Kasperbuilds

The application fails to use a CustomHtmlSanitizer when processing the `htmlContent` variable at the 'POST /api/v1/ai/tools/create-pdf-from-html-agent' endpoint. This allows the input to be passed directly to WeasyPrint, enabling server-side requests to internal or cloud-metadata destinations via HTTP and HTTPS resource references. Additionally, file references can be used to embed local content accessible by the application process into the resulting PDF. The endpoint is accessible without authentication if `security.enableLogin` is set to false.

An authenticated organization manager with CA view permission can retrieve the certificate revocation list of another organization. This occurs because the `CrlDownloadView.retrieve` function resolves the CA directly, bypassing the organization-scoped object retrieval enforced by `FilterByOrganizationManaged`. An attacker can exploit this by requesting a sequential CA identifier via the '/api/v1/controller/ca/<integer-id>/crl' endpoint. This may disclose CA issuer information and revoked certificate serial numbers.

The icon downloader fails to apply the `should block host()` check to the second-stage host when processing favicon URLs parsed from attacker-controlled HTML passed to `get page with referer()`. This allows a remote unauthenticated attacker to use an IP-literal URL in a favicon to bypass host normalization and force the server to reach loopback, private, or internal addresses. This issue occurs on instances where internal icon downloading is enabled and can lead to the exposure of internal responses or reveal internal network reachability through timing, status, and cache behavior.

HomeBox fails to revalidate redirect targets when sending requests via the shoutrrr library, as it uses `http.DefaultClient.Do` without a `CheckRedirect` policy. An authenticated collection member can configure a permitted notifier host that redirects to loopback, link-local, cloud metadata, or other blocked destinations, bypassing the Server-Side Request Forgery (SSRF) policy. SSRF is a flaw where an attacker forces a server to make requests to an unintended location. This issue is reachable through the 'POST /api/v1/notifiers/test' endpoint for immediate requests and through stored notifiers during scheduled maintenance delivery. The flaw involves the `ValidateNotifierURL` function.

File read handling fails to verify if the target of a resolved symbolic link remains within the source root and the user's authorized scope. This occurs because the `GetRealPath` function resolves symbolic links using `filepath.EvalSymlinks` but does not perform a containment check on the resulting path. Consequently, an authenticated user with download access or an unauthenticated user with a public share link can access server-accessible files outside their assigned scope, such as `/etc/passwd`, SSH keys, or container secrets, provided a reachable symbolic link exists. This issue affects several read flows, including download, preview, media, OnlyOffice, and public-share endpoints.

Neko deployments using legacy mode with `session.implicit hosting` enabled contain a logic error in the `LegacyIsHost()` function. This causes the legacy WebRTC data-channel to incorrectly authorize input events. An authenticated room member who establishes a WebRTC connection can send mouse and keyboard events through the legacy control channel, bypassing authorization checks even when controls are locked or the member is unauthorized by the modern control API.

nforwardauth is a forward auth service enabling a single authentication middleware for multiple sites. The `/login` endpoint accepts an unvalidated `r` query parameter used as the post-authentication redirect destination. An unauthenticated attacker can craft a legitimate login URL that redirects users to an attacker-controlled website upon successful authentication, potentially facilitating phishing and social-engineering attacks by leveraging the trust of the authentication domain. This issue does not allow an unauthenticated ForwardAuth bypass.