Advisory Catalog

Tryton sao allows XSS because it does not escape completion values

Tryton sao allows XSS via an HTML attachment

Werkzeug safe_join() allows Windows special device names

Peppol-py is vulnerable to XXE attacks due to Saxon configuration

willitmerge has a Command Injection vulnerability

node-forge is vulnerable to ASN.1 OID Integer Truncation

OpenStack's Mistral Client has a local file inclusion vulnerability

REDAXO CMS is vulnerable to Reflected XSS in Mediapool Info Banner via args[types]

OneUptime is Vulnerable to Privilege Escalation via Login Response Manipulation

Contao is vulnerable to cross-site scripting in templates

Contao is vulnerable to remote code execution in template closures

REDAXO CMS is vulnerable to XSS through its module management component

pypdf's LZWDecode streams be manipulated to exhaust RAM

Formwork CMS has Stored Cross-Site Scripting Vulnerebility in Blog Tags

Sentry's sensitive headers are leaked when `sendDefaultPii` is set to `true`

body-parser is vulnerable to denial of service when url encoding is used

MLX has Wild Pointer Dereference in load_gguf()

MLX has heap-buffer-overflow in load()

Clerk-js vulnerable to bypass of OAuth authentication flow by manipulating request at OTP verification stage

vLLM vulnerable to DoS via large Chat Completion or Tokenization requests with specially crafted `chat_template_kwargs`

Snipe-IT has Cross-site Scripting vulnerability in CSV import workflow

zx Uses Incorrectly-Resolved Name or Reference

phppgadmin contains an incorrect access control vulnerability

phppgadmin contains a SQL injection vulnerability

phppgadmin contains a SQL injection vulnerability

phppgadmin vulnerable to Cross-site Scripting

@perfood/couch-auth may expose session tokens, passwords

Astro Cloudflare adapter has Stored Cross-site Scripting vulnerability in /_image endpoint

Astro's middleware authentication checks based on url.pathname can be bypassed via url encoded values

authentik is an open-source Identity Provider. Prior to versions 2025.8.5 and 2025.10.2, when authenticating with client_id and client_secret to an OAuth provider, authentik creates a service account for the provider. In previous authentik versions, authentication for this account was possible even

MongoDB driver extension affected by mongoc_bulk_operation_t's read of invalid memory

LibreNMS is vulnerable to SQL Injection (Boolean-Based Blind) in hostname parameter in ajax_output.php endpoint

LibreNMS vulnerable to Reflected Cross-Site Scripting (XSS) in endpoint `/maps/nodeimage` parameter `Image Name`

Backdrop CMS Host Header Injection vulnerability

Kirby CMS has cross-site scripting (XSS) in the changes dialog

@dependencytrack/frontend vulnerable to Persistent Cross-Site-Scripting via welcome message

Shopware 6's password recovery link does not expire after email change

Directus Vulnerable to Information Leakage in Existing Collections

Directus's conceal fields are searchable if read permissions enabled

Directus is Vulnerable to Stored Cross-site Scripting

Directus has Improper Permission Handling on Deleted Fields

Astro development server error page is vulnerable to reflected Cross-site Scripting

js-yaml has prototype pollution in merge (<<)

PrivateBin's template-switching feature allows arbitrary local file inclusion through path traversal

Astro vulnerable to URL manipulation via headers, leading to middleware and CVE-2025-61925 bypass

PrivateBin vulnerable to malicious filename use for self-XSS / HTML injection locally for users

DuckDB is a SQL database management system. DuckDB implemented block-based encryption of DB on the filesystem starting with DuckDB 1.4.0. There are a few issues related to this implementation. The DuckDB can fall back to an insecure random number generator (pcg32) to generate cryptographic keys or I

Drupal core allows Content Spoofing

Drupal core allows Object Injection

Drupal core allows Forceful Browsing