Advisory Catalog

Pillow: EPS load(scale) lets Ghostscript render past the decompression bomb limit

@angular/common: XSRF Token Leakage via URL Parsing Discrepancy in Angular HTTP Client (Incomplete fix for CVE-2025-66035)

markdown-it: Quadratic-time rendering of a single multi-line link reference definition with default options (regression since 14.0)

virtualenv bash activate runs commands from an environment name with a backslash before $

virtualenv: Deletion recovery can change a symlink target's mode

virtualenv: Bash prompt values can change meaning under older compatibility modes

virtualenv: Generated POSIX console launchers interpret destination paths as shell syntax

virtualenv: Generated files can follow existing destination links

virtualenv: Seeded files retain permissions from an older cache

virtualenv: Seed replacement does not contain metadata deletion paths

virtualenv: Xonsh activation literals depend on the script decoding codec

virtualenv: Pip seeding with download omits wheel digest verification

virtualenv: Builtin creation follows linked environment directories

virtualenv: Venv configuration readback can reinterpret path boundaries

MCP TypeScript server SDK: Shared transport or server instances delivered one HTTP client's messages to another

MCP TypeScript SDK: One HTTP request within the default size limit could exhaust server memory during validation

MCP TypeScript SDK: Server bearer authentication accepted tokens issued for another service

uv's bundled CA store trusts an emSign root whose intermediate CA keys are compromised

certifi bundles emSign root CAs with compromised intermediate CA keys

virtualenv: Downloaded wheel selection and caching precede verification

virtualenv: Temporary app-data can leave dangling seed package links

Cachet has Stored XSS in Incident Component

MCP TypeScript SDK: Experimental tasks were not tied to the session that created them

MCP TypeScript client SDK: HTTP client transports and OAuth requests followed cross-origin redirects and re-sent custom headers and request bodies

ApostropheCMS: Unauthenticated resource exhaustion via pre-auth aposBigUpload processing in @apostrophecms/import-export

ApostropheCMS: No Attempt Throttling on Authenticated Password-Change Endpoint Enables Unlimited Current-Password Guessing

ApostropheCMS: Missing Authorization on Notification PATCH/DELETE Endpoints

ApostropheCMS import-export tar guard misses './..' because it is a literal '../' substring test

ApostropheCMS import-export: NoSQL injection via update-key value lets a crafted import match and overwrite an unidentified document

ApostropheCMS: Authenticated Object-Level Authorization Bypass in exist-in-locale Reveals Restricted Localized Draft Identifiers

ApostropheCMS: Client-side Prototype Pollution in apos.http.parseQuery leading to DOM-based XSS against authenticated users

ApostropheCMS: Incomplete CVE-2026-53606: `meta http-equiv=refresh` `content` still ships `javascript:` / `data:` URLs

ApostropheCMS: :_id/locales REST route omits the public-API authorization gate its sibling read routes enforce (unauthenticated doc-existence + locale metadata disclosure)

ApostropheCMS: Host header controls server-side image fetch origin in @apostrophecms/ai-helper, enabling authenticated SSRF

ApostropheCMS: Cross-domain session token in URL confers session takeover

ApostropheCMS: CAPTCHA response token not URL-encoded

ApostropheCMS: Authenticated projection-exclusion prototype-member deletion in @apostrophecms/db-connect causes process-wide denial of service