Advisory Catalog

NocoDB Vulnerable to Stored Cross-Site Scripting via Rich Text Cells

NocoDB Vulnerable to SQL Injection via DATEADD Formula

NocoDB Vulnerable to Stored Cross-Site Scripting via Comments and Rich Text Cells

NocoDB Vulnerable to Stored Cross-site Scripting via Comments

NocoDB's Refresh Tokens Not Revoked on Password Reset

NocoDB Missing Ownership Validation in MCP Token Operations

NocoDB Vulnerable to Stored Cross-site Scripting via Rich Text Field

NocoDB has Stored Cross-site Scripting via Formula Cell

Statamic's missing authorization allows access to email addresses

Gradio has an Open Redirect in its OAuth Flow

Gradio: Mocked OAuth Login Exposes Server Credentials and Uses Hardcoded Session Secret

OpenClaw ACP client has permission auto-approval bypass via untrusted tool metadata

OpenClaw: Skill env override host env injection via applySkillConfigEnvOverrides (defense-in-depth)

Indico has a missing access check in the event series management API

pypdf: Manipulated RunLengthDecode streams can exhaust RAM

pillow-heif: Integer Overflow in Encode Path Buffer Validation Leads to Heap Out-of-Bounds Read

AWS CLI: cli_history database does not restrict file permissions on Unix systems

@actual-app/sync-server: Missing authorization in sync endpoints allows cross-user budget file access in multi-user mode

n8n has Webhook Forgery on Zendesk Trigger Node

n8n has a Guardrail Node Bypass

n8n has an Authentication Bypass in its Chat Trigger Node

n8n has an SSO Enforcement Bypass in its Self-Service Settings API

wger: IDOR in nutritional_values endpoints exposes private dietary data via direct ORM lookup

wger: IDOR in RepetitionsConfig and MaxRepetitionsConfig API leak other users' workout data

Weblate: Missing access control for the AddonViewSet API exposes all addon configurations

n8n: Webhook Forgery on Github Webhook Trigger

n8n: SQL Injection in MySQL, PostgreSQL, and Microsoft SQL nodes

Copyparty vulnerable to reflected XSS via setck parameter

Svelte: XSS via HTML Comment Injection in SSR Error Boundary Hydration Markers

Svelte vulnerable to XSS during SSR with contenteditable `bind:innerText` and `bind:textContent`

pypdf: Manipulated FlateDecode XFA streams can exhaust RAM

psd-tools: Compression module has unguarded zlib decompression, missing dimension validation, and hardening gaps

mcp-server-git : Path traversal in git_add allows staging files outside repository boundaries

Rucio WebUI has a Stored Cross-site Scripting (XSS) Vulnerability in its Custom RSE Attribute

Rucio WebUI has a Stored Cross-site Scripting (XSS) vulnerability its Identity Name

Rucio WebUI has Stored Cross-site Scripting (XSS) in RSE Metadata

Craft CMS has Stored XSS in Table Field in its "Row Heading" Column Type

Rucio WebUI has Username Enumeration via Login Error Message

This module adds the favicons generated by `realfavicongenerator.net` to your Drupal site. The module does not filter administrator-entered text, leading to a persistent Cross-site scripting (XSS) vulnerability. This vulnerability is mitigated by the fact that an attacker must have a role with the

This module enables you to perform SAML protocol-based single sign-on (SSO) on a Drupal site. The module doesn't sufficiently sanitize user input, leading to a reflected Cross-site scripting (XSS) vulnerability.

This module enables you to easily theme and build an entire website using only their browser, without the need to write code beyond basic JSX and CSS. Content creators are able to compose content on any part of the page without relying on developers. The project has a hidden sub-module, **Drupal Ca

This module integrates with Islandora, an open-source digital asset management (DAM) framework. Islandora integrates with various open-source services, which can be run in a distributed environment. The module doesn't sufficiently sanitize URI paths for its custom route used for attaching media to

This module enables you to protect web forms from automated spam by requiring users to pass a challenge. The module doesn't sufficiently invalidate used security tokens under certain scenarios, which can lead to the CAPTCHA being bypassed on subsequent submissions. This vulnerability is mitigated

This module enables you to block bots by Firewall. The module doesn't sufficiently sanitize user input leading to a reflected Cross-site scripting (XSS) vulnerability. This vulnerability is mitigated by the fact that the vulnerable functionality is only presented to users that are "challenged" or

This module integrates the Tagify JavaScript library to enhance taxonomy entity reference widgets. The module does not sufficiently sanitise user-supplied input before rendering it inside JavaScript template strings within the Tagify widget. This allows arbitrary JavaScript execution in the browser

This module allows site builders to create so-called "theme\_rule" config entities. These theme rules can render pages with different themes than the default when certain conditions match. The module uses simple GET request to disable or enable theme rules, which allows attackers to disable or enab

This module enables you to add icons to CKEditor. The module doesn't sufficiently add custom permissions to the dialog and autocomplete routes, allowing full access to the routes in most scenarios.

LangGraph: BaseCache Deserialization of Untrusted Data may lead to Remote Code Execution

Angular SSR has an Open Redirect via X-Forwarded-Prefix

OpenFUN Richie Observable Timing Discrepancy in its sync_course_run_from_request function