Advisory Catalog

devalue: Malformed null-prototype object keys bypass __proto__ rejection via property-key coercion

DOMPurify: IN_PLACE: node-removing afterSanitize hook leaves detached subtree event handlers armed, causing DOM XSS

Axios: CIDR-form NO_PROXY entries are ignored, causing proxy exclusion bypass for internal IP ranges

Satori-generated SVG has improper escaping

Astro: Netlify Image CDN allowlist bypass enables SSRF

Nest: Unbounded memory growth in the NestJS TCP microservice transport

adm-zip: getDataAsync() bypasses the maxOutputLength size guard enforced by the synchronous getData() path

Electron: Local race condition in Squirrel.Mac update installation on macOS

markdown-it linkify: true has two quadratic paths, so a few hundred KB of markdown blocks the event loop for tens of seconds

js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sources

pbkdf2 rehashes long passwords on every iteration, enabling denial of service

brace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of service

@grpc/grpc-js: The exact path match matcher incorrectly only applies a prefix match for case-insensitive matches

ip-address: Address6.isLinkLocal() recognizes fe80::/64 rather than fe80::/10, allowing SSRF and trust-boundary bypass to on-link hosts

ip-address: isInSubnet() and isHostInSubnet() compare addresses of different families as if they shared an address space, allowing an allowlist check to admit an address outside its range

ip-address: Address6 builds a parse diagnostic proportional to the input with no length bound, allowing a single long string to stall or crash the process

ip-address: no classifier recognizes the NAT64 local-use range 64:ff9b:1::/48, allowing SSRF and trust-boundary bypass

Axios: Prototype pollution gadget in fetch adapter can alter outbound requests

Axios: Header Injection via Inherited headers After Minimal Interceptor

Axios: Prototype-Pollution Gadget in the Default Instance Allows Inherited Object.prototype.method to Override HTTP Method

Axios: Fetch Adapter Header Injection via Inherited FormData getHeaders

vm2: NodeVM zlib Buffers expose pooled host memory across the VM boundary

Nodemailer: Process-global DNS cache reuses TLS `servername` across transports, enabling cross-tenant SMTP credential disclosure

Nodemailer: Quoted local-part can produce malformed envelope recipient through RFC 5322 comment parsing

xhtml-purifier has HTML attribute-injection (sanitizer bypass) that leads to XSS

scim-patch: Mutation of Inherited Built-in Method Objects

Unleash: A project member can reorder activation strategies belonging to any other project / environment (cross-project integrity write), bypassing project RBAC and the audit log

Unleash: Clone-feature lets a user copy a feature from a project they cannot read

mppx: Gas Draining with access list

mppx: Gas Draining with padding

9Router has a Login Brute-Force Lockout Bypass via Spoofable X-9r-Real-Ip Header

Novu: Stored XSS in In-App Inbox via notification redirect.url javascript: scheme

Sync-in Server has Username/Login Enumeration via Timing Side-Channel on POST /api/auth/login (incomplete fix of the prior timing-attack advisory)

Sync-in Server has a ReDoS via Unsanitized Regex in Sync Diff `pathFilters`

@sync-in/server vulnerable to TOTP Brute-Force via `POST /api/app/sync/register`

@aborruso/ckan-mcp-server has SSRF via DNS-name → internal IP — incomplete fix of CVE-2026-53509

hono/jsx renders plain strings unescaped in boundary components, leading to XSS

md-editor-v3: XSS via fenced-code language rendering bypass

Vendure: Shop API list queries can return non-public entities when filterOperator is OR

Nuxt OG Image has unauthenticated SSRF via `fonts[].path` URL parameter

vm2: vm.freeze()/vm.readonly() bypass via accessor descriptor

vm2: External module allowlist uses a raw prefix test, so a prefix-sharing sibling package is treated as allowlisted

vm2 leaks absolute host filesystem paths to sandbox code via error stack formatting

vm2: util.getCallSites() bypasses GHSA-v27g-jcqj-v8rw host-frame redaction, leaks host call stack

Svelte devalue: DoS via malformed input

oRPC: Vary Header Injection in CORS Plugin leading to potential Cache/CORS Bypass

Redocly CLI: Path traversal when using `split` command

@platejs/core HTML deserialization can trigger browser behavior during parsing

fastify vulnerable to Denial of Service via unhandled exception on HTTP/2 trailer responses

fast-uri vulnerable to mailto header injection via percent-encoded field-name desynchronization