Advisory Catalog

Flowise Fails to Invalidate Existing Sessions After Password Changes

@apollo/composition has Improper Enforcement of Access Control on Interface Types and Fields

AWS Advanced NodeJS Wrapper: Privilege Escalation in Aurora PostgreSQL instance

Vega Cross-Site Scripting (XSS) via expressions abusing toString calls in environments using the VEGA_DEBUG global variable

pgAdmin has vulnerability in LDAP authentication mechanism that allows bypassing TLS certificate verification

pgAdmin is affected by an LDAP injection vulnerability

pgAdmin 4 has command injection vulnerability on Windows systems

Symfony's incorrect parsing of PATH_INFO can lead to limited authorization bypass

TYPO3 Modules Extension has Improper Authentication vulnerability

Microsoft Windows Race Condition Vulnerability

Microsoft Windows Link Following Vulnerability

Bugsink is vulnerable to unauthenticated remote DoS via crafted Brotli input (via CPU)

Bugsink is vulnerable to unauthenticated remote DoS via crafted Brotli input

TorrentPier is Vulnerable to Authenticated SQL Injection through Moderator Control Panel's topic_id parameter

AWS Advanced Python Wrapper: Privilege Escalation in Aurora PostgreSQL instance

Cloudinary Node SDK is vulnerable to Arbitrary Argument Injection through parameters that include an ampersand

Insecure Deserialization (pickle) in pdfminer.six CMap Loader — Local Privesc

Arbitrary Code Execution in pdfminer.six via Crafted PDF Input

Open WebUI Affected by an External Model Server (Direct Connections) Code Injection via SSE Events

AstrBot contains a directory traversal vulnerability

Open WebUI vulnerable to Stored DOM XSS via prompts when 'Insert Prompt as Rich Text' is enabled resulting in ATO/RCE

Sangoma FreePBX OS Command Injection Vulnerability

LangGraph Checkpoint affected by RCE in "json" mode of JsonPlusSerializer

Parse Server Vulnerable to Server-Side Request Forgery (SSRF) in File Upload via URI Format

Apple Multiple products Use-After-Free Vulnerability

Django has a denial-of-service vulnerability in HttpResponseRedirect and HttpResponsePermanentRedirect on Windows

Dosage vulnerable to a Directory Traversal through crafted HTTP responses

MantisBT Vulnerable to Denial-of-Service (DoS) via Excessive Note Length

MantisBT vulnerable to authentication bypass for some passwords due to PHP type juggling

Agno session state overwrites between different sessions/users

Kitware VTK (Visualization Toolkit) through 9.5.0 contains a heap buffer overflow vulnerability in vtkGLTFDocumentLoader. When processing specially crafted GLTF files, the copy constructor of Accessor objects fails to properly validate buffer boundaries before performing memory read operations.

Kitware VTK (Visualization Toolkit) up to 9.5.0 is vulnerable to Buffer Overflow in vtkGLTFDocumentLoader. The vulnerability occurs in the BufferDataExtractionWorker template function when processing GLTF accessor data.

cryptidy allows code execution via untrusted data due to pickle.loads

Scrapy is vulnerable to a denial of service (DoS) attack due to flaws in brotli decompression implementation

Statamic Vulnerable to Superadmin Account Takeover via Stored Cross-Site Scripting and Lack of Proper X-CSRF-TOKEN Server-Side Validation

Keras Directory Traversal Vulnerability

n8n Vulnerable to Remote Code Execution via Git Node Pre-Commit Hook

LangGraph SQLite Checkpoint Filter Key SQL Injection POC for SqliteStore

Drupal Simple OAuth (OAuth2) & OpenID Connect allows Authentication Bypass

TypeORM vulnerable to SQL injection via crafted request to repository.save or repository.update

FastMCP Auth Integration Allows for Confused Deputy Account Takeover

Starlette vulnerable to O(n^2) DoS via Range header merging in ``starlette.responses.FileResponse``

Astro's bypass of image proxy domain validation leads to SSRF and potential XSS

LangGraph's SQLite store implementation has a SQL Injection Vulnerability

Kottster app reinitialization can be re-triggered allowing command injection in development mode

Moodle vulnerable to brute-force password guesses

aiomysql allows arbitrary access to client files through vulnerability of a malicious MySQL server

Admidio Vulnerable to Authenticated SQL Injection in Member Assignment Functionality

Drupal CivicTheme Design System allows Forceful Browsing

Hono Improper Authorization vulnerability