Advisory Catalog

OpenClaw: QQBot direct media upload skipped URL SSRF validation

OpenClaw: MCP stdio server env could load dangerous startup variables from workspace config

OpenClaw: Isolated cron awareness events were recorded as trusted system events

OpenClaw: Feishu card actions could misclassify DMs and skip dmPolicy

OpenClaw: Hook mapping templates could bypass hook session-key opt-in

n8n-MCP: Sensitive MCP tool-call arguments logged on authenticated requests in HTTP mode

ShowDoc has an Injection vulnerability

wlc: print_html outputs API data without HTML escaping

Excalidraw vulnerable to XSS via Mermaid sequence diagram labels (KaTeX rendering)

Axios: XSRF Token Cross-Origin Leakage via Prototype Pollution Gadget in `withXSRFToken` Boolean Coercion

Axios: Authentication Bypass via Prototype Pollution Gadget in `validateStatus` Merge Strategy

Axios: unbounded recursion in toFormData causes DoS via deeply nested request data

Axios: CRLF Injection in multipart/form-data body via unsanitized blob.type in formDataToStream

Axios: HTTP adapter streamed responses bypass maxContentLength

Axios' HTTP adapter-streamed uploads bypass maxBodyLength when maxRedirects: 0

nova-toggle-5: Improper authorization on toggle endpoint allowed non-Nova users to modify boolean fields

RedwoodSDK has Same-site CSRF through lack of origin validation in its server actions

Apache Airflow's asset dependency graph did not restrict nodes by the viewer's DAG read permissions

Apache Airflow's authenticated /ui/dags endpoint did not enforce per-DAG access control on embedded Human-in-the-Loop (HITL) and TaskInstance record

PostCSS has XSS via Unescaped </style> in its CSS Stringify Output

Kirby's page creation API bypasses the changeStatus permission check via unfiltered isDraft parameter

Kirby has XML injection in its XML creator toolkit

OpenClaw: Paired-device pairing actions were not limited to the caller device

Astro: Cache Poisoning due to incorrect error handling when if-match header is malformed

n8n-MCP Logs Sensitive Request Data on Unauthorized /mcp Requests

OpenC3 COSMOS is Vulnerable to Self-XSS Through the Command Sender

Evolver has Prototype Pollution via `Object.assign()` in its mailbox store operations

justhtml has sanitization bypass in custom policies and programmatic DOM

Flarum: Path traversal in LESS parser via theme color settings (incomplete fix for CVE-2023-27577)

i18next-locize-backend has URL Injection via Unsanitized Path Parameters

fast-xml-parser XMLBuilder: XML Comment and CDATA Injection via Unescaped Delimiters

Marko: XSS via case-insensitive script/style closing tag bypass in runtime HTML escaping

This module enables you to obfuscate email addresses in content. The module doesn't sufficiently sanitize user input via the Twig filter. This vulnerability is mitigated by the fact that it only affects sites using the ROT13 encoding and where an attacker can enter content that is filtered using t

i18nextify has DOM XSS via javascript:/data: URL schemes in translated href/src attributes

DOMPurify: FORBID_TAGS bypassed by function-based ADD_TAGS predicate (asymmetry with FORBID_ATTR fix)

DOMPurify has a SAFE_FOR_TEMPLATES bypass in RETURN_DOM mode

DOMPurify: Prototype Pollution to XSS Bypass via CUSTOM_ELEMENT_HANDLING Fallback

Astro: XSS in define:vars via incomplete </script> tag sanitization

October CMS has Safe Mode Bypass via Twig Database Write Operations

October CMS has Safe Mode Bypass via CSS Preprocessor Compilers

nbconvert has an Arbitrary File Read via Path Traversal in HTMLExporter Image Embedding

nbconvert has an Arbitrary File Write via Path Traversal in Cell Attachment Filenames

Glances has CQL Injection in its Cassandra Export Module via Unsanitized Config Values

AWS Encryption SDK for Python: Key commitment policy bypass via shared key cache

OpenMage LTS: Cross-user wishlist import leads to private option & file disclosure

python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback

OpenMage LTS has a Path Traversal Filter Bypass in Dataflow Module

pip has an interpretation conflict due to handling both concatenated tar and ZIP files as ZIP files

Apache Doris MCP Server vulnerable to SQL Injection via improper query context neutralization

FastChat has a Content Moderation Bypass via Arena Side-by-Side Views