漏洞公告

Spring Web Services: Jaxp13 XPath XXE via StreamSource and SAXSource

Spring Web Flow JS RemotingHandler renders non-HTML Response as HTML

Spring Boot's Mail Auto-Configuration Does Not Enable SSL Hostname Verification

Spring Integration File Support: FTP/SFTP/SMB server can write arbitrary files anywhere on the client filesystem

Spring Web Flow has Data Binding Vulnerability with Unified EL Parser

kafka-python vulnerable to denial of service through an unvalidated protocol frame length

kafka-python vulnerable to denial of service through an unbounded SCRAM iteration count

nebula-mesh: Newly-minted operator API key exposed in redirect URL (Referer, history, proxy logs)

PDM wheel installation leads to Path Traversal via overridden write_to_fs

PDM: Project-Local State and Config Writes Follow Symlinks

Incus has a Nil-Pointer Dereference Panic via Instance Backup Import (volume omitted)

Claude Code Action: Malicious MCP Server Configuration in PRs Enables Remote Code Execution and Secret Exfiltration

Baileys has message upsert / hist sync spoofing and app state corruption when using maliciously crafted protocolMessage payload

Litestar: AllowedHostsMiddleware bypasses host validation via client-controlled X-Forwarded-Host header

Litestar has HTML Injection Through its CSRF Token

nebula-mesh: Session and OIDC state cookies lack the Secure attribute

nebula-mesh: Decrypted CA private key persists in heap after signing

Silverpeas mishandles the "Personal space" feature that is selected when no componentId is set

Apache Answer: AdminToken not invalidated after admin deactivation

OpenTelemetry Operator for Kubernetes's ServiceMonitor bearerTokenFile reads arbitrary local file and sends contents as bearer auth

Anyquery has Path Traversal through `clear_plugin_cache`, Allowing Arbitrary Directory Deletion

vLLM's Artifact Pin Decay allows pinned deployments to load unpinned code, weights, and processors

Acknowledgement extension out of memory