漏洞公告

FacturaScripts has Insecure Parameter Handling: Unauthorized Modification of Immutable 'nick' Field

Fiber's cache middleware default key generator ignores query string, causing response mix-up across distinct query parameters

NVIDIA NVFlare Dashboard: Authorization bypass through user-controlled key via user management and authentication system

Netmaker does not verify JWT signatures for host tokens

Spring gRPC SecurityContext leaks across requests upon authorization failure

Spring gRPC AuthenticationException messages are reflected to remote client

Apache Thrift TFramedTransport Go language implementation has an Integer Overflow or Wraparound vulnerability

Apache Thrift Node.js bindings vulnerable to Uncontrolled Recursion

Spring AI's VectorStoreChatMemoryAdvisor conversation scoping can lead to cross-tenant memory exfiltration

Spring AI's ONNX model cache defaults to world-writable predictable /tmp directory

Spring AI has SQL Injection in CosmosDBVectorStore.doDelete()

Spring AI Vulnerable to OOM by attacker-controlled PDF

Spring AI has a VectorStore FilterExpression Converter injection

OpenStack Ironic is Vulnerable to Inclusion of Functionality from Untrusted Control Sphere

BigSweetPotatoStudio HyperChat has a Server-Side Request Forgery issue

notes-mcp has a Path Traversal issue

sqlite-mcp has an Injection issue

Spring Boot accepts predictable temp directory without ownership verification

Duplicate Advisory: OpenClaw: Feishu extension resolveUploadInput bypasses file-system sandbox and allows arbitrary file reads via upload_image

Spring Boot's Cassandra SSL auto-configuration disables TLS hostname verification

Spring Boot's random value property source uses a weak PRNG unsuitable for secrets

Duplicate Advisory: OpenClaw: Trailing-dot localhost CDP hosts could bypass remote loopback protections

Spring Boot's default security filter chain has no authorization rule with Actuator but without Health