Advisory Catalog

pyLoad CNL Blueprint allows Path Traversal through `dlc_path` which leads to Remote Code Execution (RCE)

MS SWIFT Remote Code Execution via unsafe PyYAML deserialization

BentoML SSRF Vulnerability in File Upload Processing

smolagents has Sandbox Escape Vulnerability in the local_python_executor.py Module

pyLoad vulnerable to XSS through insecure CAPTCHA

LLaMA-Factory allows Code Injection through improper vhead_file safeguards

Apache Airflow Providers Snowflake package allows for Special Element Injection via CopyFromExternalStageToSnowflakeOperator

LangChain Community SSRF vulnerability exists in RequestsToolkit component

rfc3161-client has insufficient verification for timestamp response signatures

Weak password requirements in OpenC3 COSMOS v6.0.0 allow attackers to bypass authentication via a brute force attack.

OpenC3 COSMOS before v6.0.2 was discovered to contain hardcoded credentials for the Service Account.

A remote code execution (RCE) vulnerability in the Plugin Management component of OpenC3 COSMOS v6.0.0 allows attackers to execute arbitrary code via uploading a crafted .txt file.

An issue in the /script-api/scripts/ endpoint of OpenC3 COSMOS before 6.1.0 allows attackers to execute a directory traversal.

Salt vulnerable to directory traversal attack in file receiving method

BackendAI Missing Authentication for Critical Function

llama_index vulnerable to SQL Injection

LlamaIndex DuckDBVectorStore vulnerable to SQL injection through ref_doc_id

vLLM Allows Remote Code Execution via PyNcclPipe Communication Service

Langroid has a Code Injection vulnerability in TableChatAgent

Apache IoTDB Vulnerable to Remote Code Execution

OpenCTI is an open cyber threat intelligence (CTI) platform. Prior to version 6.4.11 any user with the capability `manage customizations` can execute commands on the underlying infrastructure where OpenCTI is hosted and can access internal server side secrets by misusing the web-hooks. Since the mal

Browser Use allows bypassing `allowed_domains` by putting a decoy domain in http auth username portion of a URL

vLLM Vulnerable to Remote Code Execution via Mooncake Integration

h11 accepts some malformed Chunked-Encoding bodies

CVE-2025-24357 Malicious model remote code execution fix bypass with PyTorch < 2.6.0

Crawl4AI SSRF vulnerability

PyTorch: `torch.load` with `weights_only=True` leads to remote code execution

Pycel allows code injection via a crafted formula

TigerVNC accessible via the network and not just via a UNIX socket as intended

BentoML's runner server Vulnerable to Remote Code Execution (RCE) via Insecure Deserialization

Langflow Unauth RCE

LNbits Lightning Network Payment System Vulnerable to Server-Side Request Forgery via LNURL Authentication Callback

BentoML Allows Remote Code Execution (RCE) via Insecure Deserialization

pgAdmin 4 Vulnerable to Cross-Site Scripting (XSS) via Query Result Rendering

pgAdmin 4 Vulnerable to Remote Code Execution

Mobile Security Framework (MobSF) has a SSRF Vulnerability fix bypass on assetlinks_check with DNS Rebinding

A command injection vulnerability in the Command Dispatcher Service of NASA Fprime v3.4.3 allows attackers to execute arbitrary commands.

A template injection vulnerability in the Dashboard of NASA Fprime v3.4.3 allows attackers to execute arbitrary code via uploading a crafted Vue file.

vLLM deserialization vulnerability in vllm.distributed.GroupCoordinator.recv_object

Kedro deserialization vulnerability

BentoML deserialization vulnerability

vLLM allows Remote Code Execution by Pickle Deserialization via AsyncEngineRPCServer() RPC server entrypoints

Composio Eval Injection Vulnerability

Aim path traversal in LockManager.release_locks

AgentScope path traversal vulnerability in save-workflow

AgentScope path traversal vulnerability

AgentScope Deserialization Vulnerability

AgentScope Cross-Origin Resource Sharing (CORS) vulnerability

PyTorch Lightning path traversal vulnerability