漏洞公告

AVideo has an Incomplete Fix for YPTSocket autoEvalCodeOnHTML Strip: Unauthenticated Cross-User JavaScript Execution via `$msg['json']` Relay Bypass

AVideo: Unauthenticated Disclosure of CloneSite `myKey` via Error Echo in `cloneClient.json.php` Enables Cross-Site DB Dump of the Configured Clone Server

PPTAgent: Arbitrary File Write via `save_generated_slides`

PPTAgent: Arbitrary Code Execution via Python eval() of LLM-Generated Code with Builtins in Scope

PPTAgent: Arbitrary File Write + Directory Creation via markdown_table_to_image

S3-Proxy has Security Issues in its Resource Path Matching Implementation

awslabs/tough is Missing Delegated Metadata Validation

awslabs/tough Delegated Roles have a Signature Threshold Bypass

OpenClaw's gateway config mutation guard allowed unsafe model-driven config writes

OpenClaw vulnerable to arbitrary code execution via attacker-controlled setup-api.js loaded from cwd during env-key resolution

OpenClaw's Webhooks SecretRef route secret remains valid after rotation/reload

@workos/authkit-session has an Open Redirect via state-derived redirect target

External Secrets Operator has Namespace Isolation Bypass in CAProvider ConfigMap Resolution for SecretStore

Microdot has HTTP response splitting in Response.set_cookie()

OpenStack Horizon has Incorrect Behavior Order

Langchain-Chatchat Uses Insufficiently Random Values

Langchain-Chatchat has a Race Condition in its OpenAI-Compatible File Upload API

Langchain-Chatchat Uses a Broken or Risky Cryptographic Algorithm

Django has an Improper Handling of Length Parameter Inconsistency

Eclipse BaSyx Java Server SDK vulnerable to Server-Side Request Forgery

Eclipse BaSyx Java Server SDK vulnerable to Path Traversal

Django Uses Cache Containing Sensitive Information

Django Uses Persistent Cookies Containing Sensitive Information