Advisory Catalog

OpenCTI 3.3.1 is vulnerable to a reflected cross-site scripting (XSS) attack via the /graphql endpoint. An attacker can inject arbitrary JavaScript code by sending a crafted GET request with a malicious payload in the query string, leading to execution of JavaScript in the victim's browser. For exam

OpenCTI 3.3.1 is vulnerable to a directory traversal attack via the static/css endpoint. An unauthenticated attacker can read arbitrary files from the filesystem by sending crafted GET requests with path traversal sequences (e.g., '../') in the URL. For example, requesting /static/css//../../../../.

CAI find_file Agent Tool has Command Injection Vulnerability Through Argument Injection

geopandas SQL Injection Vulnerability in to_postgis() Allows Information Disclosure

Salt Authentication Protocol Version Downgrade Allows Minion Impersonation

Salt junos Module Vulnerable to Code Injection via Specially Crafted YAML Payload

Llama Stack exposes secret in initialization log

Unfurl's debug mode cannot be disabled due to string config parsing (Werkzeug debugger exposure)

Unfurl's unbounded zlib decompression allows decompression bomb DoS

AutoGPT is Vulnerable to RCE via Disabled Block Execution

A single post-release of dydx-v4-client contained obfuscated multi-stage loader

Tendenci is Vulnerable to CSV Formula Injection through its Contact Form Message Field

TaskWeaver has Protection Mechanism Failure and Server-Side Request Forgery (SSRF)

vLLM vulnerable to Server-Side Request Forgery (SSRF) through MediaConnector

PyTorch Vulnerable to Remote Code Execution via Untrusted Checkpoint Files

OctoPrint has Timing Side-Channel Vulnerability in API Key Authentication

askbot inexhaustive permissions check allows any user to modify a different user's profile picture

pypdf has possible Infinite Loop when processing outlines/bookmarks

MobSF has Stored XSS via Manifest Analysis - Dialer Code Host Field

Gakido vulnerable to HTTP Header Injection (CRLF Injection)

Python-Multipart has Arbitrary File Write via Non-Default Configuration

sigstore CSRF possibility in OIDC authentication during signing

BentoML has a Path Traversal via Bentofile Configuration

GI-DocGen vulnerable to Reflected XSS via unescaped query strings

dcap-qvl has Missing Verification for QE Identity