Advisory Catalog

Craft CMS Potential Remote Code Execution via Twig SSTI

Liferay Portal Reflected XSS in CKeditor 4.21.0 endpoint

vite-plugin-static-copy files not included in `src` are possible to access with a crafted request

UnoPim vulnerable to CSRF on Product edit feature and creation of other types

UnoPim has Stored Cross-site Scripting vulnerability in user creation functionality

n8n symlink traversal vulnerability in "Read/Write File" node allows access to restricted files

elysia-cors Origin Validation Error

Withdrawn Advisory: Microsoft Knack ReDoS Vulnerability in the Introspection Module

Withdrawn Advisory: Microsoft Knack ReDoS Vulnerability in the Introspection Module

WP Crontrol Authenticated (Administrator+) plugin vulnerable to Blind Server-Side Request Forgery

Mermaid improperly sanitizes sequence diagram labels leading to XSS

Mermaid does not properly sanitize architecture diagram iconText leading to XSS

Astro allows unauthorized third-party images in _image endpoint

MoonShine SQL Injection Vulnerability

MoonShine Arbitrary File Upload Vulnerability

moonshine Stored Cross-Site Scripting Vulnerability in Create Admin

moonshine Stored Cross-Site Scripting Vulnerability in Create Article

LibreNMS allows stored XSS in Alert Template name field

Copier's safe template has filesystem write access outside destination path

ExpressGateway Cross-Site Scripting Vulnerability in lib/rest/routes/apps.js

ExpressGateway Cross-Site Scripting Vulnerability in lib/rest/routes/users.js

@astrojs/node's trailing slash handling causes open redirect issue

Apache Superset allows authenticated users to discover metadata about datasources they don't have permission to access

Apache Superset has bypass of `DISALLOWED_SQL_FUNCTIONS` that allows execution of blocked SQL functions

Apache Superset data query improperly discloses database schema information to low-privileged guest user

Apache Superset's chart visualization has a stored Cross-Site Scripting (XSS) vulnerability

PyPDF's Manipulated FlateDecode streams can exhaust RAM

The Layout Builder Advanced Permissions module enables you to have fine grained control over who can do what in editing pages built with Layout Builder. The module doesn't sufficiently control access for adding sections in the submodule. This vulnerability is mitigated by the fact that an attacker

OMERO.web displays unecessary user information when requesting password reset

Magento vulnerable to path traversal

Magento Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability

svg-sanitizer Bypasses Attribute Sanitization

TinyScientist has Path Traversal Vulnerability in PDF Review Function (CWE-22)

Oak Server has ReDoS in x-forwarded-proto and x-forwarded-for headers

Craft CMS has a theoretical bypass for CVE-2025-23209

uv allows ZIP payload obfuscation through parsing differentials

Astros's duplicate trailing slash feature leads to an open redirection security issue

An issue in Ollama v0.1.33 allows attackers to delete arbitrary files via sending a crafted packet to the endpoint /api/pull.

The Thinbus Javascript Secure Remote Password (SRP) Client Generates Fewer Bits of Entropy Than Intended

tmp allows arbitrary temporary file / directory write via symbolic link `dir` parameter

Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability

Shopware race condition bypasses voucher restrictions

Concrete CMS vulnerable to Reflected Cross-Site Scripting (XSS) in Conversation Messages Dashboard Page

FPDI allows Memory Exhaustion (OOM) in PDF Parser which leads to Denial of Service

IPX Allows Path Traversal via Prefix Matching Bypass

Microweber has Reflected XSS Vulnerability in the layout Parameter

Microweber has Reflected XSS Vulnerability in the id Parameter

php-jwt contains weak encryption

MaterialX Lack of MTLX Import Depth Limit Leads to DoS (Denial-Of-Service) Via Stack Exhaustion

MaterialX Stack Overflow via Lack of MTLX XML Parsing Recursion Limit