HTTP CONNECT Tunnel Authority Validation Bypass

io.netty:netty-codec-http3 is vulnerable to HTTP CONNECT tunnel authority validation bypass. The vulnerability is due to incorrect parsing and conversion of HTTP/1 CONNECT requests in HttpConversionUtil.toHttp3Headers, which allows a remote attacker to manipulate the Host header to specify an...

Vibe-Trading LLM-callable Tools Permit Command Execution, Code Injection, And SSRF

Summary: 5 findings — "BashTool" shell-injection sink F6, the canonical RCE primitive, "BackgroundRunTool" async shell-injection sink F7, backtest "execmodule" runs top-level statements before the "SignalEngine" class check F8 — independent RCE path that does not match BashTool signatures,...

Dulwich: Symlink Directory Traversal In Stash Pop Allows Arbitrary File Write Via Intermediate Directory Symlinks

Summary Dulwich's "stash.py:pop" function is vulnerable to symlink directory traversal, allowing an attacker to write arbitrary files outside the repository worktree when a victim pops a stash in a malicious repository. Root Cause The "pop" function at "dulwich/stash.py:236" uses...

Uncontrolled Resource Consumption

io.netty, netty-codec-http3 is vulnerable to uncontrolled resource consumption. The vulnerability is due to improper validation and lack of size limits on QPACK encoder-stream string literals, which allows a remote unauthenticated attacker to exhaust server heap memory and trigger an...

Dulwich: Symlink Write-through In Checkout(paths=[]) Via Raw Os.open Bypasses All Symlink Protections

Summary Dulwich's "porcelain.checkoutpaths=..." code path writes files using raw "os.openfilepath, OWRONLY|OCREAT|OTRUNC, mode" followed by "f.writeobj.data". This code path does NOT call "buildfilefromblob" at all, completely bypassing any symlink protections including the unreleased d09f8af fix...

Dulwich: Arbitrary File Write (RCE) On Windows Via Unvalidated Drive Letters In Tree Paths

Affected files "dulwich/index.py" Methods: "validatepathelementntfs", "treetofspath" "dulwich/porcelain/init.py" Method: "checkedworktreepath" Description / Summary A High-severity Path Traversal vulnerability exists in Dulwich's checkout logic when running on Windows. The functions responsible f...

Heap Exhaustion

Neethi is vulnerable to heap exhaustion. The vulnerability is due to Neethi copying a WS-Policy document into memory without enforcing size limits, where a specially crafted WS-Policy document can pack unlimited content inside a policy assertion and attackers can trigger heap exhaustion, leading ...

Vibe-Trading File-read Tools Expose Arbitrary Server-readable Files

Summary: 2 findings — "safeuserpath" accepts any path under "Path.home" or "Path.cwd", which inside the shipped root container resolves to "/root" and "/app" so all of root's home, including "/root/.ssh/idrsa", "/root/.aws/credentials", "/root/.kube/config", and "/app/agent/.env", passes the chec...

Dulwich: Symlink Directory Traversal In Filter-branch Index_filter Via Cross-commit State Persistence

Summary Dulwich's "filterbranch.py" "CommitFilter.applyindexfilter" is vulnerable to symlink directory traversal. When processing commit history, materialized tree entries including symlinks persist in the working directory between commits, allowing a symlink from an ancestor commit to redirect...

Pillow Tiled-TIFF Decoder Reads Past Tile Buffer In Copy4 (Unpack.c:1290)

Summary Pillow's libImaging "decodeTile" decoder, used to decode tiled TIFF images, allocates a per-tile buffer using "reallocstate-buffer, TIFFTileSizetiff". After each "TIFFReadTile" it then iterates "tiley" from 0 up to "currenttilelength" and calls the configured row unpacker here "copy4" wit...

Dulwich: Infinite Loop Denial Of Service (DoS) In Packfile Object Resolution

Affected file "dulwich/pack.py" Method: "Pack.resolveobject" Description / Summary A High-severity Denial of Service DoS vulnerability exists in the "Pack.resolveobject" method. When resolving an "OFSDELTA" object, the resolver calculates the base offset using "baseoffset = objoffset -...

Cleartext Credential Logging

A2A Java SDK is vulnerable to Cleartext Credential Logging. The vulnerability is due to improper error handling in RestHandler.parseRequestBody, where the method logs the full JSON request body at SEVERE level when JsonFormat.parser.merge throws InvalidProtocolBufferException, allowing an attacke...

A2A Java SDK Has A Fail-open Default Task Authorization

Draft text for GHSA-qw47-mcm5-934w. The body below drops into the GitHub advisory description field; the metadata block maps to the form fields. Set the patched version at release; publish when the fix ships. - Ecosystem: Maven - Affected package: "org.a2aproject.sdk:a2a-java-sdk-server-common"...

A2A Java SDK Has Server-Side Request Forgery (SSRF) In Push-notification Delivery

- Ecosystem: Maven - Affected package: "org.a2aproject.sdk:a2a-java-sdk-server-common" push-notification delivery - Affected versions: "= 1.2.0.Final" and "1.2.1.Final-SNAPSHOT" on "main" prior to the fix - Patched version: the release that carries the fix - CWE: CWE-918 Server-Side Request...

Exposure Of Sensitive Information

A2A Java SDK is vulnerable to Exposure of Sensitive Information. The vulnerability is due to failure to validate the API key's declared location and prevent credential-bearing custom headers from being forwarded across cross-origin redirects, which allows a malicious or compromised remote agent t...

Exposure Of Sensitive Information

A2A Java SDK is vulnerable to Exposure of Sensitive Information. The vulnerability is due to improper redirect handling in the Android HTTP client's synchronous POST requests, which allows an attacker controlling a redirected destination to obtain configured API keys or authentication tokens...

Stack Exhaustion DoS

Neethi is vulnerable to Stack Exhaustion DoS. The vulnerability is due to bypassing Neethi's nesting-depth limit, where a specially crafted WS-Policy document with deeply nested policy elements can exhaust the thread stack and crash the parser, causing a denial of service...

Compress/s2: Integer Overflow Or Wraparound And Out-of-bounds Write In Compress

Signed Integer Overflow in s2.NewDict Summary A signed integer overflow vulnerability in "s2.NewDict" allows an attacker to bypass repeat index validation by supplying a dictionary with a uvarint-encoded repeat value exceeding "MaxInt64". When "Dict.Encode" is subsequently called, the overflowed...

Denial Of Service

Neethi is vulnerable to denial of service. The vulnerability is due to the fetch operation only limiting the time per read, not the whole transfer, where a malicious server can slowly trickle bytes to keep the fetch alive indefinitely and tie up the calling thread...

Renovate Vulnerable To Leakage Of Temporary Repository Tokens Into Pull Request Comments

Impact Temporary repository tokens were leaked into Pull Requests comments in during certain Go Modules update failure scenarios. Patches The problem has been patched. Self-hosted users should upgrade to v19.38.7 or later. Workarounds Disable Go Modules support. References Blog post:...

ApostropheCMS: Missing Authorization On Notification PATCH/DELETE Endpoints

Summary The notification module exposes "PATCH" and "DELETE" REST endpoints that perform operations directly on the underlying MongoDB collection without verifying that the requester is authenticated or owns the target notification. As a result, an unauthenticated attacker who obtains a valid...

ApostropheCMS: Authenticated Object-Level Authorization Bypass In Exist-in-locale Reveals Restricted Localized Draft Ide

Summary ApostropheCMS’s exist-in-locale API allows an authenticated low-privilege user to determine whether restricted documents exist in a specified locale and mode, including draft mode. The endpoint returns localized document identifiers without applying document-level view or edit authorizati...

Renovate Vulnerable To Leakage Of Temporary Repository Tokens Into Pull Request Comments

Impact Temporary repository tokens were leaked into Pull Requests comments in during certain Go Modules update failure scenarios. Patches The problem has been patched. Self-hosted users should upgrade to v19.38.7 or later. Workarounds Disable Go Modules support. References Blog post:...

Markdown-it: Quadratic-time Denial Of Service In Inline HTML Parsing With Html Enabled

Summary With "html: true", markdown-it takes quadratic time to parse repeated unterminated HTML constructs inside a paragraph. This affects HTML comments "", "?", "", and "". When the terminator is absent, matching fails. Parsing eventually reaches the next opener and scans an overlapping suffix...

Denial-Of-Service (DoS)

io.netty, netty-codec-http3 is vulnerable to a denial-of-service DoS. The vulnerability is due to unbounded processing of continuation bytes, which allows a remote, unauthenticated attacker to exhaust heap memory and consume excessive CPU resources by sending malformed QPACK data, potentially...

Denial Of Service (DoS)

io.netty:netty-codec-http3 is vulnerable to Denial of service DoS. The vulnerability is due to QPACK encoder state being retained without limits or being released when HTTP/3 streams complete, which allows a remote, unauthenticated attacker to exhaust server memory by sending sequential HTTP/3...

Decompression Bomb

Apache MINA is vulnerable to a decompression bomb. The vulnerability is due to the CompressionFilter class inflating incoming data without enforcing a size limit, where it allocates a buffer based solely on the decompressed size and does not check the compression ratio, allowing an attacker to se...

HTTP Request Authority Confusion

io.netty, netty-codec-http3 is vulnerable to HTTP request authority confusion. The vulnerability is due to the failure to enforce matching authority values, which allows a remote unauthenticated attacker to bypass routing, virtual-host, and access-control restrictions by sending a crafted HTTP/3...

Integer Truncation

io.netty, netty-codec-stomp is vulnerable to an integer truncation. The vulnerability is due to improper handling of a content-length header exceeding the maximum integer value, which allows a remote attacker to send a specially crafted STOMP frame, triggering an infinite decoding loop and...

Allowlist Bypass

Apache MINA is vulnerable to an allowlist bypass. The vulnerability is due to the resolveProxyClass method not being overridden, where the missing override permits a crafted java.lang.reflect.Proxy to bypass the acceptMatchers allowlist filter and enables attackers to bypass security checks...

UnAuthorized Broker State Manipulation

Apache ActiveMQ Artemis is vulnerable to unauthorized broker state manipulation. The vulnerability is due to insufficient validation of unauthenticated CORE protocol requests, which allows a remote attacker to create arbitrary durable queues and potentially cause denial of service...

Server-Side Request Forgery

Apache Camel is vulnerable to Server-Side Request Forgery. The vulnerability is due to the AS2 component taking the MDN destination address from the inbound message without validation, where it uses that address as the destination for the outgoing receipt and a remote partner can supply an...

Denial Of Service (DoS)

Apache ActiveMQ Artemis is vulnerable to a denial-of-service DoS. The vulnerability is due to the processing of unused method parameters, which allows an authenticated attacker with MANAGE permission to craft payloads that cause excessive computation and pin processing threads...

Unsafe Reflection

org.apache.calcite.avatica, avatica-core is vulnerable to unsafe reflection. The vulnerability is due to unrestricted calls to Class.forNameString during plugin instantiation, which allows an attacker to potentially trigger the execution of static initializer blocks in arbitrary classes available...

Zip Bomb DoS

Eclipse Vert.x is vulnerable to Zip Bomb DoS. The vulnerability is due to the WebSocket implementation not defining a maximum number of bytes allocation when decompressing frames or messages, where an attacker can send a crafted compressed payload a zip bomb that expands to a huge size and exhaus...

Decompression Bomb

Apache CXF is vulnerable to a decompression bomb. The vulnerability is due to CompressionUtils.inflate decompressing attacker-controlled DEFLATE data without an output-size limit, where a small KB crafted payload can expand to gigabytes on the heap and attackers can trigger it via JWE decryption...

Denial Of Service

Apache CXF is vulnerable to XML Denial of Service. The vulnerability is due to unbounded XML parsing limits, where StaxUtils places no limit on the total number of elements or characters in an XML document and a very large request can consume excessive memory and CPU, allowing attackers to cause ...

Expression Language Injection

Apache Camel is vulnerable to Expression Language Injection. The vulnerability is due to improper validation of expression language inputs, where DynamicRouterControlService resolves the language from the CamelContext and compiles the expression into a Predicate without any allow‑list, and an...

OAuth State Validation Bypass

github.com/0xjacky/nginx-ui is vulnerable to OAuth state validation bypass. The vulnerability is due to the use of a constant OAuth state value and the failure to validate the callback state against the initiating browser session, which allows an unauthenticated attacker to trick a victim’s brows...

Improper Authentication Enforcement

github.com/0xjacky/nginx-ui is vulnerable to improper authentication enforcement. The vulnerability is due to the failure to enforce secure session verification on multiple authenticated mutation routes, which allows an attacker with a stolen authenticated session to modify sensitive configuratio...

Improper Authentication Enforcement

github.com/0xjacky/nginx-ui is vulnerable to improper authentication enforcement. The vulnerability is due to the user-management endpoint allowing authenticated users to change another user's password without requiring secure session verification, which allows an attacker to take over the...

Authentication Bypass

github.com/0xjacky/nginx-ui is vulnerable to an authentication bypass. The vulnerability is due to OTP enrollment and passkey registration endpoints failing to require secure session validation and current password verification, which allows an attacker with a stolen JWT to register a malicious...

Security Control Bypass

github.com/0xjacky/nginx-ui is vulnerable to security control bypass. The vulnerability is due to the MCP tool nginxconfigadd failing to validate configuration files before writing them to disk and reloading Nginx, which allows an authenticated attacker to bypass security restrictions by injectin...

Remote Code Execution (RCE)

github.com/0xjacky/nginx-ui is vulnerable to remote code execution RCE. The vulnerability is due to the nginxconfigadd MCP tool bypassing security validation, which allows an authenticated attacker to inject dangerous Nginx directives and execute arbitrary code when the required modules are...

Improper Access Control

github.com/0xJacky/Nginx-UI is vulnerable to improper access control. The vulnerability is due to improper validation of restricted Nginx directives in the MCP configuration interface, which allows an authenticated attacker to inject malicious configuration, load attacker-controlled JavaScript, a...

Authorization Bypass

Apache Storm Logviewer is vulnerable to Authorization Bypass. The vulnerability is due to flawed access control logic that discards the authorizer’s decision for daemon logs and bypasses the authorizer entirely for the daemon log page and download endpoints, where the handler processes requests...

Symlink Privilege Escalation

Apache Storm is vulnerable to symlink privilege escalation. The vulnerability is due to the worker-launcher binary using path‑based lchown and chmod operations after a file‑tree walk with FTS, where an untrusted user can replace an intermediate directory component with a symbolic link between...

CORS Misconfiguration

Apache Storm is vulnerable to CORS misconfiguration. The vulnerability is due to improper handling of CORS headers and JSONP callbacks, where the Logviewer reflects the request's Origin header back in Access-Control-Allow-Origin while also sending Access-Control-Allow-Credentials: true, the share...

Denial-of-service (DoS)

React\Http is vulnerable to a denial-of-service DoS. The vulnerability is due to the lack of a size limit on the response-header buffer, which allows a remote attacker to exhaust PHP memory and crash the application by continuously sending HTTP response data without terminating the headers...

Authorization Bypass

Payload CMS is vulnerable to Authorization Bypass. The vulnerability is due to insufficient access control and file validation when handling client uploads across multiple collections sharing an S3 bucket, which allows an authenticated attacker to overwrite existing objects belonging to another...