Advisory Catalog

Craft CMS Vulnerable to SSRF in GraphQL Asset Mutation via HTTP Redirect

Craft CMS: save_images_Asset graphql mutation can be abused to exfiltrate AWS credentials of underlying host

Litestar's FileStore key canonicalization collisions allow response cache mixup/poisoning (ASCII ord + Unicode NFKD)

Litestar's AllowedHosts has a validation bypass due to unescaped regex metacharacters in configured host patterns

Apache Airflow UI Exposes DAG Import Errors to Unauthorized Authenticated Users

Apache Airflow Has an Authorization Bypass That Allows Unauthorized Task Log Access

MCP Run Python has a Sandbox Escape & Server Takeover Vulnerability

MCP Run Python Deno Sandbox Misconfiguration Allows SSRF Attacks via Localhost Access

mcp-maigret vulnerable to command injection

client-certificate-auth Vulnerable to Open Redirect via Host Header Injection in HTTP-to-HTTPS redirect

SCEditor has DOM XSS via emoticon URL/HTML injection

payload-preferences has Cross-Collection IDOR in Access Control (Multi-Auth Environments)

Sandbox escape via infinite recursion and error objects

NiceGUI's XSS vulnerability in ui.markdown() allows arbitrary JavaScript execution through unsanitized HTML content

Microweber Cross-site Scripting vulnerability

Microweber has a Cross-site Scripting vulnerability

web2py has an Open Redirect Vulnerability

n8n's domain allowlist bypass enables credential exfiltration

OpenClaw Vulnerable to Local File Inclusion via MEDIA: Path Extraction

The Login Disable module prevents users from logging in to your Drupal site unless they know the access key to add to the end of the login form page. ( default: <http://example.com/user/login?admin> ) If they provide the access key and have a specific role they can log in. The module does not c

PrestaShop affected by time based enumeration in FO login form

Qwik City has a CSRF Protection Bypass via Content-Type Header Validation

Qwik SSR XSS via Unsafe Virtual Node Serialization

Wagtail has improper permission handling on admin preview endpoints

Django has an SQL Injection issue

Django has Observable Timing Discrepancy

Cloudflare Agents SDK has Insecure Direct Object Reference (IDOR) via Header-Based Email Routing

Moodle Inserts Sensitive Information Into Sent Data

Moodle vulnerable to Cross-site Scripting

Moodle Open Redirect vulnerability

Tendenci CMS contains a stored Cross-site Scripting (XSS) vulnerability in the Forums module

Tendenci CMS Contains a Cross-site Scripting Vulnerability in its Jobs Module

Subrion CMS vulnerable to cross-site scripting

Magento's X-Original-Url header can expose admin url

Craft Commerce has Stored XSS in Shipping Zone (Name & Description) Fields Leading to Potential Privilege Escalation

Craft Commerce has Stored XSS in Inventory Location Address Leading to Potential Privilege Escalation

Craft Commerce has Stored XSS in Tax Zones (Name & Description) Leading to Potential Privilege Escalation

Craft Commerce has Stored XSS in Tax Categories (Name & Description) Fields Leading to Potential Privilege Escalation

Craft CMS has Stored XSS in Tax Rates Name Leading to Potential Privilege Escalation

Craft Commerce has Stored XSS in Shipping Methods Name Field Leading to Potential Privilege Escalation

Craft Commerce has Stored XSS in Shipping Categories (Name & Description) Fields Leading to Potential Privilege Escalation

Craft Commerce has Stored XSS in Product Type Name

Craft Commerce has Stored XSS via Order Status Message with potential database exfiltration

Craft Commerce has Stored DOM XSS in Order Status Name (Reflects in "Recent Orders" Dashboard Widget)

SignalK Server has Path Traversal leading to information disclosure

CI4MS Vulnerable to User Email Enumeration via Password Reset Flow

picklescan vulnerable to arbitrary file create using logging.FileHandler

jsPDF Vulnerable to Stored XMP Metadata Injection (Spoofing & Integrity Violation)

jsPDF has Shared State Race Condition in addJS Plugin

FacturaScripts is Vulnerable to Reflected XSS