Advisory Catalog

oras-go has file store write outside workingDir via symlink traversal

oras-go blob upload vulnerable to credential forwarding via unvalidated Location header

Jodit Editor: Mutation XSS in jodit clean-html via a MathML/style rawtext carrier

Jodit has prototype pollution via Jodit.configure() / ConfigMerge

Silverstripe Framework: Possible XSS attack through media embed

oras-go: Malicious registry can hijack Bearer token realm to exfiltrate credentials and refresh tokens

Rancher has Privilege Escalation from Project Owner to Host

Mailpit: Sibling-endpoint memory-exhaustion DoS via unbounded JSON body on /api/v1/messages, /api/v1/tags, and /api/v1/message/{id}/release (incomplete fix of GHSA-fpxj-m5q8-fphw)

@hey-api/openapi-ts's `buildClientParams` template: prototype chain substitution via unknown `$<slot>___proto__` key

Rancher has over-inclusive team membership expansion in GitHub App authentication provider

Rancher Fleet vulnerable to cross namespace secret disclosure via unvalidated `valuesFrom` references in Helm Deployer

Rancher Fleet has SSRF in Bundle Reader via Unvalidated Helm Repository URL in fleet.yaml

Rancher Fleet has Unauthenticated Webhook: Regex Injection via Unsanitized Repository URL Components

Fleet has PSS Bypass through addLabelsFromOptions in Fleet Agent

Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass

API Platform Core: Relation IRIs are not type-checked: a related resource can be denormalised as the wrong resource type (type confusion)

API Platform Core vulnerable to cross-user attribute leak in JSON:API and HAL item normalizers due to missing isCacheKeySafe gate

sigstore's `certificateOIDs` verification constraints are silently dropped and never enforced

sigstore-js has Insufficient Verification of Data Authenticity

Kimai Password Reset Link Remains Valid After Password Change

Gradio FileExplorer preprocess path traversal allows files outside root_dir to reach callbacks

AWS CLI: Overly permissive File Permissions

aws-cdk-lib: OS Command Injection in NodejsFunction Docker Bundling

repomix: attach_packed_output can bypass file-read secret scanning for supported local files

Concourse login flow has an open redirect issue

repomix Vulnerable to Command Injection (RCE) via `--remote-branch` Argument Injection

pay-rails/pay: non-constant-time HMAC comparison in Paddle Billing webhook signature verifier

Twig: Sandbox filter, tag and function allow-list bypass when sandbox state changes between renders for a cached `Template`

Constrata's coordinator transit engine `ciphertextContainer.UnmarshalJSON` panics on attacker-controlled short ciphertexts

Contrast's Imagepuller registryFor uses unanchored suffix matching, leaking auth credentials and trusted CA configuration to sibling-domain registries

Cortex has Untrusted Project Bootstrap Code Execution via `CLAUDE_PROJECT_DIR`