Advisory Catalog

Open WebUI: Any member with write access to a standard channel can edit or delete other members' messages

Flowise: Unauthenticated Credential Abuse via Text-to-Speech Endpoint Allows Unauthorized Use of Private Chatflow TTS Credentials

Django GeoDjango vulnerable to denial of service through deeply nested geometry collections

Flowise: IDOR vulnerability exists at the GET /api/v1/organization/customer-default-source endpoint

python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees

Guzzle: Noncanonical cookie domain keeps subdomain scope

AIOHTTP: HTTP request smuggling via WebSocket upgrade

Hono: ReDoS in CORS middleware via Access-Control-Request-Headers

GitPython: Arbitrary file truncation via git rev-list --output argument injection in unguarded Commit.count

AWS CLI: Disabled SSH host key verification in Amazon AWS CLI EMR helper commands

ip-address: a CIDR suffix on the parsed address suppresses special-use classification and can bypass SSRF and trust-boundary checks

PostCSS: incomplete fix of GHSA-6g55-p6wh-862q — attacker-controlled sourceMappingURL reads arbitrary .map files when `from` is unset

Keras: HDF5 links can disclose local file contents

gemini-bridge vulnerable to arbitrary local file read via consult_gemini_with_files inline mode

WPGraphQL has deprecated `user` field on SendPasswordResetEmailPayload that leaks user existence + profile (defeats explicit anti-enumeration design)

Jodit has cross-site scripting (XSS) via <script> nested in SVG that bypasses clean-html sanitization

Jodit has incomplete javascript: scheme normalization in sanitizeHTMLElement href check that allows link XSS

OnionShare follows symlinks in shared directories, allowing unintended disclosure of local files

OnionShare Receive mode writes uploaded files even when file uploads are disabled

@dynatrace-oss/dynatrace-mcp-server has a workflow template injection via create_workflow_for_notification

@dynatrace-oss/dynatrace-mcp-server has a DQL injection via parameters not documented as DQL

CodeIgniter: Spoofable forwarded HTTPS headers in IncomingRequest::isSecure()

Sylius Mollie Plugin has unauthenticated IDOR that leaks order token and customer PII

re2: Global `String.prototype.match` with an empty-matchable pattern never advances → infinite loop with unbounded native memory growth (DoS)

re2: Out-of-bounds heap read in `exec`/`test`/`match` via attacker-influenced `lastIndex` on a non-ASCII subject → uncatchable process crash (DoS)

AIOHTTP: WebSocket client accepts compressed frames without negotiated permessage-deflate

undici vulnerable to CRLF Injection via blob-like body 'type' property

Pydantic AI: Unvalidated UploadedFile references in UI adapters allow server-side file access using the application's credentials

undici vulnerable to downstream response desynchronization via retry interceptor

linuxfabrik-lib: fetch() forwards credential headers across a cross-origin redirect

pip would incorrectly handle doubly-encoded package URLs from indexes

mathlive's Lack of Escaping of HTML allows for XSS

Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability

undici vulnerable to cookie attribute injection via unsanitized domain and unparsed setCookie fields

An advisory for this issue has been issued at <https://www.drupal.org/sa-contrib-2026-110> and an additional issue was identified and fixed via <https://www.drupal.org/sa-contrib-2026-111> This module is now resupported. See that advisory for more details. *Original content* The security team is

olm dependency deprecation: CVE-2022-39255 and CVE-2024-45193

Penelope unsafe tar extraction allows arbitrary local file write via crafted session archive

swagger-typescript-api vulnerable to Server-Side Request Forgery via spec `$ref`

@novu/application-generic: `validateUrlSsrf` permits CGNAT (100.64.0.0/10) destinations — affects Workflow HTTP request step + Webhook filter condition

ip-address: misclassification of IPv4-mapped/NAT64 IPv6 addresses can bypass SSRF and trust-boundary checks

Apache Thrift Python bindings have a Improper Validation of Certificate with Host Mismatch vulnerabilit

FrontMCP: Server-Side Request Forgery (SSRF) in the OpenAPI adapter spec-change poller

Quasar: Prototype pollution in the extend() utility

Shescape: Home-directory disclosure in assignment context on Unix with Dash

Shescape: Path disclosure on Unix with Zsh

Budibase: SSRF via bare fetch() in uploadUrl during AI table generation

Budibase: Account Enumeration via Login Lockout Response Differential

Budibase: OAuth2 Token Disclosure via Automation Test Results Broadcast to Other Builders

Budibase: SSO OAuth2 Token Leakage via User Metadata Endpoints to Power-Role Users

Budibase: Missing RBAC on GET /api/global/groups allows BASIC users to enumerate all tenant groups and role mappings