Advisory Catalog

AstrBot contains a directory traversal vulnerability

Open WebUI vulnerable to Stored DOM XSS via prompts when 'Insert Prompt as Rich Text' is enabled resulting in ATO/RCE

Open redirect endpoint in Datasette

LangGraph Checkpoint affected by RCE in "json" mode of JsonPlusSerializer

Weblate leaks the IP of project member inviting user to be reviewer in Audit log

Django vulnerable to SQL injection via _connector keyword argument in QuerySet and Q objects.

Django has a denial-of-service vulnerability in HttpResponseRedirect and HttpResponsePermanentRedirect on Windows

Apache Doris-MCP-Server: Improper Access Control results in bypassing a "read-only" mode

OctoPrint vulnerable to XSS in Action Commands Notification and Prompt

Dosage vulnerable to a Directory Traversal through crafted HTTP responses

DSPy does not properly restrict file reads

Agno session state overwrites between different sessions/users

Kitware VTK (Visualization Toolkit) through 9.5.0 contains a heap use-after-free vulnerability in vtkGLTFDocumentLoader. The vulnerability manifests during mesh object copy operations where vector members are accessed after the underlying memory has been freed, specifically when handling GLTF files

Kitware VTK (Visualization Toolkit) through 9.5.0 contains a heap buffer overflow vulnerability in vtkGLTFDocumentLoader. When processing specially crafted GLTF files, the copy constructor of Accessor objects fails to properly validate buffer boundaries before performing memory read operations.

Kitware VTK (Visualization Toolkit) up to 9.5.0 is vulnerable to Buffer Overflow in vtkGLTFDocumentLoader. The vulnerability occurs in the BufferDataExtractionWorker template function when processing GLTF accessor data.

cryptidy allows code execution via untrusted data due to pickle.loads

Scrapy is vulnerable to a denial of service (DoS) attack due to flaws in brotli decompression implementation

Keras Directory Traversal Vulnerability

Byaidu PDFMathTranslate vulnerable to open redirect

Apache Airflow's create action can upsert existing Pools/Connections/Variables

Apache Airflow `/api/v2/dagReports` executes DAG Python in API

Apache Airflow has a command injection vulnerability in "example_dag_decorator"

OpenUSD File Parsing Use-After-Free Remote Code Execution Vulnerability

uv allows ZIP payload obfuscation through parsing differentials

MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability

MLflow Weak Password Requirements Authentication Bypass Vulnerability

LangGraph SQLite Checkpoint Filter Key SQL Injection POC for SqliteStore

CKAN vulnerable to fixed session IDs

FastMCP Auth Integration Allows for Confused Deputy Account Takeover

CKAN vulnerable to stored XSS in resource description

Keras is vulnerable to arbitrary local file loading and Server-Side Request Forgery

FastMCP vulnerable to windows command injection in FastMCP Cursor installer via server_name