漏洞公告

RabbitMQ Java client: TrustEverythingTrustManager used by default in useSslProtocol() enables MITM

RabbitMQ Java client malformed body frame triggers raw command assembler exception

RabbitMQ Java client: Unvalidated Class.forName in JSON-RPC ProcedureDescription enables arbitrary class loading

RabbitMQ Java client ValueReader: Oversized LongString/bytes length triggers OOM via unchecked allocation

RabbitMQ Java client ValueReader: Unbounded recursive table/array nesting causes StackOverflowError DoS

Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write

Kestra vulnerable to stored XSS via custom Markdown [[link]] attribute injection

@rhinostone/swig: arbitrary local file read via include/extends path traversal

Copyparty vulnerable to file/dirkey confusion

MLflow: CreateModelVersion source validation does not check READ permission on referenced run_id

MLflow: LogInputs endpoint bypasses per-run UPDATE authorization in basic-auth

MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)

9Router: Authenticated Server-Side Request Forgery (SSRF) via OIDC Provider Test Endpoint

http4k: `DigestAuthProvider.verify` did not bind to request URI

http4k: `DigestAuthProvider.verify` ignored configured algorithm and did not bind to request URI

chrome-devtools-mcp: validatePath() does not canonicalize symlinks before enforcing roots

package pkcs12: Authentication bypass in Decode functions

docx4j: Stack Overflow via Cyclic `w:basedOn` Style Chain leads to Denial of Service

http4k: Unbounded gzip decompression in `ServerFilters.GZip` / `RequestFilters.GunZip` allowed memory-exhaustion DoS

atomic-agents-stack: Parallel helper/delegate batch reserves $0 for models absent from the pricing table, bypassing the cost-cap fan-out guard

atomic-agents-stack: HTTP MCP catalog accepts cleartext http and spawns catalog-supplied commands (MITM to RCE)

Netty Vulnerable to Cache Poisoning and Information Disclosure via CORS Vary Header Overwrite

Netty: Memory Exhaustion in SctpMessageCompletionHandler