Advisory Catalog

@better-auth/oauth-provider's OAuth authorization-code grant allows concurrent redemption when two token requests race the find-then-delete primitive

Better Auth: OAuth refresh-token rotation forks the token family on concurrent redemption

Better Auth has stored XSS in the auth-server origin via javascript: redirect_uri in oidc-provider and mcp

Better Auth has an account takeover issue via OAuth auto-link to unverified pre-registered email

Better Auth vulnerable to unauthorized invitation acceptance via unverified email match in organization plugin

EGroupware has Authenticated RCE via Malicious eTemplate Upload

9router: Login brute-force protection bypass via spoofed X-Forwarded-For header

vLLM: ReDoS via structured_outputs.regex compiled without timeout in xgrammar and outlines backends

vLLM denial of service via prompt embeds on M-RoPE models

vLLM has Remote DoS via Invalid Recovered Token Reinjection

Linuxfabrik Monitoring Plugins have local privilege escalation using embedded command

Langroid: handle_message() executes user-supplied tool JSON without sender verification

Pillow `GdImageFile._open()`: image dimensions accepted without `_decompression_bomb_check()`

Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading

Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`

Pillow `PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading

flyto-core has Unauthenticated Command Execution via HTTP MCP `execute_module`

flyto-core has SSRF guard bypass via IPv6 transition addresses (IPv4-mapped / 6to4 / NAT64) in validate_url_ssrf

Apache Airflow Google provider allows path traversal through GCS object names

Uncontrolled Resource Consumption vulnerability in Apache IoTDB.  Some interface fails to impose reasonable limits on the time span and aggregation interval of the query. An attacker can construct a request with extreme parameters (e.g., a very large time range combined with a minimal interval). Th

Trail of Bits fickling versions up to and including 0.1.10 do not include the Python standard library modules _posixsubprocess, site, and atexit in the UNSAFE_IMPORTS denylist (fickle.py). Because these modules are absent from the denylist, fickling's check_safety() function returns LIKELY_SAFE with

Linux Kernel Unspecified Vulnerability

NLTK Stanford wrapper classes execute untrusted JAR files without verification

Recce server has unauthenticated SQL execution that allows local file read/write through DuckDB

9router has an Incomplete Fix: Local-Only Access Gate Bypass in 9router via Host Header SpoofING

SimpleSAMLphp SP accepts a response from an unexpected IdP when unsigned `Response/InResponseTo` is combined with a signed assertion lacking `SubjectConfirmationData/InResponseTo`

Kimai Favorite Timesheet Add and Remove Endpoints Allows Cross-User Bookmark Manipulation

SimpleSAMLphp has Possible DoS via XPath Transform

SimpleSAMLphp HTTP-Artifact TLS validator confusion allows cross-IdP authentication bypass

Linuxfabrik Monitoring Plugins: Sudoers may be able to obtain privilege escalation via /usr/bin/apt-get arguments

@asymmetric-effort/nogginlessdom's Path Traversal in matchFileSnapshot allows arbitrary file write

jsonata: Malicious inputs to "$toMillis" function can cause resource exhaustion

Grackle: Fail-open authorization in the MCP tool layer lets scoped agents perform cross-task and cross-session mutations (IDOR)

electerm has Command Injection in File System Operations (rmrf, mv, cp)

electerm has Path Traversal in Zmodem and Trzsz Download Filename Handling

@conform-to/dom parseSubmission vulnerable to CPU exhaustion when parsing many unique form fields

Grackle has command/argument injection in the git worktree executor that enables RCE on provisioned hosts via an unsanitized task branch name (shell:true)

joserfc: HS256/HS384/HS512 verify accepts empty/nil HMAC key (cross-language sibling of CVE-2026-45363)

@asymmetric-effort/specifyjs: URL parse failure silently allows request

mediawiki/maps has stored XSS through the overlays parameter in the display_map parser function

Langroid: SQLChatAgent _validate_query blocklist misses pg_read_file family enabling arbitrary file read

Langroid: Path traversal in the file tools allows read/write outside configured current directory

Craft CMS Vulnerable to Unauthorized Deletion of Destination Folders During Forced Moves

Craft CMS's mass assignment via id in newAttributes during bulk duplicate overwrites existing elements

MLflow: trace API endpoints lack proper authorization validators

Craft CMS: Potential authenticated Remote Code Execution via referrer redirect

Craft CMS: Authorship spoofing in `entries/save-entry` via pre-check/post-mutation authorization gap

Craft CMS: DOM XSS via GitHub issue title in CraftSupport widget

Craft CMS: Missing peer-permission check in `AssetsController::actionDeleteFolder` allows deletion of other users' assets

Wagtail: Reflected XSS in dynamic image URL generator view