Advisory Catalog

Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload

OpenClaw: Untrusted web origins can obtain authenticated operator.admin access in trusted-proxy mode

Black: Arbitrary file writes from unsanitized user input in cache file name

flatted vulnerable to unbounded recursion DoS in parse() revive phase

Magic Wormhole: "wormhole receive" allows arbitrary local file overwrite

Graphiti vulnerable to Cypher Injection via unsanitized node_labels in search filters

TinaCMS Vulnerable to Path Traversal Leading to Arbitrary File Read, Write and Delete

Tina: Path Traversal in Media Upload Handle

multipart vulnerable to ReDoS in `parse_options_header()`

OpenCTI has Semi-Blind SSRF via Unvalidated External URL in Data Ingestion Feature

Tinyauth vulnerable to TOTP/2FA bypass via OIDC authorize endpoint

Traefik: HTTP/2 frames can cause a running server to panic

SiYuan has a Full-Read SSRF via /api/network/forwardProxy

OpenClaw: Sandbox dangling-symlink alias handling could bypass workspace-only write boundary

OpenClaw: workspace path guard bypass on non-existent out-of-root symlink leaf

OpenClaw: LINE group allowlist scope mismatch with DM pairing-store entries

OliveTin Vulnerable to Unauthorized Action Output Disclosure via EventStream

SGLangs `replay_request_dump.py` contains an insecure pickle.load() without validation and proper deserialization

Tornado has cookie attribute injection via .RequestHandler.set_cookie

StudioCMS: REST API Missing Rank Check Allows Admin to Create Peer Admin Accounts

StudioCMS: IDOR — Admin-to-Owner Account Takeover via Password Reset Link Generation

StudioCMS S3 Storage Manager Authorization Bypass via Missing `await` on Async Auth Check

Tornado is vulnerable to DoS due to too many multipart parts

Black is the uncompromising Python code formatter. Black provides a GitHub action for formatting code. This action supports an option, use_pyproject: true, for reading the version of Black to use from the repository pyproject.toml. A malicious pull request could edit pyproject.toml to use a direct U

Argo Workflows: WorkflowTemplate Security Bypass via podSpecPatch in Strict/Secure Reference Mode

Shopware vulnerable to a potential take over of app credentials

Shopware: Unauthenticated data extraction possible through store-api.order endpoint

This module creates permissions per node content type to control access to unpublished nodes per content type. The module does not consistently control access for unpublished translated nodes.

The module and certain submodules (AI Automators, AI Translate, AI API Explorer, AI Content Suggestions) provide the ability to use an LLM to generate HTML or Markdown and preview it in a browser. Under certain circumstances, rendering of this HTML can lead to exposing secret communications in the

CraftCMS has an RCE vulnerability via relational conditionals in the control panel

Striae has a hash validation utility vulnerability

Unauthorized access to Argo Workflows Template

@siteboon/claude-code-ui Vulnerable to Unauthenticated RCE via WebSocket Shell Injection

Parse Server's MFA recovery codes not consumed after use

Parse Server has a protected fields bypass via dot-notation in query and sort

flagd Vulnerable to Allocation of Resources Without Limits or Throttling

CraftCMS's `ElementSearchController` Affected by Blind SQL Injection

sigstore-ruby verifier returns success for DSSE bundles with mismatched in-toto subject digest

OliveTin's unsafe parsing of UniqueTrackingId can be used to write files

@siteboon/claude-code-ui is Vulnerable to Shell Command Injection in Git Routes

zot’s create-only policy allows overwrite attempts of existing latest tag (update permission not required)

Flowise affected by Server-Side Request Forgery (SSRF) in HTTP Node Leading to Internal Network Access

Sylius has a Promotion Usage Limit Bypass via Race Condition

Sylius affected by IDOR in Cart and Checkout LiveComponents

Parse Server: Classes `_GraphQLConfig` and `_Audience` master key bypass via generic class routes

Parse Server OAuth2 authentication adapter account takeover via identity spoofing

Parse Server has a protected fields bypass via logical query operators

Sequelize v6 Vulnerable to SQL Injection via JSON Column Cast Type

Parse Server missing audience validation in Keycloak authentication adapter

Parse Server vulnerable to stored cross-site scripting (XSS) via SVG file upload