Advisory Catalog

NocoBase: SQL injection in /api/myInAppChannels:list filter to PG-superuser RCE

MantisBT: Reflected XSS in admin/install.php via unescaped printf

MantisBT: Reflected XSS in admin/install.php

MantisBT: SOAP API Authentication Bypass with Privilege Escalation to Administrator

LightRAG is Vulnerable to Authentication Bypass: hardcoded DEFAULT_TOKEN_SECRET and public /auth-status defeat LIGHTRAG_API_KEY protection

LightRAG: CORS Wildcard + Credentials Enables Any-Origin Credentialed Requests

FacturaScripts: Path traversal in UploadedFile::move() via getClientOriginalName() — arbitrary file write outside MyFiles/ leading to RCE

Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability

SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability

n8n-MCP: Cross-tenant access to workflow version backups in multi-tenant HTTP deployments

Microsoft SharePoint Weak Authentication Vulnerability

Credential confusion in @sigstore/oci can leak registry credentials to an attacker-controlled registry

Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability

Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

FacturaScripts: Authenticated SQL injection in the FacturaScripts REST API filter parameter via parenthesis bypass in `Where::sqlColumn`

SAP Approuter Vulnerable to HTTP Request Smuggling

Kimai: Default APP_SECRET in Docker Image Enables Cookie Forgery and Account Takeover

FacturaScripts: Account takeover of any 2FA-enabled user

DIRAC is vulnerable to RCE in FileCatalog DatasetManager via SQL injection + eval

DIRAC is vulnerable to RCE in RequestManager due to eval on untrusted input

URL path injection via unencoded user-supplied identifiers vulnerability in Apache Gravitino. This issue affects Apache Gravitino: from 1.0.0 before 1.2.1. Users are recommended to upgrade to version 1.2.1, which fixes the issue.

PraisonAI: CodeAgent Executes LLM-Generated Code Without Sandboxing and Leaks All Environment Secrets

PraisonAI: AICoder Arbitrary File Write and Command Execution via LLM Tool Calls

PraisonAI: PGVector and Cassandra knowledge stores interpolate vector dimensions into DDL

prestashop/ps_facetedsearch: PHP Object Injection in faceted search cache allows unauthenticated RCE

mcp-server-kubernetes argument injection can expose Kubernetes cluster credentials

Prowler: SAML Domain Claiming Enables Cross-Tenant Account Takeover

YesWiki Vulnerable to Authenticated PHP Object Injection in BazarImportAction via unserialize

YesWiki vulnerable to unauthenticated arbitrary page deletion via `{{erasespamedcomments}}` action

Open WebUI: Cross-user code-interpreter and tool execution via unvalidated Socket.IO event-caller session_id

Open WebUI: Stored web worker XSS via Pyodide

Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability

The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please read: [https://www.drupal.org/node/251466#s-becoming-owner-maintainer-or-co-mai...](https://www.drupal

node-tar: Decompression/parse DoS via unlimited input

Cognee allows non-superusers to overwrite global LLM configuration

@better-auth/sso provider registration has server-side request forgery via unvalidated OIDC endpoints

Better Auth has insecure cryptographic defaults in oidcProvider: alg=none advertised and plain PKCE accepted by default

Better Auth: OAuth refresh-token replay via missing client authentication on oidc-provider and mcp plugins

EGroupware has a Remote Code Execution Vulnerability

Apache Airflow allows code execution through unsafe serialized DAG deserialization

9routers has Exposure of Sensitive Information and Unprotected Database Import/Export, Allowing Complete Credential Theft and Database Takeover

Langroid: Neo4jChatAgent executes LLM-generated Cypher without validation (prompt-to-Cypher injection; config-conditional RCE), mirroring the SQLChatAgent bug fixed in CVE-2026-25879

9router has unauthenticated CRUD on /api/providers and Full API Key Leak via /api/usage/stats

Langroid: Sandbox Escape to Remote Code Execution via Incomplete `eval()` Mitigation in TableChatAgent

Langroid: SQLChatAgent dangerous-function blocklist can be bypassed with quoted or schema-qualified pg_read_file calls

Decompress: Archive extraction can create files and links outside of the target directory

Formie Hidden field defaults vulnerable to Server-Side Template Injection

Apache IoTDB DataNode’s internal RPC interface for creating Trigger instances uses the uploaded Trigger JAR name to build a file path without sufficient validation. If the internal DataNode RPC port is exposed to an untrusted network, an attacker may use path traversal sequences in the JAR name to w

Authentication Bypass by Spoofing vulnerability in Apache IoTDB. Certain Thrift RPC query handlers lack strict validation of the sessionId parameter. An attacker can construct requests with a forged sessionId and, without performing openSession authentication, receive valid query results. This allow