Advisory Catalog

GuardDog Zip Bomb Vulnerability in safe_extract() Allows DoS

Renovate vulnerable to arbitrary command injection via helmv3 manager and malicious Chart.yaml file

Renovate vulnerable to arbitrary command injection via gleam manager and malicious gleam.toml file

Renovate vulnerable to arbitrary command injection via hermit manager and maliciously named dependencies

Renovate vulnerable to arbitrary command injection via npm manager and malicious Renovate configuration

Hono JWK Auth Middleware has JWT algorithm confusion when JWK lacks "alg" (untrusted header.alg fallback)

Hono JWT Middleware's JWT Algorithm Confusion via Unsafe Default (HS256) Allows Token Forgery and Auth Bypass

Mass Assignment in AdonisJS Lucid Allows Overwriting Internal ORM State

Renovate vulnerable to arbitrary command injection via kustomize manager and malicious helm repository

Renovate vulnerable to arbitrary command injection via Gradle Wrapper and malicious `distributionUrl`

Azure Core is vulnerable to deserialization of untrusted data

TYPO3 CMS Allows Broken Access Control in Recycler Module

OpenCode's Unauthenticated HTTP Server Allows Arbitrary Command Execution

LangChain versions up to and including 0.3.1 contain a regular expression denial-of-service (ReDoS) vulnerability in the MRKLOutputParser.parse() method (libs/langchain/langchain/agents/mrkl/output_parser.py). The parser applies a backtracking-prone regular expression when extracting tool actions fr

LlamaIndex (run-llama/llama_index) versions up to and including 0.12.2 contain an uncontrolled resource consumption vulnerability in the VannaPack VannaQueryEngine implementation. The custom_query() logic generates SQL statements from a user-supplied prompt and executes them via vn.run_sql() without

LlamaIndex (run-llama/llama_index) versions up to and including 0.11.6 contain an unsafe deserialization vulnerability in BGEM3Index.load_from_disk() in llama_index/indices/managed/bge_m3/base.py. The function uses pickle.load() to deserialize multi_embed_store.pkl from a user-supplied persist_dir w

Label Studio is vulnerable to full account takeover by chaining Stored XSS + IDOR in User Profile via custom_hotkeys field

MLFlow is vulnerable to DNS rebinding attacks due to a lack of Origin header validation

ComfyUI-Manager is Vulnerable to CRLF Injection in Configuration Handler

vLLM is vulnerable to DoS in Idefics3 vision models via image payload with ambiguous dimensions

HAXcms Has Stored XSS Vulnerability that May Lead to Account Takeover

Fickling vulnerable to detection bypass due to "builtins" blindness

Fickling has Static Analysis Bypass via Incomplete Dangerous Module Blocklist

Fickling vulnerable to use of ctypes and pydoc gadget chain to bypass detection

Fickling Blocklist Bypass: cProfile.run()

Fickling has a bypass via runpy.run_path() and runpy.run_module()

Angular has XSS Vulnerability via Unsanitized SVG Script Attributes

vLLM introduced enhanced protection for CVE-2025-62164

Ghost has SQL Injection in Members Activity Feed

Ghost has Staff Token permission bypass

Ghost has Staff 2FA bypass

Shakapacker has environment variable leak via EnvironmentPlugin that exposes secrets to client-side bundles

React Router vulnerable to XSS via Open Redirects

React Router SSR XSS in ScrollRestoration

React Router has XSS Vulnerability

Authlib has 1-click Account Takeover vulnerability

picklescan has Arbitrary file read using `io.FileIO`

NiceGUI apps which use `ui.sub_pages` vulnerable to zero-click XSS

Preact has JSON VNode Injection issue

Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)

pnpm Has Lockfile Integrity Bypass that Allows Remote Dynamic Dependencies

pnpm vulnerable to Command Injection via environment variable substitution

fast-filesystem-mcp has a Path Traversal vulnerability

Microsoft Playwright MCP Server vulnerable to DNS Rebinding Attack; Allows Attackers Access to All Server Tools

Parsl Monitoring Visualization Vulnerable to SQL Injection

Pterodactyl does not revoke SFTP access when server is deleted or permissions reduced

AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb

`vega-functions` vulnerable to Cross-site Scripting via `setdata` function

Anthropic's MCP TypeScript SDK has a ReDoS vulnerability

evershop allows unauthenticated attackers to exhaust application server's resources via "GET /images" API