Advisory Catalog

n8n: MySQL v1 Node executeQuery Operation Allows SQL Injection via Unparameterized Expression Interpolation

n8n: Improper Authorization Allows Authenticated Users to Assign Workflows to Folders in Other Projects

Grav: Stored CSS injection via Markdown image resize() bypasses prior media style sanitizers in Grav

A vulnerability was found in bentoml OpenLLM 0.6.30. This affects the function async_run_command of the file src/openllm/common.py of the component Model Repository Directory Name Handler. Performing a manipulation of the argument cmd results in command injection. Attacking locally is a requirement.

oasdiff does not enforce --allow-external-refs=false on the git-revision load path (SSRF / local file read)

KEDA has PostgreSQL connection string parameter injection via incomplete whitespace escaping

Flask-Security-Too: WebAuthn reauthentication freshness bypass via cross-user assertion

Goploy: Arbitrary File Read via Path Traversal in /deploy/fileDiff allows Remote Server Compromise

Goploy: Cross-namespace IDOR and RCE via body-supplied row id in project and project_file handlers

ha-mcp: Add-on settings and policy routes are reachable without authentication at the bare root path

aiosmtplib vulnerable to SMTP command injection via CR/LF in sender/recipient address

Kite has an authenticated cluster RBAC bypass in /api/v1/overview

Webauthn: SimpleFakeCredentialGenerator with an empty secret produces predictable fake credentials, weakening username enumeration protection

The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

Root escape via symlink plus trailing slash in os

Invoking Encrypted Client Hello privacy leak in crypto/tls

LocalAI POST /models/apply permits unauthenticated server-side request forgery through gallery URLs

Cognee allows non-superusers to overwrite global LLM configuration

Serena: Unauthenticated Flask dashboard on fixed port enables DNS rebinding → memory poisoning → RCE

@better-auth/scim: Account/provider takeover via missing owner binding on non-org SCIM providers

Better Auth: Stale sessions persist after user deletion across admin, anonymous, and SCIM flows