| standard |
9001_copyparty |
F2 |
copyparty SFTP read-only users can create and truncate files |
confirmed |
yes |
Triage - under maintainer review |
| standard |
cypht-org_cypht |
F2 |
2FA Bypass via AJAX Endpoints Not Covered by the 2FA Gate |
confirmed |
yes |
Replied - already known, fix merged next release, credited |
| standard |
cypht-org_cypht |
F3 |
Missing Rate Limiting and Lockout on Cypht 2FA Verification |
confirmed |
yes |
No reply yet - maintainer confirmed receipt |
| standard |
cypht-org_cypht |
F5 |
Cypht — Path Traversal in Forwarded-Attachment Filename |
confirmed |
yes |
No reply yet - maintainer confirmed receipt |
| standard |
cypht-org_cypht |
F6 |
Path Traversal via Content-Description and Subject in Draft Load and Forward-as-Attachment |
confirmed |
yes |
No reply yet - maintainer confirmed receipt |
| standard |
dokuwiki_dokuwiki |
F1 |
Draft: Password-reset link poisoning via `Host` / `X-Forwarded-Host` header |
confirmed |
yes |
Emailed, awaiting reply |
| deepscan (deepseek) |
fb55_htmlparser2 |
F1 |
Quadratic CPU in closing-tag handling via lastIndexOf on the open-element stack (unauthenticated DoS) |
confirmed |
yes |
Submitted, awaiting triage (duplicate accidentally filed under wrong account - needs withdrawal) |
| standard |
FreshRSS_FreshRSS |
F1 |
FreshRSS: Proxy-Host SSRF Check Bypass via OPML-Imported `CURLOPT_PROXY` |
confirmed |
yes |
Submitted, awaiting triage (duplicate accidentally filed under wrong account - needs withdrawal) |
| standard |
FreshRSS_FreshRSS |
F2 |
FreshRSS — Unescaped `media:thumbnail` Attributes Allow XML Attribute/Element Injection into Generated RSS Output |
confirmed |
yes |
Submitted, awaiting triage |
| standard |
itteco_iframely |
F1 |
SSRF Guard Bypass in Iframely |
confirmed |
yes |
Submitted, awaiting triage (duplicate accidentally filed - needs withdrawal) |
| standard |
NaturalIntelligence_fast-xml-parser |
F1 |
Quadratic CPU Consumption in fast-xml-parser Stop-Node Scanning (F1) |
confirmed |
yes |
Published - patched 5.12.0, CVE requested |
| standard |
phpipam_phpipam |
F1 |
Missing Authorization on phpIPAM API User Listing Endpoints |
confirmed |
yes |
Emailed to maintainer (github@gallan.co.uk), awaiting reply |
| standard |
phpipam_phpipam |
F3 |
phpIPAM — Login Lockout/CAPTCHA Bypass via Reusable CAPTCHA Code |
confirmed |
yes |
Emailed to maintainer (github@gallan.co.uk), awaiting reply |
| deepscan (deepseek) |
projectsend_projectsend |
F1 |
Client can publish files by creating a subfolder inside a read-only public folder |
confirmed |
yes |
Submitted, awaiting triage (duplicate accidentally filed - needs withdrawal) |
| standard |
YOURLS_YOURLS |
F3 |
Reflected XSS in bookmarklet feedback message (admin/index.php) |
confirmed |
yes |
Draft - fix merged (PR #4207), confirmed by maintainer |
| standard |
YOURLS_YOURLS |
F4 |
Stored XSS in admin Share box via entity-encoded long URL (js/insert.js) |
confirmed |
yes |
Draft - fix validated, ready to publish |
| standard |
9001_copyparty |
F1 |
copyparty up2k: declared file size is not validated against the chunk-hash list |
confirmed |
no |
not submitted |
| standard |
9001_copyparty |
F3 |
copyparty TFTP/SFTP/SMB Exposure of `.hist/up2k.*` |
confirmed |
no |
not submitted |
| standard |
9001_copyparty |
F4 |
SFTP rename bypasses `--no-mv` |
confirmed |
no |
not submitted |
| standard |
cypht-org_cypht |
F1 |
Unauthenticated Blind SSRF / Internal Mail-Port Probe via Dynamic-Login Autodiscovery |
uncertain |
no |
not submitted |
| deepscan (deepseek) |
DaveGamble_cJSON |
F1 |
Incomplete fix: heap-use-after-free in cJSONUtils_MergePatch when an object merge patch is a subtree of the target |
confirmed |
no |
not submitted (email sent to you) |
| deepscan (deepseek) |
DaveGamble_cJSON |
F2 |
Heap-use-after-free in cJSONUtils_ApplyPatches when the patch array is a subtree of the object being patched |
confirmed |
no |
not submitted (email sent to you) |
| deepscan (deepseek) |
expressjs_multer |
F1 |
Partial disk files are orphaned when a storage error follows a LIMIT_FILE_SIZE abort while another write is pending |
confirmed |
no |
not submitted (email sent to you) |
| deepscan (deepseek) |
expressjs_multer |
F2 |
Busboy constructor failure bypasses the isDone guard and leaves request listeners that can call next(err) a second time |
confirmed |
no |
not submitted (email sent to you) |
| deepscan (deepseek) |
fb55_htmlparser2 |
F2 |
Quadratic CPU in duplicate-<form> suppression via stack.includes() (unauthenticated DoS) |
confirmed |
no |
not submitted (email sent to you) |
| deepscan (deepseek) |
fb55_htmlparser2 |
F3 |
Quadratic CPU in SVG tag-name adjustment via stack.includes() inside HTML integration points (DoS) |
confirmed |
no |
not submitted (email sent to you) |
| deepscan (deepseek) |
fb55_htmlparser2 |
F4 |
Quadratic time and memory when completing tokens split across many chunks due to Array.shift() in shiftBuffer (streaming DoS) |
uncertain |
no |
not submitted (email sent to you) |
| standard |
filegator_filegator |
F1 |
Unbounded `resumableTotalChunks` in FileGator Chunked Upload |
uncertain |
no |
not submitted |
| standard |
jbeder_yaml-cpp |
F1 |
DRAFT — Coordinated Disclosure Report |
confirmed |
no |
not submitted |
| standard |
jbeder_yaml-cpp |
F2 |
yaml-cpp Mixed Line-Ending Mark Tracking (Finding F2) |
uncertain |
no |
not submitted |
| standard |
NaturalIntelligence_fast-xml-parser |
F2 |
F2 — Processing-Instruction Tokenisation Differential in fast-xml-parser |
uncertain |
no |
not submitted |
| standard |
phpipam_phpipam |
F2 |
phpIPAM XLS Export Formula Injection |
uncertain |
no |
not submitted |
| deepscan (deepseek) |
vitalik_django-ninja |
F1 |
Awaitable-returning authentication callbacks are accepted as authenticated (authentication bypass) |
rejected |
no |
not submitted (email sent to you) |
| deepscan (deepseek) |
vitalik_django-ninja |
F2 |
Default pagination limit is unbounded, allowing remote resource exhaustion |
confirmed |
no |
not submitted (email sent to you) |
| standard |
YOURLS_YOURLS |
F1 |
YOURLS: Missing Brute-Force Protection on Web and API Authentication |
confirmed |
no |
not submitted |