Advisory Catalog

DeepmergeTS has stack exhaustion when merging recursive object graphs

Token Optimizer MCP: OS command injection in smart_user via username in get-user-info

Budibase: SSRF in Automation Steps - Webhook, Zapier, N8N, Slack, Discord Bypass IP Blacklist

Trigger.dev: Prototype pollution via run metadata operations → process-wide cross-tenant DoS

@fastify/busboy vulnerable to Denial of Service via oversized multipart boundary

@fastify/busboy vulnerable to Denial of Service via prototype-named multipart part header

Faker: helpers.fake exploitable into arbritary code execution

Claude Code Templates: Unauthenticated OS command injection (RCE) in Claude Code Studio server (--studio)

Browserslist: Unbounded memory growth (no cache eviction) via distinct query results, leading to eventual OOM

Browserslist: Uncaught crash / prototype write via untrusted browserslist-stats.json custom stats (normalizeStats)

nanoid: Integer Overflow or Wraparound

SAP Approuter has an Information Disclosure vulnerability

ngx-extended-pdf-viewer bundles a version of pdf.js vulnerable to CVE-2026-16633

PDF.js: Arbitrary JavaScript execution upon opening a malicious PDF

JS-YAML: Quadratic CPU consumption in !!omap resolution (3.x and 4.x) — CVE-2026-59870 fix not backported

Nx: Zip-Slip in the self-hosted remote cache

Nuxt: Unauthenticated CPU exhaustion parsing and hashing the Nuxt island endpoint body before hash validation

Nuxt: Server-Side Remote Code Execution via Runtime Template Injection in Nuxt Server Island Props

Nuxt runtime payload cache discloses another user's SSR data across users and to unauthenticated clients

Nuxt route rules silently dropped for mixed-case paths, bypassing appMiddleware auth gates (incomplete fix for CVE-2026-53721)

Nuxt: Unauthenticated out-of-memory crash via unbounded v-for expansion in island rendering

Electron: Sandboxed iframe can bypass the allow-popups restriction via the OpenURL navigation path

Electron: Custom protocol with supportFetchAPI but not corsEnabled allows cross-origin reads

Electron: Context isolation bypass via Function.prototype.bind hijack

Flowise: Broken Access Control in Stripe Subscription Endpoints Allows Cross-Tenant Billing Manipulation

Flowise: Missing Authorization on Execution Update Endpoint

Flowise: Cross-Workspace OAuth2 Credential Metadata Leak

Flowise: Incomplete Credential Redaction Exposes Secrets via API

Flowise: Information Disclosure in GET /api/v1/upsert-history returns the entire server-wide upsert history

Flowise: Cross-workspace credential IDOR in openai-assistants-vector-store

Flowise: Authenticated arbitrary file write in the `S3 Directory` document loader via unsanitized S3 object keys

Flowise: RBAC Bypass Leading to Unauthorized Workspace Variables Disclosure

Flowise: CVE-2025-8943 Patch Bypass: npm_config_yes bypasses MCP environment variable blocklist (Unauthenticated RCE)

Flowise: `DELETE /api/v1/chatflows/:id` does not validate resource type, allowing `agentflows:delete` and `chatflows:delete` to delete each other’s flow type

Flowise: Unauthenticated Property Injection into Flow Execution Context via Ungated `overrideConfig` Spread in Prediction API

Flowise: SSRF Protection Bypass via IPv4-Mapped IPv6 Addresses

Flowise: Missing authorization on `/api/v1/files` allows low-privileged API keys to list and delete files across workspaces within the same organization

Flowise: Unauthenticated OAuth2 Refresh Enables Non-Blind SSRF and Secret Exfiltration

ip-address: Address4 decodes leading-zero octets as decimal while resolvers decode them as octal, allowing SSRF and trust-boundary bypass

Socket.IO: Zero-attachment Memory Exhaustion

brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation

Angular i18n: Cross-Site Scripting (XSS) via event-handler attributes

Angular SSR: Missing Fallback Raw-Content Serialization Escaping leads to Cross-Site Scripting (XSS)

Angular: Cache-Key Ambiguity in HttpTransferCache Leading to Cross-Request Response Reuse and State Poisoning

@phun-ky/defaults-deep Has a Prototype Pollution issue via Unsafe Recursive Property Merging

hashi-vault-js has a path traversal and query parameter injection

dssrf: any users using 1.1.1.1 DNS is impacted by SSRF

`@dynatrace-oss/dynatrace-mcp-server` has Unauthenticated HTTP MCP Tool Invocation

fast-uri vulnerable to host confusion via backslash authority introducer

dssrf has an SSRF bypass with remove_at_symbol_in_string