Advisory Catalog

OpenClaw's allow-always wrapper persistence could bypass future approvals and enable command execution

OpenClaw has Windows system.run approval mismatch on cmd.exe /c trailing arguments

@keep-network/tbtc-v2 revealing P2PKH deposit with a wrapped P2SH script

OpenClaw: system.run approvals did not bind PATH-token executable identity, enabling post-approval executable rebind

OpenClaw has web_search citation redirect SSRF via private-network-allowing policy

OpenClaw's authorization mismatch allowed write-scope agent runs to reach owner-only tools

OpenClaw: Sandbox media TOCTOU could read files outside sandbox root

OpenClaw's TOCTOU symlink race in writeFileWithinRoot could create or truncate files outside root boundaries

OpenClaw's sandboxed sessions_spawn now enforces sandbox inheritance for cross-agent spawns

OpenClaw has unbounded memory growth in Zalo webhook via query-string key churn (unauthenticated DoS)

OpenClaw: Browser control startup could continue unauthenticated after auth bootstrap failure

OpenChatBI has a Path Traversal Vulnerability in save_report Tool

Idno Vulnerable to Remote Code Execution via Chained Import File Write and Template Path Traversal

CocoIndex Doris target connector didn't verify table name when constructing ALTER TABLE statements

joserfc's PBES2 p2c Unbounded Iteration Count enables Denial of Service (DoS)

OpenEXR's CompositeDeepScanLine integer-overflow leads to heap OOB write

Qualcomm Multiple Chipsets Memory Corruption Vulnerability

Serialize JavaScript is Vulnerable to RCE via RegExp.flags and Date.prototype.toISOString()

SvelteKit has deserialization expansion in unvalidated `form` remote function leading to Denial of Service (experimental only)

Statamic vulnerable to privilege escalation via stored cross-site scripting

Statamic vulnerable to remote code execution via Antlers-enabled control panel inputs

Statamic Vulnerable to Server-Side Request Forgery via Glide

Gradio has SSRF via Malicious `proxy_url` Injection in `gr.load()` Config Processing

Gradio is Vulnerable to Absolute Path Traversal on Windows with Python 3.13+

Statamic allows Authenticated Control Panel users to escalate privileges via elevated session bypass

phpMyFAQ Allows Unauthenticated Account Creation via WebAuthn Prepare Endpoint

@fastify/middie has Improper Path Normalization when Using Path-Scoped Middleware

CleverTap Web SDK is vulnerable to DOM-based Cross-Site Scripting (XSS) via window.postMessage

CleverTap Web SDK is vulnerable to DOM-based XSS via handleCustomHtmlPreviewPostMessageEvent function

Nest has a Fastify URL Encoding Middleware Bypass

Multer vulnerable to Denial of Service via incomplete cleanup

Multer vulnerable to Denial of Service via resource exhaustion

Ajenti has potential Remote Code Execution

Angular i18n vulnerable to Cross-Site Scripting

Agenta is an open-source LLMOps platform. A Server-Side Template Injection (SSTI) vulnerability exists in versions prior to 0.86.8 in Agenta's API server evaluator template rendering. Although the vulnerable code lives in the SDK package, it is executed server-side within the API process when runnin

Koa has Host Header Injection via ctx.hostname

minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions

minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments

TerriaJS-Server has a domain validation bypass vulnerability in its proxy allowlist

n8n Vulnerable to Stored XSS via Various Nodes

Storybook Dev Server is Vulnerable to WebSocket Hijacking

n8n has Arbitrary File Read via Python Code Node Sandbox Escape

Broadcom VMware Aria Operations Command Injection Vulnerability

Rucio WebUI Vulnerable to Stored Cross-site Scripting (XSS) through Custom Rule Function

Rucio WebUI has a Reflected Cross-site Scripting Vulnerability

LangChain Community: redirect chaining can lead to SSRF bypass via RecursiveUrlLoader

Astro is vulnerable to SSRF due to missing allowlist enforcement in remote image inferSize

Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability

Hono is Vulnerable to Authentication Bypass by IP Spoofing in AWS Lambda ALB conninfo