Advisory Catalog

OpenClaw may have stale policy enforcement for queued node actions

@grackle-ai/server JSON.parse lacks try-catch logic in its gRPC Service AdapterConfig Handling

@grackle-ai/server has a Missing Secure Flag on Session Cookie

@grackle-ai/server: Unescaped Error String in renderPairingPage() HTML Template

Astro: Remote allowlist bypass via unanchored matchPathname wildcard

Parse Server: MFA recovery code single-use bypass via concurrent requests

Craft CMS' anonymous "assets/image-editor" calls return private asset editor metadata to unauthorized users

Craft CMS may expose private assets through anonymous "generate transform" calls via transform URL

jsrsasign: Division by Zero Allows Invalid JWK Modulus to Cause Deterministic Zero Output in RSA Operations

Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching

A vulnerability was identified in PyTorch 2.10.0. The affected element is an unknown function of the component pt2 Loading Handler. The manipulation leads to deserialization. The attack can only be performed from a local environment. The exploit is publicly available and might be used. The project w

MindSQL is vulnerable to Code Injection through its ask_db function

AVideo has an Open Redirect via Unvalidated redirectUri in userLogin.php

Parse Server has a password reset token single-use bypass via concurrent requests

Next.js: null origin can bypass dev HMR websocket CSRF checks

Broken Access Control in extension "Redirect Tab" (redirect_tab)

Google Cloud Storage for Craft CMS has an Information Disclosure Vulnerability

StudioCMS REST getUsers Exposes Owner Account Records to Admin Tokens

pyOpenSSL allows TLS connection bypass via unhandled callback exception in set_tlsext_servername_callback

XSS in @leanprover/unicode-input-component

OpenClaw: Unavailable local auth SecretRefs could fall through to remote credentials in local mode

Sveltejs devalue's `devalue.parse` and `devalue.unflatten` emit objects with `__proto__` own properties

@backstage/plugin-auth-backend: SSRF in experimental CIMD metadata fetch

Keycloak vulnerable to authorization bypass via the Admin API

@whyour/qinglong: manipulation of the argument command leads to protection mechanism failure

Copyparty ftp/sftp: Sharing a single file did not fully restrict source-folder access

Craft Commerce has stored XSS in Craft Commerce Order Details Slideout

Craft Commerce is Vulnerable to Stored XSS while updating Order Status from Orders Table

Craft CMS has a potential information disclosure vulnerability in preview tokens

OpenClaw: system.run wrapper-depth boundary could skip shell approval gating

Mercurius's queryDepth limit bypassed for WebSocket subscriptions

defuddle vulnerable to XSS via unescaped string interpolation in _findContentBySchemaText image tag

dbt-common's commonprefix() doesn't protect against path traversal

Backstage vulnerable to potential reading of SCM URLs using built in token

OpenClaw has cross-account DM pairing authorization bypass via unscoped pairing store access

Dark Reader gives users the ability to request style sheets from local web servers

Concrete CMS vulnerable to Cross-Site Request Forgery (CSRF)

OpenClaw's tools.exec.safeBins generic fallback allowed interpreter-style inline payload execution in allowlist mode

OpenClaw's voice-call Twilio replay dedupe now bound to authenticated webhook identity

OpenClaw: Microsoft Teams media fetch paths bypass shared SSRF guard model

OpenClaw's runtime /debug override path accepted prototype-reserved keys

OpenClaw Vulnerable to HTML injection via unvalidated image MIME type in data-URL interpolation

Django has a Race Condition vulnerability

mailparser vulnerable to Cross-site Scripting

@tootallnate/once vulnerable to Incorrect Control Flow Scoping

OpenClaw Node system.run approval context-binding weakness in approval-enabled host=node flows

OpenClaw has Signal group allowlist authorization bypass via DM pairing-store leakage

NocoDB has Plaintext Storage of Shared View Passwords

NocoDB Vulnerable to User Enumeration via Password Reset Endpoint

Open Babel has a NULL pointer dereference in CDXML OBAtom::GetExplicitValence