Advisory Catalog

Grav API Privilege Escalation to Super Admin

PyLoad vulnerable to Path Traversal via Package Folder Name in set_package_data

phpseclib has a CVE-2024-27355 mitigation bypass — OID amplification DoS in ASN1::decodeOID()

changedetection.io has an Arbitrary Local File Read via a crafted backup restore

@evomap/evolver's validator sandbox allowlist permits `npm`/`npx`, yielding RCE from Hub-delivered validation tasks via lifecycle scripts

@evomap/evolver: Path Traversal in `evolver fetch` default-branch `safeId` allows Hub-controlled overwrite of project files (RCE)

Twisted has a Denial of Service (DoS) in twisted.names via Crafted DNS Compression Pointer Chains

JupyterLab has an Extension Manager API/GUI Policy Discrepancy, allowing 3rd party (malicious) extensions install via POST request

open-websearch has SSRF in `fetchWebContent` MCP tool: bracketed IPv6 literals and non-resolving hostname check bypass `isPrivateOrLocalHostname`

ssrfcheck Vulnerable to Server-Side Request Forgery (SSRF) and Incomplete List of Disallowed Inputs

link-preview-js vulnerable to IPv6 and internal loopback attacks

exiftool-vendored vulnerable to argument injection via newline characters in tag names

OpenStack Ironic has an Incorrect Resource Transfer Between Spheres

AVideo has an Incomplete Fix for YPTSocket autoEvalCodeOnHTML Strip: Unauthenticated Cross-User JavaScript Execution via `$msg['json']` Relay Bypass

AVideo: Unauthenticated Disclosure of CloneSite `myKey` via Error Echo in `cloneClient.json.php` Enables Cross-Site DB Dump of the Configured Clone Server

OpenClaw's gateway config mutation guard allowed unsafe model-driven config writes

OpenClaw vulnerable to arbitrary code execution via attacker-controlled setup-api.js loaded from cwd during env-key resolution

@tdurieux/anonymous_github Vulnerable to XSS via Unsanitized GitHub Repository Content Rendering in Anonymous GitHub Origin

Inngest TypeScript SDK exposes environment variables via serve() handler on unhandled HTTP methods

edx-enterprise has SSRF via SAML metadata URL in sync_provider_data endpoint

Network-AI missing authentication on MCP HTTP endpoint, which allows unauthenticated privileged tool calls

webonyx/graphql-php has unbounded recursion in parser that causes stack overflow on crafted nested input

Jupyter Server's Authentication Cookies Remain Valid After Password Reset and Server Restart

Jupyter Server has a CORS Origin Validation Bypass via `re.match()` in `allow_origin_pat`

Jupyter Server: Path Traversal via incorrect startswith() root directory check allows access to sibling directories

fast-uri vulnerable to host confusion via percent-encoded authority delimiters

Apache Thrift vulnerable to Path Traversal, HTTP Request/Response Splitting, Uncontrolled Resource Consumption

webonyx/graphql-php has quadratic validation cost in OverlappingFieldsCanBeMerged via inline fragments

livewire-markdown-editor has arbitrary file upload that allows stored XSS via attachment handler

pyload-ng: non-admin SETTINGS users can redirect all outbound traffic through an attacker-controlled proxy via unrestricted `proxy.*` config (incomplete fix for CVE-2026-33509 / -35463 / -35464 / -35586)

AzuraCast Vulnerable to Liquidsoap Code Injection via Incomplete cleanUpString-to-toRawString Migration in Remote Relay Password Field

AzuraCast has Missing Permissions Check on Media File Download, Allowing Cross-Station Data Exfiltration

AzuraCast has Password Reset Poisoning via Untrusted X-Forwarded-Host Header that Leads to Account Takeover and 2FA Bypass

AzuraCast has Path Traversal in `currentDirectory` Parameter that Enables Remote Code Execution via Media Upload

OpenClaw: OpenShell FS bridge reads pin and verify the opened file before returning bytes

OpenClaw: OpenShell FS bridge writes stay pinned to the sandbox mount root

changedetection.io project has an XXE vulnerability

Signal K Server's WebSocket Login Endpoint Lacks Rate Limiting (Credential Brute-Force)

OpenClaw's exec allowlist analysis rejects shell expansion in unquoted heredocs

OpenClaw: MCP loopback owner context is derived from server-issued bearer tokens

Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)

@fastify/accepts-serializer Vulnerable to Denial of Service via Unbounded Accept Header Cache Growth

fast-uri vulnerable to path traversal via percent-encoded dot segments

IKUS Rdiffweb allows an attacker with any valid or stolen access token to act as other users

pyp2spec is Vulnerable to Code Injection

Kirby CMS's read access to site, user and role information is not gated by permissions

OpenSTAManager contains an arbitrary file upload vulnerability in its module update functionality

OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. Prior to version 7.0.0-rc3, the Script Runner widget allows users to execute Python and Ruby scripts directly from the openc3-COSMOS-script-runner-api container. Because all the do

OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. Prior to versions 6.10.5 and 7.0.0-rc3, the OpenC3 password change functionality allows a user to change their password without providing the old password, by accepting a valid ses

PPTAgent: Arbitrary Code Execution via Python eval() of LLM-Generated Code with Builtins in Scope