Arpitjain099

**Name of the Vulnerable Software and Affected Versions** Parse Server versions 8.2.2 through 8.6.91 Parse Server versions 9.0.0 through 9.10.1-alpha.11 **Description** An information disclosure issue exists where GraphQL validation error messages reveal hidden class names even when public introspection is disabled. Unauthenticated attackers with the public Application Id can send crafted operations to trigger unknown-argument or invalid enum value errors, allowing them to discover pointer and relation target classes. **Recommendations** Update Parse Server to version 8.6.92 or later. Update Parse Server to version 9.10.1-alpha.12 or later.

**Name of the Vulnerable Software and Affected Versions** Penpot versions prior to 2.18.0 **Description** An issue exists where the `get-page` RPC (Remote Procedure Call) accepts a share-link permission object providing broad read access but fails to verify if the requested `page-id` is among the pages authorized by the link. An authenticated attacker possessing a valid share link can retrieve the full shape and design data of other pages within the same file if the page identifier is known. Additionally, the `get-file-fragment` RPC allows share-link access without properly mapping fragments to authorized pages. **Recommendations** Update to version 2.18.0.

**Name of the Vulnerable Software and Affected Versions** OpenAM versions prior to 16.1.3 **Description** An improper authorization issue exists where delegated administrators can destroy sessions outside their assigned realms. This occurs because realm checks are performed using the requester's realm rather than the target session's realm. Authenticated accounts possessing the `iplanet-am-session-destroy-sessions` attribute can provide a target session identifier or handle to forcibly log out users across any realm. **Recommendations** Update to version 16.1.3 or later.

**Name of the Vulnerable Software and Affected Versions** OpenAM versions prior to 16.1.3 **Description** The OAuth2 Provider PKCE enforcement is only applied to authorization requests where the `response type` is exactly code. Consequently, codes issued via OpenID Connect hybrid flows (such as `code token`, `code id token`, or `code token id token`) are not bound to a challenge. This allows an attacker who intercepts such a code to redeem it for tokens of a public client using any non-empty `code verifier`. PKCE (Proof Key for Code Exchange) is a security extension used to prevent authorization code injection attacks. **Recommendations** Update OpenAM to version 16.1.3 or later.

**Name of the Vulnerable Software and Affected Versions** OpenAM versions prior to 16.1.3 **Description** A server-side request forgery (SSRF) issue exists where attackers with permissions to register or modify OAuth 2.0 clients can force the server to fetch internal resources. This occurs through the use of an unvalidated `jwks uri` variable. By leveraging client-authentication and ID-token validation, unauthenticated fetches can be triggered to probe internal hosts, metadata endpoints, or local files, or to cause a denial of service by exhausting request threads. **Recommendations** Update to version 16.1.3 or later.

**Name of the Vulnerable Software and Affected Versions** YesWiki versions prior to 4.6.7 **Description** A cross-site request forgery (CSRF) issue exists in the filemanager page handler. The system deletes page attachments via GET requests without validating a CSRF token—a unique token used to verify that a request was intentionally sent by the user. An attacker can trick an authenticated page owner or administrator into performing a top-level GET navigation using the `do` parameter with values such as `del`, `erase`, or `emptytrash`, resulting in the deletion or permanent purging of page attachments. **Recommendations** Update YesWiki to version 4.6.7 or later.

**Name of the Vulnerable Software and Affected Versions** YesWiki versions prior to 4.6.7 **Description** An authentication bypass exists in the ActivityPub inbox due to a failure to bind the verified HTTP signature signer to the activity actor. This allows unauthenticated attackers possessing any ActivityPub keypair to send signed Delete or Update activities. By referencing a mirrored entry's `sourceUrl`, an attacker can delete or overwrite federated entries belonging to other actors. **Recommendations** Update to version 4.6.7 or later.

**Name of the Vulnerable Software and Affected Versions** Obot versions 0.21.1 through 0.24.1 **Description** An authorization bypass allows authenticated users to access MCP servers. This occurs because the `checkUI` deny list fails to include the '/mcp-connect-composite/' endpoint. Consequently, users with basic roles and a composite MCP ID can use `mcpGateway.Proxy` to proxy requests and invoke tools on MCP servers that are otherwise restricted by Access Control Rules. **Recommendations** Update Obot to a version later than 0.24.1. Restrict access to the '/mcp-connect-composite/' endpoint as a temporary mitigation.

**Name of the Vulnerable Software and Affected Versions** Russh versions prior to 0.62.6 **Description** In the `USERAUTH REQUEST` path reached from the `server::run stream` function in `russh/src/server/encrypted.rs`, the system increments `self.common.auth attempts` but fails to compare it against `server::Config.max auth attempts`. This allows an unauthenticated remote client to submit authentication requests on a single connection beyond the configured limit, bypassing attempt-limiting policies and increasing the potential for online guessing and backend authentication workload. **Recommendations** Update to version 0.62.6.

**Name of the Vulnerable Software and Affected Versions** Russh versions prior to 0.63.0 **Description** The hybrid ML-KEM 768 and X25519 implementation in `russh/src/kex/hybrid mlkem.rs` accepts an all-zero 32-byte peer X25519 public key within the `server dh()` and `compute shared secret()` functions. This allows a malicious SSH peer to force the X25519 contribution to the combined shared secret to zero, making the secret depend solely on ML-KEM. This behavior bypasses the intended fallback protection of the hybrid exchange, which is designed to maintain security if ML-KEM is compromised. **Recommendations** Update to version 0.63.0.

**Name of the Vulnerable Software and Affected Versions** ZoneMinder versions prior to 1.38.4 **Description** Authenticated users with Events view permission can bypass per-monitor access restrictions via the 'FramesController index' endpoint. This allows them to list frame records from monitors they are not authorized to access, resulting in the disclosure of event and frame metadata across monitor boundaries. **Recommendations** Update to version 1.38.4 or later.

**Name of the Vulnerable Software and Affected Versions** Fleet versions prior to 4.92.0 **Description** Install and uninstall scripts for macOS apps are generated using Homebrew cask metadata. In manifests created before 2026-08-19, the script generator failed to escape metadata at all interpolation sites. This allows shell metacharacters, such as `$(...)` command substitution, to be included in scripts that execute with root privileges on managed macOS hosts. An attacker who successfully introduces crafted metadata into an upstream Homebrew cask could achieve arbitrary command execution as root on hosts that install or uninstall the affected application. This requires the malicious metadata to pass both the Homebrew cask review and the Fleet automated ingestion review. **Recommendations** Update to Fleet version 4.92.0.

**Name of the Vulnerable Software and Affected Versions** Nezha versions 2.2.11 through 2.3.0 **Description** The service sentinel worker in `service/singleton/servicesentinel.go` contains an incomplete fix for a nil dereference issue. An authenticated user with the member role who owns an agent can trigger a race condition by issuing a concurrent server delete request to the endpoint "/api/v1/batch-delete/server". This causes the worker to dereference a missing entry in the server list snapshot. Since the sentinel workers and the gRPC server lack a recovery interceptor, the resulting panic crashes the entire instance, leading to a denial of service. **Recommendations** Update to version 2.3.1.

**Name of the Vulnerable Software and Affected Versions** froxlor versions prior to 2.3.12 **Description** An authenticated low-privilege customer with subdomain-create rights can inject arbitrary web-server configuration lines. The `Validate::validateUrl()` function fails to inspect the userinfo component of a URL for carriage return (CR) and line feed (LF) characters. By supplying a subdomain redirect URL with a CR/LF payload in the userinfo portion, an attacker can break out of the emitted directive. Since the software regenerates and reloads the web-server configuration as root, these injected directives apply server-wide, potentially allowing the attacker to hijack responses or read local files. **Recommendations** Update to version 2.3.12.

**Name of the Vulnerable Software and Affected Versions** foreman ansible plugin (affected versions not specified) **Description** A flaw exists in the Ansible override values API of the foreman ansible plugin. The destroy action resolves the target LookupValue record by ID but fails to verify if the record belongs to an AnsibleVariable that the caller is authorized to edit. Consequently, an authenticated user possessing the `edit ansible variables` permission can delete any LookupValue by ID. This includes override values for Ansible variables outside their permission filter scope and override values associated with Puppet smart class parameters. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** foreman ansible plugin (affected versions not specified) **Description** A flaw exists in the Ansible inventory API of the foreman ansible plugin. The controller utilizes an unscoped `Host.where()` call to build host queries, which fails to enforce the search filter linked to the caller's `view hosts` permission. Consequently, an authenticated user with restricted host visibility can provide arbitrary host IDs within their organization to retrieve the complete Ansible inventory for those hosts, including parameter values that are marked as hidden. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

A flaw was found in the foreman remote execution plugin's template invocations controller. The show template invocation by host action resolves the job invocation by ID without evaluating the caller's view job invocations permission filter against the record. An authenticated user whose job invocation visibility is restricted by a permission filter can enumerate job invocation IDs and read the live output, rendered script, and input values for other users' job invocations within their own organizations.

**Name of the Vulnerable Software and Affected Versions** FreeRDP versions prior to 3.31.0 **Description** Insufficient validation of `MonitorIds` array values during the parsing of RDP connection files allows unbounded array indexing within the `xf detect monitors()` function. A remote attacker can use a specially crafted RDP file containing an out-of-range `selectedmonitors` value to trigger out-of-bounds heap read and write operations when the file is opened in xfreerdp. **Recommendations** Update to version 3.31.0 or later.

**Name of the Vulnerable Software and Affected Versions** Apache Tomcat versions 11.0.0-M1 through 11.0.25 Apache Tomcat versions 10.1.0-M1 through 10.1.58 Apache Tomcat versions 9.0.0-M1 through 9.0.121 Apache Tomcat versions 8.5.0 through 8.5.100 **Description** An improper check for certificate revocation exists where both OpenSSL and OpenSSL-FFM TLS implementations ignore Certificate Revocation Lists (CRLs)—lists of digital certificates that have been revoked by the issuing certificate authority before their scheduled expiration date—when a certificate uses a keystore. **Recommendations** Upgrade to version 11.0.26 Upgrade to version 10.1.59 Upgrade to version 9.0.122

**Name of the Vulnerable Software and Affected Versions** Hugo versions 0.123.1 through 0.164.x **Description** Path confinement can be bypassed because symlinks in parent directories are not dropped during direct resource lookups. An attacker who places a symlink inside a mounted directory, such as a locally vendored theme under themes/, can cause functions that perform direct lookups, including `resources.Get()` and `os.ReadFile()`, to follow the symlink. This allows the reading of files outside the intended project boundaries, leading to the disclosure of their contents in the built site. Themes mounted as Go modules from GitHub and multi-directory walks are not affected. **Recommendations** Update to version 0.165.0.