Advisory Catalog

lightrag-hku: Plaintext Passwords Compared Without Constant-Time Function

lightrag-hku: Sensitive Information Exposure Through Raw Exception Messages in API Error Responses

9Router has a Login Brute-Force Lockout Bypass via Spoofable X-9r-Real-Ip Header

Novu: Stored XSS in In-App Inbox via notification redirect.url javascript: scheme

vLLM through 0.29.0 contains a resource exhaustion vulnerability in MooncakeConnector where rejected prefill requests create ownerless transfer placeholders that are never reclaimed. Attackers can send rejected requests to exhaust sender task pools, causing valid requests to be delayed by up to 480

Zapros has an Unbounded Content-Encoding decompression chain that allows denial of service

Sync-in Server has Username/Login Enumeration via Timing Side-Channel on POST /api/auth/login (incomplete fix of the prior timing-attack advisory)

Sync-in Server has a ReDoS via Unsanitized Regex in Sync Diff `pathFilters`

@sync-in/server vulnerable to TOTP Brute-Force via `POST /api/app/sync/register`

@aborruso/ckan-mcp-server has SSRF via DNS-name → internal IP — incomplete fix of CVE-2026-53509

When a request to the Airflow core API carries both a session cookie and an explicit `Authorization: Bearer` token, Airflow resolves the caller from the cookie and ignores the bearer token, inverting the intended precedence of bearer over cookie. The request then executes -- and is recorded in the a

Apache Airflow's `/assets/events` API returned asset events for every Dag in the deployment, with no filter restricting them to the Dags the caller is authorized to read. Any authenticated user holding asset-read access could therefore enumerate asset events — including the source Dag ID, task ID, r

hono/jsx renders plain strings unescaped in boundary components, leading to XSS

vLLM through 0.29.0 contains a memory corruption vulnerability in the Triton _bincount_kernel where prompt token IDs index the penalty prompt-presence bitset without bounds checking against vocabulary size. Attackers can submit multimodal audio requests with tokens equal to vocabulary size, causing

vLLM before 0.29.0 validates allowed_token_ids against tokenizer length instead of model output logits width in SamplingParams._validate_allowed_token_ids(). Attackers can supply token IDs above the output vocabulary that pass validation, causing LogitBiasState to corrupt GPU logits state and allow

Autobahn Python permessage-deflate bypasses maxMessagePayloadSize after inflation

Paymenter has a credit-refund double-spend race condition in service downgrade (doUpgrade)

md-editor-v3: XSS via fenced-code language rendering bypass

AnyIO process-pool workers can block indefinitely on undrained stderr

Semantic MediaWiki's Special:FacetedSearch cstate hidden inputs enable reflected XSS (residual of CVE-2025-10354)

Semantic MediaWiki affected by reflected XSS in `Special:Ask` via a forged cursor pagination token

Semantic MediaWiki has a query debug output XSS (`DebugFormatter`)

Semantic MediaWiki has an open redirect in Special:URIResolver

Semantic MediaWiki affected by Special:Ask table `sep` parameter reflected XSS

Semantic MediaWiki has reflected XSS in `Special:SearchByProperty` (`property` and `value` parameters)

Semantic MediaWiki has reflected XSS in Special:Ask plain table headers

OpenCVE: Server-Side Request Forgery (SSRF) in notifications

virtualenv writes prompt values into pyvenv.cfg without sanitizing line boundaries, allowing configuration injection

Soup Sieve: Polynomial-time ReDoS (O(n²)) in the `IDENTIFIER` / `VALUE` selector sub-patterns

Soup Sieve: Polynomial-time ReDoS (O(n²)) in the whitespace/comment trimming regex `RE_WS_END` (triggers on VALID selectors)

sanic chunked trailer request smuggling allows hidden second request execution

Vendure: Shop API list queries can return non-public entities when filterOperator is OR

Nuxt OG Image has unauthenticated SSRF via `fonts[].path` URL parameter

vm2: vm.freeze()/vm.readonly() bypass via accessor descriptor

vm2: External module allowlist uses a raw prefix test, so a prefix-sharing sibling package is treated as allowlisted

vm2 leaks absolute host filesystem paths to sandbox code via error stack formatting

vm2: util.getCallSites() bypasses GHSA-v27g-jcqj-v8rw host-frame redaction, leaks host call stack

djust: WebSocket/runtime reconstructed request omits the client Host, causing host/subdomain TenantResolvers to misresolve the tenant on the live path

djust's Django model serialization has no sensitive-field denylist: password hashes, privilege flags, and PII on a public view attribute are sent to the client

djust is vulnerable to stored/reflected XSS via javascript: URLs in built-in component template tags

AsyncSSH: asyncio event-loop freeze via SSH maximum packet size = 0 in SSH_MSG_CHANNEL_OPEN / OPEN_CONFIRMATION

Svelte devalue: DoS via malformed input

oRPC: Vary Header Injection in CORS Plugin leading to potential Cache/CORS Bypass

Redocly CLI: Path traversal when using `split` command

LiteLLM Proxy has server-side request forgery via the `user_config` request parameter

vLLM: Request-selected PyNvVideoCodec GPU decode bypasses static VRAM reservation

Composer: GHSA-gjfg-22fp-rrxx fix bypass via symlinked package bin path

vLLM: Unauthenticated audio decompression-bomb DoS in /v1/chat/completions

@platejs/core HTML deserialization can trigger browser behavior during parsing

Zope AccessControl vulnerable to information disclosure through Python string `format` and `format_map` functions