Advisory Catalog

wger: IDOR via user-unscoped cache keys on routine API actions exposes workout data

fast-xml-parser has stack overflow in XMLBuilder with preserveOrder

ENS DNSSEC Oracle Vulnerable to RSA Signature Forgery via Missing PKCS#1 v1.5 Padding Validation

pypdf has a possible infinite loop when loading circular /Prev entries in cross-reference streams

Apache Superset allows authenticated users to view sensitive data without explicit permissions

datapizza-ai has unsafe deserialization via pickle.loads() in RedisCache

datapizza-ai: Server-Side Template Injection in ChatPromptTemplate via Jinja2 Template Handler

funadmin: Deserialization Vulnerability in Backend Endpoint via AuthCloudService getMember Function

funadmin: XSS through Value argument in Backend Interface component

funadmin has Weak Password Recovery Mechanism for Forgotten Password

OpenClaw Discord moderation authorization used untrusted sender identity in tool-driven flows

Fickling has a detection bypass via stdlib network-protocol constructors

OpenClaw safeBins stdin-only bypass via sort output and recursive grep flags

Flask session does not add `Vary: Cookie` header when accessed in some ways

devalue affected by CPU and memory amplification from sparse arrays

devalue `uneval`ed code can create objects with polluted prototypes when `eval`ed

Open Babel has NULL pointer dereference in MOL2 OBAtom::SetFormalCharge

Open Babel has an out-of-bounds read in CIF transform3d::DescribeAsString

Hugging Face Smolagents has a Server-Side Request Forgery issue

A security flaw has been discovered in admesh up to 0.98.5. This issue affects the function stl_check_normal_vector of the file src/normals.c. Performing a manipulation results in heap-based buffer overflow. The attack must be initiated from a local position. The exploit has been released to the pub

OpenClaw Google Chat spoofing access with allowlist authorized mutable email principal despite sender-ID mismatch

OpenClaw log poisoning (indirect prompt injection) via WebSocket headers

OpenClaw Affected by Remote Code Execution via System Prompt Injection in Slack Channel Descriptions

MindsDB affected by a SSRF vulnerability

LangChain affected by SSRF via image_url token counting in ChatOpenAI.get_num_tokens_from_messages

Craft CMS Vulnerable to Stored XSS in Entry Types Name

xcode-mcp-server vulnerable to Command Injection

Claude Code has Permission Deny Bypass Through Symbolic Links

webpack buildHttp: allowedUris allow-list bypass via URL userinfo (@) leading to build-time SSRF behavior

webpack buildHttp HttpUriPlugin allowedUris bypass via HTTP redirects → SSRF + cache persistence

Winter CMS has Stored Cross-site Scripting (XSS) in Asset Manager

Qwik City Open Redirect via fixTrailingSlash

Fastify Vulnerable to DoS via Unbounded Memory Allocation in sendWebStream

pip Path Traversal vulnerability

Vendure vulnerable to timing attack that enables user enumeration in NativeAuthenticationStrategy

Llama Stack exposes secret in initialization log

Moonraker affected by LDAP search filter injection

Backstage has a Possible SSRF when reading from allowed URL's in `backend.reading.allow`

FastAPI Api Key has a timing side-channel in verify_key that allows statistical key validity detection

MineAdmin May Expose Sensitive Information to an Unauthorized Actor

MineAdmin improperly refreshes tokens

MineAdmin has Incorrect Privilege Assignment

Lobe Chat has IDOR in Knowledge Base File Removal that Allows Cross User File Deletion

Open Chinese Convert has Out-of-bounds Write

solspace/craft-freeform Exposed to Known Axios Vulnerabilities via Precompiled Assets

solspace/craft-freeform Vulnerable to XSS in `PhpSpreadsheet` HTML Writer Due to Unsanitized Styling Data

solspace/craft-freeform Has a DoS Vulnerability

jsdiff has a Denial of Service vulnerability in parsePatch and applyPatch

Weblate leaks information via screenshots