Advisory Catalog

unstructured: Server-Side Request Forgery in the URL-based partitioning

Plate: SSRF with response disclosure in DOCX image embedding

link-preview-js DNS Rebinding SSRF Bypass / Incomplete Fix for CVE-2026-43897

WebOb: Open redirect in Location header normalization via leading C0 control / space characters

aiosmtplib: STARTTLS response injection

Tina: Cross-origin `POST /media/upload/*` requests can write arbitrary files into the Tina dev server media root

Tina: Broken Access Control: arbitrary bucket-key write/delete in `next-tinacms-s3` (and sibling production media adapters)

LiquidJS: Uncontrolled Resource Consumption in `join` filter allows template authors to bypass `memoryLimit` and crash the process

LiquidJS has an infinite loop vulnerability in its `strip_html` filter

BuildKit has a possible runtime DoS via unbounded group parsing

BuildKit: Custom frontend could bypass Seccomp/AppArmor

logto-tunnel serves files outside `--experience-path` via path traversal

SearXNG Basic Authentication Credentials Exposed Through MCP Logs and JSON-RPC Error Responses

SearXNG MCP Server: Additional hardened-mode SSRF bypasses

SearXNG MCP Server is Vulnerable to SSRF in web_url_read: the internal-address guard is disabled by default (MCP_HTTP_HARDEN off)

GeoLens's authorization and cache-scope flaws disclose private dataset data and metadata to unauthorized users (fixed in 1.2.4)

MCP PHP SDK: client HttpTransport SSE buffer (sseBuffer .= chunk) grows unbounded when server withholds the event delimiter

Snipe-IT: Stored DOM XSS via table selected-count IDs

Snipe-IT: Maintenance Record Disclosure via Missing Authorization on GET

Snipe-IT: Chained Information Disclosure and IDOR Leads to Full EULA File Takeover

Snipe-IT: Tenant Isolation Bypass in FMCS Floater Mode

Document Merge Service vulnerable to RCE via SSTI (xlsx tempaltes)

Contentful MCP Server: export_space/import_space tools pass LLM-controlled `host`/`proxy` args to CMA client, redirecting server PAT to attacker-controlled endpoint

Uprobe gadgets: unprivileged container's ld.so.cache causes high CPU utilization and container startup DoS

claude-faf-mcp has an arbitrary local file read/write via unconfined `path` argument in FAF tools

faf-mcp has an arbitrary local file read/write via unconfined `path` argument in FAF tools

grok-faf-mcp has an arbitrary local file read via unconfined `path` argument in FAF tools

langgraph-api: Incomplete assistant authorization in LangGraph Server run creation

langgraph-api: Relative webhook targets in LangGraph Server can reach in-process routes without authentication

Orval: Import-time RCE via schema default -> zod module-level template literal

Orval: Import-time RCE via query-parameter default -> zod module-level template literal