Advisory Catalog

phpBB has Password Reset Link Poisoning via Host Header injection

Langflow: Prompt injection in Langflow Smart Transform can lead to code execution

OpenStack Ironic Python Agent Includes Functionality from Untrusted Control Sphere

OpenStack Keystone has an Incorrect Authorization Issue

Kirby CMS's `pages.access/list` and `files.access/list` permissions are not consistently checked in the Panel and REST API

Clerk has an authorization bypass when combining organization, billing, or reverification checks

n8n-mcp's IPv4-mapped IPv6 addresses bypass SSRF protection in validateUrlSync(), enabling full SSRF for SDK embedders

Jupyter Notebook Vulnerable to Authentication Token Theft via CommandLinker XSS

Krayin CRM allows a remote attacker to execute arbitrary code via compose email function

Pallets Click, versions 8.3.2 and below, contain a command injection vulnerability in the click.edit() function, allowing attackers to pass arbitrary OS commands from an unprivileged account.

CKAN has Unauthenticated SQL Injection and Authorization Bypass in `datastore_search_sql`

i18next-http-middleware has path traversal / SSRF via user-controlled language and namespace parameters

pygeoapi 0.23.x: Unauthenticated SSRF via OGC API - Processes Subscriber

pygeoapi 0.23.x: Path Traversal in STAC FileSystemProvider

Admidio Sends SAML Response to Unvalidated Assertion Consumer Service URL from AuthnRequest

Admidio Ignores SAML Signature Validation Result, Processes Forged AuthnRequests and LogoutRequests

Admidio has Inverted 2FA Reset Authorization Check that Lets Group Leaders Strip Admin TOTP

n8n Vulnerable to XSS via MCP OAuth client

n8n's Credential Authorization Bypass in dynamic-node-parameters Allows Foreign API Key Replay

n8n has a Python Task Runner Sandbox Escape Vulnerability

n8n Vulnerable to Unauthenticated Denial of Service via MCP Client Registration

ipl/web is vulnerable to reflected XSS by malformed search requests

CI4MS has Unrestricted PHP File Upload via Theme Installation that Leads to Authenticated Remote Code Execution

PhpSpreadsheet has CPU Denial of Service via Unbounded Row Number in XLSX Row Dimensions

PhpSpreadsheet has CPU Denial of Service via Unbounded Row Index in SpreadsheetML XML Reader

Cockpit Vulnerable to Unrestricted Upload of File with Dangerous Type

CyberChef has a Cross-site Scripting issue

Apache Thrift Node.js bindings vulnerable to Uncontrolled Recursion

OpenStack Ironic is Vulnerable to Inclusion of Functionality from Untrusted Control Sphere

Pimcore Platform - SQL Injection in DataObject composite index handling during class definition import/save

OpenClaw: Workspace dotenv could override runtime-control environment variables

GitPython has Command Injection via Git options bypass

LiteLLM: Authenticated command execution via MCP stdio test endpoints

simple-git is vulnerable to Remote Code Execution

Axios: no_proxy bypass via IP alias allows SSRF

Axios: Header Injection via Prototype Pollution

Axios: Prototype Pollution Gadgets - Response Tampering, Data Exfiltration, and Request Hijacking

Marked Vulnerable to OOM Denial of Service via Infinite Recursion in marked Tokenizer

Claude Code: Trust Dialog Bypass via Git Worktree Spoofing Allows Arbitrary Code Execution

Budibase auth session cookies are set with httpOnly:false — any XSS can lead to full account takeover

Ray: Remote Code Execution via Parquet Arrow Extension Type Deserialization

LiteLLM: Server-Side Template Injection in /prompts/test endpoint

liquidjs has a Denial of Service via circular block reference in layout

Kirby is vulnerable to authorization bypass during page, file and user creation via blueprint injection

Kirby has Server-Side Template Injection (SSTI) via double template resolution in option rendering

Actual has Privilege Escalation via 'change-password' Endpoint on OpenID-Migrated Servers

Evolver: Path Traversal via `--out` flag in `fetch` command allows Arbitrary File Write

uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided

MCPHub has Path Traversal via Malicious MCPB Manifest Name

locize Client SDK: Cross-origin DOM XSS & Handler Hijack Through Missing e.origin Validation in InContext Editor