漏洞公告

SiYuan Bazaar marketplace renders unescaped package `name` and `version` metadata, allowing stored XSS and Electron code execution

SiYuan publish-mode Reader can mutate Conf and SQL index via 8 ungated APIs

Anchor: `InterfaceAccount` allows account substitution between unexpected types

wger has an Uncontrolled Resource Consumption issue

Goobi viewer - Core: Unauthenticated Solr Streaming Expression Proxy

uniget is Vulnerable to Command Injection in tool.Check Leading to Arbitrary Code Execution

SiYuan has broken access control in `/api/search/{searchAsset,searchTag,searchWidget,searchTemplate}` publish-mode

SiYuan: Broken access control in `/api/tag/getTag` — Reader role can mutate `Conf.Tag.Sort` and persist to disk

Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server

Anchor: Program<'info, System> is not properly validated

claude-code-cache-fix vulnerable to local code execution via Python triple-quote injection in tools/quota-statusline.sh

Nautobot: GitRepository.current_head field should not be writable through REST API

Nautobot: Webhook definitions could be used for server-side request forgery (SSRF)

Nautobot: Object bulk rename UI actions vulnerable to denial of service by crafted regular expression (REDoS)

Nautobot: REST API permits creation of GenericForeignKey references to objects that the user should not be able to reference

Traefik: Gateway API TraefikService backend accepts rest@internal, allowing unauthorized exposure of the REST provider despite providers.rest.insecure=false

go-billy: Lack of depth and cycle detection in symlink resolution may lead to infinite loops and resource exhaustion

Grav: Twig sandbox allows editor-role users to exfiltrate all plugin secrets via Config::toArray()

LangSmith SDK: Public prompt pull deserializes untrusted manifests without trust boundary warning

Systeminformation vulnerable to Linux command injection in networkInterfaces() via unsanitized NetworkManager connection profile name

OpenLearnX: Critical Authentication Bypass via JWT Signature Verification Disabled Leading to Account Takeover

Astro: Server island encrypted parameters vulnerable to cross-component replay

Klever-Go MultiDataInterceptor has remote OOM via crafted compressed P2P payload