Advisory Catalog

OpenClaw: Internal/webchat command auth could inherit ownerAllowFrom wildcard state

OpenClaw: Slack reaction events could ignore reaction notification settings

OpenClaw: Focus command could miss controlScope enforcement

OpenClaw: Active Memory write scope could mutate global config

OpenClaw: memory-wiki shared search could miss session visibility checks

OpenClaw: Exported session HTML could keep unsafe markdown links

LangGraph Checkpoint: Unsafe JSON deserialization in checkpoint loading

n8n: Merge Node SQL Mode Prototype Pollution

n8n: Prototype Pollution enables confused-deputy execution via public webhooks

n8n: Missing Token Validation on Microsoft Agent 365 Trigger and Stripe Nodes

n8n: Wrong OAuth Scope On Evaluations Test Run Creation Endpoint

n8n: NoSQL Injection in MongoDB Node Find And Replace Operation

n8n: SQL Injection in Postgres v1/TimesclaeDB Nodes

n8n: Git Node Clone and Push Operations Bypass File Sandbox

Langflow: Unauthenticated Shareable Playground arbitrary local or S3 file read

Langflow: Path Traversal in Knowledge Bases API via Creation Endpoint

phpseclib: X.509 certificate validation sends attacker-controlled outbound requests (server-side request forgery) via Authority Information Access

LangChain: Path traversal and sandbox escape in LangChain file-search middleware and loaders

Astro: XSS via Unescaped Attribute Names in Spread Props

@astrojs/netlify broadens Astro image.remotePatterns in Netlify Image CDN config

hono: Body Limit Middleware can be bypassed on AWS Lambda by understating `Content-Length`

hono: Lambda@Edge adapter keeps only the last value of a repeated request header, dropping the rest

hono: Path traversal in `serve-static` on Windows via encoded backslash (`%5C`)

hono: AWS Lambda adapter merges multiple `Set-Cookie` headers into one value, dropping cookies on ALB single-header and Lattice

Bleach clean() / Cleaner() fails to sanitize dangerous URI schemes in allowed formaction attributes

Bleach linkify(parse_email=True) CPU exhaustion via unbounded email regex scanning

pypdf: Possible infinite loop when processing outlines/bookmarks in writer

pypdf: Possible infinite loop when retrieving fonts for layout-mode text extraction

Nuxt dev server vite-node IPC socket is world-connectable on Linux

Nuxt: URL-handling weaknesses in `navigateTo` and `reloadNuxtApp`: SSR open redirect, client-side script execution via the `open` option, and protocol-relative bypass in `reloadNuxtApp`

pypdf: Possible large memory usage for form XObjects during text extraction

pypdf: Inefficient decoding of FlateDecode PNG predictor streams

Slim has Reflected XSS in the HtmlErrorRenderer

markdown-it: Quadratic complexity DoS in smartquotes rule via replaceAt string operations

OpenTelemetry Core: Unbounded memory allocation in W3C Baggage propagation

Starlette: Unvalidated request path concatenated into authority poisons request.url.hostname

python-multipart: Content-Disposition parameter smuggling via RFC 2231/5987 extended parameters

Starlette: Arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr`

UAParser.js: Unbounded `Sec-CH-UA-Model` parsing can trigger ReDoS in `withClientHints()`

protobufjs: Memory amplification from preserved unknown fields in binary decode

DOMPurify: Trusted Types policy survives `clearConfig()` and can poison later `RETURN_TRUSTED_TYPE` output

aiohttp: Incomplete websocket frame payloads bypass memory limits

aiohttp: HTTP/1 Pipelined Requests Queue Without Limit

aiohttp: Unread Compressed Request Bodies Bypass client_max_size During Cleanup

aiohttp: C HTTP Parser Bypasses max_line_size for Fragmented Lines

aiohttp: DigestAuthMiddleware Applies Credentials to Cross-Origin Redirect Challenges

DOMPurify: SAFE_FOR_TEMPLATES bypass - template expressions survive sanitization inside <template> content when using DOM output modes

DOMPurify IN_PLACE Sanitization Bypass via Attached Shadow Root Inside <template>.content

DOMPurify: `IN_PLACE` mode trusts attacker-controlled `nodeName` on live non-form nodes, allowing script retention and XSS via attacker-supplied DOM objects

DOMPurify: Hook mutation of `data.allowedTags` / `data.allowedAttributes` permanently pollutes `DEFAULT_ALLOWED_TAGS` / `DEFAULT_ALLOWED_ATTR`