漏洞公告

protobuf.js: Denial of service through unbounded protobuf recursion

protobufjs has overlong UTF-8 decoding

protobuf.js is Vulnerable to OS Command Injection in the CLI

Spring AI: ChatMemory DEFAULT_CONVERSATION_ID causes unintended cross-user data leakage

Spring AI: Prompt Injection via Memory Poisoning in PromptChatMemoryAdvisor

omec-project amf crashes when processing malformed LocationReports

Malware in @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys

aiwaves-cn agents is vulnerable to resource consumption in the recall_relevant_memories_to_working_memory function

MLflow allows an unauthenticated remote attacker to read arbitrary files from the server's filesystem

cowlib cow_http_te module: Uncontrolled Resource Consumption vulnerability allows Excessive Allocation

@steipete/summarize allows local attackers to read bearer tokens and API credentials stored in ~/.summarize/daemon.json

ninenines cowlib: Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability allows SSE event splitting and injection via unvalidated field values

cowlib: Cookie Request Header Injection via Unvalidated Encoder in cow_cookie:cookie/1

Crabbox contains a path traversal vulnerability in the Islo provider's workspace path resolution

Gryph Agents Payload Filter Fails to Strip Tool Payload for Sensitive Content

MantisBT Vulnerable to Stored XSS in File Download

MantisBT has Stored XSS on Move Attachments Admin Page

Kysely: JSON-path traversal injection via unsanitized path-leg metacharacters in `JSONPathBuilder.key()` / `.at()`

local-deep-research is Vulnerable to HTML Injection via Unescaped User Input in PDF Export (`pdf_service.py:_markdown_to_html`)

SandboxJS has a sandbox escape via Function.caller leakage of internal call op

MantisBT has a Private Bugnote Attachment Content Leak via REST API

MantisBT: Authorization Bypass in Bugnote Editing via Issue Update API

MantisBT is Vulnerable to Reflected XSS in Rendering Dynamic Custom Textarea Field