Advisory Catalog

Cloudreve OAuth Admin.Read scope can update OneDrive storage policy credentials

Cloudreve: Broken Access Control in file event stream: a single-file share recipient is subscribed to the owner's parent folder and receives activity events for unshared siblings

Cloudreve: Denial of Service - Image decompression / pixel bomb in thumbnail & avatar decoding crashes the server

Cloudreve: Information Exposure in `GET /api/v4/user/search`: `SearchActive` omits the active-status predicate, leaking inactive/banned account emails

Cloudreve: Path Traversal in WOPI PUT_RELATIVE Allows Arbitrary File Creation in Owner Account

Open WebUI: Cross-channel message overwrite via chat completion API (single-model and multimodel message_ids)

kin-openapi: ValidationHandler.Load() Fail-Open Authentication Bypass via NoopAuthenticationFunc Default

cel-go: JSON Private Fields Exposed via NativeTypes and ParseStructTag

js-yaml: Exponential parsing time in flow collections leads to denial of service

React Router: RSC Mode CSRF Bypass Allows Action Execution Before 400 Response

AWS CDK CodeBuild S3 Log Encryption Boolean Inversion

GitPython: Unsafe git option guard bypass via single-character kwarg value token smuggling enables arbitrary command execution

GitPython: Incomplete unsafe_git_clone_options denylist omits --template enabling arbitrary command execution via clone hooks

GitPython: Arbitrary file overwrite via git diff --output argument injection in Diffable.diff (key- and value-controlled)

node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection

PostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosure

Prompty: Server-Side Template Injection to Remote Code Execution in the @prompty/core Nunjucks Renderer

Mongoose: Prototype pollution in mongoose update casting via __proto__-prefixed dotted path (Schema._getSchema/path getter)

GitPython: git-config section-name injection enables arbitrary config directives (core.sshCommand RCE)

Velocity.js: Remote Code Execution via property-read to Function constructor (bypass of GHSA-j658-c2gf-x6pq fix)

@backstage/plugin-auth-backend: Unauthenticated OAuth account takeover via `redirect_uri` allowlist bypass

PyMdown Extensions: Path traversal in the b64 extension lets <img src> read files outside base_path

Trix: Stored XSS via HTMLParser attribute injection on paste

Valibot: record() issue paths can make flatten() throw for inherited Object property names

seroval: `seroval.fromJSON()` Promise resolver type confusion invokes attacker-controlled methods during deserialization

SvelteKit: Prototype pollution in file input deletion path in remote-function forms

SvelteKit: Big remote form function payloads can cause Node process to crash

ONNX: Heap-Buffer-Overflow READ in Gemm Version Converter Adapter via Undersized Input Shape

Better Auth: Account takeover via pre-account hijacking on magic-link and email-OTP sign-in

@better-auth/stripe: cross-organization billing tampering in organization subscription actions

@better-auth/scim: account takeover and stale access via SCIM provider-id collision

Hugging Face Datasets folder-based builders allow path traversal through file_name metadata

BlenderMCP path traversal in download_polyhaven_asset allows arbitrary file writes

React Router: Unauthenticated Denial of Service via Inefficient Route Matching

AWS Bedrock AgentCore: Improper neutralization of argument delimiters in the Python SDK install_packages()

Ruby json: JSON generator heap buffer overflow when streaming to an IO

React Router: Open redirect via backslash in <Link> and useNavigate (CVE-2025-68470 bypass)

React Router: Open redirect leading to XSS