Advisory Catalog

Chainlit contains an authorization bypass vulnerability

AcademySoftwareFoundation OpenColorIO has an out-of-bounds vulnerability

QuestDB UI's Web Console is Vulnerable to Cross-Site Scripting

LIEF is vulnerable to segmentation fault

pypdf has possible long runtimes for malformed startxref

pypdf has possible long runtimes for missing /Root object with large /Size values

JavaScript SDK v2 users should add validation to the region parameter value in or migrate to v3

AWS SDK for JavaScript v3 adopted defense in depth enhancement for region parameter value

loggingredactor converts non-string types to string types in logs

carbone Code Injection vulnerability

AIOHTTP Vulnerable to Cookie Parser Warning Storm

AIOHTTP has unicode match groups in regexes for ASCII protocol elements

badkeys vulnerable to ASCII control character injection on console via malformed input

Composer is vulnerable to ANSI sequence injection

Pterodactyl has a Reflected XSS vulnerability in “Create New Database Host”

Tuta Mail has DOM attribute and CSS injection in its Contact Viewer feature

Orejime has executable code in HTML attributes

pretix has Broken Access Control Allowing Cross-User File Access via UUID

pretix has Broken Access Control Allowing Cross-User File Access via UUID

Mattermost Desktop App exposes sensitive information in its application logs

PyMdown Extensions has a ReDOS bug in its Figure Capture extension

Weblate has improper validation upon invitation acceptance

Mayan EDMS has an Open Redirect through the /authentication/ file

Mayan EDMS is vulnerable to XSS through the /authentication/ file

AzuraCast Vulnerable to Pre-Auth File Deletion & Admin RCE

@tiptap/extension-link vulnerable to Cross-site Scripting (XSS)

Anthropic Sandbox Runtime Incorrectly Implemented Network Sandboxing

Calibre-Web Has a Stored Cross-Site Scripting (XSS) Vulnerability via the 'username' Field During User Creation

Skuul School Management System has a Sensitive Data Exposure Vulnerability in Uploaded Images

yungifez Skuul School Management System vulnerable to XSS via SVG

pretix has Email Content Injection Through Maliciously Formatted Names

Spotipy has a XSS vulnerability in its OAuth callback server

Better Auth's multi-session sign-out hook allows forged cookies to revoke arbitrary sessions

Overhang Tutor Discloses Sensitive Information due to Improper Cache-Control

OMERO.web uses jquery-form library, which may be vulnerable to XSS attack

Astro Development Server has Arbitrary Local File Read

LibreNMS has Weak Password Policy

An issue was discovered in PyTorch v2.5 and v2.7.1. Omission of profiler.stop() can cause torch.profiler.profile (PythonTracer) to crash or hang during finalization, leading to a Denial of Service (DoS).

Drupal core allows Exploiting Incorrectly Configured Access Control Security Levels

OpenEXR Makes Use of Uninitialized Memory

EverShop is vulnerable to Unauthorized Order Information Access (IDOR)

Skuul School Management System has an Insecure Direct Object Reference (IDOR) Vulnerability in View Fee Invoice

Open redirect endpoint in Datasette

Weblate leaks the IP of project member inviting user to be reviewer in Audit log

Drupal Simple multi step form allows Cross-Site Scripting

uv has differential in tar extraction with PAX headers

Shopware vulnerable to Server-Side Request Forgery (SSRF) – order invoice

Shopware vulnerable to path traversal via Plugin upload

Lobe Chat vulnerable to Server-Side Request Forgery with native web fetch module

PrestaShop Checkout Target PayPal merchant account hijacking from backoffice