Advisory Catalog

Giskard has a Regular Expression Denial of Service (ReDoS) in RegexMatching Check

Kimai leaks API Token Hash via Invoice Twig Template

DbGate has cross site scripting via the SVG Icon String Handler component

Craft Commerce has an unauthenticated information disclosure that can leak some customer order data on anonymous payments

MetaGPT affected by server-side request forgery in metagpt/utils/common.py

MetaGPT has an eval injection via a cross-site request forgery attack

unhead: Streaming SSR `streamKey` injected into inline script without identifier validation

phpseclib has a variable-time HMAC comparison in SSH2::get_binary_packet() using != instead of hash_equals()

REDAXO has reflected XSS backend packages API via function parameter (CSRF token required)

REDAXO has reflected XSS in backend Metainfo API via type parameter (CSRF token required)

@saltcorn/data vulnerable to SQL Injection via jsexprToSQL Literal Handler

OpenClaw vulnerable to SSRF in src/agents/tools/web-fetch.ts

Wasmtime is a runtime for WebAssembly. In 43.0.0, cloning a wasmtime::Linker is unsound and can result in use-after-free bugs. This bug is not controllable by guest Wasm programs. It can only be triggered by a specific sequence of embedder API calls made by the host. Specifically, the following step

In Ubuntu, Subiquity version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, Subiquity could include certain user credentials, such as the user's plaintext Wi-Fi password, in the attached logs.

awwaiid mcp-server-taskwarrior vulnerable to command injection

OpenClaw: Zalo replay dedupe cache could suppress events across authenticated webhook targets

Electron: Crash in clipboard.readImage() on malformed clipboard image data

Django vulnerable to privilege abuse in ModelAdmin.list_editable

@elgentos/magento2-dev-mcp vulnerable to command injection

@nor2/heim-mcp vulnerable to command injection

PyBlade: SSTI/RCE via Bypassed AST Validation in sandbox.py

AVideo: Unauthenticated Access to Payment Order Data via BlockonomicsYPT check.php

Parse Server: File upload Content-Type override via extension mismatch

Roundcube Webmail: Unsanitized IMAP SEARCH command arguments

OpenClaw: Discord voice ingress authorization can be bypassed via channel, name, and stale-role validation gaps

OpenClaw: Discord Component Interaction Misclassifies Group DM as Direct Message

OpenClaw: Discord Slash Commands Bypass Group DM Channel Allowlist

OpenClaw: Gateway `device.token.rotate` does not terminate active WebSocket sessions after credential rotation

OpenClaw: HTTP operator endpoints lack browser-origin validation in trusted-proxy mode

TeleJSON: DOM XSS via unsanitised constructor name in `new Function()`

OpenClaw: Matrix thread root and reply context bypass sender allowlist

OpenClaw: Zalo webhook replay cache cross-target messageId scope bypass

Krayin CRM is vulnerable to Cross-site Scripting (XSS)

Signal K Server: Arbitrary Prototype Read via `from` Field Bypass

fast-filesystem-mcp is vulnerable to command injection through handleGetDiskUsage function

a11y-mcp: Server-Side Request Forgery (SSRF) vulnerability in A11yServer function

AIOHTTP's C parser (llhttp) accepts null bytes and control characters in response header values - header injection/security bypass

AIOHTTP has HTTP response splitting via \r in reason phrase

AIOHTTP leaks Cookie and Proxy-Authorization headers on cross-origin redirect

AIOHTTP has late size enforcement for non-file multipart fields causes memory DoS

AIOHTTP has CRLF injection through multipart part content type header construction

AIOHTTP Affected by Denial of Service (DoS) via Unbounded DNS Cache in TCPConnector

Graby has stored XSS via iframe srcdoc Attribute in htmLawed Sanitization Config

OpenClaw: Google Chat Authz Bypass via Group Policy Rebinding with Mutable Space displayName

Parse Server has an MFA single-use token bypass via concurrent authData login requests

Trix is vulnerable to XSS through JSON deserialization bypass in drag-and-drop (Level0InputController)

Handlebars.js has a Property Access Validation Bypass in container.lookup

cryptography has incomplete DNS name constraint enforcement on peer names

Hugging Face Smolagents has an Injection issue

OpenClaw: Nextcloud Talk room allowlist matched colliding room names instead of stable room tokens