Advisory Catalog

A vulnerability classified as problematic was found in WebAssembly wabt 1.0.36. Affected by this vulnerability is the function BinaryReaderInterp::BeginFunctionBody of the file src/interp/binary-reader-interp.cc. The manipulation leads to null pointer dereference. The attack can be launched remotely

Next.js may leak x-middleware-subrequest-id to external hosts

Django TomSelect incomplete escaping of dangerous characters in widget attributes

@mozilla/readability Denial of Service through Regex

Shescape has potential environment variable exposure on Windows with CMD

AWS CDK CodePipeline: trusted entities are too broad

A vulnerability was found in WebAssembly wabt 1.0.36. It has been declared as critical. This vulnerability affects the function BinaryReaderInterp::GetReturnCallDropKeepCount of the file wabt/src/interp/binary-reader-interp.cc. The manipulation leads to heap-based buffer overflow. The attack can be

Mattermost Desktop App allows the bypass of Transparency, Consent, and Control (TCC) via code injection

PyTorch: Manipulation of the argument scale/zero_point leads to improper initialization via Quantized Sigmoid Module

PyTorch Tuple Handler is Vulnerable to Memory Corruption through Manipulation of None Argument

Magento LTS vulnerable to stored XSS in theme config fields

tarteaucitron Cross-site Scripting (XSS)

Leantime allows Cross-Site Scripting (XSS)

Leantime has Missing Authorization Check for Host Parameter

Vyper's sqrt doesn't define rounding behavior

Vyper has a double eval in For List Iter

AugAssign evaluation order causing OOB write within the object in Vyper

Magento Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability

Magento Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability

Magento Improper Access Control vulnerability

vLLM uses Python 3.12 built-in hash() which leads to predictable hash collisions in prefix cache

DevDojo Voyager vulnerable to reflected Cross-site Scripting

Potential DoS when using ContextLines integration

Reflected Cross Site Scripting (XSS) in error message

AWS Cloud Development Kit (AWS CDK) IAM OIDC custom resource allows connection to unauthorized OIDC provider

Silverstripe Framework has a Reflected Cross Site Scripting (XSS) in error message

Lodestar snappy checksum issue

Lodestar snappy decompression issue

Vyper Does Not Check the Success of Certain Precompile Calls

Strawberry GraphQL has type resolution vulnerability in node interface that allows potential data leakage through incorrect type resolution

GHSL-2024-288: SickChill open redirect in login

Prototype pollution in jsii.configureCategories

This module provides a block that renders a link providing the functionality of a browser's back button. The module does not sufficiently escape text entered by an administrator, resulting in a cross scripting vulnerability. This vulnerability is mitigated by the fact that an attacker must have a

sigstore has insufficient validation of integration timestamp during verification

Mitel MiCollab Path Traversal Vulnerability

Apache Superset: Improper SQL authorisation, parse not checking for specific postgres functions

Password Policy Bypass Vulnerability in Fides Webserver User Accept Invite API

@sveltejs/kit vulnerable to XSS on dev mode 404 page

@sveltejs/kit has unescaped error message included on error page

The module creates an endpoint on the site at /postfile/upload that accepts a POST request for uploading a single file into a specified file system (public, private, etc). The module doesn't sufficiently protect against Cross Site Request Forgery under allowing an attacker to trick a site user in

Moodle admin presets export tool includes some secrets that should not be exported

Filament has exported files stored in default (`public`) filesystem if not reconfigured

Twig has unguarded calls to `__isset()` and to array-accesses when the sandbox is enabled

Twig has unguarded calls to `__toString()` when nesting an object into an array

Symfony has an incorrect response from Validator when input ends with `\n`

Symfony's `Security::login` does not take into account custom `user_checker`

@workos-inc/authkit-remix refresh tokens are logged when the debug flag is enabled

@workos-inc/authkit-nextjs refresh tokens are logged when the debug flag is enabled

ReDoS vulnerability in vue package that is exploitable through inefficient regex evaluation in the parseHTML function

Gradio's dropdown component pre-process step does not limit the values to those in the dropdown list