Advisory Catalog

devalue: Residual sparse-array CPU amplification in uneval

devalue: Repeated primitive strings cause quadratic expansion in uneval

next.js cache leak across root param values in nested 'use cache' functions

devalue: Sparse arrays emitted by uneval cause eager allocation when evaluated

devalue: Custom ArrayBuffer revivers can bypass typed-array allocation validation

devalue: stringifyAsync can cause an unhandled rejection despite a caught returned promise

devalue: Malformed null-prototype object keys bypass __proto__ rejection via property-key coercion

Ghost: Authorization Bypass in Comment Like Feature

Tornado: Unbounded query-string argument count allows event-loop-stalling DoS

tornado: CurlAsyncHTTPClient enforces no response-size limit — decompression bomb drives unbounded memory accumulation to OOM

Tornado: StaticFileHandler follows symlinks outside static root (path traversal)

PyJWT.decode() reintroduces options-dict mutation, enabling silent claim-verification bypass on dict reuse

pypdf: Possible large memory usage when retrieving alphabetical page labels

pypdf: Possible long runtimes with large amount of embedded files

pypdf: Possible long runtimes when generating appearance streams

pypdf: Possible long runtimes for partially malformed FlateDecode streams (Follow-up)

pypdf: Possible large memory usage when parsing font data

pypdf: Possible large memory usage for large /ToUnicode streams (Follow-up 2)

pypdf: Possible long runtimes/large memory usage when parsing indirect objects

pypdf: Possible large memory usage when retrieving Roman page labels

piscina: Prototype-pollution gadget in ThreadPool.options allows RCE via execArgv / loadBalancer / env

Mako: Path traversal via drive-letter URI on Windows in TemplateLookup

basic-ftp: Quadratic-time CPU denial of service in Client.list() Unix directory-listing parser (RE_LINE backtracking)

A flaw has been found in vllm-project vLLM up to 0.26.0. This vulnerability affects unknown code of the file rust/src/parser/src/unified/gemma4.rs of the component Gemma4UnifiedParser. Executing a manipulation can lead to denial of service. The attack may be launched remotely. The exploit has been p

Zammad GmbH Zammad Improper Privilege Management Vulnerability

Zammad GmbH Zammad Session Fixation Vulnerability

Angular Server-Side Rendering (SSR): Denial of Service via Numeric URL Matrix Parameters

DOMPurify: IN_PLACE: node-removing afterSanitize hook leaves detached subtree event handlers armed, causing DOM XSS

league/commonmark: DisallowedRawHtml bypassed when a disallowed tag name ends the raw-HTML literal

league/commonmark: Quadratic-time denial of service in the GitHub Flavored Markdown Table extension block-start scan

Axios: CIDR-form NO_PROXY entries are ignored, causing proxy exclusion bypass for internal IP ranges

Satori-generated SVG has improper escaping

Astro: Malformed port in the Host header can crash the Node adapter

Astro: Netlify Image CDN allowlist bypass enables SSRF

Next.js: Remote Code Execution in next/og ImageResponse

Nest: Unbounded memory growth in the NestJS TCP microservice transport

@nestjs/platform-fastify: Path-scoped middleware bypass via absolute-form request targets

Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability