Advisory Catalog

fast-jwt: Stateful RegExp (/g or /y) causes non-deterministic allowed-claim validation (logical DoS)

Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRF

Apache Airflow has an authorization bypass in DagRun wait endpoint

decolua 9router vulnerable to authorization bypass

api-lab-mcp vulnerable to SSRF

Agions taskflow-ai vulnerable to os command injection in src/mcp/server/handlers.ts

LangChain has incomplete f-string validation in prompt templates

Cryptography vulnerable to buffer overflow if non-contiguous buffers were passed to APIs

The IframeConsent element writes HTML attributes without escaping their value. This module has a XSS vulnerability. If an attacker is able to write an `<iframe-consent>` tag, they may be able to insert arbitrary JavaScript. This vulnerability is mitigated by the fact that a text format that allows

Axios HTTP/2 Session Cleanup State Corruption Vulnerability

CI4MS has stored XSS in Pages Content Due to Missing html_purify Sanitization

CI4MS has stored XSS via Unescaped Blacklist Note in Admin User List

CI4MS has stored XSS via srcdoc attribute bypass in Google Maps iframe setting

Nodemailer Vulnerable to SMTP Command Injection via CRLF in Transport name Option (EHLO/HELO)

LiquidJS: `renderFile()` / `parseFile()` bypass configured `root` and allow arbitrary file read

LiquidJS Has Memory Limit Bypass via Quadratic Amplification in `replace` Filter

pretix: API leaks check-in data between events of the same organizer

parisneo/lollms has an insufficient session expiration vulnerability

pyload-ng has a WebUI JSON permission mismatch that lets ADD/DELETE users invoke MODIFY-only actions

lightrag-hku: JWT Algorithm Confusion Vulnerability

Hono: Non-breaking space prefix bypass in cookie name handling in getCookie()

Hono has incorrect IP matching in ipRestriction() for IPv4-mapped IPv6 addresses

Hono missing validation of cookie name on write path in setCookie()

Hono: Path traversal in toSSG() allows writing files outside the output directory

Hono: Middleware bypass via repeated slashes in serveStatic

@hono/node-server: Middleware bypass via repeated slashes in serveStatic

openclaw-claude-bridge: sandbox is not effective - `--allowed-tools ""` does not restrict available tools

skilleton has improper input handling in repository/path processing

justhtml: Mutation XSS with custom foreign-namespace sanitization policies

Parse Server's Endpoint `/sessions/me` bypasses `_Session` `protectedFields`

JWCrypto: JWE ZIP decompression bomb

WWBN AVideo has a Live restream log callback flow enabling stored SSRF to internal services

WWBN AVideo has Stored XSS via Malicious EPG XML Program Titles in AVideo EPG Page

WWBN AVideo Affected by a PayPal IPN Replay Attack Enabling Wallet Balance Inflation via Missing Transaction Deduplication in ipn.php

Parse Server has a login timing side-channel reveals user existence

OpenViking contains a missing authorization vulnerability in the task polling endpoints

OpenClaw: Android accepted cleartext remote gateway endpoints and sent stored credentials over ws://

OpenClaw: Shared-secret comparison call sites leaked length information through timing

OpenClaw: Zalo replay dedupe keys could suppress messages across chats or senders

OpenClaw: Trailing-dot localhost CDP hosts could bypass remote loopback protections

OpenClaw: pnpm dlx approvals did not bind local script operands

OpenClaw: Gateway hello snapshots exposed host config and state paths to non-admin clients

OpenClaw: Read-scoped identity-bearing HTTP clients could kill sessions via /sessions/:sessionKey/kill

OpenClaw: iOS A2UI bridge trusted generic local-network pages for agent.request dispatch

OpenClaw: QQ Bot structured payloads could read arbitrary local files

OpenClaw: OpenShell mirror mode could delete arbitrary remote directories when roots were mis-scoped

OpenClaw: Pairing pending-request caps were enforced per channel instead of per account

OpenClaw: Forged Nostr DMs could create pairing state before signature verification

OpenClaw: Shell init-file options could satisfy exec allowlist script matching

OpenClaw: OpenShell `mirror` mode can convert untrusted sandbox files into explicitly enabled workspace hooks and execute them on the host during gateway startup