Advisory Catalog

Curio exposes database credentials to users with network access through verbose HTTP error responses

WireGuard Portal is Vulnerable to Privilege Escalation via User Self-Update to Admin Level

MCP Go SDK Vulnerable to Improper Handling of Case Sensitivity

Fleet: Sensitive Google Calendar credentials disclosed to low-privileged users

Vikunja has Path Traversal in CLI Restore

Ajenti has potential Remote Code Execution

Angular i18n vulnerable to Cross-Site Scripting

Agenta is an open-source LLMOps platform. A Server-Side Template Injection (SSTI) vulnerability exists in versions prior to 0.86.8 in Agenta's API server evaluator template rendering. Although the vulnerable code lives in the SDK package, it is executed server-side within the API process when runnin

Koa has Host Header Injection via ctx.hostname

minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions

minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments

TerriaJS-Server has a domain validation bypass vulnerability in its proxy allowlist

esm.sh has SSRF localhost/private-network bypass in `/http(s)` module route

Vikunja: Stored XSS via Unsanitized SVG Attachment Upload Leads to Token Exposure

n8n Vulnerable to Stored XSS via Various Nodes

Storybook Dev Server is Vulnerable to WebSocket Hijacking

n8n has Arbitrary File Read via Python Code Node Sandbox Escape

Broadcom VMware Aria Operations Command Injection Vulnerability

Rucio WebUI Vulnerable to Stored Cross-site Scripting (XSS) through Custom Rule Function

Rucio WebUI has a Reflected Cross-site Scripting Vulnerability

LangChain Community: redirect chaining can lead to SSRF bypass via RecursiveUrlLoader

Astro is vulnerable to SSRF due to missing allowlist enforcement in remote image inferSize

Sliver has Potential Zip Bomb Denial of Service in GzipEncoder

Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability

Hono is Vulnerable to Authentication Bypass by IP Spoofing in AWS Lambda ALB conninfo

FileBrowser Quantum: Password Protection Not Enforced on Shared File Links

esm.sh is vulnerable to full-response SSRF

changedetection.io is Vulnerable to SSRF via Watch URLs

Parse Dashboard Has a Cache Key Collision that Leaks Master Key to Read-Only Sessions

Parse Dashboard is Missing CSRF Protection for its Agent Endpoint

Rollup 4 has Arbitrary File Write via Path Traversal

Dagu: Path traversal in DAG creation allows arbitrary YAML file write outside DAGs directory

Fickling: OBJ opcode call invisibility bypasses all safety checks

Fiber is Vulnerable to Denial of Service via Flash Cookie Unbounded Allocation

Fiber has an Arbitrary File Read in Static Middleware on Windows

Caddy: Unicode case-folding length expansion causes incorrect split_path index in FastCGI transport

Caddy: MatchHost becomes case-sensitive for large host lists (>100), enabling host-based route/auth bypass

Caddy: MatchPath %xx (escaped-path) branch skips case normalization, enabling path-based route/auth bypass

Mautic is Vulnerable to SQL Injection through Contact Activity API Sorting

Caddy: mTLS client authentication silently fails open when CA certificate file is missing or malformed

AVideo has Authenticated Server-Side Request Forgery via downloadURL in aVideoEncoder.json.php

MindsDB: Path Traversal in /api/files Leading to Remote Code Execution

Apache Superset: Read-Only Bypass via Improper Input Validation on PostgreSQL Connections

Apache Superset Improper Authorization allows low-privileged users to bypass access controls

Apache Airflow vulnerable to Code Injection in the web-server context via LogTemplate table

Astro has memory exhaustion DoS due to missing request body size limit in Server Actions

Craft CMS has Cloud Metadata SSRF Protection Bypass via DNS Rebinding

yt-dlp: Arbitrary Command Injection when using the `--netrc-cmd` option

New API has Potential XSS in its MarkdownRenderer component