Advisory Catalog

SQLFluff: Recursive Stack Overflow in Parser

SillyTavern: SSRF in SearXNG Search Proxy via Unvalidated baseUrl

@libp2p/kad-dht: Unvalidated PUT_VALUE records allow unbounded disk exhaustion on DHT server nodes

PenPot MCP REPL server binds to 0.0.0.0 with unauthenticated /execute endpoint — RCE

Budibase: Unrestricted Upload of File with Dangerous Type

Github Actions issued GITHUB_TOKEN disclosure in GitHub Actions logs

BillaBear is Vulnerable to SQL Injection in the EventRepository

auth-fetch-mcp: SSRF and disk exfiltration via unvalidated auth_fetch and download_media URLs

ModelScope is vulnerable to arbitrary code injection via a crafted module

HAXcms: Mass Token Exfiltration and Cross-Tenant Hijack

HAX open-apis: Credential Theft via Server-Side Request Forgery (SSRF) in open-apis

HAXcms createSite SSRF Enables Arbitrary File Read

TYPO3 SQL Injection in extension "Address List" (tt_address)

TYPO3 Remote Code Execution in extension "Site Crawler" (crawler)

georgringer/news has SQL Injection in extension "News system" (news)

ExifReader is vulnerable to denial of service via crafted ICC `mluc` tag

MLFlow Creates a Temporary File With Insecure Permissions

NiceGUI: Local file disclosure via Docutils file insertion in ui.restructured_text()

Summarize contains a path traversal vulnerability

CloakBrowser: Unauthenticated path traversal via fingerprint parameter in cloakserve leads to arbitrary directory deletion

Budibase: Builder-to-Admin Privilege Escalation via onboardUsers Endpoint Without SMTP Configuration

n8n-MCP: Multi-tenant MCP requests fall back to process-level n8n credentials when tenant headers are absent or incomplete

@tmlmobilidade/utils has prototype pollution in its setValueAtPath

parse-nested-form-data has Prototype Pollution via `__proto__` in FormData field names

shopper/framework: Authorization bypass in multiple Livewire admin components

CI4MS: Stored XSS in Pages Module Content via Broken html_purify Validation Rule

brace-expansion: Large numeric range defeats documented `max` DoS protection

ngrok is Vulnerable to Command Injection

eduMFA Passkeys: missing expiration flag may allow replay attacks and reuse of old challenges

eduMFA: Incorrect InnoDB snapshot isolation possibly allows token reusage

form-data-objectizer: Prototype pollution in form-data-objectizer via bracket-notation form keys

Graphite Has a Pickle Deserialization Vulnerability

jsondiffpatch patch APIs are vulnerable to prototype pollution

AVideo: OS command injection in on_publish.php execAsync via unescaped m3u8 URL

SimpleSAMLphp casserver FileSystemTicketStore path traversal allows out-of-ticket-directory read/unserialize and conditional deletion

Authenticated Sharp users can download unrelated Laravel Storage objects through the generic download endpoint

Budibase: `PUT /api/datasources/:datasourceId` is protected only by `TABLE/READ` permission instead of builder access, allowing any authenticated app user to overwrite datasource connection parameters including host, port, and URL

Budibase: SSRF Bypass via HTTP Redirect in REST Datasource Integration

Budibase: SSRF in AI Extract File Automation Step via Missing IP Blacklist Validation

Better Auth: Rate limiter keys IPv6 addresses individually and is bypassable via prefix rotation

Microsoft APM: Symlinks under `.apm/prompts/` and `.apm/agents/` are dereferenced during `apm install`, copying host-local file contents into the project tree

Pipecat: Path Traversal in Pipecat Runner `/files` Endpoint — Arbitrary File Read via `%2F`-Encoded Separator

NukeViet CMS: Stored Cross-Site Scripting (XSS) via insufficient server-side input sanitization in Request class

@joplin/onenote-converter: Path traversal in OneNote importer allows overwriting arbitrary files

ws: Uninitialized memory disclosure

smtp-server's command parser memory exhaustion denial-of-service

MLflow: unauthenticated access to certain FastAPI routes

python-utcp: Full Process Environment Exposed to CLI Subprocess - Secrets Leakage via Command Injection

@ranfdev/deepobj has a Prototype Pollution vulnerability

DeepSeek TUI has SSRF via HTTP Redirect Bypass in fetch_url Tool