Advisory Catalog

multer vulnerable to Denial of Service via file descriptor leak on aborted uploads

MariaDB's connector leaks the cleartext password to an MitM despite `ssl: true`

SunEditor Embed Plugin has DOM XSS via External Script Element After Iframe Embed

@logtape/syslog: syslog log injection via unescaped control characters and unvalidated SD-NAME keys

consciousness-explorer / sublinear-time-solver MCP export_state has an arbitrary file write

browse-mcp has an arbitrary file write via unconfined download and state paths

urllib's cross-origin redirects preserve credential-bearing request headers, leading to potential credential leakage

pickem vulnerable to terminal escape-sequence injection via unsanitized item text

webpack-dev-middleware vulnerable to Path Traversal via non-slash-terminated publicPath

fast-uri vulnerable to host confusion via percent-encoded scheme normalization

fast-uri vulnerable to server-side request forgery via malformed IPv6 normalization

fast-uri vulnerable to host confusion via skipped IDN canonicalization on scheme-relative references

fast-uri vulnerable to server-side request forgery via repeated hostname percent-decoding

Keystone vulnerable to `graphql.maxTake` bypass with negative `take`

Defuddle vulnerable to XSS via unescaped attribute interpolation in site extractors

Unleash: Unauthenticated single-request DoS via OpenAPI validation error formatter

gettext-converter: Prototype pollution in js2i18next() via crafted translation keys

NocoBase: Arbitrary File Write chained with Local file Inclusion leads to Remote code execution

node-opcua: Unbounded nonce cache enables unauthenticated heap exhaustion DoS

node-opcua missing nonce verification in UserNameIdentityToken authentication

Plate: SSRF with response disclosure in DOCX image embedding

link-preview-js DNS Rebinding SSRF Bypass / Incomplete Fix for CVE-2026-43897

LiquidJS: Uncontrolled Resource Consumption in `join` filter allows template authors to bypass `memoryLimit` and crash the process

LiquidJS has an infinite loop vulnerability in its `strip_html` filter

logto-tunnel serves files outside --experience-path via path traversal

Contentful MCP Server: export_space/import_space tools pass LLM-controlled `host`/`proxy` args to CMA client, redirecting server PAT to attacker-controlled endpoint

claude-faf-mcp has an arbitrary local file read/write via unconfined `path` argument in FAF tools

faf-mcp has an arbitrary local file read/write via unconfined `path` argument in FAF tools

grok-faf-mcp has an arbitrary local file read via unconfined `path` argument in FAF tools

Orval: Generation-time SSRF + remote/local file inclusion via unrestricted $ref

MeshCentral has unsanitized data fields

GeoLens: Cross-dataset authorization bypass discloses private dataset metadata, schema, sample values, table rows, and raster/vector tile data

@rhinostone/swig: arbitrary local file read via include/extends path traversal

CodeWhale: js_execution leaks parent environment to model context via missing env scrub

CodeWhale: image_analyze follows workspace symlinks, leaking external file bytes

CodeWhale: Argument Injection in `git_show` Tool Allows Arbitrary File Write Without Approval

CodeWhale: Argument Injection in `git_blame` Tool Allows Arbitrary File Read Without Approval

CodeWhale: Project config `allow_shell` override enables arbitrary shell command execution via cloned repository

CodeWhale: Project config `instructions` override enables arbitrary file read into AI system prompt via cloned repository

CodeWhale: rlm_eval auto-approves arbitrary Python execution, bypassing the user's approval policy (RCE)

CodeWhale: exec_shell_interact sends LLM-controlled input to a running shell without an approval prompt (privilege escalation)

MLflow: CreateModelVersion source validation does not check READ permission on referenced run_id

9Router: Authenticated Server-Side Request Forgery (SSRF) via OIDC Provider Test Endpoint

Budibase authenticated arbitrary S3 signed upload URL issuance via `/api/attachments/:datasourceId/url`

ApostropheCMS: 2nd-order prototype pollution via PATCH leading to single-request persistent DoS

Etherpad has stored XSS in HTML export via unescaped attribute-pool values

vm2 has Memory Exhaustion DoS via bufferAllocLimit Bypass

vm2's bufferAllocLimit cap bypassed by Buffer.concat and Buffer.from arrayLike

extract-zip allows arbitrary file writes through symlink archive entries

Medplum: Improper Validation of Redirect URI in External Auth Callback allows Authorization Code Leakage