Advisory Catalog

Cotonti: Cross-Site Request Forgery in the Personal File Storage (PFS) module

Improper neutralization of argument delimiters in AWS Bedrock AgentCore Python SDK install_packages()

PHP Standard Library: HTTP/2 server-side missing content-length validation enables request smuggling

Pimcore CMS Twig Sandbox Bypass via SecurityPolicy checkMethodAllowed

Hermes Agent contains a DNS rebinding vulnerability in WebSocket endpoints that allows remote attackers to bypass Host and Origin validation

Filament: Disabled RichEditor field state can be used for XSS

The Plotly.js Graphing module provides a fully customizable implementation of the open source Plotly.js graphing library. The module stores some data as PHP-serialized strings. In some situations, malicious data can be written directly to the field. This can lead to an object injection vulnerabilit

The Flag attendance field module gives you the ability to add attendance by depending on [Flag module](https://www.drupal.org/project/flag). `flag_attendance_field` stores some data as PHP-serialized strings. In some situations, malicious data can be written directly to the field. This can lead to

undici vulnerable to TLS certificate validation bypass via dropped requestTls in SOCKS5 ProxyAgent

undici vulnerable to cross-origin request routing via SOCKS5 proxy pool reuse

Open WebUI: SSRF Protection Bypass in Playwright Web Loader via HTTP Redirects

Open WebUI: Path traversal / SSRF in terminal server proxy via encoded path traversal

undici WebSocket client vulnerable to denial of service via cumulative fragment bypass

undici WebSocket client vulnerable to denial of service via fragment count bypass

pdfkit: Path traversal in from_string

Open WebUI: Stored XSS to Account Takeover via Model Profile Images

Open WebUI: Forged model meta.knowledge allows cross-user file read and deletion

Open WebUI: Stored XSS in Mermaid Markdown Preview

Open WebUI: Forged chat-file link allows cross-user file read and deletion

Open WebUI: Redirect-Bypass SSRF in OAuth `_process_picture_url` (incomplete-fix sibling of CVE-2026-45401)

Open WebUI: Cross-origin postMessage confirmation bypass via action:submit

Pi Agent: Predictable temporary extension install paths allow local privilege escalation on shared Linux hosts

Laravel Framework: CRLF injection in default email rule

n8n: SecurityScorecard Node Leaks API Token to User-Controlled Host

n8n: MCP Browser HTTP Transport Exposes Unauthenticated Browser-Control Sessions

n8n: Cross-Tenant Credential Takeover via Dynamic Credentials EE Endpoints

n8n: Credential Exfiltration via Permission Bypass

n8n: Stored XSS in Chat Trigger Node

n8n: Microsoft SQL Node Prototype Pollution

yt-dlp: Arbitrary command injection possible if --exec option used with yt-dlp

Crawl4AI: SSRF via proxy settings in the Docker server bypasses the crawl-URL SSRF check

Crawl4AI: LLM credential exfiltration in Docker server via request base_url and env: token resolution

Crawl4AI: SSRF filter bypass in Docker server via IPv6 transition forms (NAT64 / 6to4 / unspecified / v4-mapped)

yt-dlp: File Downloader cookie leak with curl

OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints

OpenClaw: Shell inline-command parsing could miss an allowlist check

OpenClaw: Workspace-derived service PATH could influence trash command selection

OpenClaw: Host environment sanitizer missed two Node.js control variables

OpenClaw: Workspace .env STATE_DIRECTORY could influence bundled runtime dependency roots

OpenClaw: Zalo allowFrom could bind to mutable display names

OpenClaw: Shell positional parameters could weaken strict inline-eval checks

OpenClaw: Linux and macOS exec allowlists skipped configured argument patterns

OpenClaw: Discord allowFrom could bind to mutable display names

OpenClaw: Workspace .env npm_execpath could influence bundled runtime dependency install

OpenClaw: Pairing-scoped device session could restore revoked node token authority

OpenClaw: Workspace .env CLOUDSDK_PYTHON could influence Gmail setup gcloud execution

OpenClaw: MCP Streamable HTTP redirects could forward configured custom headers to another origin

n8n: Same-Origin XSS in Respond to Webhook Node

n8n: Python sandbox escape

vLLM: Security Check Bypass via assert Statement in Activation Function Loading Allows Arbitrary Code Execution