Advisory Catalog

Nest Affected by DoS via Recursive handleData in JsonSocket (TCP Transport)

SSH/SCP option injection allowing local RCE in @aiondadotcom/mcp-ssh

simple-git Affected by Command Execution via Option-Parsing Bypass

mathjs Allows Improperly Controlled Modification of Dynamically-Determined Object Attributes

n8n-mcp has unauthenticated session termination and information disclosure in HTTP transport

basic-ftp: Incomplete CRLF Injection Protection Allows Arbitrary FTP Command Execution via Credentials and MKD Commands

Saltcorn has an Unauthenticated Path Traversal in sync endpoints, allowing arbitrary file write and directory read

@sveltejs/adapter-node has a BODY_SIZE_LIMIT bypass

@vitejs/plugin-rsc has a Denial of Service with React Server Components

Next.js has a Denial of Service with Server Components

OpenClaw B-M3: ClawHub package downloads are not enforced with integrity verification

OpenClaw `node.pair.approve` placed in `operator.write` scope instead of `operator.pairing` allows unprivileged pairing approval

OpenClaw: Node Pairing Reconnect Command Escalation Bypasses operator.admin Scope Requirement

OpenClaw `node.invoke(browser.proxy)` bypasses `browser.request` persistent profile-mutation guard

OpenClaw `device.token.rotate` mints tokens for unapproved roles, bypassing device role-upgrade pairing

OpenClaw: strictInlineEval explicit-approval boundary bypassed by approval-timeout fallback on gateway and node exec hosts

OpenClaw: HGRCPATH, CARGO_BUILD_RUSTC_WRAPPER, RUSTC_WRAPPER, and MAKEFLAGS missing from exec env denylist — RCE via build tool env injection (GHSA-cm8v-2vh9-cxf3 class)

OpenClaw: Authenticated `/hooks/wake` and mapped `wake` payloads are promoted into the trusted `System:` prompt channel

OpenClaw: Lower-trust background runtime output is injected into trusted `System:` events, and local async exec completion misses the intended `exec-event` downgrade

OpenClaw: `fetchWithSsrFGuard` replays unsafe request bodies across cross-origin redirects

Pretext: Algorithmic Complexity (DoS) in the text analysis phase

React Server Components have a Denial of Service Vulnerability

basic-ftp has FTP Command Injection via CRLF

n8n-mcp has authenticated SSRF via instance-URL header in multi-tenant HTTP mode

mcp-from-openapi is Vulnerable to SSRF via $ref Dereferencing in Untrusted OpenAPI Specifications

LiquidJS: ownPropertyOnly bypass via sort_natural filter — prototype property information disclosure through sorting side-channel

LobeHub: Unauthenticated authentication bypass on `webapi` routes via forgeable `X-lobe-chat-auth` header

LiquidJS: Root restriction bypass for partial and layout loading through symlinked templates

RedwoodSDK has a CSRF vulnerability in server function dispatch via GET requests

Drizzle ORM has SQL injection via improperly escaped SQL identifiers

GenieACS has an unauthenticated access vulnerability via the NBI API endpoint

OpenClaw: Untrusted workspace channel shadows could execute during built-in channel setup

OpenClaw: Gateway operator.write Can Reach Admin-Class Telegram Config and Cron Persistence via send

OpenClaw: Gateway operator.write Can Reach Admin-Class Talk Voice Config Persistence via chat.send

OpenClaw Has Incomplete Fix for CVE-2026-4039: CLI Backend Environment Variable Injection via Workspace Config

OpenClaw: `/phone arm`/`/phone disarm` Bypasses `operator.admin` Scope Check for External Channels

Electron: Named window.open targets not scoped to the opener's browsing context

Vite: `server.fs.deny` bypassed with queries

Vite Vulnerable to Arbitrary File Read via Vite Dev Server WebSocket

Fedify affected by resource exhaustion caused by unbounded redirect following during remote key/document resolution

defu: Prototype pollution via `__proto__` key in defaults argument

Directus: Authenticated Users Can Extract Concealed Fields via Aggregate Queries

Directus: Unauthenticated Denial of Service via GraphQL Alias Amplification of Expensive Health Check Resolver

Directus: TUS Upload Authorization Bypass Allows Arbitrary File Overwrite

Directus: SSRF Protection Bypass via IPv4-Mapped IPv6 Addresses in File Import

Directus: Path Traversal and Broken Access Control in File Management API

@mobilenext/mobile-mcp: Arbitrary Android Intent Execution via mobile_open_url

@stablelib/cbor: Stack exhaustion Denial of Service via deeply nested CBOR arrays, maps, or tags

@stablelib/cbor: Prototype poisoning via `__proto__` map keys in CBOR decoding

@hapi/content: Regular Expression Denial of Service (ReDoS) in HTTP header parsing