漏洞公告

Casdoor: Arbitrary file write possible through Local File System storage provider

pgAdmin 4 contains local file inclusion (LFI) and server-side request forgery (SSRF) vulnerabilities

pgAdmin 4: OS command injection vulnerability in Import/Export query export

pgAdmin 4: Improper restriction of excessive authentication attempts

pgAdmin 4 File Manager has symbolic-link path traversal

SQL injection vulnerability in pgAdmin 4 Maintenance Tool

pgAdmin 4 server mode has an authorization vulnerability affecting Server Groups, Servers, Shared Servers, Background Processes, and Debugger modules

Docling's METS GBS backend is vulnerable to XML Entity Expansion (XXE) attacks

flash-attention contains an insecure deserialization vulnerability in its checkpoint loading mechanism

pgAdmin 4: Stored cross-site scripting (XSS) vulnerability in Browser Tree and Explain Visualizer modules

pgAdmin 4 has deserialization of untrusted data in its FileBackedSessionManager

GPT-Pilot contains a command injection vulnerability in the Executor.run() method

Docling's JATS XML backend is vulnerable to XML Entity Expansion (XXE) attacks

MantisBT Has Authorization Bypass in Global Profile Creation

Unity Catalog has a JWT Issuer Validation Bypass tht Allows Complete User Impersonation

WebdriverIO BrowserStack Service has a Command Injection issue

torrentpier has PHP Serialize Injections

Next.js has a Middleware / Proxy bypass in App Router applications via segment-prefetch routes - Incomplete Fix Follow-Up

Angular Expressions - Remote Code Execution using filters

Budibase vulnerable to SSRF via trivial `.tar.gz` substring bypass in Plugin URL upload (`/api/plugin`)

Bird-lg-go has a Fatal Out-of-Memory (OOM) Denial of Service via Unbounded JSON Decoding

LiteLLM has a sandbox escape in custom-code guardrail

GitHub Copilot CLI: Nested Bare Repository Can Execute Arbitrary Commands via core.fsmonitor