Advisory Catalog

Ghost: Mobiledoc image-size fetch SSRF

Ghost: Server-side request forgery via DNS rebinding in external request handling

Ghost: Private IP filtering bypass to make server-side requests to internal services

The Salesforce Suite of modules integrates Drupal with Salesforce. The Salesforce module does not properly validate the OAuth handshake during interactive authentication, allowing an attacker to hijack the authorization token and bind the site to an attacker's Salesforce account. This vulnerabilit

Geolocation modules adds a field to store coordinates and provides supporting plumbing for views and other modules. One of the provided views filters does not sufficiently sanitize values if exposed to user input resulting in a SQL injection vulnerability. This vulnerability is mitigated by the fa

The optional Paragraphs Library module allows the reuse of paragraphs in multiple places. The module doesn't sufficiently restrict access to direct child paragraphs of library items through API endpoints. This vulnerability is mitigated by the fact the paragraphs\_library module must be in use a

The optional Paragraphs Library module allows the reuse of paragraphs in multiple places. The module doesn't sufficiently restrict access to unpublished library items in lists. This vulnerability is mitigated by the fact the paragraphs\_library module must be in use, and that an attacker must ha

The module adds support for the mirador viewer in WissKI and enables annotations on images via the mirador viewer. It does not sufficiently check the submitted parameters via a route and writes these to the session object without further checks, which can lead to Access Bypass. This vulnerability

This module enables you to take payments through the Global Payments / Realex Hosted Payment Page (HPP), either via a lightbox iframe or via a full-page redirect. When the gateway is configured with the **redirect** payment method, the module doesn't sufficiently verify the authenticity of the paym

This module provides the entity type and runtime for Drupal AI Agents, enabling agents to use tools. Under certain circumstances, the agent inherits deterministic parameters when invoking the same tool in one request, which can lead to information disclosure.

This module provides the entity type and runtime for Drupal AI Agents, enabling agents to use tools. The module does not sufficiently check the required permissions when a tool loads content entities. This vulnerability is mitigated by the fact that an agent must be configured to use the affected

The module and certain submodules (AI Automators, AI Translate, AI API Explorer, AI Content Suggestions) provide the ability to use an LLM to generate HTML or Markdown and preview it in a browser. Under certain circumstances, rendering of this HTML can lead to Cross Site Scripting, or exposing secr

This module enables you to collect feedback from your site visitors on content pages, presenting Yes/No buttons and providing dashboards for administrators to review the responses. The module doesn't sufficiently sanitize several administrator-configured response messages (the "Yes response", "No r

Snipe-IT has Improper Authorization in File Deletion (IDOR)

Snipe-IT Vulnerable to Privilege Escalation via Missing admin Permission Check in User Creation

Snipe-IT has Multi-Tenancy Bypass via Bulk Asset Update

Snipe-IT has a 2FA reset privilege bypass

Snipe-IT Vulnerable to User Account Escalation via CSV Import

Flask-Security has an Open Redirect issue

Snipe-IT's TOTP is Brute-Forceable Due to Missing Rate Limiting on `POST /two-factor`

Snipe-IT Vulnerable to Privilege Escalation for self via API Permissions Assignment

Snipe-IT's selectlist visibility is too permissive

foreman-mcp-server Inserts Sensitive Information into Log File

AVideo Meet plugin: anonymous-to-admin stored XSS via unescaped participant User-Agent in getMeetInfo.json.php Participants panel

motionEye's missing authentication on ActionHandler allows unauthenticated camera action execution

OpenStack Swift vulnerable to authenticated server-side request forgery

OctoPrint has XSS in its Suppressed Command Notifications

OpenHarness remote project-context commands allow persistent prompt poisoning

@actual-app/web has CSV Formula Injection in Transaction Export via Imported Payee/Notes Fields

zeroconf: Unvalidated rdlength in record payload readers allows LAN-local cache corruption via crafted mDNS packet

devbridge-autocomplete has XSS in its default formatters: formatGroup and formatResult fail to escape HTML in untrusted inputs

Filament: Unauthenticated temporary file upload on auth pages

Filament: Unvalidated ImageColumn and ImageEntry values can be used for XSS

Filament: Timing-based user enumeration on login page

@actual-app/sync-server's missing authorization on GET /secret/:name allows non-admin OpenID users to enumerate admin-configured bank-sync secrets

@actual-app/cli `--format csv` Output Vulnerable to CSV Formula Injection via Custom `escapeCsv` Helper

Glances: XML-RPC Server Missing Host Header Validation Enables DNS Rebinding Attack

pypdf: Possible infinite loop when processing threads/articles in writer

Paymenter has broken object level authorization via service reference manipulation on ticket creation

Paymenter doesn't reset email verification status after email change

Paymenter has Blind Unauthenticated SSRF on the Paypal gateway module

AVideo has an Authorize.Net Webhook Signature Bypass that Enables Wallet Balance Inflation via Forged Payment Data

AVideo's Privilege Escalation via Unguarded Permission Parameters in signUp API Allows Self-Granting Upload/Stream/Meet Permissions

motionEye's World-Readable Configuration File Exposes Admin Password Hash

motionEye has an Arbitrary File Read via Path Traversal in Picture/Movie Preview Endpoint

Keras: DiskIOStore permits path traversal through crafted layer names

Craft CMS: Authenticated "assets/preview-thumb" discloses signed fallback transform preview link to CP users without asset-view permission

LiteLLM: SSO Debug Flow Has Improper Authentication

LiteLLM: MCP Proxy Has Improper Authentication

pydantic-settings: NestedSecretsSettingsSource follows symlinks outside secrets_dir, enabling local file read and bypassing secrets_dir_max_size