Advisory Catalog

Agno session state overwrites between different sessions/users

Kitware VTK (Visualization Toolkit) through 9.5.0 contains a heap buffer overflow vulnerability in vtkGLTFDocumentLoader. When processing specially crafted GLTF files, the copy constructor of Accessor objects fails to properly validate buffer boundaries before performing memory read operations.

Kitware VTK (Visualization Toolkit) up to 9.5.0 is vulnerable to Buffer Overflow in vtkGLTFDocumentLoader. The vulnerability occurs in the BufferDataExtractionWorker template function when processing GLTF accessor data.

cryptidy allows code execution via untrusted data due to pickle.loads

Scrapy is vulnerable to a denial of service (DoS) attack due to flaws in brotli decompression implementation

sqls-server/sqls is vulnerable to command injection in the config command

Statamic Vulnerable to Superadmin Account Takeover via Stored Cross-Site Scripting and Lack of Proper X-CSRF-TOKEN Server-Side Validation

Keras Directory Traversal Vulnerability

gnark-crypto allows unchecked memory allocation during vector deserialization

n8n Vulnerable to Remote Code Execution via Git Node Pre-Commit Hook

Zitadel May Bypass Second Authentication Factor

Zitadel allows brute-forcing authentication factors

ZITADEL Vulnerable to Account Takeover via Malicious Forwarded Header Injection

LangGraph SQLite Checkpoint Filter Key SQL Injection POC for SqliteStore

Drupal Simple OAuth (OAuth2) & OpenID Connect allows Authentication Bypass

TypeORM vulnerable to SQL injection via crafted request to repository.save or repository.update

FastMCP Auth Integration Allows for Confused Deputy Account Takeover

Starlette vulnerable to O(n^2) DoS via Range header merging in ``starlette.responses.FileResponse``

Astro's bypass of image proxy domain validation leads to SSRF and potential XSS

Docker Compose Vulnerable to Path Traversal via OCI Artifact Layer Annotations

Constellation has insecure LUKS2 persistent storage partitions which may be opened and used

LangGraph's SQLite store implementation has a SQL Injection Vulnerability

Hashicorp Vault and Vault Enterprise vulnerable to a denial of service when processing JSON

HashiCorp Vault and Vault Enterprise's AWS Auth method may be susceptible to authentication bypass

Kottster app reinitialization can be re-triggered allowing command injection in development mode

OpenBao AWS Plugin Vulnerable to Cross-Account IAM Role Impersonation in AWS Auth Method

Moodle vulnerable to brute-force password guesses

aiomysql allows arbitrary access to client files through vulnerability of a malicious MySQL server

Admidio Vulnerable to Authenticated SQL Injection in Member Assignment Functionality

Drupal CivicTheme Design System allows Forceful Browsing

Hono Improper Authorization vulnerability

NeuVector telemetry sender is vulnerable to MITM and DoS

Taguette password reset link poisoning

TastyIgniter vulnerable to Cross-Site Scripting

OpenBao has potential Denial of Service vulnerability when processing malicious unauthenticated JSON requests

Git LFS may write to arbitrary files via crafted symlinks

MinIO is Vulnerable to Privilege Escalation via Session Policy Bypass in Service Accounts and STS

Angular SSR has a Server-Side Request Forgery (SSRF) flaw

Strapi core vulnerable to sensitive data exposure via CORS misconfiguration

Strapi Allows Unauthorized Access to Private Fields via parms.lookup

Mattermost has a Missing Authorization vulnerability

Mattermost has a Missing Authorization vulnerability

`sveltekit-superforms` has Prototype Pollution in `parseFormData` function of `formData.js`

Magento vulnerable to stored Cross-Site Scripting (XSS)

Magento provides incorrect authorization through a security feature bypass

Flowise: Authenticated Command Execution and Sandbox Bypass via Puppeteer and Playwright Packages

CometBFT's invalid BitArray handling can lead to network halt

Argo Workflow may expose artifact repository credentials

Argo Workflow has a Zipslip Vulnerability

Playwright downloads and installs browsers without verifying the authenticity of the SSL certificate