Advisory Catalog

Orval: Import-time RCE via header-parameter default -> zod module-level template literal

Orval: Import-time RCE via array-items default -> zod module-level template literal

Orval: Import-time RCE via enum-typed default -> zod module-level template literal

Orval: RCE via schema property name -> computed-property-key injection in the MSW mock generator

Orval: Import-time RCE via schema property name -> computed-property-key injection in the zod client

Orval: Import-time RCE via query parameter name -> computed-property-key injection in the zod cli

Orval: Import-time RCE via header parameter name -> computed-property-key injection in the zod client

Orval: RCE via servers[].url -> unescaped request-URL template literal (with getBaseUrlFromSpecification)

Orval: RCE via OpenAPI path -> unescaped request-URL template literal (backtick breakout)

TrueConf Server Code Injection Vulnerability

TrueConf Server Missing Authentication for Critical Function Vulnerability

Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability

LibreNMS: SSRF-driven stored XSS via Oxidized API response fields in device showconfig page

Froxlor: Credential and 2FA secret disclosure via Froxlor API endpoints

surfio has an out-of-bounds read

resdata has Classic Buffer Overflow, Improper Validation of Array Index, NULL Pointer Dereference and Out-of-bounds Read

CodeWhale: SSRF‌ bypass - TOCTOU on DNS failure for DNS pinning

Grav: Missing admin.super guard on core group blueprint access field allows admin.users operator to escalate to super-admin

Grav: detectXss() misses an event-handler attribute after an unpaired quote in an unquoted attribute value, giving stored XSS

Grav: Blueprint dynamic-data bare-function branch is denylist-gated and omits error_log, giving arbitrary file write

MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)

atomic-agents-stack: HTTP MCP catalog accepts cleartext http and spawns catalog-supplied commands (MITM to RCE)

vm2: NodeVM `builtin: ['*']` exposes `os` and `dns` — process-wide observability reads AND writes that hijack the host (sibling class of GHSA-9g8x-92q2-p28f)

vm2: Sandbox Breakout Using Dangerous Host Proto Mutators

VM2 has Missing Error.cause Sanitization that Enables Sandbox Escape to RCE

openssl_encrypt versions before 1.4.0 contain an authentication bypass vulnerability in pqc.py where AES-GCM decryption failures trigger fallback to unauthenticated AES-CTR mode. Attackers can modify ciphertext in transit to bypass integrity verification and perform bit-flipping attacks without dete

openssl_encrypt versions before 1.4.0 contain a critical vulnerability in pqc.py where KEM decapsulation failures silently fall back to simulation mode, generating a deterministic shared secret from only 16 bytes of the private key and publicly available encapsulated key data. Attackers who obtain 1

openssl_encrypt versions before 1.4.0 contain a sandbox escape vulnerability in IsolatedPluginExecutor that exposes Python type objects in restricted exec() builtins. Attackers can traverse the Python class hierarchy via __class__.__mro__.__subclasses__() to access system functions and execute arbit

openssl_encrypt versions before 1.4.0 contain a sandbox escape vulnerability in the DangerousPatternVisitor AST analyzer that fails to detect dunder attribute traversal techniques. Attackers can use __class__, __bases__, __subclasses__(), and __globals__ chains to access restricted functions and exe

openssl_encrypt versions before 1.4.0 fail to apply sandbox restrictions in the default process isolation mode for plugin execution. Attackers can execute malicious plugins with unrestricted access to the filesystem, network, subprocess execution, and all Python modules.

openssl_encrypt before 1.4.0 contains an authentication bypass vulnerability in the verify_api_token function that accepts any non-empty Bearer token string without validation. Attackers can upload arbitrary public keys, enumerate all keys, and revoke keys belonging to any user by providing any Bear

openssl_encrypt versions before 1.4.0 contain an authentication bypass vulnerability in CamelliaCipher that disables HMAC tag generation and verification when the PYTEST_CURRENT_TEST environment variable is set. Attackers with code execution can set this environment variable to produce unauthenticat

openssl_encrypt versions before 1.4.0 use HKDF with no salt and static info parameter in key normalization functions, reducing entropy extraction and determinism. Attackers can exploit predictable key derivation with identical inputs to weaken cryptographic security against multi-target attacks.

openssl_encrypt versions before 1.4.0 contain a plugin sandbox bypass vulnerability where the PluginImportGuard blocks a different set of modules than the AST analyzer's DANGEROUS_MODULES set. Attackers can bypass AST analysis through string obfuscation or encoding to import unblocked dangerous modu

openssl_encrypt versions before 1.4.0 contain a logging bug in restore_hidden_modules() that logs module counts after clearing, always showing zero restored modules and corrupting audit trails. Additionally, a race condition exists between module hiding and import hook installation where another thr

Flowise Prompt Injection to RCE and SSRF via CSV/Airtable Agent Python Validator Bypass

Flowise NodeVM sandbox escape via puppeteer allowlist - authenticated RCE and arbitrary file read via Chromium

This module enables you to pay for Commerce transactions using Paypal. The module doesn't sufficiently validate the transaction result in certain circumstances, allowing a malicious user to mark transactions placed without payment. This vulnerability only affects sites using the Payflow Link payme

Adobe Commerce and Magento Incorrect Authorization Vulnerability

Metabase SQL Injection Vulnerability

crypto-js: Insufficient Entropy in Cryptographic Secret Generation via Vulnerable CryptoJS Dependency Chain

Craft CMS: Passkey login accepts replayed WebAuthn assertions

Apple macOS Improper Authentication Vulnerability

Craft CMS: Authorization bypass: view-only Categories user can modify category structure via structures/move-element

WSO2 Multiple Products Path Traversal Vulnerability

Unauthenticated Nuxt DevTools RPC allows arbitrary command execution on the developer's host

Langflow: Weak Fernet Key via random.seed()

Flowise: Unauthenticated OAuth2 token refresh endpoint returns access tokens — enables token theft for any connected service

Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability

Flowise: RCE via CSVAgent csvFile data URI base64 segment is interpolated into Python source without validation