Advisory Catalog

vLLM before 0.28.0 contains a remote code execution vulnerability in the LlavaOnevision2 processor loader that ignores the trust_remote_code parameter when loading remote processor classes. Attackers can craft a malicious model with arbitrary code in processing_llava_onevision2.py that executes with

GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability

yayson: Prototype pollution in Store/LegacyStore deserialization

FrontMCP and mcp-from-openapi have bypass of OpenAPI external $ref SSRF fix

Shopper: Missing authorization on product removal actions in CollectionProducts component

Shopper: Media sub-form store() still lacks authorization (Incomplete fix for GHSA-h4mp-g9c6-xwph)

Shopper: Unauthorized inventory stock manipulation via unlocked variant property in VariantStock component

Shopper: privilege escalation via improper Livewire admin component authorization

Shopping privilege escalation through missing authorization in Settings components

Shopper: Negative discount values accepted and propagated through order calculation pipeline

Shopper: Authorization bypass in Filament bulk actions allows browse-only staff to mass-delete attributes/tags and mass-toggle visibility of brands/categories/suppliers

MySQL MCP Server: Missing Origin/Host Validation in SSE Transport Enables Unauthenticated SQL Execution (DNS Rebinding / Direct Exposure)

Headroom vulnerable to Cross-Site WebSocket Hijacking (CSWSH)

compression vulnerable to Denial of Service via memory leak on premature response close

morgan vulnerable to Log Injection via unescaped double quote in quoted log fields

@jhb.software/payload-alt-text-plugin: Alt Text Endpoint Authorization Bypass via Payload Local API `overrideAccess` Omission

@argos-ci/core: CI Branch Name OS Command Injection

OmniRoute ACP Custom-Agent Remote Code Execution (RCE)

Pimcore: SQL Injection in Custom Reports via Malicious Report Configuration

Angular: SSR XSS via Unescaped <template> Content Across DocumentFragment Boundaries in Fallback Raw-Content Elements

Angular: Information Leak via `HttpTransferCache` Bypass When Using `withRequestsMadeViaParent`

Angular SSR: XSS via Unescaped Processing Instruction (<?...?>) Nodes in Fallback Raw-Content Elements

Angular: Sanitization bypass via directive host bindings on concrete host elements in @angular/core and @angular/compiler

Angular: SSRF and Cross-Origin Credential Disclosure via URL Resolution Discrepancy in SSR

pymongo: PYTHON-5994 Use exact match for file ID in GridFS delete methods

MongoDB: GridFS data disclosure and deletion via query-operator injection in file IDs

Open WebUI: Users denied by the OAuth role policy can still sign in via token exchange

Open WebUI: Users denied by the OAuth domain allowlist or role policy can still sign in via token exchange

@eigenpal/docx-editor-react: CSS injection and print-time XSS via unescaped embedded font-family name