Advisory Catalog

jsrsasign: DSA signatures or X.509 certificates can be forged via DSA domain-parameter validation in KJUR.crypto.DSA.setPublic

jsrsasign is vulnerable to DoS through Infinite Loop when processing zero or negative inputs

AVideo has an Unauthenticated Local File Inclusion in API locale (RCE possible with writable PHP)

AVideo has an unauthenticated decrypt oracle leaking any ciphertext

pyLoad SETTINGS Permission Users Can Achieve Remote Code Execution via Unrestricted Reconnect Script Configuration

Parse Server LiveQuery subscription query depth bypass

AVideo Affected by CSRF on Plugin Import Endpoint Enables Unauthenticated Remote Code Execution via Malicious Plugin Upload

DreamFactory has a directory traversal

Parse Server has a query condition depth bypass via pre-validation transform pipeline

langflow: /profile_pictures/{folder_name}/{file_name} endpoint file reading

h3: Double Decoding in `serveStatic` Bypasses `resolveDotSegments` Path Traversal Protection via `%252e%252e`

AVideo has a Path Traversal in import.json.php Allows Private Video Theft and Arbitrary File Read/Deletion via fileURI Parameter

AVideo has Session Fixation via GET PHPSESSID Parameter With Disabled Login Session Regeneration

AVideo has a PGP 2FA Bypass via Cryptographically Broken 512-bit RSA Key Generation in LoginControl Plugin

Kysely has a MySQL SQL Injection via Insufficient Backslash Escaping in `sql.lit(string)` usage or similar methods that append string literal values into the compiled SQL strings

Kysely has a MySQL SQL Injection via Backslash Escape Bypass in non-type-safe usage of JSON path keys.

AVideo has an Unauthenticated Blind SQL Injection in RTMP on_publish Callback via Stream Name Parameter

langflow has Unauthenticated IDOR on Image Downloads

AVideo Affected by Unauthenticated Disk Space Exhaustion via Unlimited Temp File Creation in aVideoEncoderChunk.json.php

AVideo has an OS Command Injection via $() Shell Substitution Bypass in sanitizeFFmpegCommand()

PDFME has SSRF via Unvalidated URL Fetch in `getB64BasePdf` When `basePdf` Is Attacker-Controlled

PDFME Affected by Decompression Bomb in FlateDecode Stream Parsing Causes Memory Exhaustion DoS

Parse Server's LiveQuery bypasses CLP pointer permission enforcement

AVideo has a SSRF Protection Bypass via IPv4-Mapped IPv6 Addresses in Unauthenticated LiveLinks Proxy

AVideo has PHP Code Injection via eval() in Gallery saveSort.json.php Exploitable Through CSRF Against Admin

SVG Dimension Capping Bypass via XML Comment Injection in @dicebear/converter ensureSize()

Effect `AsyncLocalStorage` context lost/contaminated inside Effect fibers under concurrent load with RPC

oRPC has Stored XSS in OpenAPI Reference Plugin via unescaped JSON.stringify

Qwik City has array method pollution in FormData processing allows type confusion and DoS

pydicom has a path traversal in FileSet/DICOMDIR ReferencedFileID allows file access outside the File-set root

Parse Server has an auth provider validation bypass on login via partial authData

The Query Monitor plugin for WordPress has Reflected Cross-Site Scripting via Request URI

AVideo has an authenticated arbitrary local file read via `chunkFile` path injection in `aVideoEncoder.json.php`

skia-python vendors vulnerable libfreetype because of pinned cibuildwheel version

Intake has a Command Injection via shell() Expansion in Parameter Defaults

Prototype Pollution via parse() in NodeJS flatted

AVideo Affected by Stored XSS via Unescaped Video Title in CDN downloadButtons.php

AVideo Affected by Arbitrary File Deletion via Path Traversal in CloneSite deleteDump Parameter

AVideo has an Authorization Bypass via Path Traversal in HLS Endpoint Allows Streaming Private/Paid Videos

phpseclib's AES-CBC unpadding susceptible to padding oracle timing attack

PyMuPDF has a path traversal in _main_.py

AVideo has an OS Command Injection via Unescaped URL in LinkedIn Video Upload Shell Command

NLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File Overwrite

Unauthenticated remote shutdown in nltk.app.wordnet_app

Claude Code has a Workspace Trust Dialog Bypass via Repo-Controlled Settings File

Budibase Unrestricted Server-Side Request Forgery (SSRF) via REST Datasource Query Preview

Natural Language Toolkit (NLTK) has unbounded recursion in JSONTaggedDecoder.decode_obj() may cause DoS

SimpleJWT has an Unauthenticated Denial of Service via JWE header tampering

DeepDiff has Memory Exhaustion DoS through SAFE_TO_IMPORT

dynaconf Affected by Remote Code Execution (RCE) via Insecure Template Evaluation in @jinja Resolver