Advisory Catalog

Schema.org has cross-site scripting (XSS) via script break-out in toScript() output

wetty vulnerable to DOM XSS via file-download filename

EasyAdminBundle has path traversal and reflected XSS in Flag and Icon Twig components

auth-fetch-mcp has SSRF Protection Bypass via IPv4-mapped IPv6 Loopback

@jshookmcp/jshook: ICMP probe and traceroute skip local-network SSRF authorization

The Colorbox module integrates with the Colorbox JavaScript library to display content in an overlay above the page. The module doesn't sufficiently protect against injection of malicious JavaScript under certain scenarios. This vulnerability is mitigated by the fact that an attacker must have a r

This module enables you to test and run AI-driven workflows interactively through a chat interface. The module doesn't sufficiently re-evaluate a human-in-the-loop approval gate where the workflow iterates more than once. This may result in execution of workflows that were not intended by the user.

This module enables you to test and run AI-driven workflows interactively through a chat interface. The module doesn't sufficiently enforce permissions on certain endpoints. Attackers may be able to trigger workflow execution (incurring LLM spend and tool side effects) or send messages into other u

The Canvas module allow you to upload image files via a custom API. The validation rules check the file extension of the uploaded file but not the file MIME type. This may allow a malicious user to upload a file that is not an image. Certain web-server configurations may serve the uploaded file wi

The Canvas AI submodule allows you to upload image files via a custom API to use within the AI web chat. These file uploads are insufficiently validated before being written to Drupal's temporary directory. In some cases, this may lead to cross-site scripting (XSS).

Ray: Arbitrary code execution via ray.data.read_webdataset default decoder: pickle.loads(value) and torch.load(weights_only=False)

Keras: HDF5 virtual datasets can disclose local files

phpMyFAQ privilege escalation: GroupController::updatePermissions lets a GROUP_EDIT admin grant rights they do not hold

electron-updater: Cross-origin redirect leaks `PRIVATE-TOKEN` and mixed-case `Authorization` credentials in `builder-util-runtime`

electron-updater: Uncontrolled search path elements within `AppImage` built by `app-builder-lib`

Langflow: Code Injection Vulnerability in Code Validation Endpoint

Paymenter has race condition in payWithCredit() that enables credit double-spend

Twig: Sandbox property allowlist bypass via the `column` filter under `SourcePolicyInterface`

Twig: Sandbox `__toString()` policy bypass via `Traversable` in `join` and `replace` filters

Twig: Sandbox `__toString()` policy bypass via dynamic mapping keys

Twig: Sandbox state regression in deprecated internal wrappers in `src/Resources/core.php`

Sigstore Timestamp Authority has OOM due to unbounded metric label cardinality

Fulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution for Meta-Issuer Paths, with Kubernetes Service-Account Token Leakage

@adonisjs/bodyparser has an incomplete fix for CVE-2026-25754

Probo has an open redirect bypass via path normalization

Nightingale exposes datasource credentials to low-privilege users

Fission: Environment Runtime.Container and Builder.Container SecurityContext bypass allows privileged pod creation

Fission builder pods auto-mount the fission-builder ServiceAccount token in the user-supplied builder container

Fission Environment CRD podspec passthrough enables hostPID/hostNetwork/privileged pods, node escape

Fission Container Executor Function PodSpec Injection Leading to Node Escape

Fission Environment CRD PodSpec Injection Leading to Node Escape and Cluster Takeover

Fission: Cross-namespace Environment reference via unvalidated EnvironmentRef in Function admission webhook

Fission: Cross-namespace Package read via unvalidated PackageRef in Function admission webhook

Fission: Cross-namespace event leakage via KubernetesWatchTrigger allows persistent tenant surveillance

Fission: Cross-namespace Environment reference in Package allows build-time command execution and SA token exfiltration

Fission: MessageQueueTrigger scaler manager materializes Secret values into Deployment envvars and accepts arbitrary user PodSpec

@cedar-policy/authorization-for-expressjs has an authorization bypass via query string manipulation

Kahi has privilege-drop and socket/log permission issues

DeepTutor missing MCP tool authorization allows non-admin users to invoke unrestricted tools