Advisory Catalog

Joomla! CMS vulnerable to XSS via the input filter

mkdocs-include-markdown-plugin susceptible to unvalidated input colliding with substitution placeholders

Apache Airflow: Connection sensitive details exposed to users with READ permissions

Open Babel has out-of-bounds read in PQS lowerit (pre-buffer read)

Open Babel has NULL pointer dereference in CACAO CacaoFormat::SetHilderbrandt

pytorch v2.8.0 was discovered to contain an integer overflow in the component torch.nan_to_num-.long().

ml-logger file handler allows reading arbitrary files

PyTorch before 3.7.0 has a bernoulli_p decompose function in decompositions.py even though it lacks full consistency with the eager CPU implementation, negatively affecting nn.Dropout1d, nn.Dropout2d, and nn.Dropout3d for fallback_random=True.

In PyTorch before 2.7.0, bitwise_right_shift produces incorrect output for certain out-of-bounds values of the "other" argument.

In PyTorch before 2.7.0, when torch.compile is used, FractionalMaxPool2d has inconsistent results.

In PyTorch before 2.7.0, when inductor is used, nn.Fold has an assertion error.

In PyTorch through 2.6.0, when eager is used, nn.PairwiseDistance(p=2) produces incorrect results.

ml-logger has path traversal in the file argument

lobe-chat has an Open Redirect

parse is vulnerable to prototype pollution

json-schema-editor-visual vulnerable to prototype pollution

Mastra Docs MCP Server `@mastra/mcp-docs-server` Leads to Information Exposure

ts-fns has prototype pollution vulnerability

node-cube vulnerable to prototype pollution

Llama Stack could potentially allow for remote code execution

counterpart vulnerable to prototype pollution

messageformat prototype pollution vulnerability

min-document vulnerable to prototype pollution

Drupal Reverse Proxy Header allows Manipulating User-Controlled Variables

Drupal Currency allows Cross Site Request Forgery

Drupal Access code allows Brute Force Attempts

Drupal Plausible tracking is vulnerable to XSS

Drupal JSON Field is vulnerable to XSS

pip's fallback tar extraction doesn't check symbolic links point to extraction directory

GP247 and S-Cart have a stored cross-site scripting (XSS) vulnerability

Mailgen: HTML injection vulnerability in plaintext e-mails

@conventional-changelog/git-client has Argument Injection vulnerability

Libraesva Email Security Gateway Command Injection Vulnerability

Snipe-IT allows XSS

Lobe Chat Desktop vulnerable to Remote Code Execution via XSS in Chat Messages

@sequa-ai/sequa-mcp has Command Injection vulnerability

Parcel has an Origin Validation Error vulnerability

matrix-js-sdk has insufficient validation when considering a room to be upgraded by another

Ghost vulnerable to Server Side Request Forgery (SSRF) via oEmbed Bookmark

HackMD MCP Server has Server-Side Request Forgery (SSRF) vulnerability

wangxutech MoneyPrinterTurbo 1.2.6 allows path traversal via /api/v1/download/ URIs such as /api/v1/download//etc/passwd.

Stored XSS in n8n LangChain Chat Trigger Node via initialMessages Parameter

Open Web Analytics Server is vulnerable to SQL Injection

mcp-kubernetes-server has a Command Injection vulnerability

MetaMask SDK indirectly exposed via malicious debug@4.4.2 dependency

express-xss-sanitizer has an unbounded recursion depth

Hugging Face Transformers library has Regular Expression Denial of Service

Hono has Body Limit Middleware Bypass

Subrion CMS: Authenticated administrators are able to gain escalated access through Run SQL Query tool

Flask App Builder has an Authentication Bypass vulnerability when using non AUTH_DB methods