Advisory Catalog

n8n-MCP: Multi-tenant MCP requests fall back to process-level n8n credentials when tenant headers are absent or incomplete

@tmlmobilidade/utils has prototype pollution in its setValueAtPath

parse-nested-form-data has Prototype Pollution via `__proto__` in FormData field names

brace-expansion: Large numeric range defeats documented `max` DoS protection

ngrok is Vulnerable to Command Injection

Neotoma: Unauthenticated Inspector/API access via reverse-proxy loopback auth bypass

Sveltia CMS: Stored XSS in entry summary rendering via entity-decoded HTML

form-data-objectizer: Prototype pollution in form-data-objectizer via bracket-notation form keys

n8n-MCP: Workflow telemetry sanitizer could retain partial values from URL-shaped node parameters

@ai-sdk/provider-utils has an Uncontrolled Resource Consumption issue

@kilocode/cli Vulnerable to Exposure of Sensitive Information to an Unauthorized Actor

qs has a remotely triggerable DoS: qs.stringify crashes with TypeError on null/undefined entries in comma-format arrays when encodeValuesOnly is set

jsondiffpatch patch APIs are vulnerable to prototype pollution

Budibase: `PUT /api/datasources/:datasourceId` is protected only by `TABLE/READ` permission instead of builder access, allowing any authenticated app user to overwrite datasource connection parameters including host, port, and URL

Budibase: SSRF Bypass via HTTP Redirect in REST Datasource Integration

Budibase: SSRF in AI Extract File Automation Step via Missing IP Blacklist Validation

Better Auth: Rate limiter keys IPv6 addresses individually and is bypassable via prefix rotation

Better Auth: OAuth callback accepts mismatched `state` when cookie-backed state storage is used without PKCE

@joplin/onenote-converter: Path traversal in OneNote importer allows overwriting arbitrary files

Turbo: Login callback CSRF/session fixation

Turbo: Unexpected local code execution during Yarn Berry detection