Advisory Catalog

Apify Model Context Protocol (MCP) server: Actor MCP path authority injection leaks Apify token

Jodit Editor: Mutation XSS in jodit clean-html via a MathML/style rawtext carrier

sigstore's `certificateOIDs` verification constraints are silently dropped and never enforced

Kimai Password Reset Link Remains Valid After Password Change

Gradio FileExplorer preprocess path traversal allows files outside root_dir to reach callbacks

aws-cdk-lib: OS Command Injection in NodejsFunction Docker Bundling

repomix Vulnerable to Command Injection (RCE) via `--remote-branch` Argument Injection

Twig: Sandbox filter, tag and function allow-list bypass when sandbox state changes between renders for a cached `Template`

Cortex has Untrusted Project Bootstrap Code Execution via `CLAUDE_PROJECT_DIR`

wetty vulnerable to DOM XSS via file-download filename

auth-fetch-mcp has SSRF Protection Bypass via IPv4-mapped IPv6 Loopback

Ray: Arbitrary code execution via ray.data.read_webdataset default decoder: pickle.loads(value) and torch.load(weights_only=False)

phpMyFAQ privilege escalation: GroupController::updatePermissions lets a GROUP_EDIT admin grant rights they do not hold

electron-updater: Cross-origin redirect leaks `PRIVATE-TOKEN` and mixed-case `Authorization` credentials in `builder-util-runtime`

electron-updater: Uncontrolled search path elements within `AppImage` built by `app-builder-lib`

Twig: Sandbox `__toString()` policy bypass via `Traversable` in `join` and `replace` filters

Twig: Sandbox `__toString()` policy bypass via dynamic mapping keys

@adonisjs/bodyparser has an incomplete fix for CVE-2026-25754

@cedar-policy/authorization-for-expressjs has an authorization bypass via query string manipulation

DeepTutor missing MCP tool authorization allows non-admin users to invoke unrestricted tools

Paymenter has URL parameter injection that bypasses paid plan limits at checkout

Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability

brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups

nltk: Arbitrary File Read via Path Traversal in nltk.data.load() through Percent-Encoded Sequences

Claude Code: Sandbox Escape via Git Worktree Path Confusion Allows Unsandboxed Code Execution

fast-uri vulnerable to host confusion via failed IDN canonicalization

pnpm: Path traversal in configDependencies env lockfile allows symlink creation outside node_modules/.pnpm-config

pnpm: `patch-remove` could delete project-selected files outside the patches directory

pnpm: Hoisted install imports lockfile alias outside node_modules

SolidInvoice: IDOR in LiveComponent allows same-company cross-user access to API tokens and notification transport settings

better-helperjs Vulnerable to Directory Traversal via String Prefix Bypass in Static Server

Muhammara has a NULL pointer dereference in LZWDecode filter when DecodeParms omits EarlyChange key

Flawfinder output manipulation via untrusted filenames and source text

python-socketio: Binary attachment accumulation can cause denial of service

python-engineio has unbound thread allocation that can cause denial of service

python-engineio has possible denial of service due to maximum payload size sometimes not being enforced

LinkifyIt#match scan loop has quadratic algorithmic complexity

extract-zip unvalidated symlink path traversal

The Tealium iQ Tag Management module provides Drupal integration with Tealium iQ. `tealiumiq` stores some data as PHP-serialized strings. In some situations, malicious data can be written directly to the field. This can lead to an Object Injection vulnerability when the data are unserialized. This

Apache Airflow FTP provider: FTP Provider does not protect FTPS data channel (missing PROT_P)

Lemur has an authorization bypass in StrictRolePermission / AuthorityCreatorPermission

pnpm: `stage download` writes outside its destination directory via manifest name/version traversal

pnpm: Project env lockfile can short-circuit package-manager resolution and execute lockfile-selected pnpm bytes

pnpm: Repository-controlled configDependencies can select a pacquet native install engine

pnpm: Manifest identity spoof satisfies allowBuilds and runs attacker lifecycle

pnpm: Unsafe default behavior breaks integrity check

pnpm Has an Integrity Check Bypass via Missing Lockfile Integrity Field

pnpm: Transitive dependency alias path traversal allows project path override via symlink replacement

pnpm Vulnerable to Arbitrary File Write/Delete via Malicious Patch File (Path Traversal)

pnpm: Git Fetch Argument Injection via Lockfile resolution.commit