漏洞公告

piscina: Prototype Pollution Gadget → RCE via inherited options.filename

Docker MCP Gateway: Argument injection via OCI image label YAML

jodit: Prototype pollution in Jodit via Jodit.modules.Helpers.set()

Gotenberg: SSRF via LibreOffice document processing

Strimzi: Unrestricted access to all Secrets within namespace watched by the Topic operator

Strimzi: Cross-namespace privilege escalation via `Kafka.spec.entityOperator`

OpenClaw: Tool group policy callers could accept unvalidated group IDs

OpenClaw: Workspace .env CLOUDSDK_PYTHON could influence Gmail setup gcloud execution

OpenClaw: Shell inline-command parsing could miss an allowlist check

OpenClaw: Pairing-scoped device session could restore revoked node token authority

OpenClaw: Host environment sanitizer missed two Node.js control variables

ZITADEL: Server-Side Request Forgery (SSRF) and Denylist Bypass in Outgoing HTTP Components

Cotonti: Cross-Site Request Forgery in the Personal File Storage (PFS) module

Cotonti: Stored Cross-Site Scripting in the Personal File Storage (PFS) module

Cotonti: Cross-Site Request Forgery in the Personal File Storage (PFS) module

Cotonti: Cross-Site Request Forgery in the administration rights handler

marimo contains a reflected cross-site scripting vulnerability in the notebook page

Hermes Agent creates response_store.db and webhook_subscriptions.json with world-readable permissions (mode 0o644)

Pimcore CMS Twig Sandbox Bypass via SecurityPolicy checkMethodAllowed

Hermes Agent contains a DNS rebinding vulnerability in WebSocket endpoints that allows remote attackers to bypass Host and Origin validation

CakePHP Authentication: Open redirect weakness via backslash bypass

Avo: Missing Authorization in Avo Association Attach Endpoint Allows Unauthorized Relationship Manipulation and Privilege Escalation

Deno: Denial of service via non-ASCII bytes in WebSocket response headers