漏洞公告

Axios: Regular Expression Denial of Service (ReDoS) via Cookie Name Injection

Allocation of Resources Without Limits or Throttling in Axios

Axios: Proxy-Authorization Credential Leak to Origin Server Across HTTP-to-HTTPS Redirect in Axios Node.js HTTP Adapter

Axios: Proxy-Authorization header leaks to redirect target when proxy is re-evaluated to direct connection

Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks

Streamlit @st.cache_data hash collision via fixed sampling seed and PIL P-mode palette omission

MLflow: Deterministic sampling in dataset digest enables predictable collisions

Keystone: GraphQL API Endpoint Lacks Query Depth Limits

ms-swift: Image Cache Hash Collision via Missing Dimension Metadata

OpenStack Ironic allows file overwrite via directory traversal during deployment with a crafted ISO image

OpenStack Mistral allows Arbitrary Remote Code Execution when the API is exposed

OpenStack Ironic allows Boot Script Injection

SGLang is Vulnerable to DoS via the data_hash Function

Gradio: Audio cache key ignores metadata when saving numpy audio outputs

Froxlor's API Authentication bypasses 2FA Authentication

browserstack-runner vulnerable to Remote Code Execution via vm sandbox escape in _log HTTP handler

browserstack-runner has an unauthenticated arbitrary file read via path traversal in HTTP server

Jupyter Enterprise Gateway: Kubernetes Manifest Injection in Jinja2 Template Rendering

Jupyter Enterprise Gateway: Jinja2 Template Server Side Template Injection resulting in Remote Code Execution

AIOHTTP is vulnerable to cross-origin redirect with per-request cookies

mlrun: DataFrame hash collisions can cause dataset artifact path conflicts and silent data corruption

Concrete CMS is vulnerable to PHP Object Injection via unserialize() calls in the Workflow, Form block, and File/Set components

Jupyter Enterprise Gateway: ContainerProcessProxy._enforce_prohibited_ids Bypass