Advisory Catalog

Mailgen has HTML Injection and XSS Filter Bypass in Plaintext Emails

reflex-dev/reflex has an Open Redirect vulnerability

Mailgen has HTML Injection and XSS Filter Bypass in Plaintext Emails

drupal-pattern-lab/unified-twig-extensions is vulnerable to XXS

Wasmtime: Memory leak in C API with `externref` and `anyref` types

NovoSGA: Manipulation of User Creation Page can lead to weak password requirements

MCPHub's ServerController is vulnerable to Command Injection

A weakness has been identified in Open Asset Import Library Assimp 6.0.2. This affects the function Q3DImporter::InternReadFile of the file assimp/code/AssetLib/Q3D/Q3DLoader.cpp. Executing a manipulation can lead to heap-based buffer overflow. The attack needs to be launched locally. The exploit ha

A vulnerability was identified in Open Asset Import Library Assimp 6.0.2. Affected by this vulnerability is the function ODDLParser::getNextSeparator in the library assimp/contrib/openddlparser/include/openddlparser/OpenDDLParserUtils.h. Such manipulation leads to heap-based buffer overflow. The att

A vulnerability was determined in Open Asset Import Library Assimp 6.0.2. Affected is the function Q3DImporter::InternReadFile of the file assimp/code/AssetLib/Q3D/Q3DLoader.cpp. This manipulation causes allocation of resources. The attack is restricted to local execution. The exploit has been publi

Claude Code permission deny bypass through symlink

DataChain Vulnerable to Deserialization of Untrusted Data from Environment Variables

Weblate is a web based localization tool. An open redirect exists in versions 5.13.2 and below via the redir parameter on .within.website when Weblate is configured with Anubis and REDIRECT_DOMAINS is not set. An attacker can craft a URL on the legitimate domain that redirects a victim to an attacke

Auth0 Symfony SDK Does Not Properly Handle File Types in Bulk User Import

Auth0 Wordpress plugin Does Not Properly Handle File Types in Bulk User Import

laravel-auth0 SDK Does Not Properly Handle File Types in Bulk User Import

auth0-PHP SDK Does Not Properly Handle File Types in Bulk User Import

JupyterLab LaTeX typesetter links did not enforce `noopener` attribute

Open Babel has NULL pointer dereference in ChemKinFormat::ReadReactionQualifierLines

Open Babel has out-of-bounds write (overlapping memcpy) in zipstream basic_unzip_streambuf::underflow

Open Babel has Use-after-free in GAMESS GAMESSOutputFormat::ReadMolecule

ml-logger deserialization vulnerability

Drupal Umami Analytics allows Cross-Site Scripting (XSS)

Mangati NovoSGA XSS vulnerability in /admin

Nuxt has Client-Side Path Traversal in Nuxt Island Payload Revival

TYPO3 "Form to Database" extension susceptible to Cross-site Scripting

Vite's `server.fs` settings were not applied to HTML files

Vite middleware may serve files starting with the same name with the public directory

Fides has a Lack of Brute-Force Protections on Authentication Endpoints

Fides' Admin UI User Password Change Does Not Invalidate Current Session

Weblate has a long session expiry when verifying second factor

CKEditor 5 cross-site scripting (XSS) vulnerability in the clipboard package

Mautic vulnerable to SSRF via webhook function

MobSF Path Traversal in GET /download/<filename> using absolute filenames

Exiv2 has quadratic performance in ICC profile parsing in JpegBase::readMetadata

Exiv2 Segmentation Faults in Exiv2::EpsImage::writeMetadata() via crafted EPS file

UnoPim has CSV Injection on Quick Export feature

wong2 mcp-cli Command Injection Vulnerability

Template Secret leakage in logs in Scaffolder when using `fetch:template`

HFS user adding a "web link" in HFS is vulnerable to "target=_blank" exploit

Litestar has potential log injection in exception logging

Concrete CMS is vulnerable to Stored XSS from Home Folder on Members Dashboard page

MaterialX Null Pointer Dereference in MaterialXCore Shader Generation due to Unchecked implGraphOutput

MaterialX Null Pointer Dereference in getShaderNodes due to Unchecked nodeGraph->getOutput return

Withdrawn Advisory: JHipster allows privilege escalation via a modified authorities parameter

Koa Open Redirect via Referrer Header (User-Controlled)

WebSSH Cross-site Scripting vulnerability

@eslint/plugin-kit is vulnerable to Regular Expression Denial of Service attacks through ConfigCommentParser

on-headers is vulnerable to http response header manipulation

AIOHTTP is vulnerable to HTTP Request/Response Smuggling through incorrect parsing of chunked trailer sections