Advisory Catalog

Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file star()

Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file removeFavoriteFolder($id)

Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file addFavoriteFolder($id)

Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/express/association/reorder

Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/event/duplicate

Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/page/bulk/design

Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/page/bulk/cache

Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/page/bulk/delete

Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/logs/bulk/delete

Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/logs/delete

Concrete CMS is vulnerable to Stored XSS via external-link page cvName

Concrete CMS's RSS Displayer block accepts a feed URL from any page editor and fetches it server-side without validation

Concrete CMS: OAuth 2.0 Authorization-Code Handler Bypasses Account Status

Concrete CMS is vulnerable to IDOR in AddMessage/UpdateMessage

Concrete CMS is vulnerable to unauthorized file deletion

NocoDB: Stale Auth Cache After API Token Deletion

NocoDB: Attachment Size Limit Bypass via Upload-by-URL

NocoDB: OAuth Token Scope Not Enforced at ACL Layer Allows Scope Escalation

Crawlee for Python: SSRF via sitemap-derived URLs

Nuxt: `__nuxt_island` endpoint does not bind responses to request props, enabling shared-cache poisoning

Summarize contains a missing authorization vulnerability

Broken dropper in @mistralai/mistralai, @mistralai/mistralai-azure, @mistralai/mistralai-gcp

Sulu: Used API Keys may be available via Admin API

Sveltia CMS: Stored XSS in entry summary rendering via entity-decoded HTML

@ai-sdk/provider-utils has an Uncontrolled Resource Consumption issue

@kilocode/cli Vulnerable to Exposure of Sensitive Information to an Unauthorized Actor

AstrBot: File upload vulnerability in the function post_file of the file astrbot/dashboard/routes/chat.py

Turbo: Unexpected local code execution during Yarn Berry detection

Open WebUI: Read-Only Users Can Toggle Note Pin Status via Incorrect Permission Check (Write via Read-Only Access)

dbt MCP Server Logs Tool Arguments Including SQL Queries and Credentials in Plaintext Without Redaction When File Logging Is Enabled

Strapi: Password Reset Does Not Revoke Existing Refresh Sessions

The GTranslate module provides a language switcher widget for Drupal sites. The module’s widget JavaScript did not sufficiently validate that document.currentScript referred to the executing script element. A user who can add HTML to a page could cause the generated language-switcher links to point

Node view permissions module enables permissions "View own content" and "View any content" for each content type on permissions page The module doesn't sufficiently handle the case where a user is cancelled and their content is reassigned to the anonymous user. This vulnerability is mitigated by

Astro: Server island encrypted parameters vulnerable to cross-component replay

Next.js vulnerable to cache poisoning via collisions in React Server Component cache-busting

A vulnerability has been found in OSGeo gdal up to 3.13.0dev-4. Affected by this issue is the function GDSDfldsrch of the file frmts/hdf4/hdf-eos/GDapi.c of the component Grid File Handler. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has

OSGeo gdal has a heap-based buffer overflow

Hono has improper validation of NumericDate claims (exp, nbf, iat) in JWT verify()

Webauthn has a User Verification Downgrade via Default-Open ClientOverridePolicy

nuxt-og-image SSRF — bypass of GHSA-pqhr-mp3f-hrpp / v6.2.5 fix (IPv6 + redirect)

OSGeo GDAL vulnerable to out-of-bounds read

OSGeo GDAL vulnerable to heap-based buffer overflow

FacturaScripts vulnerable to Reflected Cross-Site Scripting (XSS) via Cookie Manipulation

A vulnerability was identified in OSGeo gdal up to 3.13.0dev-4. This issue affects the function SWnentries of the file frmts/hdf4/hdf-eos/SWapi.c. Such manipulation of the argument DimensionName leads to heap-based buffer overflow. The attack must be carried out locally. The exploit is publicly avai

A vulnerability was determined in OSGeo gdal up to 3.13.0dev-4. This vulnerability affects the function memmove of the file frmts/hdf4/hdf-eos/SWapi.c of the component HDF-EOS Grid File Handler. This manipulation causes out-of-bounds read. The attack is restricted to local execution. The exploit has

aiograpi has dependency on vulnerable orjson 3.11.4 (CVE-2025-67221)

Magic Wormhole: receive, with --output pointing at an existing directory can be path-traversed

mcp-data-vis vulnerable to denial of service via unsanitized `select` key lookup on `Object.prototype` with `precompile: true`

Paramiko rsakey.py allows the SHA-1 algorithm

ciguard: Web UI is missing HTTP defence-in-depth headers