Advisory Catalog

vLLM through 0.29.0 fetches and fully materializes remote or inline media before enforcing its documented media controls (the VLLM_MAX_AUDIO_CLIP_FILESIZE_MB compressed-audio size cap, default 25 MB, and the per-modality --limit-mm-per-prompt item limits). Across four ingress paths — the shared medi

OpenClaw: Channel read actions could skip target allowlists

Actual Sync Server: CORS Proxy GitHub API Allowlist Prefix Bypass Leaks Private Repositories Through the Server GitHub Token

khoj has an unauthenticated path traversal in /home/ endpoint that allows file read from server filesystem

SCBE-AETHERMOORE Unauthenticated AetherBrowser Ops API Exposes Operator Email Digests

OpenZeppelin Confidential Contracts `VestingWalletConfidential`: a malicious ERC-7984 token is able to extract private data from the vesting wallet

langchain-nvidia-ai-endpoints has local file disclosure through VLM image inputs

PyMongo: PYTHON-5996 Heap out-of-bounds write via signed size overflow in BSON document encoding

PyMongo: PYTHON-5986 Host injection in PyMongo connection string parsing via percent-encoded delimiters

code16/sharp has a stored XSS via data-html-content Sanitizer Bypass

code16 Sharp vulnerable to stored XSS via iframe srcdoc Attribute

Mediawiki EmbedVideo Extension has stored XSS via malformed src url with $wgEmbedVideoRequireConsent disabled

zbateson/mail-mime-parser has uncontrolled resource consumption (CPU/memory DoS) parsing untrusted MIME

zbateson/mail-mime-parser has CRLF header injection via attachment filename

@bytebase/dbhub's read-only mode does not prevent database writes

@rsdoctor/rspack-plugin has Unauthenticated HTTP API that Exposes Project Source Code and Build Metadata

social-auth-core: VK App backend accepts unsigned callback data when auth_key is missing

Snipe-IT: Stored XSS via Inline XML Rendering in the Uploaded Files API

Snipe-IT: Stored XSS via Custom Field name in asset-list column headers

`@bsv/wallet-toolbox` / `-client` / `-mobile` don't verify storage-supplied recipient output scripts against caller-requested outputs in createAction

phpMyFAQ has SQL Injection in `StopWords::add()` — Unescaped Stop Word Insertion

Snipe-IT: 2FA bypass via the API token flow

phpMyFAQ's two-factor authentication login bypasses the password factor

phpMyFAQ has Stored XSS in Admin FAQ Editor via HTML Entity Bypass in Frontend FAQ Submission

OpenC3 COSMOS: Stored, cross-user XSS via Telemetry screen BUTTON widget

Formie: Missing authorization on sent notification resend modal exposes submission PII

Formie: Unauthenticated users can overwrite incomplete submissions via submit action

Formie: Integration form-settings action allows SSRF and exfiltration of stored integration credentials

Plex Media Server External Control of File Name or Path Vulnerability

The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data. Site builders may also configure handlers for processing submissions. Forms may be displayed in blocks. Webform does not sufficiently validate an optional token query val

ReactPress has SQL injection via dynamic column names in TypeORM query builders

Unleash: Missing await on permission check + cross-project IDOR in admin API

MPXJ: XXE Vulnerability in MerlinReader

request-filtering-agent: Synchronous throw from createConnection() for literal private-IP hosts bypasses req.on('error'), crashing the Node.js process

psd-tools composite/numpy has uncontrolled memory allocation via crafted PSD geometry

MCP Atlassian: Path Traversal / Arbitrary File Read in confluence_upload_attachment MCP tool (incomplete fix of GHSA-xjgw-4wvw-rgm4)

MCP Atlassian: Arbitrary file read via confluence_upload_attachment allows exfiltration of server credentials

MCP Atlassian: HTTP upload tools accept arbitrary server-local file paths

MCP Atlassian: Arbitrary File Read & Exfiltration (Confused Deputy) in JIRA update_issue

MCP Atlassian: Jira and Confluence attachment upload tools can read arbitrary server-local files

MCP Atlassian: Unauthenticated arbitrary local file read via upload_attachment file_path, chained with missing auth on streamable-http transport

MCP Atlassian: Arbitrary server-local file upload to Jira/Confluence attachments via unrestricted file_path parameters

MCP Atlassian: MCP HTTP Client Server-Local File Exfiltration via Unvalidated Attachment Upload Path

MCP Atlassian: SSRF Protection Bypass

MCP Atlassian: Incomplete path traversal fix allows intra-CWD module overwrite and RCE (bypass of GHSA-xjgw-4wvw-rgm4)

mcp-atlassian has an incomplete SSRF remediation

MCP Atlassian: SSRF via DNS Rebinding in Header-Based Authentication Flow

MCP Atlassian: SSRF redirect protection missing for basic-auth and OAuth authentication branches

MCP Atlassian: Arbitrary local file READ via unconstrained file_path in upload_attachment (Confluence + Jira)

MCP Atlassian: Arbitrary file read/exfiltration via upload_attachment missing validate_safe_path()