Advisory Catalog

@tinacms/graphql's Media Endpoints Can Escape the Media Root via Symlinks or Junctions

xmldom: XML injection via unsafe CDATA serialization allows attacker-controlled markup insertion

YesWiki has Persistent Blind XSS at "/?BazaR&vue=consulter"

OpenClaw gateway exec allow-always over-trusts positional carrier executables

OpenClaw Gateway `operator.write` can reach admin-only session reset via `chat.send` `/reset`

OpenClaw has a gateway exec allowlist allow-always bypass via unregistered /usr/bin/script wrapper

OpenClaw's incomplete host env sanitization blocklist allows supply-chain redirection via package-manager env overrides

OpenClaw: Gateway chat.send ACP-only provenance guard could be bypassed by client identity spoofing

OpenClaw safeBins jq `$ENV` filter bypass allows environment variable disclosure

OpenClaw: Gateway WebSocket Denial of Service via unbounded pre-auth upgrades

OpenClaw: Discord text `/approve` bypasses `channels.discord.execApprovals.approvers` and allows non-approvers to resolve pending exec approvals

OpenClaw: CLI Remote Onboarding Persists Unauthenticated Discovery Endpoint and Exfiltrates Gateway Credentials

OpenClaw: Voice-call Plivo V3 webhook replay key uses unsorted URL, allowing replay via query-parameter reordering

Flask-HTTPAuth invokes token verification callback when missing or empty token was given by client

openssl-encrypt has non-cryptographic PRNG used for steganography pixel selection

openssl-encrypt has visible password in process list via --password CLI argument

onnx Vulnerable to Path Traversal via Symlink

FastMCP: Missing Consent Verification in OAuth Proxy Callback Facilitates Confused Deputy Vulnerabilities

FastMCP has a Command Injection vulnerability - Gemini CLI

AVideo: Unauthenticated File Deletion via PHP Operator Precedence Bug in CLI Guard

AVideo: Missing Authentication in CreatePlugin list.json.php Template Affects 21 Endpoints

AVideo: Unauthenticated Live Stream Termination via RTMP Callback on_publish_done.php

AVideo's CSRF on Admin Plugin Configuration Enables Payment Credential Hijacking

Admidio has Missing CSRF Protection on Registration Approval Actions

Admidio allows Unauthenticated Access to Role-Restricted documents via neutralized .htaccess

Parser Server's streaming file download bypasses afterFind file trigger authorization

parse-server has GraphQL complexity validator exponential fragment traversal DoS

OpenClaw's device removal and token revocation do not terminate active WebSocket sessions

OpenClaw's message tool media parameter bypasses tool policy filesystem isolation

OpenClaw: node.pair.approve missing callerScopes validation allows low-privilege operator to approve malicious nodes

SciTokens has an Authorization Bypass via Path Traversal in Scope Validation

SciTokens has an Authorization Bypass via Incorrect Scope Path Prefix Checking

baserCMS is Vulnerable to Cross-site Scripting

baserCMS Path Traversal Leads to Arbitrary File Write and RCE via Theme File API

baserCMS has Unsafe File Upload Leading to Remote Code Execution (RCE)

TrueConf Client Download of Code Without Integrity Check Vulnerability

OpenClaw: `browser.request` still allows `POST /reset-profile` through the `operator.write` surface

OpenClaw: Gateway operator.write Can Reach Admin-Class Channel Allowlist Persistence via chat.send

OpenClaw has an Arbitrary Malicious Code Execution Vulnerability

OpenClaw has Sandbox Media Root Bypass via Unnormalized `mediaUrl` / `fileUrl` Parameter Keys (CWE-22)

LiveQuery protected field leak via shared mutable state across concurrent subscribers

@tinacms/graphql has Path Traversal that leads to overwrite of arbitrary files

Glances Vulnerable to Command Injection via Dynamic Configuration Values

Glances Vulnerable to Cross-Origin System Information Disclosure via XML-RPC Server CORS Wildcard

A critical security vulnerability in parisneo/lollms versions up to 2.2.0 allows any authenticated user to accept or reject friend requests belonging to other users. The `respond_request()` function in `backend/routers/friends.py` does not implement proper authorization checks, enabling Insecure Dir

A Server-Side Request Forgery (SSRF) vulnerability exists in parisneo/lollms versions prior to 2.2.0, specifically in the `/api/files/export-content` endpoint. The `_download_image_to_temp()` function in `backend/routers/files.py` fails to validate user-controlled URLs, allowing attackers to make ar

OpenClaw: SSRF via Unguarded Configured Base URLs in Multiple Channel Extensions (Incomplete Fix for CVE-2026-28476)

OpenClaw: `session_status` sessionId resolution bypasses sandboxed session-tree visibility

OpenClaw: Gateway HTTP Session History Route Bypasses Operator Read Scope

MikroORM has Prototype Pollution in Utils.merge