Advisory Catalog

Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability

vantage6 node has an Improper Access Control issue

Vantage6: Set admin user and password from environment or configuration

NocoDB: OAuth Tokens Persist Through Security Events

NocoDB: OAuth Authorization Code Race Condition

NocoDB: Path Traversal via SQLite Source Filename

NocoDB: SQL Injection via Column Title in Bulk GroupBy

NocoDB: Server-Side Request Forgery via Database Connection Host

NocoDB: Cross-Workspace Integration Use in Connection Test

NocoDB: User Enumeration via Sign-In Timing

NocoDB: Plaintext Password Comparison in Shared Views

NocoDB: Hidden Column Exposure in Public Shared View Endpoints

NocoDB: Open Redirect via Hash Fragment in hashRedirect Plugin

NocoDB: Reflected Cross-Site Scripting via Password Reset Token

NocoDB: Postgres SQL Injection in Formula `ARRAYSORT`

NocoDB: Hidden LTAR Column Exposure in Public Shared-View Relation Endpoints

MCP Server Kubernetes: kubectl-generic flag injection enables Kubernetes bearer token exfiltration

Vantage6: 2FA can be circumvented with hacked email access

sanic-cors contains an improper regular expression in the try_match() function

decompress: Arbitrary File Write via Archive Extraction (Zip Slip)

Shopware: SSRF in Media External-Link Endpoint Bypasses IP Validation

Shopware: Stored XSS via SVG file upload — no SVG sanitization

Shopware: Unauthorized Payment Trigger for Foreign Orders via /store-api/handle-payment

Shopware: Admin API ACL Bypass in Order State Transition Endpoints

Shopware SSO referer trust leading to an arbitrary redirect target

Shopware: Privilege escalation: non-admin user with user:create ACL can create admin accounts

Shopware: Admin Account Takeover via User Recovery Hash Exposure

Shopware: Privilege Escalation via Sync API Integration Admin Flag Bypass

WWBN AVideo: Stored XSS via Hostile YouTube Video Title in AVideo YouTubeAPI Gallery Section

WWBN AVideo: Unauthenticated Reflected XSS via $_GET['search'] in AVideo YouTubeAPI Gallery Pagination

Strawberry GraphQL's Bypass of MaxAliasesLimiter via Fragment Spreads leading to GraphQL Alias Amplification

Strawberry GraphQL has a Circular Fragment Reference DOS

WebOb: Location header normalization during redirect leads to open redirect - again

Docling: Potential Path Traversal via LaTeX \includegraphics and \input Commands

malla: Stored XSS via Meshtastic node names in multiple frontend pages

backpack/crud is vulnerable to Cross-Site Scripting (XSS)

This module provides spam protection using the CleanTalk cloud service. The module doesn't sufficiently sanitize API response messages before rendering them in HTML output. The `_cleantalk_die()` and `ct_die()` functions output the CleanTalk API response message directly into HTML without proper sa

The module doesn't sufficiently sanitize customer comments in the order receipt email template; this could be exploited to achieve Cross-site Scripting (XSS). This vulnerability is mitigated by the fact that it only affects installations with Checkout (`commerce_checkout`) enabled, and the "Comment

daphne: WebSocket handshake header smuggling through autobahn splitlines() mishandling of non-standard line separators

morgan vulnerable to Log Forging via unneutralized control characters in :remote-user

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Versions prior to 7.260227.0 are vulnerable to XSS in the rendering of email-message observable body data. The content of the body field isn't appropriately sanitized when being rendered. Does requir

AIOHTTP is vulnerable to cross-origin redirect with per-request cookies

React Router's same-origin redirect with path starting // causes open redirect via protocol-relative URL reinterpretation

React Router has stored XSS via unescaped Location header in prerendered redirect HTML

MLflow: Any authenticated user can enumerate all gateway secrets, endpoints, and model definitions

Claw Orchestrator has inefficient regular expression complexity via validateRegex()

Nanobot contains a server-side request forgery vulnerability in the web_fetch tool

Claw Orchestrator is missing authentication for the component API Endpoint

pip: Path traversal in console_scripts/gui_scripts entry point names allows installing scripts outside of target directory

praisonai-platform: Any workspace member can rewrite workspace name, description, and settings via PATCH /workspaces/{id}