Advisory Catalog

AVideo has Unauthenticated SQL Injection via JSON Request Bypass in objects/videos.json.php

OpenClaw's tools.exec.safeBins sort long-option abbreviation bypass can skip exec approval in allowlist mode

OpenStack Vitrage: Unauthorized Access to the Host can Lead to Eval Injection

Langflow has Remote Code Execution in CSV Agent

Agenta is an open-source LLMOps platform. In Agenta-API prior to version 0.48.1, a Python sandbox escape vulnerability existed in Agenta's custom code evaluator. Agenta used RestrictedPython as a sandboxing mechanism for user-supplied evaluator code, but incorrectly whitelisted the `numpy` package a

OpenLIT is an open source platform for AI engineering. Prior to version 1.37.1, several GitHub Actions workflows in OpenLIT's GitHub repository use the `pull_request_target` event while checking out and executing untrusted code from forked pull requests. These workflows run with the security context

dottie is vulnerable to Prototype Pollution bypass via non-first path segments in set() and transform()

Parse Server: Account takeover via JWT algorithm confusion in Google auth adapter

n8n: Expression Sandbox Escape Leads to RCE

n8n has Arbitrary Command Execution via File Write and Git Operations

n8n has Potential Remote Code Execution via Merge Node

n8n has a Sandbox Escape in its JavaScript Task Runner

n8n has Unauthenticated Expression Evaluation via Form Node

Angular SSR is vulnerable to SSRF and Header Injection via request handling pipeline

OneUptime: OS Command Injection in Probe NetworkPathMonitor via unsanitized destination in traceroute exec()

Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability

Budibase: Remote Code Execution via Unsafe eval() in View Filter Map Function (Budibase Cloud)

Basic FTP has Path Traversal Vulnerability in its downloadToDir() method

Flask-Reuploaded vulnerable to Remote Code Execution via Server-Side Template Injection

@enclave-vm/core is vulnerable to Sandbox Escape

Bugsink is vulnerable to Stored XSS via Pygments fallback in stacktrace rendering

Parse Dashboard is Missing Authorization for its Agent Endpoint

Parse Dashboard has incomplete authentication on AI Agent endpoint

Statamic is vulnerable to account takeover via password reset link injection

FUXA has JWT Authentication Bypass via HTTP Referer header spoofing

ActualBudget server is Missing Authentication for SimpleFIN and Pluggy AI bank sync endpoints

ormar is vulnerable to SQL Injection through aggregate functions min() and max()

OneUptime:: node:vm sandbox escape in probe allows any project member to achieve RCE

Sentry: Improper authentication on SAML SSO process allows user identity linking

MLflow Use of Default Password Authentication Bypass Vulnerability

fast-xml-parser has an entity encoding bypass via regex injection in DOCTYPE entity names

Prototype pollution in swiper

Microsoft Semantic Kernel InMemoryVectorStore filter functionality vulnerable to remote code execution

LibreNMS: SQL Injection in ajax_table.php spreads through a covert data stream.

Ghost has a SQL injection in Content API

NLTK has a Zip Slip Vulnerability

OpenClaw has an inbound allowlist policy bypass in voice-call extension (empty caller ID + suffix matching)

Nextcloud Talk allowlist bypass via actor.name display name spoofing

OpenClaw has a potential access-group authorization bypass if channel type lookup fails

Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability

Skill-scanner Unsecured Network Binding Vulnerability

Pterodactyl Panel Allows Cross-Node Server Configuration Disclosure via Remote API Missing Authorization

OpenClaw has an exec allowlist bypass via command substitution/backticks inside double quotes

OpenClaw's Windows cmd.exe parsing may bypass exec allowlist/approval gating

Weblate has an argument injection in management console

OpenClaw's gateway connect could skip device identity checks when auth.token was present but not yet validated

Known affected by Account Takeover via Password Reset Token Leakage

DiskCache has unsafe pickle deserialization

nanotar is vulnerable to path traversal in parseTar() and parseTarGzip()

set-in Affected by Prototype Pollution