Advisory Catalog

SearXNG MCP Server is Vulnerable to SSRF in web_url_read: the internal-address guard is disabled by default (MCP_HTTP_HARDEN off)

Snipe-IT: Stored DOM XSS via table selected-count IDs

Snipe-IT: Maintenance Record Disclosure via Missing Authorization on GET

langgraph-api: Incomplete assistant authorization in LangGraph Server run creation

langgraph-api: Relative webhook targets in LangGraph Server can reach in-process routes without authentication

The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, read the documentation on [becoming the maintainer of a project that is unsupported for security reasons](htt

The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, read the documentation on [becoming the maintainer of a project that is unsupported for security reasons](htt

Grav: Authenticated ReDoS via regex_replace in Twig Sandbox

Grav: Twig sandbox config exfiltration via grav.offsetGet + dump filter (CVE-2026-44738 bypass)

Grav: Decompression Bomb via ZipArchiver - Missing Extraction Limits

stigmem-node has blind SSRF via unvalidated webhook subscription delivery_address

linuxfabrik-lib: Arbitrary root file read via live --test argument (lib.lftest) across sudoers-whitelisted plugins (LPE)

LibreNMS: Stored XSS via graph_descr admin config settings echoed without escaping to all authenticated users

fastify vulnerable to schema validation bypass via root primitive coercion mismatch

fastify vulnerable to X-Forwarded-* spoofing under trustProxy hop-count

Froxlor has CSRF Vulnerability in AJAX Endpoint — Missing Cross-Site Request Forgery Protection

Froxlor DomainZones.add allows DNS zone-file RR injection via record/type fields

devpi-server may leak database contents

Lemur: Missing authorization check on POST /certificates/<id>/export for plugins with requires_key = False

Lemur: Sub-CA creation never checks `AuthorityPermission` on the parent authority

Lemur: SSRF protection in certificate revocation checking bypassable via HTTP redirects and DNS rebinding (incomplete fix for GHSA-54vg-pfh7-jq95)

MobSF Vulnerable to Arbitrary File Read via Path Traversal in ZIP Uploads

MobSF's CSRF checks not enforced after Django migration

MobSF Vulnerable to Zip Bomb Denial of Service via Per-File Size Limit Bypass in ZIP/APK Extraction

MagicMirror socket payload secret placeholder expansion can disclose SECRET_* environment variables

MagicMirror: ssrf calendar .js

MagicMirror newsfeed Socket.IO notification allows blind server-side request forgery

Copyparty vulnerable to file/dirkey confusion

Grav: Single invalid UTF-8 byte disables every rule in Security::detectXss(), bypassing the page-content XSS safety gate

Grav: Stored XSS via Markdown audio/video media <source> URL

MLflow: LogInputs endpoint bypasses per-run UPDATE authorization in basic-auth

vLLM: SSRF + arbitrary local file read in MiMoV2OmniMultiModalProcessor `_fetch_image` and audio loader bypass MediaConnector protections

vLLM: Derender endpoints decode caller-supplied GenerateResponse token IDs without output bounds

ApostropheCMS: Mutation-XSS / allowedTags bypass via literal `</textarea/>` solidus close

ApostropheCMS: Missing destination-parent authorization in page `move()` allows a low-privileged editor to move and re-rank pages inside a restricted subtree

ApostropheCMS: Arbitrary file read via import-export attachment-name path traversal

Etherpad addressed weak token RNG, login timing, plugin path handling, API request handling

Glances: as_dict_secure() Value-Level Bypass Leaks Credentials in URL Values via /api/4/config

sqlparse: Generated Python and PHP snippets allow SQL string breakout through unescaped backslashes

Glances: REST API CORS Credentials Guard Uses Exact-Match Instead of Membership Test — Bypassed by Any Multi-Origin Allowlist Containing the Wildcard

openssl_encrypt before 1.4.0 imports Python's non-cryptographic 'random' module (Mersenne Twister PRNG) at line 15 of openssl_encrypt/modules/pqc.py. No direct calls to random.* were present in the code, so no cryptographic operation is currently affected; however, the import creates a hazard that f

openssl_encrypt versions before 1.4.6 contain a key derivation flaw in sequential XOR composition mode where the last stage cancels out during key generation. When configured with a single KDF and no prior hashing stage, attackers can bypass memory-hard key derivation and perform offline password cr

Token Optimizer MCP: Unauthenticated Path Traversal in Dashboard Session Log API Endpoints

ContextForge: DNS TOCTOU race condition causes SSRF protection bypass (`/admin/gateways/test`)

CKAN MCP Server: Cache-key canonicalization collision enables cache confusion / poisoning

CKAN MCP Server: MQA server allowlist bypass via unanchored regex (`isValidMqaServer`)

Grav: Stored XSS via quoted-attribute bypass in detectXss

vLLM: Completion prompt lists fan out into unbounded engine requests

vLLM: Cross-User Data Leak Vulnerability

vLLM: Incomplete CVE-2025-62164 remediation can be bypassed by concurrent prompt parts