Advisory Catalog

Nuxt: Unauthenticated out-of-memory crash via unbounded v-for expansion in island rendering

rclone: Local Encoding Path Traversal

rclone archive extract allows S3 destination prefix escape via crafted archive paths

rclone: S3 backend does not strip X-Amz-Security-Token on a same-host HTTPS->HTTP redirect

rclone `serve restic --private-repos` authorization bypass: `..` in the URL path lets an authenticated user read, overwrite and delete other users' repositories

rclone: PowerShell Smart-Quote Filename Injection Enables SFTP Server-Side Command Execution

rclone: WebDAV Credentials Survive a Same-Host HTTPS-to-HTTP Redirect

rclone: FTP Command Arguments Permit CRLF Injection When Custom Encoding Preserves Newlines

rclone: S3 Redirect Sanitization Omits IBM IAM Bearer Tokens and SSE-C Keys

rclone: Path traversal in serve s3 allows reading and overwriting root-level files

rclone: Infinite Scale TUS Creation Transport Error Causes a Nil-Response Panic

rclone: Unbounded HTTP CONNECT Response Headers Can Exhaust rclone Memory

praisonaiagents vulnerable to SSRF in web_crawl tool via redirect-following and DNS rebinding (validate-then-fetch gap)

praisonaiagents has a `web_crawl` SSRF protection bypass via unchecked redirect targets

PraisonAI workflow include bypasses tools.py autoload opt-in and executes included recipe code

rclone: Unvalidated symlink target in local `--links` — arbitrary file write from an untrusted remote

rclone: Incomplete path validation allows backend root escape in serve restic

rclone local `--metadata` applies attacker-controlled mode/uid - setuid binary planted from an untrusted remote

rclone: Verbose Stack Trace Disclosure in RC API Error Responses

Langflow: Weak Fernet Key via random.seed()

The Entity Browser module allows you to select entities from entity reference fields using a custom entity browser widget. The module doesn't sufficiently sanitize the the tab titles, resulting in a stored cross-site scripting (XSS) vulnerability. The vulnerability is mitigated by the fact an atta

This module provides formatters to allow in-place editing in a View or other display (full content, teaser...). The module doesn't sufficiently check access when editing entities. A malicious user could craft requests to allow them to modify any field on any entity. This vulnerability is mitigated

Electron: Sandboxed iframes can launch external protocol handlers

Electron: DevTools embedder handler executes arbitrary files via shell open

Electron: contextBridge object copy honors prototype setters

Electron: DevTools JavaScript Injection via Unsanitized Dock State Parameter

Electron: Sandboxed iframe can bypass the allow-popups restriction via the OpenURL navigation path

Electron: window.open features string controls some window options considered privileged

Electron: ProtocolResponse.url reuses the default session cache instead of the registering session

Electron: HTTP redirect followed into local file loader