Advisory Catalog

Podman Improper Certificate Validation; machine missing TLS verification

Open Social is a Drupal distribution for online communities, which ships with a default module that allows users to enroll in events. The module doesn't sufficiently protect certain routes from Cross Site Request Forgery (CSRF) attacks. Users can be tricked into accepting or rejecting these enrollm

Claude Code Improper Authorization via websocket connections from arbitrary origins

ChangeDetection.io XSS in watch overview

RARLAB WinRAR Path Traversal Vulnerability

opennextjs-cloudflare has SSRF vulnerability via /cdn-cgi/ path normalization bypass

pycares has a Use-After-Free Vulnerability

protobuf-python has a potential Denial of Service issue

OpenC3 COSMOS Vulnerable to Directory Traversal via openc3-api/tables endpoint

A credential leak in OpenC3 COSMOS before v6.0.2 allows attackers to access service credentials as environment variables stored in all containers.

Salt vulnerable to arbitrary event injection

Salt has minion event bus authorization bypass vulnerability

Hashicorp Nomad Incorrect Privilege Assignment vulnerability

CWA-2025-006: wasmd's improper error handling may lead to IBC channel opening despite error

Microsoft Windows SMB Client Improper Access Control Vulnerability

Microsoft Windows External Control of File Name or Path Vulnerability

Erxes Path Traversal vulnerability

Magento Improper Authorization leading to security feature bypass

HaxCMS-PHP Command Injection Vulnerability

Pion Interceptor's improper RTP padding handling allows remote crash for SFU users (DoS)

BackendAI vulnerable to Exposure of Sensitive Information to an Unauthorized Actor

Backend.AI Missing Authorization vulnerability

Hax CMS Stored Cross-Site Scripting vulnerability

react-native-keys insecurely stores encryption cipher and Base64 chunks

Skyvern has a Jinja runtime leak

CoreDNS Vulnerable to DoQ Memory Exhaustion via Stream Amplification

NextJS-Auth0 SDK Vulnerable to CDN Caching of Session Cookies

Multer vulnerable to Denial of Service via unhandled exception

Jupyter Core on Windows Has Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability

Qualcomm Multiple Chipsets Use-After-Free Vulnerability

Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability

quic-go Has Panic in Path Probe Loss Recovery Handling

Google Chromium V8 Out-of-Bounds Read and Write Vulnerability

tar-fs can extract outside the specified dir with a specific tarball

Grafana vulnerable to authenticated users bypassing dashboard, folder permissions

AstrBot Has Path Traversal Vulnerability in /api/chat/get_file

Apache Superset: Improper authorization bypass on row level security via SQL Injection

Gradio Allows Unauthorized File Copy via Path Manipulation

Navidrome Transcoding Permission Bypass Vulnerability Report

Navidrome allows SQL Injection via role parameter

PHPOffice Math allows XXE when processing an XML file in the MathML format

vLLM has a Weakness in MultiModalHasher Image Hashing Implementation

The COOKIES module protects users from executing JavaScript code provided by third parties, e.g., to display ads or track user data without consent. Each sub-module allows to include a specific third party service in the consent management, by controlling the execution of javascript. However, this

This module provides a format filter, which allows you to "disable" certain HTML elements (e.g. remove their src attribute) specified by the user. These elements will be enabled again, once the COOKiES banner is accepted. The module doesn't sufficiently check whether to convert "data-src" attribute

The module adds the etracker web statistics tracking system to your website. The cookies\_etracker submodule allows the inline JavaScript to be included in consent management. However, this does not adequately check whether the provided JavaScript code originates from authorized users. A potential

The "Simple Klaro" module adds the "Klaro! A Simple Consent Manager" to your website and allows you to configure it according to your needs in the Drupal backend. The module doesn't sufficiently mark its administrative permission as restricted, creating the possibility for the permission to be gran

ZITADEL Allows Account Takeover via Malicious X-Forwarded-Proto Header Injection

Contrast workload secrets leak to logs on INFO level

LLama-Index CLI OS command injection vulnerability