Advisory Catalog

follow-redirects array-form headers bypass cross-origin credential stripping

@angular/router: Denial of Service via RouterLink Query Parameter Retention in Server-Side Rendering (SSR)

ApostropheCMS: Unauthenticated CSV import requests leave rejected uploads in the system temporary directory

ApostropheCMS sanitize-html: SMIL animation namespace-prefix bypass allows javascript: URI injection (XSS)

ApostropheCMS: Unauthenticated unbounded multipart upload → disk-exhaustion DoS

ApostropheCMS: Same-parent page reorder in @apostrophecms/page move() re-ranks a restricted parent's children without create authorization

ApostropheCMS sanitize-html: nonTextTags discard region ends early on an implied close, letting <noscript> content render

ApostropheCMS: The general public can access @apostrophecms/user objects via a relationship (viewRole is not applied to the general public)

ApostropheCMS uploadfs Azure backend leaks account-level SAS token into every public attachment URL (sas: true)

ApostropheCMS: Path traversal in uploadfs

ApostropheCMS sanitize-html: unbounded recursion when re-sanitizing the fallback of a discarded iframe (stack overflow, nestingLimit not enforced)

ApostropheCMS: Import API bypasses publication roles for protected content

ApostropheCMS: Missing Authentication in `cleanExport` Route

ApostropheCMS: Stored XSS via Unescaped Widget Style Attribute Serialization

ApostropheCMS: GET /api/v1/@apostrophecms/page/:id bypasses viewRole restriction and exposes viewPermission-gated fields to lower-privileged users

ApostropheCMS: Archive duplicate continuation lets contributors overwrite published content

ApostropheCMS: Import archives can exhaust server storage and deny service

ApostropheCMS: Unauthenticated publicApiProjection bypass via search and sort query builders in the public REST API

ApostropheCMS: Exposure of Sensitive Information via predictable export filenames

ApostropheCMS: POST /api/v1/@apostrophecms/doc/slugTaken discloses existence of private/admin-only content to any authenticated user

ApostropheCMS: Color field validation bypass allows stored XSS via HTML appended after rgb()/hsl() prefix

Vitest: Windows backslash traversal bypasses the @vitest/mocker redirect allowlist fix

Vitest: Code injection via unauthenticated manual mock registration

Vitest: Servers misapply `server.fs.deny`, serving `.env`, private keys, `.git`, and the API token file

Vite: First 4 bytes of files outside of `server.fs` setting is exposed by `?vite-wasm-instance`

Vite: Files outside `server.fs.allow` could be served when project paths match system paths on non-Windows machine

Vite: Cross origin script execution through Vite custom middleware

launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors

launch-editor: escapeCmdArgs() omits % escaping on Windows

launch-editor: `fs.existsSync()` existence check can be bypassed on Windows

filelock: SoftReadWriteLock follows a lock tree swapped in after its first acquire and writes lock records into directories of the user running the lock

filelock ReadWriteLock: SQLite reopens the lock database by name, so a planted symlink or journal file makes the lock user's process overwrite or unlink its own files

filelock: SoftFileLock removes a live holder's marker when another user forges the PID in a writable marker

filelock: ReadWriteLock on the hard-link route deletes any directory another user renames onto its .filelock-* link directory name

filelock: ReadWriteLock follows a symlink at the lock path into SQLite

filelock: SoftFileLock stale-lock break removes a live lock file on a reused inode number and admits two holders

filelock: SoftReadWriteLock holder refresh writes through a hard link and hangs on a named pipe that another local user renames over its record

filelock ReadWriteLock: a crafted lock database makes every acquire stall or hang regardless of timeout

filelock: SoftFileLock stale-break restore follows a swapped-in symbolic link and hard-links a file of the user running the lock into the lock directory

filelock: Symlink swap during SoftFileLock's writability check leaks whether a path exists and is writable by the lock taker

filelock: StrictSoftFileLock and SoftReadWriteLock adopt a protocol directory another user created first, losing mutual exclusion

filelock: UnixFileLock truncates and chmods any regular file another user renames or hard-links onto the lock path

filelock: SoftFileLock evicts a fresh lock file whose watched age another local user's pre-dated file passed on through inode reuse

@angular/router: Denial of Service via Unmatched Empty-Path Outlet Route Matching in Server-Side Rendering (SSR)

@angular/platform-server: Open Redirect via Protocol-Relative URLs in Server-Side Rendering (SSR)