Advisory Catalog

Signal K Server has Unauthenticated State Pollution leading to Remote Code Execution (RCE)

Picklescan has Incomplete List of Disallowed Inputs

Picklescan does not block ctypes

Picklescan vulnerable to Arbitrary File Writing

SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability

n8n Vulnerable to Arbitrary Command Execution in Pyodide based Python Code Node

apidoc-core has a prototype pollution vulnerability

Hugging Face smolagents: Unsafe deserialization in Remote Python Executor leads to RCE

LangChain serialization injection vulnerability enables secret extraction

LangChain serialization injection vulnerability enables secret extraction in dumps/loads APIs

Cadmium CMS has a background arbitrary file upload vulnerability

n8n Vulnerable to Remote Code Execution via Expression Injection

WatchGuard Firebox Out of Bounds Write Vulnerability

Weblate is vulnerable to RCE through Git config file overwrite

Pagekit CMS has an Insecure Direct Object Reference (IDOR) in its User Role component

Pagekit CMS is vulnerable to OS Command Injection via Storage component

Cisco Multiple Products Improper Input Validation Vulnerability

Apache Airflow Providers Edge3 exposes internal API allowing RCE in web server context

ASUS Live Update Embedded Malicious Code Vulnerability

Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability

Grav may be vulnerable to SSRF attack via Twig Templates

MineAdmin has an insecure default password

pgadmin4 has a Meta-Command Filter Command Execution

Ibexa User Bundle is missing password change validation

Cybersecurity AI (CAI) vulnerable to Command Injection in run_ssh_command_with_credentials Agent tool

Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability

SAML PHP Toolkit Vulnerability on xmlseclibs CVE-2025-66475

Neuron MySQLWriteTool allows arbitrary/destructive SQL when exposed to untrusted prompts (agent “footgun”)

Elysia vulnerable to prototype pollution with multiple standalone schema validation

@vitejs/plugin-rsc Remote Code Execution through unsafe dynamic imports in RSC server function APIs on development server

n8n vulnerable to Remote Code Execution via Git Node Custom Pre-Commit Hook

Altcha Proof-of-Work obfuscation mode cryptanalytic break

NUT-14 allows cashu tokens to be created with a preimage hash. However, nutshell (cashubtc/nuts) before 0.18.0 do not validate the size of preimage when the token is spent. The preimage is stored by the mint and attacker can exploit this vulnerability to fill the mint's db nd disk with arbitrary dat

Langflow CORS misconfiguration enables Account Takeover and RCE

Array Networks ArrayOS AG OS Command Injection Vulnerability

alexusmai laravel-file-manager is vulnerable to Directory Traversal via the unzip/extraction functionality

React Server Components are Vulnerable to RCE

Next.js is vulnerable to RCE in React flight protocol

React Server Components are Vulnerable to RCE

asyncmy is vulnerable to SQL injection via crafted dict keys

Mautic user without privileged access to the Marketplace can install and uninstall composer packages

MCP Watch has a Critical Command Injection in cloneRepo allows Remote Code Execution (RCE) via malicious URL

Better Auth affected by external request basePath modification DoS

fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib

Ray's New Token Authentication is Disabled By Default

Ray is vulnerable to Critical RCE via Safari & Firefox Browsers through DNS Rebinding Attack

OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability

md-to-pdf vulnerable to arbitrary JavaScript code execution when parsing front matter

@hpke/core reuses AEAD nonces

Modular Max Serve has Unsafe Deserialization vulnerability