Writeups
All findings below were privately reported to the vendor first and are published here only once a public advisory (CVE / GHSA / security bulletin) already exists.
All writeups
-
MariaDB Connector/Node.js: pool.escape() SQL injection when busy High
-
Nitro: Open Redirect Through a Backslash in Wildcard Redirects Medium
-
Missing Host Validation in mcp-proxy High
-
SunEditor: srcdoc survives the iframe placeholder rebuild in clean() High
-
SunEditor: a digit in a namespaced tag skips attribute cleaning Medium
-
libXtst: a RECORD reply that never advances the parser Medium
-
Mercury: notebook source readable without credentials on token- or password-protected servers High
-
ToolHive: Podman's Host-Access Endpoints Slip Past the Egress Proxy Medium
-
oras-go: The Path Check That Never Looked at the Last Component High
-
n8n: Execute Sub-workflow URL Sources Bypass the Shared-Workflow Credential Guard Medium
-
n8n: SeaTable Poll-Trigger Error Data Leaks the Plaintext API Token Medium
-
SiYuan: GLOBALROOT Device Alias Bypasses the Sensitive-Path Guard High
-
ToolHive: Host-Gateway Blocklist Keyed on the Wrong Docker Network Medium
-
django-ses: Forged SES Delivery Events via Unverified SNS Topic Origin High
-
OpenPanel: Webhook Template Sandbox Escape via an Aliased Function Constructor Critical
-
agent-framework: The Sensitivity Guard Was Missing From the MCP Tool Executor High
-
agent-framework: The Sensitivity Guard Covered Every Parameter but the Conversation ID Medium
-
phpMyFAQ: Keycloak and Entra ID SSO Logins Bypass the Two-Factor Token Step High
-
virtualenv: Command Execution from the Environment Name in zsh High
-
python-social-auth: Login CSRF in the Last.fm Backend Medium
-
Formie's Guest-Only Submission Gate Let Any Logged-In Member Overwrite Another User's Submission Medium
-
A 72-Byte Serialized Stream Forced Gigabyte Allocations in Guava High
-
SemanticMediaWiki's smwtask Authorization Fix Left Anonymous Callers Running Queued Jobs High
-
mail-mime-parser: CVE-2026-61815's Fix Only Sanitized the Filename High
-
Gitea: The Migration SSRF Guard That Did Nothing High
-
Unauthenticated SQL Injection in django-sql-explorer's AI Assistant Endpoint Critical
-
Accept-Language CPU Exhaustion: The Gap Left by nginx-ignition's Previous DoS Fix High
-
encodeGitLabPath Never Blocks ../: Path Traversal to Arbitrary GitLab API Endpoints High
-
django-gcp's Cloud Tasks and Events Endpoints Have No Authentication By Default High
-
Predis's write() Re-Parses Its Buffer on \r\n, Enabling Redis Command Injection Critical
-
n8n's Supabase Node Filter Injection High
-
django-allauth's Rate Limiter Overran by Up to 200x Under Concurrency High