Advisory Catalog

SandboxJS affected by a Sandbox Escape

Undici has an HTTP Request/Response Smuggling issue

Parse Server: Account takeover via operator injection in authentication data identifier

Parse Server's OAuth2 adapter shares mutable state across providers via singleton instance

TinaCMS CLI Dev Server Vulnerable to Cross-Origin File Exfiltration via CORS Misconfiguration + Path Traversal in TinaCMS

SGLang's encoder parallel disaggregation system is vulnerable to unauthenticated remote code execution through the disaggregation module

SGLang's multimodal generation module is vulnerable to unauthenticated remote code execution through the ZMQ broker

Winter vulnerable to privilege escalation by authenticated backend users

Lantronix EDS5000 Code Injection Vulnerability

Parse Server vulnerable to SQL Injection via dot-notation sub-key name in `Increment` operation on PostgreSQL

Parse Server vulnerable to SQL injection via `Increment` operation on nested object field in PostgreSQL

@siteboon/claude-code-ui is Vulnerable to Command Injection via Multiple Parameters

Parse Server has role escalation and CLP bypass via direct `_Join` table write

Parse Server vulnerable to session token exfiltration via `redirectClassNameForKey` query parameter

Feathers has a NoSQL Injection via WebSocket id Parameter in MongoDB Adapter

Feathers has an OAuth Callback Account Takeover issue

MCP Atlassian has an arbitrary file write leading to arbitrary code execution via unconstrained download_path in confluence_download_attachment

simple-git has blockUnsafeOperationsPlugin bypass via case-insensitive protocol.allow config key enables RCE

Parse Server: SQL injection via dot-notation field name in PostgreSQL

OneUptime has Synthetic Monitor RCE via exposed Playwright browser object

OneUptime has authorization bypass via client‑controlled is-multi-tenant-query header that leads to cross‑tenant data exposure and account takeover

vLLM has SSRF Protection Bypass

Parse Server: JWT audience validation bypass in Google, Apple, and Facebook authentication adapters

OneUptime: Synthetic Monitor RCE via exposed Playwright browser object

OneUpTime's Unsandboxed Code Execution in Probe Allows Any Project Member to Achieve RCE

NLTK versions <=3.9.2 are vulnerable to arbitrary code execution due to improper input validation in the StanfordSegmenter module. The module dynamically loads external Java .jar files without verification or sandboxing. An attacker can supply or replace the JAR file, enabling the execution of arbit

@perfood/couch-auth has a host header injection vulnerability

AVideo: Unauthenticated PHP session store exposed to host network via published memcached port

TechDocs Mkdocs Configuration Key Enables Arbitrary Code Execution

Hono vulnerable to arbitrary file access via serveStatic vulnerability

Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability

Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability

Craft CMS has Twig Function Blocklist Bypass

Craft CMS Vulnerable to Authenticated RCE via "craft.app.fs.write()" in Twig Templates

PickleScan has multiple stdlib modules with direct RCE not in blocklist

PickleScan's pkgutil.resolve_name has a universal blocklist bypass

PickleScan's profile.run blocklist mismatch allows exec() bypass

WWBN AVideo is vulnerable to unauthenticated OS Command Injection via base64Url in objects/getImage.php

Ghost Vulnerable to Remote Code Execution via Malicious Themes

OpenSTAManager affected by unauthenticated privilege escalation via modules/utenti/actions.php

Froxlor has Admin-to-Root Privilege Escalation via Input Validation Bypass + OS Command Injection

OpenClaw has a sandbox network isolation bypass via docker.network=container:<id>

OpenClaw Vulnerable to Remote Code Execution via Node Invoke Approval Bypass in Gateway

OpenClaw gateway agents.files symlink escape allowed out-of-workspace file read/write

CpenClaw's ACPX Windows wrapper shell fallback allowed cwd injection in specific paths

`@orpc/client` has Prototype Pollution via `StandardRPCJsonSerializer` Deserialization

Qwik vulnerable to Unauthenticated RCE via server$ Deserialization

OneUptime has WebAuthn 2FA bypass: server accepts client-supplied challenge instead of server-stored value, allowing credential replay

Idno Vulnerable to Unauthenticated SSRF via URL Unfurl Endpoint

AVideo has Authenticated Remote Code Execution via Unsafe Plugin ZIP Extraction