Advisory Catalog

OpenClaw: Bundle MCP loopback could miss its exec denylist on session spawn

sanitize-html has incomplete URI scheme validation in that allows javascript: URIs through action, formaction, data, poster, and background attributes

Fabric.js improper escaping in fabric.Gradient colorStops leads to XSS in SVG serialization

parse-server: Relation `$relatedTo` query bypasses `protectedFields` and owning-object ACL

parse-server: Endpoints `/login` and `/verifyPassword` disclose MFA secrets and protected fields when `_User` get is denied

parse-server: Server option routeAllowList is bypassable through batch sub-requests

Nuxt: Reflected XSS in `<NuxtLink>` via unsanitised `javascript:` or `data:` URL

LangGraph has NoSQL parameter injection in MongoDBSaver, allowing cross-tenant state access

@nuxt/webpack-builder and @nuxt/rspack-builder dev server same-origin check bypassed when Sec-Fetch-Site, Origin, and Referer are all absent (incomplete fix for GHSA-6m52-m754-pw2g)

OpenClaw: MCP loopback could skip owner-only tool policy for non-owner callers

OpenClaw's browser act interactions could bypass private-network navigation checks

OpenClaw: Embedded runner policy could be confused by provider aliases

OpenClaw: Skill Workshop apply flow could override pending approval

@steipete/summarize vulnerable to SSRF via podcast:transcript URL fetch

@steipete/summarize is Vulnerable to Disk Exhaustion via Crafted Media Responses

@hapi/inert has a static-file confinement bypass via sibling-prefix path

joi has an uncaught RangeError on deeply nested input through recursive `link()` schemas

@hapi/wreck: Sensitive credential headers leak across cross-port and cross-scheme redirects

@hulumi/baseline: AccountFoundation reuse paths silently downgrade GuardDuty / Security Hub posture

FUXA's scheduler API missing admin check enables operator-to-admin escalation via scheduled device actions

FUXA has SQL Injection in its TDengine DAQ connector via backslash bypass of escapeTdString

actual Allows Electron to Run As Node

NocoDB: OAuth Tokens Persist Through Security Events

NocoDB: OAuth Authorization Code Race Condition

NocoDB: Path Traversal via SQLite Source Filename

NocoDB: SQL Injection via Column Title in Bulk GroupBy

NocoDB: Server-Side Request Forgery via Database Connection Host

NocoDB: Cross-Workspace Integration Use in Connection Test

NocoDB: User Enumeration via Sign-In Timing

NocoDB: Plaintext Password Comparison in Shared Views

NocoDB: Hidden Column Exposure in Public Shared View Endpoints

NocoDB: Open Redirect via Hash Fragment in hashRedirect Plugin

NocoDB: Reflected Cross-Site Scripting via Password Reset Token

NocoDB: Postgres SQL Injection in Formula `ARRAYSORT`

NocoDB: Hidden LTAR Column Exposure in Public Shared-View Relation Endpoints

MCP Server Kubernetes: kubectl-generic flag injection enables Kubernetes bearer token exfiltration

decompress: Arbitrary File Write via Archive Extraction (Zip Slip)

morgan vulnerable to Log Forging via unneutralized control characters in :remote-user

React Router's same-origin redirect with path starting // causes open redirect via protocol-relative URL reinterpretation

React Router has stored XSS via unescaped Location header in prerendered redirect HTML

Claw Orchestrator has inefficient regular expression complexity via validateRegex()

Claw Orchestrator is missing authentication for the component API Endpoint

Parse Server's GraphQL "Did you mean ...?" validation suggestions disclose schema to unauthenticated callers

NodeVM observability builtins leak host process and HTTP request data

Nuxt's route middleware is not enforced when rendering `.server.vue` pages via `/__nuxt_island/page_*`

OpenClaw: Browser debug/export routes could reuse already-open blocked tabs

OpenClaw's Slack plugin approvals used the exec approver gate for plugin actions

Axios has a Patch Bypass: Proxy-Authorization Header Injection via Prototype Pollution — Incomplete Null-Prototype Fix

FUXA provides guest and invalid-token access to protected read APIs in secure mode

Shamefile has an arbitrary file read via shamefile.yaml in shame next