Advisory Catalog

Fortinet Multiple Products Path Traversal Vulnerability

MCPHub has an authentication bypass

Open WebUI has Blind Server Side Request Forgery in its Image Edit Functionality

follow-redirects leaks Custom Authentication Headers to Cross-Domain Redirect Targets

mitmproxy has an LDAP Injection

Kimai has an Open Redirect via Unvalidated RelayState in SAML ACS Handler

graphql-php is affected by a Denial of Service via quadratic complexity in OverlappingFieldsCanBeMerged validation

LibreNMS: Cross-Site Scripting in ShowConfigController

MetaGPT has an eval injection in metagpt/strategy/tot.py

A Cross-site Scripting (XSS) vulnerability was identified in the `from_dict` method of the `AppLollmsMessage` class in parisneo/lollms prior to version 2.2.0. The vulnerability arises from the lack of sanitization or HTML encoding of the `content` field when deserializing user-provided data. This al

rembg server is vulnerable to Server-Side Request Forgery (SSRF) and a weak default CORS configuration

rhukster/dom-sanitizer: SVG <style> tag allows CSS injection via unfiltered url() and @import directives

next-intl has an open redirect vulnerability

pypdf: Manipulated XMP metadata entity declarations can exhaust RAM

GeoNode contains a server-side request forgery vulnerability in the service registration endpoint

GeoNode versions 4.0 before 4.4.5 and 5.0 before 5.0.2 contain a server-side request forgery vulnerability that allows authenticated users with document upload permissions to trigger arbitrary outbound HTTP requests by providing a malicious URL via the doc_url parameter during document upload. Attac

ajenti.plugin.core has race conditions in 2FA

xrootd has path traversal in directory listing that allows access to the parent directory via trailing ".." pattern

Axios has Unrestricted Cloud Metadata Exfiltration via Header Injection Chain

PraisonAI: Coarse-Grained Tool Approval Cache Bypasses Per-Invocation Consent for Shell Commands

PraisonAI Vulnerable to Sensitive Environment Variable Exposure via Untrusted MCP Subprocess Execution

Rembg has a Path Traversal via Custom Model Loading

@sveltejs/kit: Unvalidated redirect in handle hook causes Denial-of-Service

OpenStack Keystone: Restricted application credentials can create EC2 credentials

Zod jsVideoUrlParser vulnerable to ReDoS in util.js

PraisonAIAgents: Path Traversal via Unvalidated Glob Pattern in list_files Bypasses Workspace Boundary

PraisonAI: Unauthenticated Information Disclosure of Agent Instructions via /api/agents in AgentOS

PraisonAI Vulnerable to Decompression Bomb DoS via Recipe Bundle Extraction Without Size Limits

PraisonAI Vulnerable to Stored XSS via Unsanitized Agent Output in HTML Rendering (nh3 Not a Required Dependency)

Gramps Web API: Private Sub-Object Data in Non-Private Objects Exposed to Guest Users

OpenClaw: GIT_DIR and related git plumbing env vars missing from exec env denylist (GHSA-m866-6qv5-p2fg variant)

FoundationAgents MetaGPT vulnerable to OS Command Injection in metagpt/tools/libs/terminal.py

FoundationAgents MetaGPT vulnerable to OS Command Injection in metagpt/utils/common.py

FoundationAgents MetaGPT vulnerable to os command injection via the Terminal.run_command

FoundationAgents MetaGPT vulnerable to eval injection

MetaGPT has an Injection issue

Unhead has a hasDangerousProtocol() bypass via leading-zero padded HTML entities in useHeadSafe()

OpenClaw: Multiple Code Paths Missing Base64 Pre-Allocation Size Checks

OpenClaw Host-Exec Environment Variable Injection

OpenClaw: Strict browser SSRF bypass in Playwright redirect handling leaves private targets reachable

OpenClaw: Gateway plugin HTTP `auth: gateway` widens identity-bearing `operator.read` requests into runtime `operator.write`

OpenClaw has Browser SSRF Policy Bypass via Interaction-Triggered Navigation

OpenClaw: Feishu docx upload_file/upload_image Bypasses Workspace-Only Filesystem Policy (GHSA-qf48-qfv4-jjm9 Incomplete Fix)

OpenClaw QQ Bot Extension missing SSRF Protection on All Media Fetch Paths

OpenClaw: Existing WS sessions survive shared gateway token rotation

OpenClaw: Concurrent async auth attempts can bypass the intended shared-secret rate-limit budget on Tailscale-capable paths

OpenClaw: /allowlist omits owner-only enforcement for cross-channel allowlist writes

OpenClaw: resolvedAuth closure becomes stale after config reload

OpenClaw: Shared reply MEDIA - paths are treated as trusted and can trigger cross-channel local file exfiltration

fast-jwt has a ReDoS when using RegExp in allowed* leading to CPU exhaustion during token verification