漏洞公告

DSpace: Path Traversal is possible through LDN message generation

DSpace: ORE resource URI does not validate scheme for non-web resources

DSpace has a possible Path Traversal Vulnerability in its Curation Task Reporter output path

DSpace has possible Remote Code Execution (RCE) through Velocity Templates used by LDN

Trapster Community: Unauthenticated malformed DNS compression pointers crash per-packet honeypot handler

Sharp Missing Authorization Check in Quick Creation Command Endpoints

Nuclio: Unsanitized cron trigger event headers/body injected into CronJob shell command leads to persistent RCE

async-tar PAX extension-header desync enables tar entry/content smuggling

Skipper: opaAuthorizeRequestWithBody filter bypasses OPA policy on Transfer-Encoding — chunked / HTTP/2 requests

`lxml_html_clean.Cleaner` does not strip `javascript:` URLs from namespaced URL attributes

Duplicate Advisory: MySQL v1 Node executeQuery Operation Allows SQL Injection via Unparameterized Expression Interpolation

Duplicate Advisory: Improper Authorization Allows Authenticated Users to Assign Workflows to Folders in Other Projects

Weblate SSRF: outbound URL guard misses some private ranges

oasdiff does not enforce --allow-external-refs=false on the git-revision load path (SSRF / local file read)

KEDA has PostgreSQL connection string parameter injection via incomplete whitespace escaping

Flask-Security-Too: WebAuthn reauthentication freshness bypass via cross-user assertion

Goploy: Arbitrary File Read via Path Traversal in /deploy/fileDiff allows Remote Server Compromise

Goploy: Cross-namespace IDOR and RCE via body-supplied row id in project and project_file handlers

ha-mcp: Add-on settings and policy routes are reachable without authentication at the bare root path

rama has Stored XSS in ServeDir HTML directory listing via unescaped file names and URI path

aiosmtplib vulnerable to SMTP command injection via CR/LF in sender/recipient address

Kite has an authenticated cluster RBAC bypass in /api/v1/overview

Webauthn: SimpleFakeCredentialGenerator with an empty secret produces predictable fake credentials, weakening username enumeration protection