Advisory Catalog

OpenClaw: Slack reaction events could ignore reaction notification settings

OpenClaw: Focus command could miss controlScope enforcement

OpenClaw: Active Memory write scope could mutate global config

OpenClaw: memory-wiki shared search could miss session visibility checks

OpenClaw: Exported session HTML could keep unsafe markdown links

n8n: Merge Node SQL Mode Prototype Pollution

n8n: Prototype Pollution enables confused-deputy execution via public webhooks

n8n: Missing Token Validation on Microsoft Agent 365 Trigger and Stripe Nodes

n8n: Wrong OAuth Scope On Evaluations Test Run Creation Endpoint

n8n: NoSQL Injection in MongoDB Node Find And Replace Operation

n8n: SQL Injection in Postgres v1/TimesclaeDB Nodes

n8n: Git Node Clone and Push Operations Bypass File Sandbox

Astro: XSS via Unescaped Attribute Names in Spread Props

@astrojs/netlify broadens Astro image.remotePatterns in Netlify Image CDN config

hono: Body Limit Middleware can be bypassed on AWS Lambda by understating `Content-Length`

hono: Lambda@Edge adapter keeps only the last value of a repeated request header, dropping the rest

hono: Path traversal in `serve-static` on Windows via encoded backslash (`%5C`)

hono: AWS Lambda adapter merges multiple `Set-Cookie` headers into one value, dropping cookies on ALB single-header and Lattice

Nuxt dev server vite-node IPC socket is world-connectable on Linux

Nuxt: URL-handling weaknesses in `navigateTo` and `reloadNuxtApp`: SSR open redirect, client-side script execution via the `open` option, and protocol-relative bypass in `reloadNuxtApp`

markdown-it: Quadratic complexity DoS in smartquotes rule via replaceAt string operations

OpenTelemetry Core: Unbounded memory allocation in W3C Baggage propagation

UAParser.js: Unbounded `Sec-CH-UA-Model` parsing can trigger ReDoS in `withClientHints()`

protobufjs: Memory amplification from preserved unknown fields in binary decode

DOMPurify: Trusted Types policy survives `clearConfig()` and can poison later `RETURN_TRUSTED_TYPE` output

DOMPurify: SAFE_FOR_TEMPLATES bypass - template expressions survive sanitization inside <template> content when using DOM output modes

DOMPurify IN_PLACE Sanitization Bypass via Attached Shadow Root Inside <template>.content

DOMPurify: `IN_PLACE` mode trusts attacker-controlled `nodeName` on live non-form nodes, allowing script retention and XSS via attacker-supplied DOM objects

DOMPurify: Hook mutation of `data.allowedTags` / `data.allowedAttributes` permanently pollutes `DEFAULT_ALLOWED_TAGS` / `DEFAULT_ALLOWED_ATTR`

DOMPurify: Cross-realm IN_PLACE sanitization leaves executable markup intact via realm-bound `instanceof` checks

DOMPurify: IN_PLACE mode preserves attributes of a clobbered root element, allowing XSS via attacker-controlled root DOM

Nodemailer: CRLF injection in Nodemailer List-* header comments allows arbitrary message header injection

Nodemailer jsonTransport bypasses disableFileAccess and disableUrlAccess during message normalization

protobufjs : Schema-derived names can shadow runtime-significant properties

@angular/compiler: Two-Way Property Binding Sanitization Bypass (XSS)

Angular: Template and Attribute Namespace Sanitization Bypass (XSS)

node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation differential (file smuggling)

launch-editor: NTLMv2 hash disclosure via UNC path handling on Windows

JS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliases

@angular/service-worker: Request Credential & Cache Policy Stripping

@angular/core: Angular Template and Dynamic Component Namespace Bypass leading to Cross-Site Scripting (XSS)

Angular Service Worker Policy-Bypass & Credential-Stripping Vulnerabilities

webpack-dev-server vulnerable to HMR WebSocket interception via permissive user proxies

jsonata: Function Binding Prototype Pollution via hasOwnProperty Override

OpenClaw: Node pairing reconnection could confuse approval scope state

OpenClaw: Mattermost handlers could fall open when channel type was missing

OpenClaw: Slack and Zalo webhook secrets could remain active after secrets.reload

OpenClaw: message.action forwarding could send Gateway credentials to model-supplied loopback URLs

OpenClaw: Sandboxed session spawn could expose the real workspace path to child prompts

OpenClaw: Mattermost slash token revocation could lag until monitor refresh