Advisory Catalog

OpenClaw/Clawdbot has 1-Click RCE via Authentication Token Exfiltration From gatewayUrl

Rancher CLI skips TLS verification on Rancher CLI login command

OpenCTI 3.3.1 is vulnerable to a directory traversal attack via the static/css endpoint. An unauthenticated attacker can read arbitrary files from the filesystem by sending crafted GET requests with path traversal sequences (e.g., '../') in the URL. For example, requesting /static/css//../../../../.

@backstage/plugin-techdocs-node vulnerable to arbitrary code execution via MkDocs hooks

PsySH has Local Privilege Escalation via CWD .psysh.php auto-load

geopandas SQL Injection Vulnerability in to_postgis() Allows Information Disclosure

Salt Authentication Protocol Version Downgrade Allows Minion Impersonation

Salt junos Module Vulnerable to Code Injection via Specially Crafted YAML Payload

fast-xml-parser has RangeError DoS Numeric Entities Bug

Unfurl's unbounded zlib decompression allows decompression bomb DoS

AutoGPT is Vulnerable to RCE via Disabled Block Execution

SiYuan File Read API Case Sensitivity Bypass can Lead to Path Traversal

NocoDB Vulnerable to Stored Cross-Site Scripting via SVG upload

EGroupware has SQL Injection in Nextmatch Filter Processing

BrowserStack Local vulnerable to Command Injection through logfile variable

Next.js HTTP request deserialization can lead to DoS when using insecure React Server Components

billboard.js is vulnerable to XSS during chart option binding

node-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path Traversal

vLLM vulnerable to Server-Side Request Forgery (SSRF) through MediaConnector

Ghost vulnerable to XSS via malicious Portal preview links

PHPUnit Vulnerable to Unsafe Deserialization in PHPT Code Coverage Handling

PyTorch Vulnerable to Remote Code Execution via Untrusted Checkpoint Files

Cassandra Web - Remote File Read

Kyverno Denial of Service via Context Variable Amplification in Policy Engine

LibreNMS contains an authenticated SQL Injection vulnerability

Dozzle Agent Label-Based Access Control Bypass Allows Unauthorized Container Shell Access

MobSF has Stored XSS via Manifest Analysis - Dialer Code Host Field

Python-Multipart has Arbitrary File Write via Non-Default Configuration

Skipper Ingress Controller Allows Unauthorized Access to Internal Services via ExternalName

Next.js has Unbounded Memory Consumption via PPR Resume Endpoint

Next.js self-hosted applications vulnerable to DoS via Image Optimizer remotePatterns configuration

BentoML has a Path Traversal via Bentofile Configuration

React Server Components have multiple Denial of Service Vulnerabilities

Microsoft Office Security Feature Bypass Vulnerability

phpMyFAQ: Public API endpoints expose emails and invisible questions

CometBFT has inconsistencies between how commit signatures are verified and how block time is derived

protobuf affected by a JSON recursion depth bypass

Moodle affected by a code injection vulnerability

Duplicate Advisory: npm cli Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

Incus container image templating arbitrary host file read and write

Incus container environment configuration newline injection

Orval Mock Generation Code Injection via const

Dragonfly Manager Job API Unauthenticated Access

Sentencepiece has a a heap overflow issue

orjson does not limit recursion for deeply nested JSON documents

Typebot affected by Credential Theft via Client-Side Script Execution and API Authorization Bypass

Wheel Affected by Arbitrary File Permission Modification via Path Traversal in wheel unpack

Seroval affected by Denial of Service via Deeply Nested Objects

Soft Serve Affected by an Authentication Bypass

Backstage has a Possible Symlink Path Traversal in Scaffolder Actions