Zachariah Mithani (AploSec)

Goploy 1.18.0 before 1.18.1 Symlink Following Arbitrary File Read via /deploy/fileDiff and /deploy/fileCompare

pdfmake 0.3.8 before 0.3.12 Local File Policy Bypass via SVG Images

@hapi/content 6.0.1 before 6.0.3 ReDoS via Content.disposition() Parameter Parsing

gin-vue-admin through 2.9.2 Path Traversal via removePlugin Endpoint

hydra-ray-launcher 1.1.0.dev1 before 1.2.2 and 1.4.0.dev4 before 1.4.0rc2 Arbitrary Module Import

serialize-javascript 7.0.1 before 7.1.3 XSS via unescaped </script in function body

LocalAI v4.6.0 through v4.11.0 SSRF Guard Bypass via HTTP Redirects