漏洞公告

Duplicate Advisory: jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition

Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions Override

Flowise Sandbox Escape to RCE

Flowise: Missing authorization on `/api/v1/files` allows low-privileged API keys to list and delete files across workspaces within the same organization

Flowise RCE via TypeORM DataSource

Flowise: Unauthenticated OAuth2 Refresh Enables Non-Blind SSRF and Secret Exfiltration

Flowise: IDOR vulnerability exists at the GET /api/v1/organization/customer-default-source endpoint

python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees

python-cryptography: Duplicate self-signed intermediates can cause exponential path-building

cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing

Guzzle: Noncanonical host can bypass host-based checks

Guzzle: Noncanonical cookie domain keeps subdomain scope

AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response)

AIOHTTP: HTTP request smuggling via WebSocket upgrade

AIOHTTP: WebSocket client accepts compressed frames without negotiated permessage-deflate

Sequelize: SQL Injection (Oracle DB)

Hono: ReDoS in CORS middleware via Access-Control-Request-Headers

GitPython: Arbitrary file truncation via git rev-list --output argument injection in unguarded Commit.count

GitPython: Incomplete unsafe_git_archive_options denylist omits --add-file / --add-virtual-file, enabling arbitrary file read via Repo.archive()

GitPython: Unguarded git option forwarding in IndexFile.checkout() and TagReference.create() enables arbitrary file overwrite and arbitrary file read

ip-address: Address4 decodes leading-zero octets as decimal while resolvers decode them as octal, allowing SSRF and trust-boundary bypass

ip-address: a CIDR suffix on the parsed address suppresses special-use classification and can bypass SSRF and trust-boundary checks

ip-address: misclassification of IPv4-mapped/NAT64 IPv6 addresses can bypass SSRF and trust-boundary checks