Advisory Catalog

MessagePack::Buffer#clear Use-After-Free that Enables Cross-Buffer Disclosure

dssrf has an SSRF bypass with remove_at_symbol_in_string

MCP Ruby SDK: Ruby SSE Session Poisoning

MCP Ruby SDK: Unbounded JSON-RPC request body causes uncontrolled memory allocation in StreamableHTTPTransport

MCP Ruby SDK: Unbounded session retention in StreamableHTTPTransport allows memory exhaustion via initialize flood

MCP Ruby SDK: Unbounded line buffer in stdio transports leads to memory exhaustion (DoS)

MCP Ruby SDK: Streamable HTTP transport lacks DNS-rebinding (Host/Origin) protection

OliveTin OS Command Injection via Custom regex: Argument Type Bypassing Shell Safety Check

OliveTin: StartActionAndWait Endpoints Bypass `logs` Permission and Return Action Output

OliveTin: Unauthenticated DoS via OAuth2 State Memory Exhaustion (Unbounded Map Growth)

Broadcom VMWare ESX Insufficient Logging Vulnerability

Broadcom VMware vCenter Path Traversal Vulnerability

undici vulnerable to CRLF Injection via blob-like body 'type' property

undici vulnerable to cross-user information disclosure via whitespace around equals in Cache-Control directives

Pydantic AI: Unvalidated UploadedFile references in UI adapters allow server-side file access using the application's credentials

undici vulnerable to downstream response desynchronization via retry interceptor

linuxfabrik-lib: fetch() forwards credential headers across a cross-origin redirect

Flyto2 Core: Arbitrary file write via image.download (and other file-writing modules)

Flyto2 Core: Multiple HTTP-family modules fetch client-controlled URLs without the SSRF guard their siblings apply (SSRF to internal/metadata)

Flyto2 Core: ${env.VAR} interpolation reads any env secret despite env.get being denylisted

Flyto2 Core: Unauthenticated flyto-verification /run: callback_url SSRF and internal runner-secret exfiltration

Flyto2 Core: LLM/API keys leak to an attacker-controlled base_url

Flyto2 Core: Guarded HTTP modules follow redirects into internal space without per-hop SSRF revalidation

pip would incorrectly handle doubly-encoded package URLs from indexes

mathlive's Lack of Escaping of HTML allows for XSS

Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability

undici vulnerable to cookie attribute injection via unsanitized domain and unparsed setCookie fields

undici vulnerable to cross-user information disclosure and parse-time crash via degenerate private cache directives

An advisory for this issue has been issued at <https://www.drupal.org/sa-contrib-2026-110> and an additional issue was identified and fixed via <https://www.drupal.org/sa-contrib-2026-111> This module is now resupported. See that advisory for more details. *Original content* The security team is

The Token Content Access module enables site administrators to provide access to content using access tokens. The module does not sufficiently protect access token comparison in some cases. This could allow a persistent attacker to use a timing attack to guess a valid access token and bypass access

ActiveRecord::Tenanted::Storage::DiskService#path_for has a possible path traversal

netfoil: Incorrect block responses could lead to localhost traffic

Logging operator has Fluentd configuration injection that allows remote code execution

ZITADEL Users Can Self-Verify Email/Phone via API

proot-distro has a Container Isolation Bypass via Crafted Restore Archive

`proot-distro install` has a Symlink Escape (Arbitrary Host File Write) via Malicious Tar Archive