Advisory Catalog

vLLM: Mirrored multimodal IPC caches desync after a rejected request — a later request reusing the same media hash trips a receiver assertion in the engine core

vLLM: Harmony tool continuations drop `cache_salt` — restoring a cross-tenant prefix-cache membership oracle

GraphQL Tools has prototype pollution in well-established utility function `mergeDeep`

fast-copy: Stack exhaustion in fast-copy when copying deeply-nested values

@vue/server-renderer: XSS via missing CR in attribute-name blacklist

Quart leaks raw request body (incl. plaintext passwords) to stdout via stray debug print in Body.__await__

Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability

Docling: Arbitrary local file read via draw:image xlink:href in the OpenDocument backend

Docling: `enable_local_fetch` is not enforced in HTML browser-rendering mode

Docling: Unbounded table rowspan/colspan in HTML, JATS, ODS and BoxNote backends causes CPU/memory exhaustion

Docling: Crafted DoclingDocument JSON embeds local image files into converted output

Docling: METS-GBS archive member limit enforced after full member enumeration (memory exhaustion during format detection)

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.83.0 until 2.131.0, the KServeV2OcrModel class defined in docling/models/stages/ocr/kserve_v2_ocr_model.py sends page images to its configured endpoint without checki

Docling imports plugin entry points before the allow_external_plugins check

Docling has arbitrary file read/write (and command execution when shell-escape is enabled) when rendering untrusted TikZ with the opt-in Tectonic engine

Docling has SSRF guard bypass in remote resource fetching (DNS rebinding / multi-record resolution; no IP validation in HTML render mode)

Docling: Configured HTTP headers sent to every remote image host named by a document

Langflow: IP Spoofing Bypass via `X-Forwarded-For` Allowing Remote Configuration Write

Langflow has Authenticated Cross-Project File Disclosure via Unscoped MCP Resource Handlers

Langflow : Cross-user flow access and vertex execution via deprecated /api/v1/build/{flow_id}/vertices endpoints

Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration

Ghost: Path Traversal Vulnerability in Ghost ImageSize Service

Ghost: Server-Side Request Forgery in Webhook Trigger

Ghost: Authorization Bypass in Comments Feature

Ghost: Authorization Issue Allowed Author Role to Delete any Post

Ghost: Stored XSS via File Uploads on Local Storage

Ghost: Editors Could Promote Staff Users to Their Own Role

Ghost: Remote Code Execution via Theme Translation Files

Ghost: Path Traversal via Locale Setting

Ghost: Invite Token Disclosure in Ghost Admin API

Ghost: Password Hash Ordering Disclosure in Ghost Admin API

Ghost: Stored XSS via Bookmark Card Images

Ghost: Stored XSS via oEmbed Photo Responses

Ghost: Stored XSS via SVG Uploads Bypassing Sanitization

Ghost: Private IP Filtering Bypass via IPv6 Transition Addresses

Ghost: Server-Side Request Forgery in Bookmark Fetching

Ghost: Regular Expression Denial of Service in Content Import

Ghost: Regular Expression Denial of Service in External Media Inliner

Ghost : Stored XSS via SVG Files in Content Imports

Ghost: Stored XSS via Embed Card Previews

Ghost: Remote Code Execution via Bookmark Card Images

mppx-condition-gate: Free-access path grants on a self-declared wallet without proving control

Kunstmaan CMS: MediaBundle extension blacklist bypass allows authenticated administrators to upload executable PHP files leading to remote code execution