Advisory Catalog

Open WebUI has an Indirect Object Reference (IDOR) in user notes

Open WebUI Vulnerable to Unauthenticated RAG Configuration Disclosure

Open WebUI: Mass Assignment via FeedbackForm extra=allow Allows Feedback User ID Spoofing and Evaluation Data Manipulation

Open WebUI: Sharing models for others to use (read permission) also exposes model details (system prompt leakage)

Open WebUI has an IDOR vulnerability in the pin_channel_message API endpoint

Open WebUI has an IDOR vulnerability in the update_message_by_id API endpoint

Open WebUI: Authenticated users can bypass model access control via exposed query parameter [AI-ASSISTED]

Open WebUI Exposes System Prompt to Regular User [Non-Admin]

Open WebUI vulnerable to blind server side request forgery (SSRF) via the PDF generate function

Open WebUI Has Stored Cross-Site Scripting in SVG Renderer

Open WebUI missing authorization check at the model update function - models from other users can be updated

Open WebUI's API key endpoint restrictions bypassed via `x-api-key` header — full message processing on restricted endpoints

Svelte SSR vulnerable to cross-site scripting via spread attributes

Open WebUI Vulnerable to Cross-Site Request Forgery (CSRF) via Image URL Manipulation

Open WebUI has stored XSS via unsanitized Office/Excel/DOCX file preview rendering ({@html} without DOMPurify)

pyLoad Has Incomplete Fix for CVE-2026-33509 -storage_folder Bypass via Session Directory in pyLoad

Home Assistant MCP Server: YAML config backups written under www/ are served unauthenticated at /local/

Amazon SageMaker Python SDK is missing integrity verification in its Triton inference handler

Open WebUI has Stored Cross-Site Scripting In Profile Picture

dbt MCP Server Transmits All MCP Tool Arguments Including Raw SQL and --vars Credentials to dbt Labs Telemetry by Default Without Redaction

dbt MCP Server has an Argument Injection in dbt CLI Tool Wrappers via node_selection and resource_type Parameters

Microsoft Exchange Server Cross-Site Scripting Vulnerability

TanStack Start - Server Core: Inbound server-function request deserialization could invoke a sibling client-referenced server function

Mistune Image Directive CSS Injection Vulnerability

Mistune TOC Anchor Injection XSS

Synapse pagination Denial of Service

pyzipper has an encryption bypass for small files encrypted using it

@apostrophecms/cli: Command Injection in apos create via Unsanitized Password Input

Strapi Upload Plugin MIME Validation Bypass via Content API

OpenStack Ironic: Pre-Validation Checksum Calculation allows Denial of Service (DoS) via Infinite Block Devices

Strapi has a rate limit bypass on users-permissions plugin via attacker-controlled email keying

This module enables you to open content already on the page within a colorbox. The module doesn't sufficiently sanitize the data-colorbox-inline attribute value before passing it to jQuery, leading to a Cross-Site Scripting (XSS) vulnerability. This vulnerability is mitigated by the fact that an a

Nautobot: Object bulk rename UI actions vulnerable to denial of service by crafted regular expression (REDoS)

Nautobot: REST API permits creation of GenericForeignKey references to objects that the user should not be able to reference

OpenLearnX: Critical Authentication Bypass via JWT Signature Verification Disabled Leading to Account Takeover

Authlib OIDC Implicit/Hybrid Authorization Vulnerable to Open Redirect

SillyTavern has a SSRF vulnerability in the CORS proxy middleware

SillyTavern has a reflected XSS vulnerability in the CORS proxy middleware

mem0 server lacks authentication and authorization controls for its memory creation API endpoint

mem0 server lacks authentication and authorization controls for its memory deletion API endpoint

OpenClaude MCP OAuth Callback: State Check Bypass via error Param Leads to DoS

protobuf.js: Denial of service from crafted field names in generated code

protobuf.js: Prototype injection in generated message constructors

protobufjs has overlong UTF-8 decoding

webpack-dev-server vulnerable to cross-origin source code exposure on non-HTTPS origins

aiwaves-cn agents is vulnerable to resource consumption in the recall_relevant_memories_to_working_memory function

local-deep-research is Vulnerable to HTML Injection via Unescaped User Input in PDF Export (`pdf_service.py:_markdown_to_html`)

MantisBT: Authorization Bypass in Bugnote Editing via Issue Update API

MantisBT is Vulnerable to Reflected XSS in Rendering Dynamic Custom Textarea Field

Mermaid: Improper sanitization of configuration leads to CSS injection