Advisory Catalog

odf-kit has HTML injection leading to XSS in odsToHtml() via unescaped style attribute values

Electron: Mitigation for compromised eMudhra intermediate certificates

Fallow: Jest and Vitest `projects` entries let an analyzed repository make Fallow read files outside the project root

obsidian-tc: Memory-lifecycle tools overwrite unowned notes or partially commit lifecycle changes

obsidian-tc: Declined human-in-the-loop confirmations can permit destructive calls over HTTP

@rog0x/mcp-git-tools executes arbitrary code via the resolveBaseBranch function

@justice8096/sagemath-mcp-server: executes arbitrary code via the escapeShellString and sanitizeCode functions

i18next-http-backend: Namespace value starting with / forms a protocol-relative URL when loadPath/addPath places {{ns}} right after a / (bypass of the // check added for GHSA-xvq9-wjp8-hwqf)

Strands Agents SDK: Exposure of data element to wrong session in the A2A Server

better-auth: OAuth state can be used as a Magic Link to sign in as another user

Next.js: Unauthenticated Remote Code Execution in `use cache` functions returning typed arrays

GraphQL Tools: Prototype pollution in mergeIncrementalResult via non-primitive path segments

DOMPurify SAFE_FOR_TEMPLATES bypass: split template expressions survive in attached shadow root content on DOM output modes

DOMPurify IN_PLACE: hook that removes a parent or sibling leaves the detached subtree's event handlers armed (incomplete fix for GHSA-p98j-92pf-mc4p)

DOMPurify: SMIL attributeName=href guard is skipped when PARSER_MEDIA_TYPE is application/xhtml+xml

Next.js: Unauthenticated Remote Code Execution in Image Optimization API when SVG files are used

Next.js: Denial of Service in App Router using Server Actions

multer vulnerable to Denial of Service via a pending asynchronous fileFilter after request teardown