漏洞公告

Caddy: Windows `file_server` path authorization bypass via encoded backslash

yt-dlp: Arbitrary code execution via manifest downloads with aria2c

Daytona: Public sandbox previews remain accessible for up to one hour after being made private

Traefik: HTTP/3 mTLS bypass via exact SNI TLSOptions lookup for wildcard and mixed-case hosts

Crawl4AI: SSRF via proxy settings in the Docker server bypasses the crawl-URL SSRF check

Crawl4AI: Arbitrary file write (symlink/TOCTOU) plus log and webhook-header injection in Docker server

Crawl4AI: LLM credential exfiltration in Docker server via request base_url and env: token resolution

Crawl4AI: SSRF filter bypass in Docker server via IPv6 transition forms (NAT64 / 6to4 / unspecified / v4-mapped)

yt-dlp: Dangerous file type creation via insufficient filename sanitization (Bypass of CVE-2024-38519)

yt-dlp: File Downloader cookie leak with curl

LobeHub: Unauthenticated SSRF in `/webapi/proxy`

Crawl4AI: Multiple Docker API Vulnerabilities - File Write, SSRF, Auth Bypass, XSS, JS Execution

Crawl4AI: AST Sandbox Escape via gi_frame.f_back Chain - Pre-Auth RCE in Docker API

Hugo: Symlink confinement bypass in resources.Get

Hugo: security.http.urls allow-list bypass via HTTP redirects

Hugo: XSS via text/html content files

Deno: Permission Bypass via Unicode Normalization Mismatch on macOS (APFS)

Deno: BYONM module resolution allows `package.json` main path traversal to bypass `--allow-read` restrictions

Deno: Node TCPWrap numeric hostname aliases bypass --deny-net resolved-IP deny checks

Deno: Miller-Rabin Primality Test Allows Zero Rounds

Deno: Command Injection via spawnSync & spawn on Windows

Deno: process.loadEnvFile() bypasses env permission checks and mutates process.env with only read access

Deno: WebSocket API sandbox bypass via missing post-DNS check