Advisory Catalog

OpenClaw: MS Teams webhook parses body before JWT validation, enabling unauthenticated resource exhaustion

OpenClaw: Self-Whitelisting in appendLocalMediaParentRoots Allows Arbitrary File Read & Credential Exfiltration

OpenClaw: OpenShell Mirror Sync — Sandbox Escape via Unrestricted File Sync + Symlink Traversal

OpenClaw: Workspace `.env` can override the bundled plugin trust root

Electron: Context Isolation bypass via contextBridge VideoFrame transfer

Electron: AppleScript injection in app.moveToApplicationsFolder on macOS

Electron: Use-after-free in offscreen child window paint callback

Electron: Registry key path injection in app.setAsDefaultProtocolClient on Windows

Electron: Use-after-free in download save dialog callback

Electron: Use-after-free in WebContents fullscreen, pointer-lock, and keyboard-lock permission callbacks

Electron: Use-after-free in PowerMonitor on Windows and macOS

Electron: Renderer command-line switch injection via undocumented commandLineSwitches webPreference

Electron: Unquoted executable path in app.setLoginItemSettings on Windows

OpenClaw: SSH sandbox tar upload follows symlinks, enabling arbitrary file write on remote host

OpenClaw: Workspace `.env` can override the bundled hooks root and load attacker hook code

OpenClaw Nostr privateKey config redaction bypass leaks plaintext signing key via config.get

OpenClaw: PIP_INDEX_URL and UV_INDEX_URL bypass host exec env sanitization and redirect Python package-index traffic

OpenClaw: Unauthenticated plugin-auth HTTP routes receive operator runtime scopes

vLLM: Processing differential in multi-channel audio downmixing enables hidden-input/moderation bypass for audio models

OpenSTAManager: SQL Injection via Aggiornamenti Module

mcp-handler has a tool response leak across concurrent client sessions ('Race Condition')

NocoBase Has SQL Injection via template variable substitution in workflow SQL node

ONNX: TOCTOU arbitrary file read/write in save_external_dat

PraisonAI Has SSRF in FileTools.download_file() via Unvalidated URL

PraisonAI: SSRF via Unvalidated api_base in passthrough() Fallback

PraisonAI Has ReDoS via Unvalidated User-Controlled Regex in MCPToolIndex.search_tools()

Haraka affected by DoS via `__proto__` email header

phpMyFAQ: Path Traversal - Arbitrary File Deletion in MediaBrowserController

dbgate-web: Stored XSS in applicationIcon leads to potential RCE in Electron due to unsafe renderer configuration

Poetry Has Wheel Path Traversal Which Can Lead to Arbitrary File Write

CI4MS: Account Deactivation Module Grants Full Persistent Unauthorized Access for All‑Roles via Improper Session Invalidation (Logic Flaw)

CI4MS: Account Deletion Module Grants Full Persistent Unauthorized Access for All‑Roles via Improper Session Invalidation (Logic Flaw)

SillyTavern: Path Traversal in `/api/chats/export` and `/api/chats/delete` allows arbitrary file read/delete within user data root

SillyTavern has a path traversal in `/api/chats/import` allows arbitrary file write outside intended chat directory

OpenEXR: integer overflow to OOB write in uncompress_b44_impl()

OpenEXR: Heap information disclosure in PXR24 decompression via unchecked decompressed size (undo_pxr24_impl)

openssl-encrypt has CORS wildcard with allow_credentials=True in standalone servers

openssl-encrypt's readiness endpoint leaks database error details to unauthenticated callers

openssl-encrypt has no owner verification on key revocation — any client can revoke any key

@payloadcms/next has Stored XSS in Admin Panel

Payload has an SQL Injection via Query Handling

Payload has Authenticated SSRF via Upload Functionality

OpenSTAManager Affected by Remote Code Execution via Insecure Deserialization in OAuth2

OpenSTAManager has a Time-Based Blind SQL Injection via `options[stato]` Parameter

ChangeDetection.io versions prior to 0.54.7 contain a protection bypass vulnerability in the SafeXPath3Parser implementation that allows attackers to read arbitrary local files by using unblocked XPath 3.0/3.1 functions such as json-doc() and similar file-access primitives. Attackers can exploit the

ONNX: Malicious ONNX models can crash servers by exploiting unprotected object settings.

Open WebUI has Broken Access Control in Tool Valves

This module enables you to perform SAML-protocol-based single-sign-on (SSO) on a Drupal site. The module doesn't sufficiently block access, leading to a authentication bypass vulnerability.

Google Dawn Use-After-Free Vulnerability

@tinacms/graphql's `FilesystemBridge` Path Validation Can Be Bypassed via Symlinks or Junctions