Advisory Catalog

Better Auth Open Redirect Vulnerability in originCheck Middleware Affects Multiple Routes

Transformers's Improper Input Validation vulnerability can be exploited through username injection

Next.js has a Cache poisoning vulnerability due to omission of the Vary header

Langchain-Chatchat vulnerable to path traversal

Langchain-Chatchat vulnerable to path traversal

Langchain-Chatchat has a Path Traversal vulnerability

Taylor has race condition in /get-patch that allows purchase token replay

JuzaWeb CMS is vulnerable to Incorrect Privilege Assignment when installing certain components

JuzaWeb CMS is vulnerable to Incorrect Privilege Assignment when installing Import Page component

Snyk CLI Insertion of Sensitive Information into Log File allowed in DEBUG or DEBUG/TRACE mode

Magento Authenticated Security feature bypass

pyspur Incomplete Filtering of Special Elements allowed by SingleLLMCallNode function

Upsonic is vulnerable to Path Traversal attack through its os.path.join function

Upsonic has vulnerability in Pickle Handler component that can lead to deserialization

pywasm3 has Improper Restriction of Operations within the Bounds of a Memory Buffer

Withdrawn Advisory: microlight allows a denial of service

Withdrawn Advisory: microlight.js has a null pointer dereference vulnerability

Weblate exposes personal IP address via e-mail

handcraftedinthealps/goodby-csv has Potential Gadget Chain allowing Remote Code Execution

Vantage6 Server JWT secret not cryptographically secure

vantage6 lacks brute-force protection on change password functionality

pm2 Regular Expression Denial of Service vulnerability

brace-expansion Regular Expression Denial of Service vulnerability

Information exposure in Next.js dev server due to lack of origin verification

Potential Timing Side-Channel Vulnerability in vLLM’s Chunk-Based Prefix Caching

auth-js Vulnerable to Insecure Path Routing from Malformed User Input

TYPO3 Unverified Password Change for Backend Users

LibreNMS stored Cross-site Scripting vulnerability in poller group name

Vyper's `slice()` may elide side-effects when output length is 0

Vyper's `concat()` builtin may elide side-effects for zero-length arguments

undici Denial of Service attack via bad certificate data

Next.js Race Condition to Cache Poisoning

This module enables you to seamlessly migrate and deploy content across environments, eliminating manual steps. It simplifies the process by exporting content to a YML file or a ZIP archive, which can be imported into another environment effortlessly. While the export feature rightfully bypasses im

Flask uses fallback key instead of current signing key

Kirby vulnerable to path traversal in the router for PHP's built-in server

OpenStack Ironic fails to restrict paths used for file:// image URLs

Trix vulnerable to Cross-site Scripting on copy & paste

@misskey-dev/summaly Redirect Filter Bypass

October CMS Allows Unprotected SVG Rename in Media Manager

AWorld OS Command Injection vulnerability

markdownify allows large headline prefixes such as <h9999999>, which causes memory consumption

Formidable relies on hexoid to prevent guessing of filenames for untrusted executable content

Moodle's mod_data edit/delete pages pass CSRF token in GET parameter

Moodle has a CSRF risk in user tours manager that allows tour duplication

aws-cdk-lib's aspect order change causes different Permissions Boundary assigned to Role

A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. Affected is the function Assimp::MD3Importer::ValidateSurfaceHeaderOffsets of the file code/AssetLib/MD3/MD3Loader.cpp of the component File Handler. The manipulation leads to heap-based buffer ov

Magento does not properly protect credentials

Pimcore's Admin Classic Bundle allows HTML Injection

React Draft Wysiwyg Cross-Site Scripting (XSS) via the Embedded Button

A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. Affected is the function Assimp::MD2Importer::InternReadFile in the library code/AssetLib/MD2/MD2Loader.cpp of the component Malformed File Handler. The manipulation of the argument Name leads to