Advisory Catalog

MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability

Weblate has an arbitrary file read via symbolic links

tinacms is vulnerable to arbitrary code execution

Storybook manager bundle may expose environment variables during build

nbconvert has an uncontrolled search path that leads to unauthorized code execution on Windows

Apple Multiple Products Use-After-Free WebKit Vulnerability

Auth0-PHP SDK has Improper Audience Validation

Http Client Manager introduces a new Guzzle based plugin which allows you to manage HTTP clients using Guzzle Service Descriptions via YAML, JSON or PHP files, in a simple and efficient way. The modules allows administrators to configure HTTP requests as part of Event Condition Action (ECA) automati

Better Auth's rou3 Dependency has Double-Slash Path Normalization which can Bypass disabledPaths Config and Rate Limits

@vitejs/plugin-rsc has an Arbitrary File Read via `/__vite_rsc_findSourceMapURL` Endpoint

systeminformation has a Command Injection vulnerability in fsSize() function on Windows

Parse Server is vulnerable to Server-Side Request Forgery (SSRF) via Instagram OAuth Adapter

tRPC has possible prototype pollution in `experimental_nextAppDirCaller`

Fickling has Code Injection vulnerability via pty.spawn()

Fickling has missing detection for marshal.loads and types.FunctionType in unsafe modules list

misskey.js's export data contains private post data

Universal Tool Calling Protocol (UTCP) client library for Python vulnerable to Trust Boundary Violation through Manual JSON specification

Apple Multiple Products Improper Locking Vulnerability

Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability

Lightning Flow Scanner Vulnerable to Code Injection via Unsafe Use of `new Function()` in APIVersion Rule

Vuetify has a Prototype Pollution vulnerability

Google Chromium Out of Bounds Memory Access Vulnerability

Next has a Denial of Service with Server Components - Incomplete Fix Follow-Up

Vite Plugin React has a Denial of Service Vulnerability in React Server Components

Tornado: Quadratic DoS via Crafted Multipart Parameters

Tornado: Quadratic DoS via Repeated Header Coalescing

Denial of Service Vulnerability in React Server Components

Next Vulnerable to Denial of Service with Server Components

FoF Pretty Mail has a server-side template injection vulnerability

Denial of Service Vulnerability in React Server Components

Servify-express rate limit issue

Formio improperly authorized permission elevation through specially crafted request path

This module provides a centralized content distribution and syndication solution so thta customers can publish, reuse, and syndicate content across a network of Drupal websites. The module doesn't sufficiently protect export routes from cross-site request forgery (CSRF) attacks, potentially allowin

Gogs Path Traversal Vulnerability

LangGraph's SQLite is vulnerable to SQL injection via metadata filter key in SQLite checkpointer list method

Fetch MCP Server has a Server-Side Request Forgery (SSRF) vulnerability

Microsoft Windows Use After Free Vulnerability

Shopware Storefront Reflected XSS in Storefront Login Page

Neuron MySQLSelectTool “read-only” bypass via `SELECT ... INTO OUTFILE` (file write → potential RCE)

Filament multi-factor authentication (app) recovery codes can be used multiple times

Elysia affected by arbitrary code injection through cookie config

NiceGUI has a path traversal in app.add_media_files() allows arbitrary file read

robrichards/xmlseclibs has an Libxml2 Canonicalization error which can bypass Digest/Signature validation

Android Framework Privilege Escalation Vulnerability

urllib3 streaming API improperly handles highly compressed data

urllib3 allows an unbounded number of links in the decompression chain

Open WebUI Vulnerable to Stored DOM XSS via Note 'Download PDF'

Open WebUI vulnerable to Server-Side Request Forgery (SSRF) via Arbitrary URL Processing in /api/v1/retrieval/process/web

auth0/node-jws Improperly Verifies HMAC Signature

ComposioHQ has a directory traversal vulnerability