Advisory Catalog

rardecode: DoS risk due to unrestricted RAR dictionary sizes

Python Social Auth - Django has unsafe account association

BBOT's gitlab.py exposes globally configured "gitlab" API key

BBOT's git_clone.py can expose users' GitHub API keys to an attacker-controlled webserver

Synapse's invalid device keys degrade federation functionality

VaahCMS is vulnerable to XSS through its Avatar Upload endpoint

vLLM: Resource-Exhaustion (DoS) through Malicious Jinja Template in OpenAI-Compatible Server

python-socketio vulnerable to arbitrary Python code execution (RCE) through malicious pickle deserialization in certain multi-server deployments

clearml is vulnerable to Path Traversal through its `safe_extract` function

MCPHub has an Improper Authorization vulnerability via its handleSseConnection function

Flowise Stored XSS vulnerability through logs in chatbot

Flowise vulnerable to XSS

NiceGUI has a Reflected XSS

Canonical LXD Source Container Identification Vulnerability via cmdline Spoofing in devLXD Server

Canonical LXD Project Existence Determination Through Error Handling in Image Export Function

Canonical LXD Project Existence Determination Through Error Handling in Image Get Function

marimo vulnerable to proxy abuse of /mpl/{port}/

Django vulnerable to partial directory traversal via archives

Fiora chat user avatar is vulnerable to XSS via SVG files

SPDK is vulnerable to buffer overflow in the NVMe-oF target component

validator.js has a URL validation bypass vulnerability in its isURL function

Repository Credentials Race Condition Crashes Argo CD Server

Joomla! CMS vulnerable to XSS via the input filter

Coder AgentAPI exposed user chat history via a DNS rebinding attack

go-f3 Vulnerable to Cached Justification Verification Bypass

mkdocs-include-markdown-plugin susceptible to unvalidated input colliding with substitution placeholders

github.com/nyaruka/phonenumbers Vulnerable to Improper Validation of Syntactic Correctness of Input

Rancher sends sensitive information to external services through the `/meta/proxy` endpoint

Apache Airflow: Connection sensitive details exposed to users with READ permissions

Open Babel has out-of-bounds read in PQS lowerit (pre-buffer read)

Open Babel has NULL pointer dereference in CACAO CacaoFormat::SetHilderbrandt

pytorch v2.8.0 was discovered to contain an integer overflow in the component torch.nan_to_num-.long().

ml-logger file handler allows reading arbitrary files

PyTorch before 3.7.0 has a bernoulli_p decompose function in decompositions.py even though it lacks full consistency with the eager CPU implementation, negatively affecting nn.Dropout1d, nn.Dropout2d, and nn.Dropout3d for fallback_random=True.

In PyTorch before 2.7.0, bitwise_right_shift produces incorrect output for certain out-of-bounds values of the "other" argument.

In PyTorch before 2.7.0, when torch.compile is used, FractionalMaxPool2d has inconsistent results.

In PyTorch before 2.7.0, when inductor is used, nn.Fold has an assertion error.

In PyTorch through 2.6.0, when eager is used, nn.PairwiseDistance(p=2) produces incorrect results.

ml-logger has path traversal in the file argument

lobe-chat has an Open Redirect

parse is vulnerable to prototype pollution

json-schema-editor-visual vulnerable to prototype pollution

Mastra Docs MCP Server `@mastra/mcp-docs-server` Leads to Information Exposure

ts-fns has prototype pollution vulnerability

node-cube vulnerable to prototype pollution

Llama Stack could potentially allow for remote code execution

counterpart vulnerable to prototype pollution

messageformat prototype pollution vulnerability

min-document vulnerable to prototype pollution

Drupal Reverse Proxy Header allows Manipulating User-Controlled Variables