Advisory Catalog

TYPO3 CMS - Unrestricted File Upload in Form Framework

Keras: tar extraction permits symlink-based path traversal

Kimai: ExportTemplate CRUD Missing Authorization Check Allows Unauthorized TEAMLEAD Access

Kimai: Improper Authorization in Project, Customer, and Activity Rate Edit Endpoints Allows Cross-Scope Rate Manipulation

Kimai has Improper Authorization in Team Member and Team Activity Assignment APIs Which Allows Expansion of Team Scope Beyond Authorized Visibility

Kimai: Login CSRF in the Timesheet Stop and Restart API Endpoints Allows Unauthorized State Changes

Improper Authorization in Kimai Timesheet Restart and Duplicate Allows New Timesheets After Project Access Revocation

Kimai: Improper Authorization Through Activity Creation with Preset Project Allows Creation Under Unauthorized Projects

Kimai: Timesheet PATCH/POST allows assigning to project outside user's team via query_builder OR-bypass

Kimai: Teamlead authorization bypass in GET /api/timesheets allows reading other users' timesheet records without being teamlead of the target

Kimai: Login CSRF in Default Team Creation Endpoints Allows Unauthorized Team and Permission Structure Changes

Apple App Store Server Python Library: SignedDataVerifier accepts stale OCSP GOOD responses and can bypass certificate revocation checks

OpenClaw: Browser CDP discovery could accept blocked WebSocket URLs

Authenticated SSRF in Gravitino JobManager allows server-side HTTP requests to internal network and cloud metadata endpoints via unvalidated job template URIs. A vulnerability in Apache Gravitino. This issue affects Apache Gravitino: from 1.0.0 through 1.2.1. Users are recommended to upgrade to ve

PyOD persistence.load deserializes untrusted artifacts before validation

PraisonAI: Project custom command templates can read outside-workspace files into model prompts

Snipe-IT: Cross-company deletion of pending checkout acceptances via unscoped report endpoint

Snipe-IT has CSS Injection via `header_color` Setting

Snipe-IT has incorrect permission for legacy license checkin API

Snipe-IT's import created_by can be overwritten

Snipe-IT has a path traversal vulnerability via CSV import `image` field

Snipe-IT vulnerable to stored XSS via inline-served attachment

Snipe-IT has an authorization bypass on print inventory page

Snipe-IT has an Open Redirect After User Edit

Snipe-IT has CSV formula injection in Activity Report export

CredSweeper: Recursive archive size-limit bypass in deep scanner allows crafted compressed inputs to exhaust resources

Snipe-IT has missing object-level authorization in Kits API

Snipe-IT Vulnerable to Unauthorized Asset Request Cancellation via Unguarded cancel_by_admin Parameter

Snipe-IT's API Location Creation Bypasses FMCS Parent-Child Company Boundary Validation

Snipe-IT vulnerable to stored XSS via Markdown custom field

MCP Atlassian: DNS-rebinding TOCTOU bypass of the SSRF fix (CVE-2026-27826)

Grav CMS — Improper Handling of Highly Compressed Data in Installer::unZip()

tarteaucitron: data-cookie attribute can be used to delete arbitrary cookies

Kimai has Server-Side Request Forgery in Invoice PDF Rendering via Markdown Image URLs

PraisonAI: FastContext path resolution permits absolute and traversal reads outside the workspace

PraisonAI: ContextGatherer include resolution permits absolute and traversal reads outside the workspace

PraisonAI: Project config can auto-save agent output outside the project root

PraisonAI: Prompt-injection defense blocks only when 3+ detector families fire simultaneously; realistic single-vector injections pass through unblocked

n8n: Authenticated Users Can Exhaust Temporary Disk Storage via Data-Table File Uploads

phpMyFAQ public FAQ APIs expose inactive FAQ content

phpMyFAQ has Potential Authenticated Path Traversal in PDF Export

psd-tools vulnerable to arbitrary file write via smart-object filename

Rattler vulnerable to package cache path traversal via conda package build string

@arikusi/deepseek-mcp-server: Missing Authentication on Self-Hosted HTTP MCP Endpoint

decompress allows arbitrary hardlink creation during archive extraction

Sylius: IDOR on Shop Payment Request API endpoints

Sylius: Channel-based payment method restriction bypass on shop account orders API endpoint

Sylius: Cart FormComponent allows modification or deletion of an already-completed order

YesWiki Vulnerable to Reflected XSS via Unescaped `id` Parameter in Bazar Widget HTML Attributes

YesWiki Vulnerable to Reflected XSS via Unescaped Archived-Revision `time` Parameter in `handlers/page/show.php`