Advisory Catalog

NLTK: ReDoS in nltk.text.Text.findall() via unvalidated user-supplied regular expressions

Trestle is vulnerable to arbitrary file write via path traversal in author generate commands (Incomplete fix of CVE-2026-46345)

Trestle SSTI in Jinja2 include tags allows arbitrary code execution (Incomplete fix of CVE-2026-46439)

Trestle has Server-Side Template Injection (SSTI) via Recursive Template Re-evaluation of Untrusted Data

NVIDIA NemoClaw contains a vulnerability where an attacker could cause insufficiently protected credentials . A successful exploit of this vulnerability might lead to information disclosure and data tampering.

icalendar has Algorithmic Complexity in Equality

Chainlist has SSRF via MCP SSE and streamable-http transports that allows unauthenticated internal network access

Chainlit has command injection via MCP stdio transport that allows unauthenticated remote code execution

consciousness-explorer / sublinear-time-solver MCP export_state has an arbitrary file write

eml_parser vulnerable to DoS via deeply nested parens in Received headers

eml_parser has parser DoS via deeply nested parentheses in e-mail headers

eml_parser has a URL extraction bypass via HTML entities in URLs

mediasoup: SCTP state cookie lacks cryptographic authentication, enabling unauthorized association establishment (RFC 9260 violation)

genieacs-mcp: DNS rebinding reaches local GenieACS MCP Streamable HTTP transport

mcp-contextforge-gateway has Server-Side Template Injection (SSTI) leading to Remote Code Execution in `PromptService._render_template` via unsandboxed Jinja2 Environment

reachy_mini Allows Unrestricted Upload of File with Dangerous Type

Trivy has a path traversal via a crafted vulnerability database or other downloaded artifacts

browse-mcp has an arbitrary file write via unconfined download and state paths

qwed Vulnerable to Authenticated Remote Code Execution via Unsafe SymPy `parse_expr()`

urllib's cross-origin redirects preserve credential-bearing request headers, leading to potential credential leakage

NLTK: Corpus readers follow symlinks outside trusted roots despite pathsec enforcement

NLTK: JVM argument injection bypass via per-call options in the NLTK Stanford wrappers (incomplete fix of CVE-2026-12841)

NLTK: Corpus Reader Sandbox Bypass

Echo: Encoded slash (%2F) bypasses route-level protection and exposes static files

djust authentication bypass: a login_required / on_mount LiveView mount redirect does not close the WebSocket, allowing an unauthenticated client to dispatch event-handler calls