Advisory Catalog

MagicMirror Socket.IO module namespaces bypass configured IP whitelist and allow unauthenticated server-side actions

CKAN MCP Server: Information disclosure via verbose error reflection

NLTK network URL validation permits SSRF to RFC 6598 shared-address-space hosts

Hono: Proxy Helper does not remove response headers listed in the `Connection` header

Mermaid configuration APIs allow prototype pollution

Electron: Off-screen rendering trusts GPU-supplied geometry over shared-memory size

Contao: Possible path traversal in job download URIs

Contao: Server-Side Request Forgery (SSRF) via Unvalidated RSS Feed URL in Feed Reader Module

Contao crawler leaks auth credentials to external hosts

Broadcom VMWare ESX Insufficient Logging Vulnerability

@dynatrace-oss/dynatrace-mcp-server's create_dynatrace_notebook missing the human-approval gate

datamodel-code-generator: Authorization / request headers leaked to cross-origin redirect target when fetching remote schemas

AWS CDK CodeBuild S3 Log Encryption Boolean Inversion

ONNX: Heap-Buffer-Overflow READ in Gemm Version Converter Adapter via Undersized Input Shape

Dompdf: File existence oracle via font-face stylesheet declaration

Dompdf: Chroot Validation Bypass

@astrojs/netlify generates an overly-broad Netlify Image CDN allowlist because remotePatterns.pathname metacharacters are not escaped

@astrojs/node: Backslash-prefixed paths not recognized as internal by trailing-slash redirect

Astro: Cross-site scripting via unescaped transition:* directive values on hydrated islands

Prototype pollution in @feathersjs/commons _.merge via JSON-parsed __proto__

FacturaScripts: Stored XSS in WidgetVariante and WidgetSubcuenta modal lists via HTML-attribute decoding of `Tools::noHtml`-escaped quotes inside `onclick=`

Easy!Appointments: Authorization bypass in Google OAuth provider binding lets any backend user rebind a peer provider's Google sync

Easy!Appointments has server-side request forgery in CalDAV connection test that exposes the deployment's internal network

Easy!Appointments appointments/store and appointments/update allow cross-provider appointment injection — Authorization Bypass

Easy!Appointments disable_booking_message rendered as raw HTML on public booking page — Stored XSS

Parse Server vulnerable to stored XSS via malformed Content-Type bypassing file upload extension blocklist

Apprise forwards configured auth headers across cross-origin HTTP redirects

Open WebUI: Private channel messages can be disclosed through cross-channel thread parent_id binding

Waku has an Open Redirect via `unstable_redirect` Helper

LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks

LiteLLM: Local file read via request-supplied OIDC file references

BBOT's `github_workflows` module could be induced to write a downloaded artifact outside its configured output directory: its path-containment check did not resolve `..`, so a crafted `CODE_REPOSITORY` URL could traverse out of the intended folder. The write is bounded to two directory levels above

BBOT's Symlink guard bypass in unarchive module allows planting symlinks during extraction

A vulnerability was found in bentoml OpenLLM 0.6.30. This affects the function async_run_command of the file src/openllm/common.py of the component Model Repository Directory Name Handler. Performing a manipulation of the argument cmd results in command injection. Attacking locally is a requirement.

Webauthn: SimpleFakeCredentialGenerator with an empty secret produces predictable fake credentials, weakening username enumeration protection

Django: cache middleware may expose private responses when unrelated request cookies are present

Kiwi TCMS vulnerable to stored XSS via JavaScript: URI in extra_link field (TestPlan & TestCase)

Linuxfabrik Monitoring Plugins allow insecure creation of SQLite databases

Kiwi TCMS's /init-db/ page renders and responds to requests after first use

Schema.org has cross-site scripting (XSS) via script break-out in toScript() output

Statamic CMS's incorrect authorization lets view-only users submit Live Preview content reserved for editors

Aimeos Pagible CMS vulnerable to Server Side Request Forgery (SSRF) via DNS rebinding in admin proxy

@cardano402/mcp-server missing spending limits, LAN-exposed HTTP transport, and SSRF via catalog.server.url

neotoma has tenant isolation gap in relationship query endpoints

This module enables you to utilize an agent to use Drupal core actions tools with bypassed access. Certain Drupal core actions, exposed as agent tools did not have correct access validation, and some core actions were missing associated access-level definitions. This vulnerability is mitigated by

This module enables you to use OpenAI as a provider for the AI module. The module doesn't sufficiently sanitize user-supplied URLs, leading to a Server-side request forgery (SSRF) vulnerability. This vulnerability is mitigated by the fact that an attacker must have the access to change the host ur

This module enables you to collect feedback from your site visitors on content pages, allowing them to optionally attach a free-text comment to their Yes/No vote. The module doesn't sufficiently verify authorization over the targeted feedback record when processing a comment submission. This vulne

Snipe-IT's S3 signature image retrieval lacks authorization before temporary URL

BerriAI litellm: UI User Enumeration leads to System-Wide Information Disclosure

BerriAI litellm has SSRF via Unvalidated spec_path URL in MCP OpenAPI Spec Loader