Advisory Catalog

adm-zip extraction follows destination symlinks, allowing arbitrary file overwrite

Unleash: Global Mustache.escape override disables HTML escaping process-wide, enabling Slack/Teams link-injection via unrestricted username

Unleash: Addon webhook URL is dialed server-side with no internal-address filtering, enabling SSRF to internal services / cloud metadata and exfiltration of configured request headers

@fastify/busboy vulnerable to CRLF injection via multipart Content-Disposition filename and name

DiceBear: SVG injection via the unescaped rotate option in @dicebear/core (and fontSize/fontWeight in @dicebear/initials)

next-video: Unauthenticated arbitrary file read via /api/video request handler

Tina: Cross-origin `POST /media/upload/*` requests can write arbitrary files into the Tina dev server media root

Tina: Broken Access Control: arbitrary bucket-key write/delete in `next-tinacms-s3` (and sibling production media adapters)

SearXNG Basic Authentication Credentials Exposed Through MCP Logs and JSON-RPC Error Responses

SearXNG MCP Server: Additional hardened-mode SSRF bypasses

SearXNG MCP Server is Vulnerable to SSRF in web_url_read: the internal-address guard is disabled by default (MCP_HTTP_HARDEN off)

fastify vulnerable to schema validation bypass via root primitive coercion mismatch

fastify vulnerable to X-Forwarded-* spoofing under trustProxy hop-count

MagicMirror socket payload secret placeholder expansion can disclose SECRET_* environment variables

MagicMirror: ssrf calendar .js

MagicMirror newsfeed Socket.IO notification allows blind server-side request forgery

MLflow: LogInputs endpoint bypasses per-run UPDATE authorization in basic-auth

ApostropheCMS: Mutation-XSS / allowedTags bypass via literal `</textarea/>` solidus close

ApostropheCMS: Missing destination-parent authorization in page `move()` allows a low-privileged editor to move and re-rank pages inside a restricted subtree

ApostropheCMS: Arbitrary file read via import-export attachment-name path traversal

Etherpad addressed weak token RNG, login timing, plugin path handling, API request handling

Token Optimizer MCP: Unauthenticated Path Traversal in Dashboard Session Log API Endpoints

CKAN MCP Server: Cache-key canonicalization collision enables cache confusion / poisoning

CKAN MCP Server: MQA server allowlist bypass via unanchored regex (`isValidMqaServer`)

hashi-vault-js: Vault token and secret values exposed in thrown errors

ep_etherpad-lite: Device-to-device author-token transfer endpoint is replayable, never expires, and exposes the cleartext author token

ep_etherpad-lite: Import/export uses Math.random() for temp file paths; predictable paths on shared /tmp enable symlink-based file overwrite

ep_etherpad-lite: Cache-poisoning Cross-site Scripting and Open Redirect via x-proxy-path Header

baseline-browser-mapping process termination on invalid input causes denial of service

SWC HTML minifier may allow script element breakout when minifying embedded JSON

Hono: `memo()` retains SSR output across requests, leading to cross-user data disclosure

Hono: Algorithmic Complexity DoS in Language Middleware

SvelteKit: ReDoS (O(n^2)) in content negotiation — unauthenticated DoS via the Accept header

Nuxt dev server discloses project root and workspace UUID via the Chrome DevTools workspace endpoint

DOMPurify: IN_PLACE hook removal leaves a detached subtree executable, causing XSS

node-re2: Out-of-bounds heap read in `replace`/`split` via a `Buffer` ending in a truncated multi-byte UTF-8 character → adjacent heap memory disclosed to JavaScript

node-re2: String.prototype.replace(re2, template) aborts the Node process (uncatchable ToLocalChecked on empty MaybeLocal) when the result exceeds V8's max string length

Mermaid radar diagrams are vulnerable to DoS

Mermaid allows CSS injection applying to sibling elements of the diagram

Mermaid Architecture diagrams are vulnerable to prototype pollution

Mermaid XY Charts are vulnerable to an infinite loop DoS

Nuxt: Unauthorized Component Instantiation via Server Island Props

Electron: Sandboxed iframes can launch external protocol handlers

Electron: DevTools embedder handler executes arbitrary files via shell open

Electron: contextBridge object copy honors prototype setters

Electron: DevTools JavaScript Injection via Unsanitized Dock State Parameter

Electron: window.open features string controls some window options considered privileged

Electron: ProtocolResponse.url reuses the default session cache instead of the registering session

Electron: HTTP redirect followed into local file loader

Electron: Extension tab APIs operate across session boundaries