Advisory Catalog

Hydro: Insufficient session expiration when recreating sessions

http-proxy-middleware `router` host+path substring matching allows Host-header-driven backend routing bypass

jodit: Prototype pollution in Jodit via Jodit.modules.Helpers.set()

Cotonti: Cross-Site Request Forgery in the Personal File Storage (PFS) module

BBOT: Arbitrary File Write in postman_download Module

BBOT: Path traversal (Zip-Slip) in unarchive module - incomplete fix for CVE-2025-10284

marimo contains a reflected cross-site scripting vulnerability in the notebook page

joserfc: b64=false RFC7797 JWS payloads bypass JWSRegistry payload-size limits during deserialization

CakePHP: View::element() is missing a path containment check

Hermes Agent creates response_store.db and webhook_subscriptions.json with world-readable permissions (mode 0o644)

The JSON:API and REST modules allow you to upload image files to image fields. The validation rules check the file extension of the uploaded file but not the file MIME type. This may allow a malicious user to upload a file that is not an image. Certain web-server configurations may serve the uploa

Drupal core ships a `rebuild.php` front controller that can be used to rebuild Drupal (clearing the caches and rebuilding the container) when the site is in an unexpected condition. This script doesn't correctly check the Host header against the list of trusted host patterns. This could result in c

Drupal core contains a chain of methods that could be exploitable when an insecure deserialization vulnerability exists on the site. This so-called "gadget chain" presents no direct threat, but is a vector that can be used to achieve remote code execution or SQL injection if the application deserial

[SA-CORE-2019-003](https://www.drupal.org/sa-core-2019-003) added protection for fields that store serialized data to disallow direct writes via web services. The above fix did not cover all potential attack vectors for JSON:API. An attacker with appropriate JSON:API write permission could potentia

CakePHP Authentication: Open redirect weakness via backslash bypass

undici vulnerable to HTTP header injection via Set-Cookie percent-decoding

undici vulnerable to cross-user information disclosure via shared cache whitespace bypass

Claude Code: Out-of-Band Data Exfiltration via Pre-Approved HuggingFace Domain in WebFetch

Open WebUI: Any authenticated user can read other users' private notes via Socket.IO

Open WebUI: Authenticated users can target arbitrary configured Ollama backends via unguarded url_idx path parameter

Open WebUI: RAG ACL Bypass in Milvus Multitenancy Mode

OpenStack Horizon RC file generation does not escape special characters in project names

Open WebUI BOLA: `search_knowledge_files` Allows Unauthorized Knowledge Base File Enumeration

Open WebUI Prompt history IDOR: unbound history_id allows cross-prompt read and deletion

Open WebUI: Sibling-Prefix Path Traversal via /cache/{path}

Open WebUI: Cross-user file disclosure via /api/chat/completions image_url field

Open WebUI IDOR: Calendar event re-parenting allows writing events into another user's calendar

NocoDB: Server-Side Request Forgery via Spreadsheet Import Endpoint

NocoDB: Server-Side Request Forgery via Base Migration URL

NocoDB: Stored Cross-Site Scripting via Secure Attachment

NocoDB: Refresh Tokens Persist Through Password Recovery

NocoDB: Server-Side Request Forgery via Spreadsheet Fetch URL

vLLM: OOM Denial of Service via Audio Decompression Bomb

vLLM: incomplete CVE-2026-22778 fix leaks PIL repr addresses via Anthropic router

vLLM: GGUF dequantize kernel int truncation exposes uninitialized GPU memory in multi-tenant serving

vLLM: temperature=NaN and temperature=Infinity bypass validation and propagate to GPU kernels

Chrome DevTools for agents: daemon.pid write follows symlinks in /tmp fallback runtime directory

n8n: Wrong OAuth Scope on Evaluation Test Runs Endpoints

Pi Agent: Pi loads project-local extensions without approval

Laravel Framework: Temporary Signed URL Path Confusion

pydantic-ai: SSRF blocklist bypass via IPv4-compatible, SIIT/IVI, and local NAT64 IPv6 addresses (incomplete fix of CVE-2026-46678)

vLLM: image EXIF Rotation & PNG tRNS Transparency Not Normalized, Causing Mismatch Between Model Input and Expectations

n8n: Denial of Service via ZIP decompression in webhook workflow

n8n: Public API Execution Retry Authorization Bypass

n8n: Python Code Node AST Validator Bypass

n8n: Reflected XSS via Facebook, WhatsApp, and Microsoft Teams Trigger Webhook Verification Endpoints

OpenClaw: Tool group policy callers could accept unvalidated group IDs

OpenClaw: macOS Swift exec allowlist missed combined POSIX inline flags

OpenClaw: Hostname checks could treat trailing-dot hosts inconsistently

OpenClaw: Config recovery could restore openclaw.json with broad file permissions