Skip to content
Advisories.

All advisories

14,478 advisories for 277 projects, newest first

60 of 139 advisories

Advisory
FastMCP OpenAPI Provider has an SSRF & Path Traversal Vulnerability
fastmcpCritical10.0Mar 31
onnx Vulnerable to Path Traversal via Symlink
ONNXHighMar 31
FastMCP: Missing Consent Verification in OAuth Proxy Callback Facilitates Confused Deputy Vulnerabilities
fastmcpHighMar 31
FastMCP has a Command Injection vulnerability - Gemini CLI
fastmcpMedium6.7Mar 31
Mlflow: Command Injection when serving models with enable_mlserver=True
MLflowCritical9.6Mar 31
Apache Airflow: improper certificate validation
Apache AirflowMedium4.8Mar 31
Memory Tool Path Validation Race Condition Allows Sandbox Escape
AnthropicMedium5.8Mar 31
Insecure Default File Permissions in Local Filesystem Memory Tool
AnthropicMedium4.8Mar 31
Memory Tool Path Validation Allows Sandbox Escape to Sibling Directories
AnthropicMedium6.3Mar 31
AWS C Event Stream Streaming Decoder Stack Buffer Overflow
AWSUnratedMar 31
MLflow Command Injection vulnerability
MLflowCritical10.0Mar 30
MLFlow path traversal vulnerability
MLflowCritical9.6Mar 30
MinIO is Vulnerable to SSE Metadata Injection via Replication Headers
MinIOHigh7.1Mar 27
LangChain Core has Path Traversal vulnerabilites in legacy `load_prompt` functions
LangChainHigh7.5Mar 27
Langflow: Authenticated Users Can Read, Modify, and Delete Any Flow via Missing Ownership Check
LangflowHighMar 27
MLFlow allows Tracing + Assessments Access
MLflowHigh8.1Mar 27
n8n has XSS in its Credential Management Flow
n8nMedium5.4Mar 27
n8n has XSS in Chat Trigger Node through Custom CSS
n8nMedium5.4Mar 27
n8n: Authenticated XSS and Open Redirect via Form Node
n8nMedium4.1Mar 27
n8n has a Stored XSS Vulnerability in its Form Trigger
n8nMedium5.4Mar 27
Open WebUI's Insecure Direct Object Reference (IDOR) allows access to other users' memories
Open WebUILow3.1Mar 27
Open WebUI has unauthorized deletion of knowledge files
Open WebUIMedium5.4Mar 27
Open WebUI's process_files_batch() endpoint missing ownership check, allows unauthorized file overwrite
Open WebUIHigh7.1Mar 27
Open WebUI vulnerable to Path Traversal in `POST /api/v1/audio/transcriptions`
Open WebUIMedium4.3Mar 27
vLLM has Hardcoded Trust Override in Model Files Enables RCE Despite Explicit User Opt-Out
vLLMHigh8.8Mar 27
Grafana Tempo has Inadequate Encryption Strength
TempoHigh7.5Mar 27
NATS is vulnerable to MQTT hijacking via Client ID in github.com/nats-io/nats-server
nats-serverUnratedMar 26
NATS: Message tracing can be redirected to arbitrary subject in github.com/nats-io/nats-server
nats-serverUnratedMar 26
NATS credentials are exposed in monitoring port via command-line argv in github.com/nats-io/nats-server
nats-serverUnratedMar 26
OpenBao has Reflected XSS in its OIDC authentication error message
OpenBaoCriticalMar 26
OpenBao lacks user confirmation for OIDC direct callback mode
OpenBaoCritical9.6Mar 26
Langflow has Authenticated Code Execution in Agentic Assistant Validation
LangflowCriticalMar 26
n8n Vulnerable to LDAP Filter Injection in LDAP Node
n8nMedium4.8Mar 26
n8n Vulnerable to XSS via Binary Data Inline HTML Rendering
n8nMedium8.9Mar 26
n8n has SQL Injection in Data Table Node via orderByColumn Expression
n8nHigh9.9Mar 26
n8n: Prototype Pollution in XML and GSuiteAdmin node parameters lead to RCE
n8nCritical9.9Mar 26
BentoML has Dockerfile Command Injection via system_packages in bentofile.yaml
BentoMLHigh7.8Mar 26
Defense in depth enhancement for CloudFront signing utility in AWS Tools for PowerShell
AWSHigh7.7Mar 26
Defense in depth enhancement for CloudFront signing utility in AWS SDK for .NET
AWSHigh7.7Mar 26
n8n's Source Control SSH Configuration Uses StrictHostKeyChecking=no
n8nMedium5.4Mar 25
n8n Has External Secrets Authorization Bypass in Credential Saving
n8nHigh6.3Mar 25
n8n Has Authorization Bypass in OAuth Callback via N8N_SKIP_AUTH_ON_OAUTH_CALLBACK
n8nMedium4.7Mar 25
Unauthenticated SSRF Vulnerability in Streamlit on Windows (NTLM Credential Exposure)
StreamlitMedium4.7Mar 25
n8n: LDAP Email-Based Account Linking Allows Privilege Escalation and Account Takeover
n8nHigh8.2Mar 25
n8n: insecure direct object reference
n8nHigh9.9Mar 25
n8n has Multiple Remote Code Execution Vulnerabilities in Merge Node AlaSQL SQL Mode
n8nCritical9.9Mar 25
NATS: Pre-auth remote server crash via WebSocket frame length overflow in wsRead
nats-serverHigh7.5Mar 25
n8n has In-Process Memory Disclosure in its Task Runner
n8nHigh6.5Mar 25
Two LiteLLM versions published containing credential harvesting malware
LiteLLMCriticalMar 25
Defense in depth enhancement for CloudFront signing utility
AWSHigh7.7Mar 25
Defense in depth enhancement for CloudFront signing utility in AWS SDK for Java v2
AWSHigh7.7Mar 25
Defense in depth enhancement for CloudFront signing utility in AWS SDK for PHP V3
AWSHigh7.7Mar 25
openssl on Windows built with openssldir set from the build machine (Uncontrolled Search Path Element)
MicrosoftHigh7.8Mar 25
Salesforce Workbench Disclosure
GoogleLowMar 25
NATS has mTLS verify_and_map authentication bypass via incorrect Subject DN matching
nats-serverMedium4.2Mar 24
NATS: Leafnode connections allow spoofing of Nats-Request-Info identity headers
nats-serverMedium6.4Mar 24
NATS Server: Incomplete Stripping of Nats-Request-Info Header Allows Identity Spoofing
nats-serverMedium6.4Mar 24
NATS JetStream has an authorization bypass through its Management API
nats-serverMedium4.9Mar 24
NATS is vulnerable to pre-auth DoS through WebSockets client service
nats-serverMedium5.3Mar 24
NATS has pre-auth server panic via leafnode handling
nats-serverHigh7.5Mar 24

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.

Double opt-in. Unsubscribe any time.