Advisory Catalog

obsidian-tc: Memory-lifecycle tools overwrite unowned notes or partially commit lifecycle changes

obsidian-tc: Declined human-in-the-loop confirmations can permit destructive calls over HTTP

@rog0x/mcp-git-tools executes arbitrary code via the resolveBaseBranch function

@justice8096/sagemath-mcp-server: executes arbitrary code via the escapeShellString and sanitizeCode functions

i18next-http-backend: Namespace value starting with / forms a protocol-relative URL when loadPath/addPath places {{ns}} right after a / (bypass of the // check added for GHSA-xvq9-wjp8-hwqf)

Authlib: Unvalidated request_uri fetch in JWT-secured authorization request (JAR) leading to SSRF

Authlib: OpenID implicit grant checks raw scope instead of allowed scope before issuing ID tokens

Authlib: Default JWT bearer grant accepts assertions for the wrong audience

Authlib: ID token can disable its own nonce validation via the nonce_supported claim

Authlib accepts an empty HMAC key, allowing JWS/JWT signature forgery (HS256/HS384/HS512)

Authlib incomplete algorithm-confusion fix permits HMAC forgery with prefixed public keys

Strands Agents SDK: Exposure of data element to wrong session in the A2A Server

Arista VeloCloud Orchestrator SQL Injection Vulnerability

Authlib: is_secure_transport() loopback exemption can be bypassed with a userinfo component, allowing cleartext-HTTP URLs to non-loopback hosts

Mistune: Path Traversal and XSS in Include directive

MessagePack: Unbounded memory leak in msgpack C extension on strict_map_key validation failure

LiteLLM: Privilege Escalation to Proxy Admin via Cross-Domain Reuse of the Salt Key