Advisory Catalog

Crawl4AI is Vulnerable to Remote Code Execution in Docker API via Hooks Parameter

Crawl4AI Has Local File Inclusion in Docker API via file:// URLs

pyasn1 has a DoS vulnerability in decoder

Weblate wlc path traversal vulnerability: Unsanitized API slugs in download command

Dask Distributed is Vulnerable to Remote Code Execution via Jupyter Proxy and Dashboard

Apache Airflow proxy credentials for various providers might leak in task logs

Apache Airflow secrets in rendered templates could contain parts of sensitive values when truncated

Keras vulnerable to DoS via Malicious .keras Model (HDF5 Shape Bomb Causes Petabyte Allocation in KerasFileEditor)

BlackSheep's ClientSession is vulnerable to CRLF injection

Weblate leaks information via screenshots

Chainlit contains an authorization bypass vulnerability

jaraco.context Has a Path Traversal Vulnerability

GuardDog Path Traversal Vulnerability Leads to Arbitrary File Overwrite and RCE

GuardDog Zip Bomb Vulnerability in safe_extract() Allows DoS

Azure Core is vulnerable to deserialization of untrusted data

LangChain versions up to and including 0.3.1 contain a regular expression denial-of-service (ReDoS) vulnerability in the MRKLOutputParser.parse() method (libs/langchain/langchain/agents/mrkl/output_parser.py). The parser applies a backtracking-prone regular expression when extracting tool actions fr

LlamaIndex (run-llama/llama_index) versions up to and including 0.12.2 contain an uncontrolled resource consumption vulnerability in the VannaPack VannaQueryEngine implementation. The custom_query() logic generates SQL statements from a user-supplied prompt and executes them via vn.run_sql() without

LlamaIndex (run-llama/llama_index) versions up to and including 0.11.6 contain an unsafe deserialization vulnerability in BGEM3Index.load_from_disk() in llama_index/indices/managed/bge_m3/base.py. The function uses pickle.load() to deserialize multi_embed_store.pkl from a user-supplied persist_dir w

hermes's raw options logging may disclose secrets passed in via subcommand options argument

Weblate wlc has insecure API key configuration

Weblate command-line client susceptible to SSL verification skip

Label Studio is vulnerable to full account takeover by chaining Stored XSS + IDOR in User Profile via custom_hotkeys field

MindsDB has improper sanitation of filepath that leads to information disclosure and DOS

MLFlow is vulnerable to DNS rebinding attacks due to a lack of Origin header validation

AcademySoftwareFoundation OpenColorIO has an out-of-bounds vulnerability

LIEF is vulnerable to segmentation fault

ComfyUI-Manager is Vulnerable to CRLF Injection in Configuration Handler

vLLM is vulnerable to DoS in Idefics3 vision models via image payload with ambiguous dimensions

virtualenv Has TOCTOU Vulnerabilities in Directory Creation

filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock

Fickling vulnerable to detection bypass due to "builtins" blindness

Salesforce Uni2TS has a Code Injection vulnerability

Fickling has Static Analysis Bypass via Incomplete Dangerous Module Blocklist

Fickling vulnerable to use of ctypes and pydoc gadget chain to bypass detection

Fickling Blocklist Bypass: cProfile.run()