漏洞公告

Decidim: Verification admins can access supplied IDs from other organizations

Decidim: Forms admin question editor lacks authorization

Apollo Portal: There is a risk of unauthorized access to the Apollo configuration center

GeoNode: Stored XSS to full account takeover

PyOD persistence.load deserializes untrusted artifacts before validation

Apache Log4j API: Improper encoding of non-finite floating-point values during MapMessage JSON serialization

TSDProxy: Internal proxy auth token forwarded to backend services enables management API escalation

melange: Incomplete package integrity verification allows data section substitution

mcp-server-kubernetes argument injection can expose Kubernetes cluster credentials

Excon does not redact additional sensitive/risky headers when following redirects

Clauster: Non-loopback deployments can serve the dashboard unauthenticated when auth.enabled is unset

Secure Headers: CSP directive injection via sandbox, plugin_types, and report_to when given untrusted input

SiYuan: Stored XSS to RCE via Unsanitized Attribute View Asset Cell Content

prestashop/ps_facetedsearch: PHP Object Injection in faceted search cache allows unauthenticated RCE

SiYuan: Stored XSS to RCE via attribute-view cell rendering in genAVValueHTML()

mcp-atlassian: Arbitrary file read via missing path validation in confluence_upload_attachment

mcp-atlassian: Arbitrary server-side file read via attachment upload

SafeInstall agent guard shell parsing can miss raw package execution

NotrinosERP: Authenticated arbitrary file upload leads to remote code execution via HRM employee "Documents" (doc_file)

BabelDOC: Arbitrary Code Execution via CMap Pickle Deserialization in babeldoc/pdfminer/cmapdb.py

File Browser: Command Injection via Authentication Hook Shell Substitution (Pre-Authentication RCE)

`exploration` was removed from crates.io for malicious code

Windmill: Resource-scoped API tokens can read script contents outside their allowed path via scripts/list_search