Advisory Catalog

BerriAI litellm has Security Feature Bypass in BannedKeywords and AzureContentSafety Guardrails via call_type Mismatch on Async Endpoints

BerriAI litellm: SSO Login Does Not Invalidate Previous UI Session Tokens

LiteLLM: PROXY_ADMIN database API Key Generator Has Insufficient Session Expiration

LiteLLM: M2M JWT Handler Has Improper Authorization

LiteLLM: Admin Key Handler Has Improper Authorization

parse-server: LiveQuery discloses object data to a subscriber across an ACL read-access change

Sveltia CMS: Stored XSS in Markdown/RichText preview via unsandboxed same-origin iframe

parse-server: Stored XSS via non-standard file extension bypassing file upload extension blocklist

symfony/ux-live-component: CSRF Protection Bypass — Accept Header is CORS-Safelisted

OpenZeppelin Contracts Wizard: Line terminators in info.securityContact / info.license can inject lines into generated source

PhpWeasyPrint vulnerable to arbitrary file deletion at shutdown via public $temporaryFiles

PGHoard: Password written to debug log

BBOT: Symlink-Following Arbitrary Write via github_workflows Module

BBOT: Server-Side Request Forgery (SSRF) in docker_pull module via WWW-Authenticate realm parsing

The Media module comes with support for oEmbed. The oEmbed specification contains two discovery mechanisms, via `providers.json` and via URL discovery. The URL discovery code could be leveraged to trick Drupal into making server-side requests to any URL.

undici vulnerable to HTTP response queue poisoning via keep-alive socket reuse

undici vulnerable to Set-Cookie SameSite attribute downgrade via permissive substring matching

Pi Agent: Race condition in Pi auth.json writes could expose stored credentials

Pi Agent: Potential XSS in HTML session exports via Markdown URL sanitization bypass

Cross-site scripting via <NoScript> slot content in Nuxt's head components

OpenClaw: Bootstrap token replay could widen pending pairing scopes

OpenClaw: BlueBubbles sender policy could match mutable conversation identifiers

OpenClaw: Empty-scope device re-pairing could confuse caller scope containment

OpenClaw: Exec allowlist could miss side effects from transparent command wrappers

OpenClaw: Skill-command dispatch could skip before-tool-call hooks

Bleach: URI sanitization allows disallowed URI schemes with Unicode > U+00A0 in output

Nuxt: Dev server discloses project absolute path and persistent workspace UUID via `/.well-known/appspecific/com.chrome.devtools.json`

python-multipart: Negative Content-Length in parse_form buffers the entire body in memory

python-multipart: Semicolon treated as querystring field separator enables parameter smuggling

aiohttp: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connections

aiohttp: Payload Response Resources Are Not Closed After Mid-Body Disconnect

aiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence

aiohttp: CRLF injection in multipart headers

React Router: Potential CSRF via PUT/PATCH/DELETE document requests

@babel/core: Arbitrary File Read via sourceMappingURL Comment

Subrion CMS vulnerable to Cross-site Scripting

OpenClaw: Feishu dynamic-agent bindings could miss configWrites enforcement

@apostrophecms/file pretty-URL Vulnerable to Unauthenticated SSRF via Host header

esbuild allows arbitrary file read when running the development server on Windows

parse-server: Stored XSS via trailing-dot filename bypassing file upload extension blocklist

The Examples for Developers project aims to provide high-quality, well-documented API examples for a broad range of Drupal core functionality. The "Read from a file" feature implemented by the file\_example submodule can be used to expose any file that PHP can access. Therefore, the file\_example s

Papra HTTP redirect bypass can lead to SSRF via webhook delivery system

TYPO3 CMS has Broken Access Control in its File Abstraction Layer

Dulwich doesn't sanitize commit subjects in `porcelain.format_patch`

TYPO3 HTML Sanitizer allows Cross-site Scripting

phpMyFAQ has Weak Cryptography - SHA1 for Password Hashing

MySQL MCP Server is Vulnerable to SQL Injection Through its mysql URI Handler

zilliztech deep-searcher has an Incorrect Privilege Assignment issue

NocoDB: Missing Ownership Check in MCP Attachment Read

Vantage6: No limit on emails sent for password/MFA reset