Advisory Catalog

Linux Kernel Out-of-Bounds Write Vulnerability

shell-quote: Quadratic-complexity Denial of Service in `parse()` (CWE-407)

Tiptap contains an input validation vulnerability resulting in DoS

Angular's deprecated package has a Cross-Site Scripting issue

XSS in Ghost's ActivityPub client

Mistune: Potential DoS via quadratic-time parsing in parse_link_text

Style Dictionary - Prototype Pollution in convertTokenData utility function

Snipe-IT API Vulnerable to Cross-Tenant Accessory Injection

motionEye's Absolute Path Traversal in Media File Handlers Allows Arbitrary File Read

OctoPrint has possible file exfiltration via query parameters on upload endpoints

Glances has arbitrary file write and command execution via `secure_popen` redirection and chaining operators in AMP command configuration

AVideo has an incomplete fix of CVE-2026-33482: sanitizeFFmpegCommand still allows a single '&' (background operator), giving OS command execution at the same execAsync sh -c sink

Language Servers for AWS vulnerable to arbitrary file write

Language Servers for AWS Vulnerable to Arbitrary Code Execution

OpenHarness remote resume commands expose other users' saved session snapshots

@budibase/backend-core has potential SSRF DNS rebinding bypass in outbound fetch validation

@actual-app/sync-server: Disabled OpenID users keep access through existing session tokens

Budibase: POST /api/attachments/:datasourceId/url is unauthenticated and lets anonymous callers mint S3 PUT pre-signed URLs using stored datasource IAM credentials

vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.22.1, the vLLM Dockerfile is vulnerable to a dependency confusion attack through the flashinfer-jit-cache package. The package is installed from a custom index (flashinfer.ai/whl/) using --extra-index-url, but the p

Budibase: Unauthenticated S3 signed upload URL generation allows arbitrary writes with stored datasource credentials

Budibase has an Account Impersonation Issue — Chat Identity Link Hijacking via Missing Consent & CSRF

Filament: Multi-factor authentication (app) recovery codes can still be used multiple times via concurrent submission

Glances: XML-RPC Multi-Origin CORS Configuration Silently Falls Back to Wildcard (Incomplete Fix for CVE-2026-33533)

Glances has Insecure Pickle Deserialization in its Version Cache that Leads to Arbitrary Code Execution

Glances is Vulnerable to Command Injection via KVM/QEMU VM Domain Names in glances/plugins/vms/engines/virsh.py

AVideo Vulnerable to Unauthenticated .env File Exposure via Official Docker Compose Configuration

Apache Doris MCP Server is vulnerable to SQL Injection via metadata query path

phpMyFAQ has an incomplete fix for GHSA-xvp4-phqj-cjr3 — editUser() and updateUserRights() lack authorization guards

Craft CMS has authenticated path traversal in `assets/icon`, allowing local `.svg` file read

Craft CMS: RCE via missing cleanseConfig in FieldsController::actionRenderCardPreview

Anki's local HTTP server does not sufficiently validate requests

Lokka: Azure Resource Manager URL path validation issue

@jhb.software/payload-cloudinary-plugin: Arbitrary Cloudinary API Parameter Signing

LangSmith SDK TracingMiddleware: Arbitrary server-side file read

appium-mcp: Unescaped Locator Data XSS in MCP-UI Resource (createLocatorGeneratorUI)

EverOS: Path traversal in EverOS /api/v1/memory/add via unvalidated sender_id

Uni-CLI: Legacy HTTP MCP transport accepted browser-originated localhost requests

stigmem-node: decay sweep expires and counts facts across all tenants (cross-tenant BOLA)

stistigmem-node: quarantine review surface exposes and mutates other tenants' quarantined facts (cross-tenant BOLA)

stigmem-node: RTBF tombstones are mis-attributed and suppress reads tenant-blind (cross-tenant BOLA)

MessagePack for Python: Out-of-bounds read / crash on Unpacker reuse after a caught error

SearXNG MCP Server: DNS-resolved Private Hostname SSRF in `web_url_read`

SearXNG MCP Server: Unbounded Response Body Read Bypasses URL Size Limit in `web_url_read`

Network-AI: Poisoned environment backup manifest allows arbitrary recursive deletion during backup pruning

symfony/ux-toolkit: Path Traversal Allows Arbitrary File Write and Read via Crafted Recipe Manifest

StarCitizenWiki Extension Embed Video: Stored XSS via malformed src url with $wgEmbedVideoRequireConsent enabled

Langflow: Unauthenticated DoS through multipart form boundary file upload

Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow

py7zr: O(n^2) algorithmic complexity DoS in PackInfo._read()

py7zr: Decompression bomb (zip bomb) denial of service via unchecked extraction size