Advisory Catalog

Nuxt runtime payload cache discloses another user's SSR data across users and to unauthenticated clients

Nuxt route rules silently dropped for mixed-case paths, bypassing appMiddleware auth gates (incomplete fix for CVE-2026-53721)

Nuxt: Unauthenticated out-of-memory crash via unbounded v-for expansion in island rendering

praisonaiagents vulnerable to SSRF in web_crawl tool via redirect-following and DNS rebinding (validate-then-fetch gap)

praisonaiagents has a `web_crawl` SSRF protection bypass via unchecked redirect targets

PraisonAI workflow include bypasses tools.py autoload opt-in and executes included recipe code

This module provides formatters to allow in-place editing in a View or other display (full content, teaser...). The module doesn't sufficiently check access when editing entities. A malicious user could craft requests to allow them to modify any field on any entity. This vulnerability is mitigated

Electron: Sandboxed iframe can bypass the allow-popups restriction via the OpenURL navigation path

Electron: Custom protocol with supportFetchAPI but not corsEnabled allows cross-origin reads

Electron: Context isolation bypass via Function.prototype.bind hijack

MLflow AI Gateway permits SSRF through an unvalidated api_base

Open WebUI: A folder write-collaborator can permanently delete the owner's chats by deleting a shared subfolder

Open WebUI: Stored XSS via unescaped KaTeX render-error fallback in rendered messages

Open WebUI: Same-origin XSS to account takeover via terminal file-preview iframe hardcoding allow-same-origin

Open WebUI: Any authenticated user can reach internal services and cloud metadata via NAT64-encoded URLs

Open WebUI: Account takeover via OAuth token exchange accepting tokens issued to any client

Open WebUI: SSRF into internal services via unvalidated sub-resource requests in the Playwright web loader

Flowise: Broken Access Control in Stripe Subscription Endpoints Allows Cross-Tenant Billing Manipulation

Flowise: Missing Authorization on Execution Update Endpoint

Flowise: Cross-Workspace OAuth2 Credential Metadata Leak

Flowise: Incomplete Credential Redaction Exposes Secrets via API

Flowise: Information Disclosure in GET /api/v1/upsert-history returns the entire server-wide upsert history

Flowise: Cross-workspace credential IDOR in openai-assistants-vector-store

Flowise: Authenticated arbitrary file write in the `S3 Directory` document loader via unsanitized S3 object keys

Flowise: RBAC Bypass Leading to Unauthorized Workspace Variables Disclosure

Django GeoDjango spatial lookups allow file writes and outbound requests through GDAL raster parsing

Flowise: CVE-2025-8943 Patch Bypass: npm_config_yes bypasses MCP environment variable blocklist (Unauthenticated RCE)

Flowise: `DELETE /api/v1/chatflows/:id` does not validate resource type, allowing `agentflows:delete` and `chatflows:delete` to delete each other’s flow type

Flowise: Unauthenticated Property Injection into Flow Execution Context via Ungated `overrideConfig` Spread in Prediction API

Flowise: SSRF Protection Bypass via IPv4-Mapped IPv6 Addresses

Flowise: Missing authorization on `/api/v1/files` allows low-privileged API keys to list and delete files across workspaces within the same organization

Flowise: Unauthenticated OAuth2 Refresh Enables Non-Blind SSRF and Secret Exfiltration

python-cryptography: Duplicate self-signed intermediates can cause exponential path-building

cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing

Guzzle: Noncanonical host can bypass host-based checks

AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response)

GitPython: Incomplete unsafe_git_archive_options denylist omits --add-file / --add-virtual-file, enabling arbitrary file read via Repo.archive()

GitPython: Unguarded git option forwarding in IndexFile.checkout() and TagReference.create() enables arbitrary file overwrite and arbitrary file read

ip-address: Address4 decodes leading-zero octets as decimal while resolvers decode them as octal, allowing SSRF and trust-boundary bypass

Socket.IO: Zero-attachment Memory Exhaustion

brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation

Angular i18n: Cross-Site Scripting (XSS) via event-handler attributes

Angular SSR: Missing Fallback Raw-Content Serialization Escaping leads to Cross-Site Scripting (XSS)

Angular: Cache-Key Ambiguity in HttpTransferCache Leading to Cross-Request Response Reuse and State Poisoning

Grav: Path Traversal in ImageMedium::watermark() — arbitrary file disclosure via publicly-cached images

Grav: Incomplete callable validation in blueprint dynamic fields allows arbitrary static method invocation and file disclosure

N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability

Transformers save_pretrained path traversal allows arbitrary file writes through chat template names

N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability

Redaxo has a Mediapool isAllowedExtension bypass via multi-segment filename that leads to authenticated RCE on Apache mod_php multi-extension handlers