Advisory Catalog

PraisonAI: Python Sandbox Escape via str Subclass startswith() Override in execute_code

CI4MS: Stored Cross‑Site Scripting (Stored XSS) in Backend User Management Allows Session Hijacking and Full Administrative Account Compromise

CI4MS: Blogs Categories Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

CI4MS: Blogs Posts Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

CI4MS: Blogs Posts (Categories) Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

CI4MS: Pages Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

CI4MS: Menu Management (Posts) Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

CI4MS: Menu Management (Pages) Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

CI4MS: Backup Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM Blind XSS

CI4MS: System Settings (Company Information) Full Platform Compromise & Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

CI4MS: System Settings (Social Media Management) Full Platform Compromise & Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

CI4MS: Logs Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

CI4MS: Blogs Tags Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

openssl-encrypt accepts refresh tokens as URL query parameters causing token leakage

openssl-encrypt's unverified key bundle from_dict() + to_identity() path allows encryption to attacker keys

Auth0 PHP SDK has Insufficient Entropy in Cookie Encryption

Payload: Pre-Authentication Account Takeover via Parameter Injection in Password Recovery

OpenClaw has a CWD `.env` environment variable injection which bypasses host-env policy and allows config takeover

openssl-encrypt silently skips schema validation when jsonschema library is not installed

openssl-encrypt: TOTP rate limiter is in-memory only — not shared across workers, lost on restart

openssl-encrypt: Dynamic .so loading for Whirlpool uses broad glob pattern without integrity verification

FastMCP OpenAPI Provider has an SSRF & Path Traversal Vulnerability

lodash vulnerable to Code Injection via `_.template` imports key names

parse-server has cloud function validator bypass via prototype chain traversal

OpenClaw: /pair approve command path omitted caller scope subsetting and reopened device pairing escalation

Mlflow: Command Injection when serving models with enable_mlserver=True

SciTokens is vulnerable to SQL Injection in KeyCache

baserCMS has OS command injection vulnerability in installer

baserCMS Update Functionality Vulnerable to OS Command Injection

baserCMS has OS Command Injection Leading to Remote Code Execution (RCE)

CI4MS: Methods Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

CI4MS: Permissions Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

Telnyx has malicious code in PyPI versions 4.87.1 and 4.87.2

NocoBase Affected by Sandbox Escape to RCE via console._stdout Prototype Chain Traversal in Workflow Script Node

ci4-cms-erp/ci4ms: System Settings (Mail Settings) Full Platform Compromise & Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

MLflow Command Injection vulnerability

MLFlow path traversal vulnerability

A vulnerability in parisneo/lollms, up to and including version 2.2.0, allows unauthenticated users to upload and process files through the `/api/files/extract-text` endpoint. This endpoint does not enforce authentication, unlike other file-related endpoints, and lacks the `Depends(get_current_activ

MikroORM is vulnerable to SQL Injection via specially crafted object

mppx has multiple payment bypass and griefing vulnerabilities

OpenClaw: Silent privilege escalation via gateway shared-auth reconnect

OpenClaw: Gateway Backend Reconnect lets Non-Admin Operator Scopes Self-Claim operator.admin

Handlebars.js has JavaScript Injection via AST Type Confusion

pyLoad: Server-Side Request Forgery via Download Link Submission Enables Cloud Metadata Exfiltration

Nodemailer has SMTP command injection due to unsanitized `envelope.size` parameter

Happy DOM ECMAScriptModuleCompiler: unsanitized export names are interpolated as executable code

Forge has a basicConstraints bypass in its certificate chain verification (RFC 5280 violation)

OpenClaw Gateway: RCE and Privilege Escalation from operator.pairing to operator.admin via device.pair.approve

Convict has Prototype Pollution via startsWith() function

Convict has prototype pollution via load(), loadFile(), and schema initialization