Advisory Catalog

DOMPurify: `CUSTOM_ELEMENT_HANDLING` bypasses `afterSanitizeElements` for allowed custom elements.

Node.js Adapter for Hono: Path traversal in `serve-static` on Windows via encoded backslash (`%5C`)

Guzzle: Unbounded response cookies risk denial of service

Astro: composable `astro/hono` pipeline bypasses `security.checkOrigin` when `middleware()` is absent or misordered

Astro: Unauthenticated path override in the @astrojs/vercel ISR function

Astro: XSS via unescaped spread attribute names in renderHTMLElement (incomplete fix for CVE-2026-54298)

@astrojs/rss: XML Injection via Unescaped RSS Feed Fields

Axios form serializer maxDepth bypass via {} metatoken

Axios: Nested axios option objects can consume polluted prototype values

Axios: HTTP/2 streamed uploads bypass `maxBodyLength`

Axios: Fetch adapter `ReadableStream` uploads bypass `maxBodyLength`

Axios: Prototype pollution gadgets can alter axios request construction

Axios: NO_PROXY bypass for 0.0.0.0 local addresses in axios

Guzzle: Proxy-Authorization headers can be sent to origin servers

Astro: Reflected XSS via unescaped View Transition animation properties

Axios: Excessive recursion in formDataToJSON can cause denial of service

Axios: Prototype pollution auth subfields can inject Basic auth

Axios: Deep formToJSON Key Recursion Can Cause Denial of Service

PocketSphinx: Buffer overflows in language and acoustic model loading code

PRoot-Distro has Path Traversal in proot-distro copy — Arbitrary Read, Write, and Persistent Code Execution Outside Container Rootfs

ExifReader HEIC/AVIF ISO-BMFF parser throws uncaught RangeError on truncated boxes

WordPress Core SQL Injection Vulnerability

mcp-memory-keeper: Arbitrary local file read in context_import via unvalidated filePath

Formie: Missing authorization in administrative settings allows low-privileged CP users to modify plugin configuration

TAK-PS-Stats Web UI: Authenticated full-read SSRF in CloudTAK basemap import (PUT /api/basemap) — no IP-classification guard

plone.restapi: Stored XSS by spoofing mime type

plone.app.textfield: Stored XSS by spoofing mime type

adawolfa/isdoc: Uncontrolled resource consumption (decompression bomb) when reading untrusted ISDOCX or PDF files

websocket-driver: Resource limit bypass via message compression

Pixeldrain API key shared with unverified thirdparty sites

FiftyOne App server uses wildcard CORS (Access-Control-Allow-Origin: *), enabling cross-origin reads of local server data

9router: Kiro region injection allows authenticated SSRF with Authorization header forwarding

NocoBase backup restore schema name allows command injection

NocoBase: Sensitive Data Exposure via SQL Blacklist Bypass

The Layout Builder module doesn't sufficiently sanitize block labels in certain scenarios, which can lead to a cross-site scripting (XSS) vulnerability. This is mitigated by the fact that both the attacker and the targeted user need to be using the Layout Builder editing interface.

Drupal core 11.2 and above integrate the HTMX JavaScript library. Drupal core's XSS filter does not sufficiently sanitize certain HTMX attributes, which can lead to a cross-site scripting (XSS) vulnerability. The vulnerability is mitigated by the fact an attacker must be able to insert HTML with s

The Image module allows you to define and configure image fields. The module doesn't sufficiently check access to image style derivatives when those files are served via a file stream other than `private://`. This vulnerability is mitigated by the fact that Drupal must be configured to use a contr

MantisBT: Injection of TIME_TRACKING and REMINDER Notes via REST and SOAP APIs

MantisBT: REST and SOAP API Issue Update Accepts Unreleased Product Versions From Updaters

Koel: Full-read SSRF via podcast enclosure URL: isPublicHost() filter_var guard does not reject NAT64 (64:ff9b::/96) or 6to4 (2002::/16) IPv6-transition wrappers of internal IPv4

Koel has SSRF through Authenticated Subsonic podcast feed URLs

Koel: Authenticated Blind SSRF via Subsonic Podcast Channel Creation

MantisBT: REST API unauthorized Issue status change

Grav: XSS Blueprint Validation Bypass via Twig String Concatenation

PraisonAI: Human-in-the-loop tool approval is cached by tool name and silently reused for all subsequent calls with arbitrary arguments

n8n: External Secrets Permission Bypass via Expression Parser Mismatch

n8n: External Secrets Accessible via Workflow Expressions Outside Credentials

n8n-MCP: Incorrect authorization can expose default-scope workflow version backups in multi-tenant HTTP mode

Auth0 Symfony SDK Accepted Bearer Tokens via URL Query Parameter

Easy!Appointments has unauthenticated customer PII disclosure on booking reschedule page