Advisory Catalog

llama-index-core vulnerable to Uncontrolled Resource Consumption

OpenCTI 3.3.1 is vulnerable to a reflected cross-site scripting (XSS) attack via the /graphql endpoint. An attacker can inject arbitrary JavaScript code by sending a crafted GET request with a malicious payload in the query string, leading to execution of JavaScript in the victim's browser. For exam

@backstage/plugin-techdocs-node vulnerable to possible Path Traversal in TechDocs Local Generator

LobeHub Vulnerable to Improper Authorization in Presigned Upload

NocoDB has Unvalidated Redirect in Login Flow via continueAfterSignIn Parameter

NocoDB has Blind SSRF via Unvalidated HEAD Request in uploadViaURL Functionality

NocoDB has Prototype Pollution in Connection Test Endpoint, Leading to DoS

Symfony's incorrect argument escaping under MSYS2/Git Bash can lead to destructive file operations on Windows

Tendenci is Vulnerable to CSV Formula Injection through its Contact Form Message Field

This module enables you to turn a Drupal install into the Central Authentication System (CAS). It makes your database the primary location for other systems to use for authentication in a SSO environment. The module doesn't sufficiently sanitize user-supplied field values configured to be included

This Drupal Canvas module is a new visual page builder for Drupal. You can create reusable components that match your design system, drag them onto a page, edit content in place, preview changes across multiple pages, and undo mistakes with ease. The module doesn't sufficiently validate access to C

TaskWeaver has Protection Mechanism Failure and Server-Side Request Forgery (SSRF)

vlt Mishandles Path Sanitization for tar

StudioCMS has Authorization Bypass Through User-Controlled Key

Hono vulnerable to XSS through ErrorBoundary component

Hono has an Arbitrary Key Read in Serve static Middleware (Cloudflare Workers Adapter)

Hono cache middleware ignores "Cache-Control: private" leading to Web Cache Deception

Hono IPv4 address validation bypass in IP Restriction Middleware allows IP spoofing

OctoPrint has Timing Side-Channel Vulnerability in API Key Authentication

askbot inexhaustive permissions check allows any user to modify a different user's profile picture

pypdf has possible Infinite Loop when processing outlines/bookmarks

Gakido vulnerable to HTTP Header Injection (CRLF Injection)

sigstore CSRF possibility in OIDC authentication during signing

pnpm has Path Traversal via arbitrary file permission modification

pnpm: Binary ZIP extraction allows arbitrary file write via path traversal (Zip Slip)

pnpm has Windows-specific tarball Path Traversal

pnpm scoped bin name Path Traversal allows arbitrary file creation outside node_modules/.bin

pnpm has symlink traversal in file:/git dependencies

GI-DocGen vulnerable to Reflected XSS via unescaped query strings

Withdrawn Advisory: eslint has a Stack Overflow when serializing objects with circular references

phpMyFAQ: /api/setup/backup accessible to any authenticated user (authz missing)

phpMyFAQ: Attachment download allowed without dlattachment right (broken access control)

LavaLite CMS affected by a stored cross-site scripting vulnerability

Freeform Craft Plugin CP UI (builder/integrations) has Stored Cross-Site Scripting (XSS) issue

pytest has vulnerable tmpdir handling

@backstage/cli-common has a possible `resolveSafeChildPath` Symlink Chain Bypass

Copier safe template has arbitrary filesystem write access via directory symlinks when _preserve_symlinks: true

Copier safe template has arbitrary filesystem read access via symlinks when _preserve_symlinks: false

Lodash has Prototype Pollution Vulnerability in `_.unset` and `_.omit` functions

Tendenci Affected by Authenticated Remote Code Execution via Pickle Deserialization

CoreShop Vulnerable to SQL Injection via Admin customer-company-modifier

Claude Code Leaks Data via Malicious Environment Configuration Before Trust Confirmation

binary-parser library has a code injection vulnerability

Turbo Frame responses can restore stale session cookies

mailqueue TYPO3 extension affected by Insecure Deserialization in QueueableFileTransport

MineAdmin May Expose Sensitive Information to an Unauthorized Actor

Swing Music has a Directory Traversal & Filesystem can be accessed by a non-admin user

Pterodactyl improperly locks resources allowing raced queries to create more resources than alloted

ESPHome vulnerable to denial-of-service via out-of-bounds check bypass in the API component

Kimai has an Authenticated Server-Side Template Injection (SSTI)