Advisory Catalog

Sector is a distribution targeted towards Drupal site builders and site owners who are looking for a fully configured Drupal project out of the box. A module specific to this distribution doesn't sufficiently sanitize media names, potentially leading to an XSS exploit. This vulnerability is mitiga

The module provides integration with third party JS library SwiperJs. User-entered text is used as part of the slide without appropriate filtering leading to a cross-site scripting (XSS) vulnerability. This vulnerability is mitigated by the fact that an attacker would need a role with permission t

The Dopup module provides functionality for selecting and working with Webforms. The module does not perform sufficient entity access checking in some cases and may expose the title of private Webforms.

This module enables you to upload CSV files to a field and display them as an interactive, sortable and searchable table. The module doesn't sufficiently escape CSV cell and header values before passing them to the DataTables library, leading to a potential cross-site scripting vulnerability. This

The Custom Formatters module allows users to easily create custom Field Formatters through an admin UI without writing a custom module. The PHP formatter engine runs eval() to execute user-provided PHP code and allows arbitrary PHP execution on the site. The permissions UI gives no indication about

The ABC theme provides configurable layouts and visual styling for Drupal websites, including support for Font Awesome icons in navigation menus. The theme does not sufficiently sanitize menu link titles before inserting them into HTML class attributes. This vulnerability is mitigated by the requi

The Black Hole theme provides configurable layouts and visual styling for Drupal websites, including support for Font Awesome icons in navigation menus. The theme does not sufficiently sanitize menu link titles before inserting them into HTML class attributes. This vulnerability is mitigated by th

The ZeroPoint theme provides configurable layouts and visual styling for Drupal websites, including support for Font Awesome icons in navigation menus. The theme does not sufficiently sanitize menu link titles before inserting them into HTML class attributes. This vulnerability is mitigated by the

This module provides a user interface to select and configure icons, including a form element, a text format filter and several integrations. The module doesn't sufficiently validate icon settings provided by users before they are rendered.

This module enables you to use ffmpeg for image conversion The module doesn't sufficiently sanitize file names passed to the ffmpeg cli tool. This vulnerability is mitigated by the fact that an attacker must be able to upload images on the site.

Storybook: Missing origin validation in Storybook preview allows code injection from malicious websites

Electron: Frame subscription trusts GPU-supplied frame geometry

Electron: openExternal permission requests can be attributed to the wrong origin

Electron: HID and USB permission checks can be attributed to the wrong origin

Electron: Pointer lock permission requests can be attributed to the wrong frame

Electron: Extension tabs.query returns tab URLs and titles without the tabs permission

Electron: SameSite cookie restrictions are not applied to windows opened from links

pypdf: Possible large memory usage for streams with multiple filters

pypdf: Possible infinite loop when hitting EOF in standard xref table

pypdf: Possible infinite loop when removing tree items

pypdf: Possible infinite loop in PdfWriter.find_outline_item

pypdf: Possible large memory usage when parsing content streams

pypdf: Possible large memory usage when parsing arrays and dictionaries

pypdf: Possible long runtimes/large memory usage when retrieving form fields

pypdf: Unvalidated JPEG image data loading

PHP Stale Internal Request-State Vulnerability

PHP Memory Corruption Vulnerability

Pydantic AI Harness tool-call limit bypass in nested CodeMode calls

SvelteKit : XSS via untrusted cache-control header in prerendered page

SvelteKit: URL redirection to untrusted site via enhanced form submission

vLLM : DoS via unvalidated mm_processor_kwargs in multimodal image processors (Isaac, InternVL, H2OVL, etc.)

vLLM: Request-controlled mm_processor_kwargs.code_revision allows remote code execution

vLLM: Forged multimodal UUID + P0/P1 processor-cache eviction drift: unauthenticated remote crash of the whole vLLM engine

virtualenv activation scripts run code from a path that contains a placeholder name

virtualenv activate.fish runs commands from a path or prompt with a backslash before a quote

djust: Arbitrary absolute-path file read in the find_handlers_for_template MCP tool

virtualenv activate runs commands from the environment name in zsh with PROMPT_SUBST