CVE Vulnerability Catalog

Multidict is an implementation of a multidict data structure. From 6.7.0 until 6.9.1, the C extension's items-view union and subtraction operations fail to release new key-identity and value references for each operand element, leaking two strong references per element. Applications performing these operations over attacker-influenced sequences can experience unbounded memory growth and denial of service.

The postgresql-operator charm runs a Prometheus postgres_exporter that writes the monitoring user's password in cleartext to its logs on database connection errors. Anyone able to read those logs can recover the password, which grants read-only pg_monitor access to PostgreSQL.

UTMStack before 11.2.16 contains a server-side request forgery (SSRF) vulnerability in IdentityProviderService.validateMetadataUrl(). An authenticated attacker can make the server send requests to arbitrary internal or cloud metadata hosts by supplying a malicious metadata URL to the identity-providers endpoint.

UTMStack before 11.2.16 contains a SQL injection vulnerability in UtmAssetGroupService.searchQueryBuilder(). An authenticated attacker can inject arbitrary SQL by supplying malicious assetType and groupName values that are inserted unsanitized into a native PostgreSQL query. The GET /api/utm-asset-groups/searchGroupsByFilter endpoint can be exploited to execute arbitrary SQL with DBA privileges.

The Wallstreet plugin for WordPress (Webriti Wallstreet) through version 2.8.6 contains a Cross-Site Request Forgery (CSRF) vulnerability. This allows an attacker to force an authenticated user to perform unintended actions in their context.

An information exposure vulnerability in Canonical MAAS prior to versions 3.4.10, 3.5.14, 3.6.5, 3.7.3, and 3.8.0 allows an unauthenticated attacker to retrieve the RPC secret in plaintext via the vendor data metadata endpoint. If a target machine was deployed with the 'register as rack' option enabled, an attacker who obtains or infers the machine's system ID can query the preseed/metadata server to leak the secret.

Trivy before 0.71.0 allows directory traversal in Terraform filesystem functions when they try to access pathnames above the scan root. The risk occurs when using misconf scanning on untrusted input (e.g., upon a third-party pull request that contains a Terraform configuration), if sensitive data can be found at those unintended pathnames.

Phproject before 1.8.7 contains a missing object-level authorization vulnerability in the REST API issue endpoints (single_get, single_comments, single_comments_post). Authenticated API key holders can bypass the security.restrict_access confidentiality control because the allowAccess() routine is never invoked. Attackers can read restricted issue contents and comments, including owner and author email addresses, and post unauthorized comments.

A flaw was found in Dogtag PKI (pki-core). The CMCAuthForEST authentication plugin fails open when an EST fullcmc enrollment request is submitted via BasicAuth without an end-user TLS client certificate. The SSL_CLIENT_CERT session attribute retains the EST subsystem's agent certificate, causing downstream authorization checks to treat the request as agent-privileged. An authenticated EST user can obtain CA-signed certificates with arbitrary subject names.

LangGraph Python SDK (langgraph-sdk) from 0.1.45 to 0.4.4 contains a vulnerability in the resource-scoped authorization decorators @auth.on.threads, @auth.on.assistants, and @auth.on.crons. These decorators ignore the actions argument and register the selected handler for every action on the resource. Because the wildcard handler is selected before broader fallback handlers, an authenticated user may bypass ownership and permission checks and read, update, or delete another user's resource. Only Python deployments using actions on the affected decorators are vulnerable. Fixed in version 0.4.4.

OpenTelemetry JavaScript Contrib provides instrumentation libraries for collecting telemetry from JavaScript applications. Prior to versions 0.66.0 of @opentelemetry/instrumentation-cassandra-driver, 0.65.0 of @opentelemetry/instrumentation-knex, 0.67.0 of @opentelemetry/instrumentation-mongoose, @opentelemetry/instrumentation-mysql, and @opentelemetry/instrumentation-mysql2, 0.46.0 of @opentelemetry/instrumentation-oracledb, 0.73.0 of @opentelemetry/instrumentation-pg, and 0.40.0 of @opentelemetry/instrumentation-tedious, the packages add the database connection username to every instrumented database operation as the db.user span attribute. The attribute is emitted by default and is not controlled by enhancedDatabaseReporting or another opt-in setting.

Angular SSR is a server-side rendering tool for Angular applications. Prior to versions 20.3.36, 21.2.23, and 22.1.7, the CommonEngine retrieveSSGPage prerendered-page retrieval logic in @angular/ssr/node, and in @angular/ssr for versions 17 through 18, accepts a relative request URL containing a backslash parent-traversal segment on Windows. An unauthenticated requester can retrieve a sibling prerendered HTML page when that page contains the Angular SSG marker.

OS command injection in the Studio Space startup validation script in Amazon SageMaker Distribution 2.x before 2.14.12, 3.x before 3.9.12, 4.0.x before 4.0.11, 4.1.x before 4.1.11, 4.2.x before 4.2.8, 4.3.x before 4.3.5, and 4.4.x before 4.4.3, as used by Amazon SageMaker Unified Studio, might allow an authenticated remote user with project contributor permissions to execute arbitrary commands in another project member's Studio Space and obtain that member's temporary execution role credentials via a crafted connection resource property that is interpolated into a shell invocation without neutralization.

oRPC is a tool that helps build APIs that are end-to-end type-safe. Prior to 1.14.10, the @orpc/zod ZodSmartCoercionPlugin and experimental_ZodSmartCoercionPlugin collect object properties in plain objects and resolve shape keys through the prototype chain. A remote client can supply __proto__ to replace the prototype of the returned request object, allowing attacker-controlled inherited values to reach application lookups.

oRPC is a tool that helps build APIs that are end-to-end type-safe. Prior to 1.14.9, the @orpc/json-schema SmartCoercionPlugin uses JsonSchemaCoercer to collect object properties in a plain object and to resolve schema.properties entries through the prototype chain. A remote client can supply __proto__ to replace the prototype of the single coerced request object, or supply Object.prototype member names such as constructor and toString so inherited values are treated as sub-schemas.

Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network. The vulnerability requires valid credentials.

The All in One SEO WordPress plugin before 5.0.2.1 does not correctly determine which shortcodes are present in content derived from user input before deciding which ones to strip. This allows unauthenticated users to execute arbitrary shortcodes registered on the site, and on sites upgraded from older versions the protection is disabled outright.

Loom for AWS before 1.7.0 contains a server-side request forgery vulnerability in the tool server and remote agent connection handling. An authenticated remote user can obtain the credentials of the application's own container role and read responses from arbitrary internal network locations by supplying a crafted connection address when registering, updating, or testing a tool server or remote agent.

Server-side request forgery in the OAuth2 discovery handling in Loom for AWS before 1.7.0 might allow an authenticated remote user to obtain the access token of another user of the deployment and to cause the application to issue requests to arbitrary internal network locations. This is achieved via a crafted discovery document address supplied when registering a tool server or remote agent configured for delegated authentication.

Missing authentication for a critical function in the authentication dependency in Loom for AWS before 1.6.1 allowed remote actors to obtain super-admin authority over the agent control plane, including registering tool servers, reading stored integration credentials, and rewriting the IAM role policies attached to managed agent roles, via any request to the application API in a deployment where no identity provider is configured.