Advisory Catalog

YesWiki Vulnerable to Unauthenticated ActivityPub Signature-Verification Bypass via `!openssl_verify(...)` accepting `int(-1)`

YesWiki: Authenticated (Admin) Server-Side Template Injection to Remote Code Execution via Bazar Semantic Templates

laravel-backup-restore has an OS Command Injection during database restore

@Mockoon/commons-server: Unauthenticated admin API + wildcard CORS allows mock-state hijack and secret theft

open-webui terminal proxy path traversal guard bypass via 9x encoded traversal

Open WebUI: Terminal proxy forwards a spoofable, integrity-unbound user identity to the upstream (X-User-Id header and ws_terminal session_id query injection)

Open WebUI: Realtime endpoints accept Redis-revoked JWTs after signout/backchannel logout

n8n: Shared Credential Header Leak via HTTP Request Pagination Expression

n8n: Cross-Issuer Token Exchange Account Binding via Subject-Only Identity Resolution

n8n: "Allowed HTTP Request Domains" Restriction Bypass via AI Agents MCP Connector

n8n: Prototype Pollution via Workflow Credentials Leads to Unauthenticated User and Project Enumeration

Soup Sieve: Regular Expression Denial of Service (ReDoS) via Selector Parser

Soup Sieve has Memory Exhaustion via Large Comma-Separated Selector Lists

Phantom: Arbitrary file write and decode-bomb DoS via unconfined MCP tool paths

Cline: Cross-Origin WebSocket Hijacking in Cline Hub Dashboard (`/browser` endpoint)

RestrictedPython guard hooks can be shadowed via positional-only arguments

elysia has Inefficient Algorithmic Complexity and Interpretation Conflict

Plate: Media embed provider metadata can bypass URL sanitization and execute iframe JavaScript

asyncssh has SCP Path Traversal to Arbitrary File Write

libp2p: CPU DoS via oversized IHAVE and IWANT control message arrays

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 7.260326.0, an authorization bypass vulnerability in OpenCTI allows any authenticated user with KNOWLEDGE_KNUPDATE permission to bypass Confidence Level validation and Object Marking restric

`lxml_html_clean.Cleaner` does not strip `javascript:` URLs from namespaced URL attributes

Composer: Arbitrary file write outside vendor via malicious transitive package name

httplib2: Decompression Bomb Denial of Service via Unbounded gzip/deflate Response Handling

pypdf: Possible infinite loop for not terminated inline images

pypdf: Possible infinite loop for not terminated inline images (ASCII85 and ASCIIHex filter)

LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback

LiquidJS: `pop` filter bypasses `memoryLimit` accounting that its array-filter siblings enforce

yt-dlp: Downstream command injection via improper sanitization of yt-dlp --write-link output

Mistune block_parser: quadratic-time parsing on long lists of repeated reference-link definitions

Mistune inline_parser: quadratic-time parsing on long runs of `**x**` and `***x***` emphasis pairs

Mistune plugins/formatting: quadratic-time parsing on long runs of `~~x~~`, `==x==`, and `^^x^^` markers (strikethrough / mark / insert)

OpenTelemetry JavaScript: Denial of service in `JaegerPropagator` via unhandled exception on a malformed header

linkify-it: Quadratic-complexity DoS via the `mailto:` validator scan-loop on attacker text

Immutable.js `List` 32-bit trie overflow → unrecoverable DoS

Astro: Authorization Bypass via Decode Iteration Limit and Rewrite Path Canonicalization Mismatch

The Location Selector module provides a Views filter for selecting location values. One of the provided Views filters does not sufficiently sanitize values that may come from user input, resulting in a SQL injection vulnerability. This vulnerability is mitigated by the fact that a View must exist

Immutable: Hash-collision algorithmic complexity denial of service in Immutable.Map/Set

protobufjs: Denial of Service via infinite loop in .proto option parsing

node-tar: Negative tar entry size causes infinite loop in archive replace

node-tar: Process crash via PAX numeric path type confusion

js-yaml: Quadratic-complexity (O(n^2)) DoS via !!omap tag in YAML11_SCHEMA

js-yaml: YAML merge-key chains can force quadratic CPU consumption

js-yaml: YAML merge-key chains can force quadratic CPU consumption in js-yaml

Socket.IO: Engine.IO Polling Transport Connection Exhaustion

Socket.IO: Engine.IO WebTransport SID DoS

Copier has a trust-prefix bypass via path traversal that runs tasks unprompted

Serena: Unauthenticated Flask dashboard on fixed port enables DNS rebinding → memory poisoning → RCE

@better-auth/scim: Account/provider takeover via missing owner binding on non-org SCIM providers

@better-auth/oauth-provider's OAuth authorization-code grant allows concurrent redemption when two token requests race the find-then-delete primitive