Advisory Catalog

safeurl is Missing IPv6 CIDR Ranges in Blocklist

FiftyOne App server uses wildcard CORS (Access-Control-Allow-Origin: *), enabling cross-origin reads of local server data

obsidian-local-rest-api: Authenticated path traversal via URL-encoded %2F in /vault/{path} — arbitrary host file read/write/delete

ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway

MCP Python SDK: WebSocket server transport does not support Host/Origin validation

9router: Mass assignment in PATCH /api/settings allows authenticated authorization downgrade

9router: Kiro region injection allows authenticated SSRF with Authorization header forwarding

NocoBase backup restore schema name allows command injection

NocoBase: Sensitive Data Exposure via SQL Blacklist Bypass

NocoBase: SQL injection in /api/myInAppChannels:list filter to PG-superuser RCE

MCP Python SDK: Experimental task handlers allow any client to access and cancel other clients' tasks

MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principal

The Layout Builder module doesn't sufficiently sanitize block labels in certain scenarios, which can lead to a cross-site scripting (XSS) vulnerability. This is mitigated by the fact that both the attacker and the targeted user need to be using the Layout Builder editing interface.

Drupal core 11.2 and above integrate the HTMX JavaScript library. Drupal core's XSS filter does not sufficiently sanitize certain HTMX attributes, which can lead to a cross-site scripting (XSS) vulnerability. The vulnerability is mitigated by the fact an attacker must be able to insert HTML with s

The Image module allows you to define and configure image fields. The module doesn't sufficiently check access to image style derivatives when those files are served via a file stream other than `private://`. This vulnerability is mitigated by the fact that Drupal must be configured to use a contr

jsii-diff: Command Injection via npm: package argument

MantisBT: Stored XSS in print_all_bug_page_word.php

MantisBT: Injection of TIME_TRACKING and REMINDER Notes via REST and SOAP APIs

MantisBT: REST and SOAP API Issue Update Accepts Unreleased Product Versions From Updaters

MantisBT: Reflected XSS in admin/install.php via unescaped printf

MantisBT: Reflected XSS in admin/install.php

Koel: Full-read SSRF via podcast enclosure URL: isPublicHost() filter_var guard does not reject NAT64 (64:ff9b::/96) or 6to4 (2002::/16) IPv6-transition wrappers of internal IPv4

PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters

@better-auth/sso: SSO provider may allow registration for any org member without a checking their role

Koel: Incomplete fix for CVE-2026-47260 — systemic SSRF in podcast & radio fetch paths

LangBot: Authenticated RCE Via MCP Configuration

garminconnect Has Insecure Permission Assignment for Garmin OAuth Token Store

Koel has SSRF through Authenticated Subsonic podcast feed URLs

Koel: Authenticated Full-Read SSRF via Subsonic Internet Radio Stations

Koel: Authenticated Blind SSRF via Subsonic Podcast Channel Creation

MantisBT: REST API unauthorized Issue status change

MantisBT: Remote Code Execution via eval() Class Hoisting in adm_config_set.php

MantisBT: SOAP API Authentication Bypass with Privilege Escalation to Administrator

MantisBT: SQL Injection via history_order Configuration Value

Directus: Authorization-dependent response served from unsegmented cache key

Directus: SSRF Protection Bypass via 0.0.0.0 in File Import

LightRAG is Vulnerable to Authentication Bypass: hardcoded DEFAULT_TOKEN_SECRET and public /auth-status defeat LIGHTRAG_API_KEY protection

LightRAG: CORS Wildcard + Credentials Enables Any-Origin Credentialed Requests

Grav: XSS Blueprint Validation Bypass via Twig String Concatenation

Grav: Decompression-bomb size cap bypassed by forged ZIP size in ZipArchiver/Installer