Advisory Catalog

Tina: [Broken Access Control] letting any TinaCloud user authorize against any self-hosted site

node-opcua: TCP Socket Leak (FIN-WAIT-2) via keepalive reconnection cycle - Resource Exhaustion

djust has Cross-Site Request Forgery on the Server-Sent-Events transport: a cross-origin page can drive a victim-authenticated SSE session

djust: Multi-tenant isolation fails open on the WebSocket/SSE path, disclosing other tenants' data

react/http: A malformed HTTP chunked body can lead to a denial-of-service and peg the CPU

RestrictedPython vulnerable to sandbox escape via string.Formatter field resolution

@nuxtjs/mdc's URL sanitizer misses SVG xlink:href and data:text/html, allowing XSS from untrusted markdown at the default configuration

djust: Client mass-assignment of arbitrary view attributes via the default dj-model update_model handler

djust's observability endpoints are network-exposed: the localhost gate is an opt-in middleware the docs omit, and the views enforce only DEBUG

Apache Airflow Apache Kafka provider versions 1.15.0 before 2.0.0 resolve dotted-path strings found in a Kafka connection's `extra` field into Python callables via `import_string`, with no allowlist, and hand them to the confluent-kafka client which invokes them. Deployments that have enabled the Ka

adm-zip: Decompression-bomb protection (fix for CVE-2026-39244) can be bypassed by declaring uncompressed size as 0

@zereight/mcp-gitlab has multiple safety-control bypasses: execute_graphql read-only + allow-list bypass, unauthenticated transports, session-exhaustion DoS

Google Pixel Improper Authorization Vulnerability

Nodemailer addressparser: O(n^2) on comment-joined addresses enables a remote DoS (reachable via mailparser)

vLLM before 0.28.0 contains a remote code execution vulnerability in the LlavaOnevision2 processor loader that ignores the trust_remote_code parameter when loading remote processor classes. Attackers can craft a malicious model with arbitrary code in processing_llava_onevision2.py that executes with

FrontMCP and mcp-from-openapi have bypass of OpenAPI external $ref SSRF fix

Shopper: Missing authorization on product removal actions in CollectionProducts component

Shopper: Unauthorized inventory stock manipulation via unlocked variant property in VariantStock component

Shopper: privilege escalation via improper Livewire admin component authorization

Shopper: Authorization bypass in Filament bulk actions allows browse-only staff to mass-delete attributes/tags and mass-toggle visibility of brands/categories/suppliers

Headroom vulnerable to Cross-Site WebSocket Hijacking (CSWSH)

compression vulnerable to Denial of Service via memory leak on premature response close

@jhb.software/payload-alt-text-plugin: Alt Text Endpoint Authorization Bypass via Payload Local API `overrideAccess` Omission

@argos-ci/core: CI Branch Name OS Command Injection

Pimcore: SQL Injection in Custom Reports via Malicious Report Configuration

Angular: SSR XSS via Unescaped <template> Content Across DocumentFragment Boundaries in Fallback Raw-Content Elements

Angular SSR: XSS via Unescaped Processing Instruction (<?...?>) Nodes in Fallback Raw-Content Elements

Angular: SSRF and Cross-Origin Credential Disclosure via URL Resolution Discrepancy in SSR

@eigenpal/docx-editor-react: CSS injection and print-time XSS via unescaped embedded font-family name

@openhop/server: Path Traversal in Flow ID File Operations

ESPHome Device Builder Dashboard: Unauthenticated dashboard access via the HA add-on ingress site bound to all interfaces

functype-mcp-server: MCP `set_functype_version` Package Alias RCE via Unsanitized pnpm install + Dynamic Import

@yeger/turbo-graph: Unauthenticated Network-Exposed Task Execution via /api/run

Nuxt Ollama: Public Runtime Config Exposes Ollama API Key to Browser Clients

Open WebUI: Any authenticated user can reach the Azure platform channel via server-side web fetch

Open WebUI: Non-admin users can delete admin-owned external knowledge connections via knowledge base deletion

Open WebUI: SSRF into internal services via DNS rebinding in the Playwright web loader

Open WebUI: Same-origin XSS to account takeover via terminal port-preview iframe hardcoding allow-same-origin

Open WebUI: Sign-in as another user via wildcard characters in the OAuth subject claim on SQLite

Open WebUI: Unauthenticated requests can stall the server via uncached OIDC fetches in back-channel logout

GitPython: Denial of Service via catastrophic backtracking (ReDoS) in Actor.name_email_regex — commit author/committer field parsing

GitPython: --no-index bypasses diff unsafe-option protections and enables a blind local-file content oracle

GitPython: Repository content can impersonate the git directory, leading to arbitrary code execution

Google Chromium V8 Out of Bounds Write Vulnerability

n8n: Expression Sandbox Escape via Shared Builtin Tampering and Code-Printer Injection Leads to Code Execution

n8n: Domain-Restriction Bypass via Unguarded Model-Search Endpoint in OpenAI Chat Model Node

n8n: Regular Expression Denial of Service in the Default Blocked-File-Pattern Match via a Git Node Clone Path

n8n: Expression Sandbox Escape via Class-Field Sanitizer Rebinding Can Lead to Code Execution

n8n: Unauthenticated Persistent Storage Exhaustion via OAuth Dynamic Client Registration Endpoint

Nodemailer: IDN/Punycode domain allow-list bypass leads to email delivery to an attacker-controlled domain