Advisory Catalog

undici WebSocket client vulnerable to Denial of Service via unbounded automatic PONG buffering

undici vulnerable to Denial of Service via unbounded memory in the EventSource parser

undici vulnerable to Denial of Service via unhandled error on excessive content-encodings

undici vulnerable to Subresource Integrity bypass via non-lowercase algorithm tokens

undici vulnerable to cache poisoning and cross-user disclosure via cross-origin redirects

undici vulnerable to TLS certificate validation bypass via dropped tls options in Agent

react/http: Unbounded HTTP Client Response Header Buffering Leads to Memory Exhaustion DoS

AdonisJS HTTP Server: Uncontrolled Resource Consumption and Inefficient Regular Expression Complexity

tinytag: Infinite loop when parsing certain M4A files containing invalid atoms

Nuxt OG Image cache poisoning through derivable cache keys on unsigned dynamic image routes

OpenNext Cloudflare: Cache interception can bypass middleware protection for encoded paths

Siemens Software Center Uncontrolled Search Path Element Vulnerability

Symfony: Unbounded Recursion in the YAML Inline Lexer Lets a Single Document Crash the Process

Symfony: ReDoS in HeaderUtils::split() Reachable Through the Cache-Control Request Header

undici WebSocket client vulnerable to Denial of Service via failed HTTP/2 handshake

ApostropheCMS: Page REST API authorization bypass

Nodemailer: Quadratic (O(n^2)) SMTP client reply parsing lets a malicious server or MITM cause a pre-auth remote denial of service

Nodemailer: Quadratic (O(n^2)) DKIM header unfolding lets a large folded header cause remote denial of service during signing

Nodemailer: RFC 5322 comment inside an angle-bracket address is never stripped

Nodemailer: Quadratic backtracking in SMTP AUTH mechanism detection regexes allows pre-auth remote denial of service

better-auth: OAuth Proxy lets an attacker sign in as another user

@better-auth/drizzle-adapter: Concurrent requests can exceed rate limits on PostgreSQL

GitPython: Submodule.move() follows an attacker-committed intermediate symlink outside the worktree

GitPython: arbitrary file read via attacker-controlled branch name in `Head.checkout()` (incomplete fix of CVE-2026-78679)

GitPython Remote.pull() refspec bypasses the --upload-pack unsafe-option guard, enabling arbitrary command execution

GitPython command wrappers omit unsafe protocol and option checks

GitPython parse_actor_and_date() is vulnerable to quadratic backtracking on malformed identity lines

GitPython: separate_git_dir leaks env vars via crafted .gitmodules submodule name

qs : qs.stringify with arrayFormat 'comma' throws an uncaught TypeError on array elements carrying a non-callable own toString (DoS)

Pipecat: Public exposure of Pipecat’s development runner can allow unauthenticated bot session creation

Appium: Symlink based Zip Slip in @appium/support ZIP extraction

Palo Alto Networks PAN-OS Code Injection Vulnerability

The Entity List module provides a way to create lists of entities without Views. The module has a remote code execution vulnerability. The vulnerability is not directly exploitable with the module alone, but multiple serious exploit paths exist with other contributed modules. At least one known ex

The Navigation module doesn't sufficiently sanitize certain attributes, which can lead to a cross-site scripting (XSS) vulnerability. This vulnerability is mitigated by the fact that an attacker must have a role with permission to enter HTML tags containing specific data attributes, or the `adminis

The Drupal core Link module provides a field type that can be used for internal and external URLs. The module does not sufficiently sanitize certain markup in some circumstances, which can lead to cross-site scripting (XSS) vulnerabilities.

Gin is an administration theme that provides a modern, clean, and customizable backend UI for editors and site administrators. The module doesn't sufficiently sanitize certain attributes, which can lead to a cross-site scripting (XSS) vulnerability. This vulnerability is mitigated by the fact that

Cisco Secure Email Gateway Relative Path Traversal Vulnerability