Advisory Catalog

Wagtail: Denial of service via unbounded filter specs in the image preview

Wagtail: Improper restriction handling on Documents and Images chosen endpoints

OpenClaw MCP SSE redirects could forward Authorization headers

Jodit has prototype pollution via Jodit.configure() / ConfigMerge

Silverstripe Framework: Possible XSS attack through media embed

@hey-api/openapi-ts's `buildClientParams` template: prototype chain substitution via unknown `$<slot>___proto__` key

API Platform Core: Relation IRIs are not type-checked: a related resource can be denormalised as the wrong resource type (type confusion)

API Platform Core vulnerable to cross-user attribute leak in JSON:API and HAL item normalizers due to missing isCacheKeySafe gate

sigstore-js has Insufficient Verification of Data Authenticity

AWS CLI: Overly permissive File Permissions

repomix: attach_packed_output can bypass file-read secret scanning for supported local files

EasyAdminBundle has path traversal and reflected XSS in Flag and Icon Twig components

@jshookmcp/jshook: ICMP probe and traceroute skip local-network SSRF authorization

The Colorbox module integrates with the Colorbox JavaScript library to display content in an overlay above the page. The module doesn't sufficiently protect against injection of malicious JavaScript under certain scenarios. This vulnerability is mitigated by the fact that an attacker must have a r

This module enables you to test and run AI-driven workflows interactively through a chat interface. The module doesn't sufficiently re-evaluate a human-in-the-loop approval gate where the workflow iterates more than once. This may result in execution of workflows that were not intended by the user.

This module enables you to test and run AI-driven workflows interactively through a chat interface. The module doesn't sufficiently enforce permissions on certain endpoints. Attackers may be able to trigger workflow execution (incurring LLM spend and tool side effects) or send messages into other u

The Canvas module allow you to upload image files via a custom API. The validation rules check the file extension of the uploaded file but not the file MIME type. This may allow a malicious user to upload a file that is not an image. Certain web-server configurations may serve the uploaded file wi

The Canvas AI submodule allows you to upload image files via a custom API to use within the AI web chat. These file uploads are insufficiently validated before being written to Drupal's temporary directory. In some cases, this may lead to cross-site scripting (XSS).

Keras: HDF5 virtual datasets can disclose local files

Paymenter has race condition in payWithCredit() that enables credit double-spend

Twig: Sandbox property allowlist bypass via the `column` filter under `SourcePolicyInterface`

Twig: Sandbox state regression in deprecated internal wrappers in `src/Resources/core.php`

decode-uri-component: Denial of service via exponential decoding of malformed percent-encoded input

Statamic Vulnerable to CSV formula injection in form submission exports

Statamic Vulnerable to Server-Side Request Forgery via Glide (DNS rebinding)

js-toml has silent type confusion via falsy-primitive duplicate-key bypass

Dosage Vulnerable to Stored Cross-Site Scripting (XSS) in HTML/RSS Output Handlers

WebauthnAuthenticator leaks sensitive HTTP headers through INFO-level logs

Pterodactyl Panel: Client email change endpoint allows enumeration of accounts in system

nono-py's policy JSON accepts unknown security fields

nono-py vulnerable to authorization bypass / policy confusion

nono-py has proxy-only network fallback bypass on older Linux kernels

@cyclonedx/cdxgen: Maven project scanning may allow shell command injection through repository-controlled module paths

`nx graph` dev server permissive CORS policy

@sigstore/core has DSSE payloadType type-binding failure

Payload CMS default account-unlock access allows authenticated users to reset other accounts' lockouts

Lemur: JWT verifier honors attacker-supplied alg, enabling ATO

Lemur user-update path stores plaintext passwords

Lemur Privilege Escalation: Non-admin role members can rewrite role membership via PUT /api/1/roles/<id>

Lemur: Crafted CRL/OCSP URLs in uploaded certificates lead to post-authentication SSRF

pnpm: Reserved bin name deletes PNPM_HOME during global remove

pnpm: Repository config can expand victim environment secrets into registry requests before scripts run

pnpm binds unscoped user-level npm auth credentials to a repository-selected registry

pnpm: Tarball hash of GitHub git dependencies is not stored in lockfile

justhtml: to_markdown() code-span blank-line breakout enables XSS

@anthropic-ai/claude-code has an Insecure Temporary File in /copy Command that Enables Response Disclosure and Symlink-Based File Write

chrome-devtools-mcp: validatePath() does not canonicalize symlinks before enforcing roots

Ghost Content API filter bypass reveals private fields

Ghost: File Upload Content-Type Spoofing

Ghost: Member existence leak via magic link sign-in response