Advisory Catalog

ep_etherpad-lite: Cache-poisoning Cross-site Scripting and Open Redirect via x-proxy-path Header

Pimcore: ClassDefinition UID regex missing end anchor allows SQL injection via Block.php unquoted table name

Flowise Prompt Injection to RCE and SSRF via CSV/Airtable Agent Python Validator Bypass

baseline-browser-mapping process termination on invalid input causes denial of service

@fastify/busboy vulnerable to Denial of Service via oversized multipart boundary

@fastify/busboy vulnerable to Denial of Service via prototype-named multipart part header

Ansible FreeBSD Jail Connection Plugin: Jail escape via symlink following in put_file (host-side root mv)

MCP-for-Stata: Stata Command Injection via Unsanitized `package` in `ado_package_install`

SeaweedFS: Path traversal in the S3 and Iceberg REST gateways allows cross-bucket access

JFrog Artifactory Improper Authentication Vulnerability

This module enables you to display content in tabs, where each tab renders a block, a node, a view, or another Quick Tabs instance. The module did not correctly enforce access when rendering node and block tabs. It treated a neutral access result as a grant for node tabs and block plugins, and perf

This module enables you to authenticate Drupal users against external identity providers. The module does not sufficiently ensure exact matching of externally supplied identity values when storing and looking up authentication mappings under certain database collation configurations. This vulnerab

This module enables you to share content between sites in a hub - subscriber model. Certain inputs were not sufficiently validated, allowing an attacker to achieve server-side request forgery attacks.

This module enables you to view the differences between revisions on any entity type. The module doesn't sufficiently restrict access to non-node entity revision diffs. This vulnerability is mitigated by the fact that an attacker must have a role with the permission to view the entity.

This module enables you to pay for Commerce transactions using Paypal. The module doesn't sufficiently validate the transaction result in certain circumstances, allowing a malicious user to mark transactions placed without payment. This vulnerability only affects sites using the Payflow Link payme

Material for MkDocs: DOM XSS in search suggestions via query parameter

Apache Airflow missing team context permits cross-team Dag actions and XCom reads

Apache Airflow Task SDK fails to mask list-shaped JSON Variables

Apache Airflow bulk endpoints log Variable and Connection secrets in cleartext

Apache Airflow Backfill API parser discrepancy permits cross-DAG authorization bypass

Apache Airflow environment-variable secrets backend permits cross-team credential use

Apache Airflow Task SDK Callback deserialization can import arbitrary modules in the scheduler

Apache Airflow scheduler unsafely deserializes human-in-the-loop task next_kwargs

JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability

Apache Airflow Config API exposes team-scoped sensitive configuration values

Apache Airflow exposes dict-valued var.json secrets in Rendered Templates

Apache Airflow XCom API permits unsafe deserialization through JSON string literals

Apache Airflow exception-node deserialization permits arbitrary callable execution

Apache Airflow Variables UI fails to mask sensitive values in deeply nested iterables

compliance-trestle has an URLSecurityValidator SSRF allowlist bypass via IPv4-mapped IPv6 and 0.0.0.0

Prowler: Stored XSS in HTML reports through unescaped cloud resource tags

Fleet: Observer-class users can view team enroll secrets and credential-bearing configuration via target search endpoint