Advisory Catalog

Authlib: Unvalidated request_uri fetch in JWT-secured authorization request (JAR) leading to SSRF

Authlib: OpenID implicit grant checks raw scope instead of allowed scope before issuing ID tokens

Authlib: Default JWT bearer grant accepts assertions for the wrong audience

Authlib: ID token can disable its own nonce validation via the nonce_supported claim

fpdf2: Exponential SVG '<use>' expansion causes CPU and memory exhaustion in 'FPDF.image()'

fpdf2 implicitly loads external URLs and local image paths when rendering attacker-controlled content

PhpSpreadsheet: SSRF whitelist bypass via unre-validated HTTP redirect in Drawing::setPath external image loading

Pylint: Arbitrary code execution via pickle deserialization of the stats cache in PYLINT_HOME

DOMPurify: SMIL attributeName=href guard is skipped when PARSER_MEDIA_TYPE is application/xhtml+xml

OpenTelemetry Python: Unbounded tracestate parsing in opentelemetry-api

Laravel relationship inclusion can trigger unauthorized data destruction

Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1

Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise

Pillow: BMP RLE decoder memory-amplification DoS via unbounded delta escape / absolute mode

Pillow: Decompression-bomb protection bypass via multi-frame seek() in MPO and DCX (MpoImageFile.seek / DcxImageFile.seek)

Nuxt server islands render `useHeadSafe` input without sanitisation

Nuxt: Server-side route rules (`redirect`, `headers`, `proxy`, `ssr`) are skipped for case-variant paths when routing is case-insensitive

Nuxt: Route rules are matched against the raw request path, so a percent-encoded segment can bypass `appMiddleware` on dynamic and catch-all routes

stream-json: FlexAssembler string/RegExp path filters join the full key stack per container start, giving O(depth^2) CPU denial of service

Astro: Reflected/Stored XSS via unescaped <script>/<style> tag content in JSX/MDX rendering

Electron: openExternal permission requests can be attributed to the wrong origin

Electron: HID and USB permission checks can be attributed to the wrong origin

Electron: Pointer lock permission requests can be attributed to the wrong frame

Electron: SameSite cookie restrictions are not applied to windows opened from links

pypdf: Possible large memory usage for streams with multiple filters

pypdf: Possible infinite loop when hitting EOF in standard xref table

pypdf: Possible infinite loop when removing tree items

pypdf: Possible infinite loop in PdfWriter.find_outline_item

pypdf: Possible large memory usage when parsing content streams

pypdf: Possible large memory usage when parsing arrays and dictionaries

pypdf: Possible long runtimes/large memory usage when retrieving form fields

Pydantic AI Harness tool-call limit bypass in nested CodeMode calls

Pillow: EPS load(scale) lets Ghostscript render past the decompression bomb limit

@angular/common: XSRF Token Leakage via URL Parsing Discrepancy in Angular HTTP Client (Incomplete fix for CVE-2025-66035)

virtualenv: Deletion recovery can change a symlink target's mode

virtualenv: Generated files can follow existing destination links

virtualenv: Seeded files retain permissions from an older cache

virtualenv: Seed replacement does not contain metadata deletion paths

virtualenv: Builtin creation follows linked environment directories

MCP TypeScript SDK: Server bearer authentication accepted tokens issued for another service

virtualenv: Temporary app-data can leave dangling seed package links

Cachet has Stored XSS in Incident Component

MCP TypeScript client SDK: HTTP client transports and OAuth requests followed cross-origin redirects and re-sent custom headers and request bodies

ApostropheCMS: No Attempt Throttling on Authenticated Password-Change Endpoint Enables Unlimited Current-Password Guessing

ApostropheCMS import-export tar guard misses './..' because it is a literal '../' substring test

ApostropheCMS import-export: NoSQL injection via update-key value lets a crafted import match and overwrite an unidentified document

ApostropheCMS: Authenticated Object-Level Authorization Bypass in exist-in-locale Reveals Restricted Localized Draft Identifiers

ApostropheCMS: Client-side Prototype Pollution in apos.http.parseQuery leading to DOM-based XSS against authenticated users

ApostropheCMS: Incomplete CVE-2026-53606: `meta http-equiv=refresh` `content` still ships `javascript:` / `data:` URLs

ApostropheCMS: :_id/locales REST route omits the public-API authorization gate its sibling read routes enforce (unauthenticated doc-existence + locale metadata disclosure)