Advisory Catalog

MCP TypeScript SDK: Experimental tasks were not tied to the session that created them

MCP TypeScript client SDK: HTTP client transports and OAuth requests followed cross-origin redirects and re-sent custom headers and request bodies

ApostropheCMS: Unauthenticated resource exhaustion via pre-auth aposBigUpload processing in @apostrophecms/import-export

ApostropheCMS: No Attempt Throttling on Authenticated Password-Change Endpoint Enables Unlimited Current-Password Guessing

ApostropheCMS: Missing Authorization on Notification PATCH/DELETE Endpoints

ApostropheCMS import-export tar guard misses './..' because it is a literal '../' substring test

ApostropheCMS import-export: NoSQL injection via update-key value lets a crafted import match and overwrite an unidentified document

ApostropheCMS: Authenticated Object-Level Authorization Bypass in exist-in-locale Reveals Restricted Localized Draft Identifiers

ApostropheCMS: Client-side Prototype Pollution in apos.http.parseQuery leading to DOM-based XSS against authenticated users

ApostropheCMS: Incomplete CVE-2026-53606: `meta http-equiv=refresh` `content` still ships `javascript:` / `data:` URLs

ApostropheCMS: :_id/locales REST route omits the public-API authorization gate its sibling read routes enforce (unauthenticated doc-existence + locale metadata disclosure)

ApostropheCMS: Host header controls server-side image fetch origin in @apostrophecms/ai-helper, enabling authenticated SSRF

ApostropheCMS: Cross-domain session token in URL confers session takeover

ApostropheCMS: CAPTCHA response token not URL-encoded

ApostropheCMS: Authenticated projection-exclusion prototype-member deletion in @apostrophecms/db-connect causes process-wide denial of service

follow-redirects array-form headers bypass cross-origin credential stripping

@angular/router: Denial of Service via RouterLink Query Parameter Retention in Server-Side Rendering (SSR)

ApostropheCMS: Unauthenticated CSV import requests leave rejected uploads in the system temporary directory

ApostropheCMS sanitize-html: SMIL animation namespace-prefix bypass allows javascript: URI injection (XSS)

ApostropheCMS: Unauthenticated unbounded multipart upload → disk-exhaustion DoS

ApostropheCMS: Same-parent page reorder in @apostrophecms/page move() re-ranks a restricted parent's children without create authorization

ApostropheCMS sanitize-html: nonTextTags discard region ends early on an implied close, letting <noscript> content render

ApostropheCMS: The general public can access @apostrophecms/user objects via a relationship (viewRole is not applied to the general public)

ApostropheCMS uploadfs Azure backend leaks account-level SAS token into every public attachment URL (sas: true)

ApostropheCMS: Path traversal in uploadfs

ApostropheCMS sanitize-html: unbounded recursion when re-sanitizing the fallback of a discarded iframe (stack overflow, nestingLimit not enforced)

ApostropheCMS: Import API bypasses publication roles for protected content

ApostropheCMS: Missing Authentication in `cleanExport` Route

ApostropheCMS: Stored XSS via Unescaped Widget Style Attribute Serialization

ApostropheCMS: GET /api/v1/@apostrophecms/page/:id bypasses viewRole restriction and exposes viewPermission-gated fields to lower-privileged users

ApostropheCMS: Archive duplicate continuation lets contributors overwrite published content

ApostropheCMS: Import archives can exhaust server storage and deny service

ApostropheCMS: Unauthenticated publicApiProjection bypass via search and sort query builders in the public REST API

ApostropheCMS: Exposure of Sensitive Information via predictable export filenames

ApostropheCMS: POST /api/v1/@apostrophecms/doc/slugTaken discloses existence of private/admin-only content to any authenticated user

ApostropheCMS: Color field validation bypass allows stored XSS via HTML appended after rgb()/hsl() prefix

Vitest: Windows backslash traversal bypasses the @vitest/mocker redirect allowlist fix

Vitest: Code injection via unauthenticated manual mock registration

Vitest: Servers misapply `server.fs.deny`, serving `.env`, private keys, `.git`, and the API token file

Vite: First 4 bytes of files outside of `server.fs` setting is exposed by `?vite-wasm-instance`

Vite: Files outside `server.fs.allow` could be served when project paths match system paths on non-Windows machine

Vite: Cross origin script execution through Vite custom middleware

launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors

launch-editor: escapeCmdArgs() omits % escaping on Windows

launch-editor: `fs.existsSync()` existence check can be bypassed on Windows