Advisory Catalog

Next.js vulnerable to server-side request forgery in applications using WebSocket upgrades

Next.js has a Middleware / Proxy bypass in App Router applications via segment-prefetch routes

Next.js has a Middleware / Proxy bypass through dynamic route parameter injection

Next.js has a Middleware / Proxy bypass in Pages Router applications using i18n

python-liquid: Absolute paths escape filesystem loader search path

urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API

urllib3: Sensitive headers forwarded across origins in proxied low-level redirects

@vitejs/plugin-rsc has a Denial of Service Vulnerability in React Server Components

Next.js Vulnerable to Denial of Service with Server Components

GuardDog has a blind GitHub URL rewrite in remote project scanning causes SSRF and `GH_TOKEN` exfiltration

Prometheus exporter process crash via malformed HTTP request

Dockerfile command injection via envs[*].name in bentofile.yaml (sibling fix-bypass of CVE-2026-33744 and CVE-2026-35043)

BentoML Dockerfile command injection via docker.base_image (sister of pending GHSA-w2pm-x38x-jp44 / CVE-2026-33744 / CVE-2026-35043)

Open WebUI has inconsistent authorization controls within memories API

Open WebUI's Insecure Message Access Breaks Authorization

Open WebUI Arbitrary File Write, Delete via Path Traversal

Sentry: Superusers can execute arbitrary commands by injecting malicious pickle-serialized objects through audit log entry data parameter

Snipe-IT has an open redirect vulnerability

GitPython: Newline injection in config_writer() section parameter bypasses CVE-2026-42215 patch, enabling RCE via core.hooksPath

LangChain vulnerable to unsafe deserialization of attacker-controlled objects through overly broad `load()` allowlists

Open WebUI has Improper Authorization Control

Open WebUI has stored XSS in Excel file preview

Snipe-IT has Privilege Escalation via API Permissions Assignment

banks has Critical Remote Code Execution (RCE) via Jinja2 SSTI

@babel/plugin-transform-modules-systemjs generates arbitrary code when compiling malicious input

Open WebUI has Knowledge Base Destruction and RAG Poisoning via Unauthorized Collection Overwrite

Open WebUI's responses passthrough endpoint lacks access control authorization

Open WebUI's Base Model Routing Bypasses Access Control via Model Chaining

Open WebUI: Redis Cache Keys tool_servers and terminal_servers Missing Instance Prefix Enable Cross-Instance Cache Poisoning

Open WebUI: Stale Admin Role in Socket.IO Session Pool Enables Post-Demotion Cross-User Note Access

MikroORM has SQL injection via runtime-controlled identifiers and JSON-path keys

open-webui Vulnerable to Stored XSS via Model Description

justhtml introduces denial-of-service hardening

n8n-mcp affected by path traversal, redirect-following SSRF, and telemetry payload exposure

n8n-mcp webhook and API client paths has an authenticated SSRF

gmaps-mcp's unauthenticated HTTP transport allows unlimited Google Maps API calls at operator expense

fast-xml-builder allows attribute values with unwanted quotes to bypass malicious or unwanted attributes

An issue in fohrloop dash-uploader v.0.1.0 through v.0.7.0a2 allows a remote attacker to execute arbitrary code via the dash_uploader/httprequesthandler.py, dash_uploader/upload.py in the Upload function and max_file_size parameter, dash_uploader/configure_upload.py components

PraisonAI's symlink-extraction bypass of `_safe_extractall` writes outside `dest_dir`

PraisonAI has unsafe tool resolution in `ToolExecutionMixin.execute_tool`: undeclared `__main__` callables execute

PraisonAI ships and generates a legacy API server with authentication disabled by default, allowing unauthenticated workflow execution

Electerm Security Vulnerability: RCE via malicious SSH server filename in openFileWithEditor

netbox-data-flows has stored XSS in ObjectAlias names rendered inside DataFlow tables

OpenStack Cyborg uses rule:allow (check_str='@') as the default policy for multiple API endpoints

mcp-ssh-tool has file transfer path policy bypass and bearer token comparison hardening

Microsoft APM CLI's plugin.json component paths escape plugin root and copy arbitrary host files during install

FacturaScripts Vulnerable to Remote Code Execution (RCE) via Zip Slip in Plugin Upload Mechanism

Postorius is vulnerable to XSS

Cinny vulnerable to access token disclosure via invalidated emoji pack avatar URL in service worker

Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability