Advisory Catalog

mediasoup: SCTP state cookie lacks cryptographic authentication, enabling unauthorized association establishment (RFC 9260 violation)

reachy_mini Allows Unrestricted Upload of File with Dangerous Type

PraisonAI vulnerable to Server-Side Request Forgery via DNS rebinding bypass in webhook_url validation

praisonaiagents: ast_grep_rewrite rewrites arbitrary files without the @require_approval gate enforced on every sibling mutation tool

PraisonAI MCP HTTP server has unauthenticated unbounded session accumulation (memory exhaustion; session TTL never enforced)

PraisonAI has an origin validation bypass in MCP HTTP Stream transport that allows browser-mediated unauthenticated tool execution on local MCP server

vLLM before 0.27.0 fails to properly classify DeepStream as a GPU backend and omits pixel-limit enforcement in its decode path. Unauthenticated attackers can activate DeepStream at request time to initialize the process-wide GPU decode pool and submit video that bypasses resource controls, causing p

Grav: Non constant time nonce comparison in Utils::verifyNonce() used for CSRF protection

adm-zip extraction follows destination symlinks, allowing arbitrary file overwrite

NLTK: SSRF Fail-Open in validate_network_url() via DNS Resolution Failure

NLTK: Symlink-based arbitrary file read in IPIPANCorpusReader, bypasses nltk.pathsec entirely

Grav: Page editors can inject arbitrary script into rendered pages via the Twig sandbox's assets.addJs/addCss allowlist, escalating to super-admin

Unleash: Global Mustache.escape override disables HTML escaping process-wide, enabling Slack/Teams link-injection via unrestricted username

Unleash: Addon webhook URL is dialed server-side with no internal-address filtering, enabling SSRF to internal services / cloud metadata and exfiltration of configured request headers

@fastify/busboy vulnerable to CRLF injection via multipart Content-Disposition filename and name

DiceBear: SVG injection via the unescaped rotate option in @dicebear/core (and fontSize/fontWeight in @dicebear/initials)

Wagtail: Improper restriction handling on Page translation API endpoint

Wagtail: Improper permission handling when copying snippets

Wagtail: Improper restriction handling on descendant collections in Documents and Images API

Winter: Reflected XSS through the search query parameter in the backend Table widget

Winter: CSRF through AJAX handler names reachable as backend page actions

Winter: Stored XSS through cached Brand Settings and Editor Settings custom styles

Winter: My Account preview exposes another backend user's profile by record ID

Winter: Local File Inclusion through =include directives in JavaScript asset compilation

Winter: Local File Inclusion through @import directives in LESS compilation of backend customizable stylesheets and theme assets

django CMS: Missing authorization in `render_object_structure` discloses non-PageContent placeholder structure to low-privileged staff

django CMS: Broken access control in page *Duplicate* allows reading the content of any page (cross-site / restriction bypass)

django CMS: Stored XSS in edit-mode plugin exception rendering

Laravel Backpack CRUD: HasMany/MorphMany relation fields allow cross-tenant record re-parenting (IDOR) via attachManyRelation

Wagtail: Improper restriction handling on Pages admin API

django CMS: Structure endpoint bypasses page-view permission

django CMS: Clipboard copy IDOR discloses unauthorized plugin content

Winter: Authenticated IDOR in backend FileUpload widget allows cross-user access to attachment metadata

Laravel Backpack CRUD: Stored XSS in the color column — the `@if($column['escaped'])` branches are inverted

Laravel Backpack CRUD: SingleBase64Image accepts any base64 payload behind a `data:image` prefix — SVG-with-script lands on the public disk

Laravel Backpack CRUD: HasUploadFields keeps the attacker-supplied file extension — public-disk uploads of `shell.php` reach the webserver

Laravel Backpack CRUD: MyAccountController allows changing the login email without a current-password check

next-video: Unauthenticated arbitrary file read via /api/video request handler

Zoo Design Studio: Memory-corruption in memory handling of lib-kcl

Zoo Design Studio: Recursive KCL parsing is vulnerable to denial-of-service

django CMS: Page cache ignores plugin-declared Vary headers (disclosure & poisoning)

asteval has a Sandbox Escape via BaseException Subclasses

asteval Sandbox Escape: arbitrary native memory read/write via numpy ctypes in default asteval Interpreter

Banks: Path traversal in `DirectoryPromptRegistry.set()` allows arbitrary file write outside the registry root

WebOb: Open redirect in Location header normalization via leading C0 control / space characters

aiosmtplib: STARTTLS response injection

Tina: Cross-origin `POST /media/upload/*` requests can write arbitrary files into the Tina dev server media root

Tina: Broken Access Control: arbitrary bucket-key write/delete in `next-tinacms-s3` (and sibling production media adapters)

SearXNG Basic Authentication Credentials Exposed Through MCP Logs and JSON-RPC Error Responses

SearXNG MCP Server: Additional hardened-mode SSRF bypasses