Advisory Catalog

NLTK: Symlink escape in CorpusReader allows arbitrary local file read outside the corpus root

NLTK: FileSystemPathPointer.open() sandbox check is dead code — arbitrary file read via file:// protocol

NLTK: StreamBackedCorpusView Bypasses pathsec.ENFORCE - Arbitrary Local File Read

NLTK: Default ENFORCE=False Disables All pathsec Security Controls

NLTK: Stable FrameNet and NKJP readers parse outside-root XML

NLTK: Symlink-based sandbox bypass in FramenetCorpusReader (bypasses the fix for CVE-2026-54292)

NLTK AllowlistUnpickler dotted-name validation bypass allows remote code execution

Hydra: hydra.utils.instantiate with untrusted config can lead to code execution

YOURLS has stored XSS in referrer statistics chart via crafted Referer header

Keystone vulnerable to `graphql.maxTake` bypass with negative `take`

Defuddle vulnerable to XSS via unescaped attribute interpolation in site extractors

Unleash: Unauthenticated single-request DoS via OpenAPI validation error formatter

Omnigent: Unvalidated os_env.cwd in agent bundle yields arbitrary host filesystem access on runners without OMNIGENT_RUNNER_WORKSPACE

Omnigent Guardrail policy bypass: shell-command parser fails open in policies/builtins/_shell.py

Omnigent: Uploaded Agent Bundle Allows Authenticated Runner RCE via Python Callable Tools

NLTK TweetTokenizer vulnerable to denial of service through catastrophic regex backtracking

gettext-converter: Prototype pollution in js2i18next() via crafted translation keys

Winter: ImportExportController AJAX handlers bypass granular import/export permission gate

NocoBase: Arbitrary File Write chained with Local file Inclusion leads to Remote code execution

Laravel Backpack CRUD: OS command injection in Stats::makeCurlRequest via attacker-controlled Host header (pre-auth)

Laravel Backpack CRUD: CRUD panel query scopes are not enforced on Update, Delete, and Reorder (cross-tenant IDOR)

Laravel Backpack CRUD: Arbitrary file deletion via attacker-controlled clear_<attr>[] in HasUploadFields::uploadMultipleFilesToDisk

Laravel Backpack CRUD: Unverified password change in MyAccountController via mass assignment

node-opcua: Unbounded nonce cache enables unauthenticated heap exhaustion DoS

node-opcua missing nonce verification in UserNameIdentityToken authentication

django CMS: Plugin move endpoint allows cyclic reparenting (DoS)

LangChain MongoDB has NoSQL Operator Injection in MongoDBSaver.list() leading to cross-tenant data exposure

Plate: SSRF with response disclosure in DOCX image embedding

link-preview-js DNS Rebinding SSRF Bypass / Incomplete Fix for CVE-2026-43897

LiquidJS: Uncontrolled Resource Consumption in `join` filter allows template authors to bypass `memoryLimit` and crash the process

LiquidJS has an infinite loop vulnerability in its `strip_html` filter

logto-tunnel serves files outside --experience-path via path traversal

GeoLens's authorization and cache-scope flaws disclose private dataset data and metadata to unauthorized users (fixed in 1.2.4)

MCP PHP SDK: client HttpTransport SSE buffer (sseBuffer .= chunk) grows unbounded when server withholds the event delimiter

Snipe-IT: Chained Information Disclosure and IDOR Leads to Full EULA File Takeover

Snipe-IT: Tenant Isolation Bypass in FMCS Floater Mode

Document Merge Service vulnerable to RCE via SSTI (xlsx tempaltes)

Contentful MCP Server: export_space/import_space tools pass LLM-controlled `host`/`proxy` args to CMA client, redirecting server PAT to attacker-controlled endpoint

claude-faf-mcp has an arbitrary local file read/write via unconfined `path` argument in FAF tools

faf-mcp has an arbitrary local file read/write via unconfined `path` argument in FAF tools

grok-faf-mcp has an arbitrary local file read via unconfined `path` argument in FAF tools

Orval: Generation-time SSRF + remote/local file inclusion via unrestricted $ref

The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, read the documentation on [becoming the maintainer of a project that is unsupported for security reasons](htt

Grav: Remote code execution via unrestricted callable in Blueprint::dynamicData()

Grav: .htaccess file extension rules bypass via case variation on case-insensitive filesystems

Grav: 2FA Bypass via 'login.regenerate2FASecret' - Secret Rotation During Pending Challenge

LibreNMS Vulnerable to Remote Code Execution via AboutController

Froxlor: Second-Order SQL Injection via `Admins.add` `ipaddress` Parameter Allows Full Database Exfiltration

Froxlor: Stored XSS in DNS TXT Record Content Allows Customer-to-Admin Account Takeover

MineAdmin Vulnerable to Path Traversal via Unsanitized identifier in Plugin Install/Uninstall