Advisory Catalog

Easy!Appointments Denial of Service (DoS)

Passport-wsfed-saml2 allows SAML Authentication Bypass via Attribute Smuggling

ZITADEL Allows IdP Intent Token Reuse

Remote Code Execution Vulnerability in vLLM Multi-Node Cluster Configuration

FastAPI Guard is a security library for FastAPI that provides middleware to control IPs, log requests, and detect penetration attempts. An HTTP header injection vulnerability has been identified in versions prior to 2.0.0. By manipulating the X-Forwarded-For header, an attacker can potentially injec

Langroid Allows XXE Injection via XMLToolMessage

Craft CMS Contains a Potential Remote Code Execution Vulnerability via Twig SSTI

Open WebUI vulnerable to stored XSS via unescaped markdown token in MarkdownTokens.svelte leading to full account takeover and RCE via functions

Srimax Output Messenger Directory Traversal Vulnerability

Mobile Security Framework (MobSF) Allows Stored Cross Site Scripting (XSS) via malicious SVG Icon Upload

OPA server Data API HTTP path injection of Rego

Volcano Scheduler Denial of Service via Unbounded Response from Elastic Service/extender Plugin

Homograph attack allows Unicode lookalike characters to bypass validation.

vLLM: Quadratic Time Complexity in Input Token Processing​ leads to denial of service

Kyverno vulnerable to bypass of policy rules that use namespace selectors in match statements

Data exposure via ZeroMQ on multi-node vLLM deployment

YesWiki Remote Code Execution via Arbitrary PHP File Write and Execution

YesWiki Vulnerable to Unauthenticated Reflected Cross-site Scripting

NodeJS Driver for Snowflake has race condition when checking access to Easy Logging configuration file

ConnectWise ScreenConnect Improper Authentication Vulnerability

Commvault Web Server Unspecified Vulnerability

Moodle has an authenticated remote code execution risk in the Moodle LMS EQUELLA repository

Moodle has an authenticated remote code execution risk in the Moodle LMS Dropbox repository

Moodle has a CSRF risk in Brickfield tool's analysis request action

Moodle allows unauthenticated REST API user data exposure

Steve doesn’t verify a server’s certificate and is susceptible to man-in-the-middle (MitM) attacks

Rancher users who can create Projects can gain access to arbitrary projects

React Router allows pre-render data spoofing on React-Router framework mode

React Router allows a DoS via cache poisoning by forcing SPA mode

tRPC 11 WebSocket DoS Vulnerability

Broadcom Brocade Fabric OS Code Injection Vulnerability

LLaMA-Factory Allows Arbitrary Code Execution via Unsafe Deserialization in Ilamafy_baichuan2.py

PostHog Plugin Server SQL Injection Vulnerability

The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please read: [https://www.drupal.org/node/251466#s-becoming-owner-maintainer-or-co-mai...](https://www.drupal

The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please read: [https://www.drupal.org/node/251466#s-becoming-owner-maintainer-or-co-mai...](https://www.drupal

Traefik has a possible vulnerability with its path matchers

GoBGP panics due to a zero value for softwareVersionLen

youtube-dl vulnerable to file system modification and RCE through improper file-extension sanitization

Traefik affected by Go oauth2/jws Improper Validation of Syntactic Correctness of Input vulnerability

ses's global contour bindings leak into Compartment lexical scope

Fastify has a Body Schema Validation Bypass via Leading Space in Content-Type Header

Whoogle allows attackers to execute arbitrary code via supplying a crafted search query

Kyverno vulnerable to SSRF via Service Calls

VCS credentials included in URL parameters are potentially logged and saved into browser history as plaintext

mholt/archiver Vulnerable to Path Traversal via Crafted ZIP File

ibexa/fieldtype-richtext allows access to external entities in XML

ezsystems/ezplatform-richtext allows access to external entities in XML

Flowise Vulnerable to SQL Injection via `tableName` Parameter

Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability

Joomla CMS Multi-Factor Authentication Bypass