Advisory Catalog

YesWiki has stored XSS in Bazar form-field templates via unescaped field.label / field.hint (|raw('html'))

YesWiki: SQL injection via the `recentchanges` action `period` argument leads to arbitrary DB read

@Mockoon/commons-server: Path traversal in templated `filePath` lets a request escape the served directory (prefix-only base check)

Ghost: Paid gift memberships obtainable at minimal cost via the donations feature

Open WebUI: Unauthenticated WebSocket Access to Collaborative Document Handlers (ydoc:awareness:update, ydoc:document:leave)

Open WebUI: POST /api/v1/images/edit bypasses the global image-edit switch and the per-user image-generation permission

Open WebUI: Scheduled automations continue after pending-user deactivation and stored model ACL revocation

Open WebUI: Arena task endpoints can bypass underlying model access controls

Open WebUI: `WEB_FETCH_FILTER_LIST` host allow/block filter bypassable via URL path and non-label-boundary matching

Open WebUI: /api/v1/channels/{id}/members exposes full user model including sensitive credentials

Open WebUI: ReDoS in skill-mention regexes causes whole-instance DoS on default config

Open WebUI: Account enumeration via observable login timing discrepancy

Open WebUI: Upload `metadata.knowledge_id` bypasses the knowledge-base write-access check (read-only users can add files to KB)

Open WebUI: Cross-user model-list exposure via static cache key in get_all_models (aiocache key= vs key_builder= misuse)

Open WebUI: Model meta.knowledge read-only file access can be upgraded to file write/delete

Gittensory: Missing contributor-scoped access control on profile endpoint and MCP tool leaks miner financial data

Admidio: CSRF on Plugin Install, Uninstall, and Update via Unprotected GET Requests

pymonocypher: Potential heap buffer overflow on nb_blocks in argon2i_32 when provided buffer is too small

pyLoad: Unbounded Memory Growth Leading to DoS and Potential DDoS in EventManager

pyLoad: SSRF guard bypass via IPv6 6to4/NAT64 transition wrappers of internal IPs

body-parser vulnerable to denial of service when invalid limit value silently disables size enforcement

Appium: Reflected XSS / arbitrary JS in @appium/base-driver /test/guinea-pig* routes

asyncssh has an incomplete fix for CVE-2026-45309 — AuthorizedKeysFile %u still escapes the intended directory via a leading ~ (and weakly via ${ENV}) username substitution

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 7.260401.0, the OpenCTI GraphQL API exposes a script filter operator in its FilterOperator enum that allows any authenticated user with the KNOWLEDGE capability to pass user-supplied Elastic

Waku: Cross-Origin CSRF on RSC Server Action Dispatch

Trapster Community: Unauthenticated malformed DNS compression pointers crash per-packet honeypot handler

Composer: URL-embedded HTTP-Basic username leaks to verbose logs (GitHub PAT exposure)

Composer: Path traversal in package bin field lets dependencies chmod arbitrary host files

LiteLLM: Arbitrary file write via path traversal in Skills archive extraction

pypdf: Possible large memory usage for wrong image dimensions

pypdf: Possible long runtimes for repeated malformed cross-reference entries

The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please read: [https://www.drupal.org/node/251466#s-becoming-owner-maintainer-or-co-mai...](https://www.drupal

The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please read: [https://www.drupal.org/node/251466#s-becoming-owner-maintainer-or-co-mai...](https://www.drupal

The AI SEO/GEO Analyzer module generates SEO/GEO analysis reports by sending content of an entity (including its comments) to an LLM, then converts the model's Markdown response to HTML and stores it for display to privileged users. The generated HTML was rendered without passing through Drupal's f

This module enables you to use Single Directory Components in site building (views, field formatters, blocks, layouts) and it improves the Developer Experience (DX) with SDC. The module doesn't sufficiently sanitize the markup passed to components under certain scenarios. This vulnerability is mit

Mistune toc / TableOfContents directive: heading IDs use predictable `toc_N` numbering with no slugification, allowing collision with attacker-controlled `id="toc_N"` content

Mistune renderers/html.safe_url: HARMFUL_PROTOCOLS list misses legacy and chained schemes that historically chain to `javascript:` execution

Mistune directives/include: mutual `.. include::` recursion crashes the renderer with `RecursionError`, denial of service via two attacker-controlled markdown files

Mistune: XSS via unescaped class option in Admonition directive

Mistune: Arbitrary File Read via Include directive path traversal

Mistune: XSS via percent-encoded javascript URI bypass in safe_url()

Hono: API Gateway v1 adapter can drop a distinct repeated request header value during de-duplication

hono/jsx does not isolate context per request, leading to cross-request data disclosure

Hono: Server-Side XSS via JSX Escaping Bypass in cx() Utility

setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) on macOS APFS/HFS+

Guzzle: Cookie Disclosure and Injection via IP-Address Domains

guzzlehttp/psr7: Host Confusion via Weak URI Host Validation

The Events, Conditions, Actions (ECA) module's Render submodule enables you to build render arrays and render inline Twig templates as part of no-code ECA models. The module doesn't sufficiently sanitize template code when rendering, which can lead to information disclosure. This vulnerability is

The module doesn't sufficiently sanitize the Siteimprove Analytics identification code when inserting the JavaScript tracking code; this could be exploited to achieve Cross-Site Scripting (XSS). This vulnerability is mitigated by the fact that an attacker must have a role with the permission "admin

The Lingotek Ray Enterprise Translation module provides multilingual site management. The module fails to protect several state-changing administrative routes against Cross Site Request Forgery attacks. An attacker could trick a privileged user into visiting a crafted page that triggers actions suc