Advisory Catalog

JupyterLab: Image viewer allows XSS when opening malicious image in new browser tab

JupyterLab: Allowlist/blocklist check in `PyPIExtensionManager.install()` not enforced for direct callers (missing `await`)

Next.js: Server-Side Request Forgery in Server Actions on custom servers

Next.js: Server-Side Request Forgery in rewrites via attacker-controlled destination hostname

Next.js: Middleware / Proxy bypass in App Router applications using Turbopack and single locale

Next.js: Denial of Service in App Router using Server Actions

n8n: Prototype Pollution via Dot-Notation Field Names Leads To Instance-Wide Denial of Service

n8n: Edit Image Node Format Injection Allows Arbitrary File Write

n8n: Shared-Workflow Editor Can Exfiltrate Credentials via Inline Sub-Workflow JSON

n8n: Credential Authorization Bypass via Expression in HTTP Request Node `genericAuthType`

n8n: Expression sandbox escape via arrow-function bodies enabling command execution

n8n: Send Email Node Arbitrary File Read and SSRF via Nodemailer Content-Object Type Confusion

n8n: Authenticated code execution in the n8n Git node

n8n: Git Node fetch/pull/pushTags Operations Bypass Sandbox Path Restriction

n8n: Bypass "Allowed HTTP Request Domains" Credential Restriction in Multiple AI and LLM Nodes

n8n: Account Takeover via Unverified Email Claim in Token Exchange Embed Login

n8n: Race Condition in Git Clone Node Allows Authenticated Users to Achieve Remote Code Execution

n8n: DOM-Based XSS via Unsandboxed iframe srcdoc in HTML Preview

n8n: Privilege Escalation and Code Execution via Full Public API Key Scope Assignment to Token Exchange JWTs

n8n: Stored DOM XSS via Resource Locator `cachedResultUrl`

n8n: Legacy Expression Evaluator Sanitizer Bypass Leads to Authenticated Code Execution

n8n: SSO Instance-Role Provisioning Allows Privilege Escalation to Instance Owner

n8n: AI Agents Project Viewer Privilege Escalation via run_node_tool

sharp inherited vulnerabilities in libvips: CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591

fast-xml-parser: Repeated DOCTYPE declarations reset entity expansion limits

GitPython: Environment-variable exfiltration via os.path.expandvars() on Repo.clone_from() URL

GitPython: command injection via unguarded Git options in `Repo.archive()`, `git.ls_remote()`, and arbitrary file overwrite via `Repo.iter_commits()` / `Repo.blame()`

GitPython: Command Injection via git long-option prefix abbreviation bypass of CVE-2026-42215 blocklist

SVGO removeScripts plugin leaves some executable scripts intact

react-server-dom: Denial of Service in Server Functions

Guzzle: URI fragments disclosed in redirect Referer headers

Guzzle: Host-only cookie scope is not preserved

Axios Node HTTP adapter can use an inherited proxy after interceptor config cloning

Keras: TorchModuleWrapper can deserialize unsafe PyTorch pickle data

fast-uri vulnerable to host confusion via literal backslash authority delimiter

SurrealDB before 1.0.1 sets default table permissions to FULL instead of NONE, allowing SELECT, CREATE, UPDATE, and DELETE operations on tables without explicit permissions. Attackers with database access or unauthenticated users on publicly exposed instances can perform unrestricted operations on u

CloudTAK: Authenticated full-read SSRF in the /api/esri* routes — user-controlled URL fetched with no IP-classification guard

Flask-Reuploaded: Extension-denylist bypass via case-folding asymmetry in name-override path (incomplete-fix variant of CVE-2026-27641)

meta-ads-mcp: X-Pipeboard-Token Header Auth Bypass Reuses Operator Meta Token

meta-ads-mcp: Server-Side Request Forgery (SSRF) in `upload_ad_image` via Unrestricted `image_url` Fetch

sh _uid does not drop supplementary groups (incomplete privilege drop)

Genql: inject arbitrary JavaScript or TypeScript via a GraphQL schema

Whistle vulnerable to path traversal

Pheditor: Incomplete command sanitization in terminal feature allows RCE via pipe operator, backtick substitution, and newline injection

Pheditor has an authenticated terminal command whitelist bypass

DD-WRT Stack-Based Buffer Overflow Vulnerability

Prompty: Arbitrary file read via file reference expansion

Prompty: Arbitrary code execution via JavaScript frontmatter in TypeScript loader

@andrea9293/mcp-documentation-server: Web UI API binds to all interfaces without authentication by default

systeminformation: OS command injection in networkInterfaces() via interfaces(5) source-directive path on Linux