Advisory Catalog

Snowflake SQLAlchemy affected by SQL injection and local file disclosure vulnerabilities

SAP Approuter has an Open Redirect vulnerability

Kimai: Pre-2FA KIMAI_SESSION cookie grants full authenticated REST API access, bypassing TOTP

json_repair: Circular JSON Schema `$ref` causes unbounded CPU DoS

crewai-tools SSRF redirect bypass exposes internal services

OpenClaw Feishu permission tools could ignore per-account disablement

OpenClaw Feishu tools could ignore per-account disablement

Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Ollama. Authentication is not required to exploit this vulnerability. The specific flaw exists with

Laravel-Mediable: path traversal vulnerability in the File::sanitizePath()

DIRAC: SQL injection and lack of access control in PilotManager service

DIRAC: Pilot code downloaded over unverified HTTPS connection

NukeViet: Pre-authentication SSRF via X-Forwarded-Host

NukeViet: Path Traversal to Arbitrary File Deletion in Edit Comment Function

NukeViet: Multiple Anti-XSS Filter Bypasses Leading to Stored XSS in News Module

NukeViet: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

NukeViet: Unauthenticated Reflected XSS in Comment Module

PraisonAI: Platform member PATCH routes allow owner resource rewrites and project lead reassignment delete bypass

PraisonAI: Prompt Injection Defense Bypassed for HIGH-Level Threats

PraisonAI: Crawl4AI/Chromium backend is also affected by the `web_crawl` SSRF validation bypass

PraisonAI: AgentMail webhook lacks signature verification, allowing unauthenticated message injection and sender spoofing

PraisonAI: AgentOS defaults to network-exposed no-auth mode, allowing unauthenticated agent invocation and instruction disclosure

Phalcon: Catastrophic backtracking (ReDoS) in the default Phalcon Router route lead to remote unauthenticated DoS

Phalcon: Non-constant-time HMAC verification in `Encryption\Crypt::decrypt` (timing side-channel)

Clauster: Non-loopback deployments can serve the dashboard unauthenticated when auth.enabled is unset

mcp-atlassian: Arbitrary file read via missing path validation in confluence_upload_attachment

mcp-atlassian: Arbitrary server-side file read via attachment upload

SafeInstall agent guard shell parsing can miss raw package execution

NotrinosERP: Authenticated arbitrary file upload leads to remote code execution via HRM employee "Documents" (doc_file)

BabelDOC: Arbitrary Code Execution via CMap Pickle Deserialization in babeldoc/pdfminer/cmapdb.py

Snipe-IT has an Improper Privilege Management issue

Snipe-IT vulnerable to cross-company asset maintenance re-parenting via API update

Snipe-IT vulnerable to directory traversal in displaySig

Snipe-IT has an authorization bypass on bulk editing users

9router /v1 APIs has unauthenticated access via reverse proxy locality collapse

9router: Unauthenticated `/v1` proxy access via `Host`-header spoofing → open AI relay + SSRF

9router: Unauthenticated LLM proxy access via /codex rewrite authorization bypass

Grav: Unauthenticated denial of service via unbounded image derivative dimensions

adm-zip: Crafted ZIP file triggers 4GB memory allocation

9router: Image prefetch DNS rebinding allows SSRF to internal services

PraisonAI: Unsafe Dynamic Module Loading Leads to Arbitrary Code Execution via tools.py in AgentFlow

PraisonAI: Shell command allowlist bypass via find -exec built-in action

PraisonAI: Jobs API is unauthenticated by default and allows attacker-controlled webhook SSRF

@arikusi/deepseek-mcp-server has an Authorization Bypass Through User-Controlled Key

Pimcore: Insufficient Permission Check on Class Definition Creation Endpoint Allows Privilege Escalation

Pimcore: SQL Injection via Column Name in DateFilter allows authenticated user to extract arbitrary database data including admin password hashes

Pimcore: Account Takeover via Password Reset URL Injection allows unauthenticated attacker to hijack any admin account with 2FA bypass

YesWiki has Authenticated SQL Injection via ReactionManager

YesWiki: Second-Order SQL Injection in Page Delete API via Unescaped Page Tag (`ApiController::deletePage`)

YesWiki: SQL Injection possible through public Bazar entry-listing APIs via numeric `query`/`queries` filters

YesWiki has Unauthenticated Server-Side Request Forgery via ActivityPub `Signature.keyId`