Documenso 2.17.0's PDF-serving endpoint fails to enforce document visibility settings or validate ownership of document data identifiers, allowing authenticated low-privilege users to retrieve restricted documents belonging to other users - including across organizational tenant boundaries. The flaw is pinned to files.helpers.ts in the Remix server layer and is tracked via VulnCheck advisory and GitHub issue #3112. No active exploitation or public exploit code is confirmed at time of analysis.
Out-of-bounds write in Hugging Face tokenizers v0.23.1 allows any actor who can supply a crafted tokenizer.json file to abort the loading process immediately, causing denial of service in Rust applications and FFI embeddings before any inference occurs. The defect in BpeBuilder::build (tokenizers/src/models/bpe/model.rs) allocates a scratch buffer sized to the longest vocabulary key, then writes concatenated BPE merge pairs into it without bounding the write to the buffer size; a merge whose result exceeds that length triggers a Rust panic and process abort (CWE-787). A secondary usize underflow at the same code site, activated when continuing_subword_prefix is set and a merge token is shorter than the prefix, produces a panic in debug builds and potential memory corruption in release builds, elevating the secondary impact beyond availability alone. No public exploit code or CISA KEV listing has been identified at time of analysis; a fix appears in the v0.23.2 source.
Path traversal in Bruno API client through version 3.4.2 allows an attacker who can deliver a crafted collection to a victim to exfiltrate arbitrary local files from the victim's filesystem. When a user executes a Bruno collection containing a `body:file` request with `../` traversal sequences in the file path, the application resolves the path outside the collection directory and transmits the resulting file contents to an attacker-controlled HTTP endpoint. No public exploit has been identified at time of analysis, but the VulnCheck advisory and a GitHub issue confirm the issue is documented, and the attack surface is realistic given the common practice of sharing Bruno collections.
Traefik's Kubernetes Ingress provider, starting from v3.7.1, incorrectly fails to enforce crossProviderNamespaces namespace-isolation controls on the traefik.ingress.kubernetes.io/service.middlewares Service annotation. A low-privileged tenant scoped to their own Kubernetes namespace can attach an operator-owned middleware from a namespace they are not permitted to reference, and if that middleware injects authentication credentials into backend requests, the attacker can exfiltrate those credentials via a backend endpoint under their control. No public exploit code or confirmed active exploitation (CISA KEV) has been identified at time of analysis.