=False`

Pydantic AI: SSRF cloud-metadata blocklist bypass via IPv6 zone identifiers

Pydantic AI: Excessive resource use when local web fetching converts nested HTML

Pydantic AI: Concurrency-limited models can keep their slot when a streamed request ends early

PraisonAI: Code Injection via f-string Interpolation in Deploy API Server Generation

PraisonAI: Platform members can delete owner issue dependencies through member-owned related issues

wger: Cross-User Data Corruption via Missing Ownership Check on WorkoutLog.slot_entry

wger: Trainer Privilege Escalation - Improper Privilege Management

wger: API credentials remain valid after logout/password change

wger: trainer_login accepts GET - CSRF bypass enables forced session rebinding