Security advisories — page 12

• CVE-2026-96631highAdminNeo has Cookie Attribute Injection via Unsanitized X-Forwarded-Prefix in Set-Cookie Headers
• CVE-2026-96632highAdminNeo Vulnerable to XSS via Rogue MySQL Server Version String (CSP Nonce Bypass)
• CVE-2026-96630highAdminNeo: RCE via SQLite VACUUM INTO (ATTACH Blocklist Bypass)
• CVE-2026-96629mediumAdminNeo: CSRF Token Secret Recoverable from Single Observed Token, Enabling Cross-Site Request Forgery
• CVE-2026-54442mediumNationalSecurityAgency/emissary has an incomplete fix for CVE-2026-35571
• GHSA-5xjx-3w67-w9x9criticalpypi-publish action revocation of CA in the chain that Sigstore uses in Trusted Publishing and Digital Attesta
• GHSA-f3fj-9625-rv3mmediumcharmbracelet/soft-serve: Race in `SetPrivate` leaves a private repository readable by unauthenticated users
• GHSA-fgxm-5hvv-x4vhmediumcharmbracelet/soft-serve HTTP responses disclose the existence and names of private repositories
• GHSA-vpp8-g58w-m8mphighTwisted: Unauthenticated Remote Denial of Service in the Twisted HTTP/2 Server via Rapid Stream Reset
• CVE-2026-63414highCVE-2026-63414 updated by NVD
• GHSA-w9x9-j56r-h98rhigh@eeacms/volto-chatbot has Unauthenticated Danswer API Confused Deputy Proxy
• CVE-2026-61848mediumCVE-2026-61848 updated by NVD
• CVE-2026-61847mediumCVE-2026-61847 updated by NVD
• CVE-2026-61846mediumCVE-2026-61846 updated by NVD
• GHSA-c33x-vcv4-vg3glowCedar: JSON template is in scope missing slot-id validation allows link panic and decision divergence
• CVE-2026-62264highCVE-2026-62264 updated by NVD
• CVE-2026-62160highCVE-2026-62160 updated by NVD
• GHSA-pg53-p7qp-65cvlowPocketMine-MP has potential memory/network vulnerability from repeated ResourcePackClientResponsePacket packet
• CVE-2026-55186mediumCVE-2026-55186 updated by NVD
• GHSA-2hw4-c9m4-f2fjmediumknative.dev/pkg admission webhooks allow unbounded request-body memory exhaustion
• GHSA-jf75-q64q-g65rmediumWaline login accepts a non-string email as a match-all MongoDB query
• CVE-2026-112908mediumfilelock: StrictSoftFileLock creates its claim directories without the lock mode, so another local user with a
• CVE-2026-112910mediumfilelock: WindowsFileLock ignores mode: a 0o600 lock file and the ReadWriteLock database inherit the directory
• CVE-2026-112938mediumfilelock: StrictSoftFileLock follows a symbolic link swapped in at .filelock and creates claim files in a dire
• GHSA-4mfg-r38w-w8fghighmcp-sanitizer: URL sanitizer allows localhost/IPv6 loopback SSRF bypass via explicit port or bracketed IPv6
• GHSA-7w82-6f9j-v9jphighmcp-sanitizer: File Path Sanitizer Permits Arbitrary User-Home Absolute Paths
• CVE-2026-58273highrucio has an Authorization Bypass on REST API endpoint for signing URLs
• GHSA-473q-m89c-ghf8mediumMySqlConnector: Account password disclosed to a man-in-the-middle in zero-configuration TLS mode (clear-text p
• CVE-2026-55458lowCaddy has an RFC 7230 §6.1 compliance issue / Hop-by-hop headers that leak through
• GHSA-f897-62hf-6gxqhighMCP TypeScript SDK: HTTP server transports and handlers did not limit request body size or JSON-RPC batch leng
• GHSA-wf6j-7hvr-gr93highHydra legacy target blacklist permits unsafe PyYAML loading
• GHSA-vp88-798v-h67flowrustls: ECH rejection can expose buffered application data to authenticated outer server before `ech_required`
• GHSA-w44r-93j7-qv28lowrustls: An unauthenticated ServerHello poisons the per-name key-exchange record, so later ClientHellos carry o
• GHSA-c8m5-c952-6cm4mediumRustls: Session Debug formatting exposes TLS master secrets and resumption PSKs
• GHSA-h2v8-394m-p7vvlowRustls: Brotli certificate decompression can allocate an attacker-controlled amount of memory up to 1 GiB befo
• GHSA-3w55-933p-8pv5highStrands Agents: Local Privilege Escalation via Symlink Attack in Default Session File Storage
• GHSA-763v-5pjm-fx36mediumStrands Agents: Default FileSessionManager storage is world-readable on shared systems
• GHSA-g5ff-637f-6q2mhighLiteLLM: internal_user_viewer arbitrary local file read via `vertex_ai_credentials`
• GHSA-44jh-23m7-hpcflow@better-auth/drizzle-adapter: Concurrent requests can exceed rate limits on PostgreSQL
• GHSA-r4xp-prcw-77qfhighbetter-auth: OAuth Proxy lets an attacker sign in as another user
• GHSA-hhww-mrg2-969hmediumLiteLLM vulnerable to reflected XSS in /sso/debug/callback
• GHSA-23mf-xhv8-69c2highGitPython: arbitrary file read via attacker-controlled branch name in `Head.checkout()` (incomplete fix of CVE
• GHSA-gq48-pqfc-9p58mediumGitPython: Submodule.move() follows an attacker-committed intermediate symlink outside the worktree
• GHSA-f9j4-qggq-h239highGitPython Remote.pull() refspec bypasses the --upload-pack unsafe-option guard, enabling arbitrary command exe
• GHSA-w8jc-g24h-crhwhighGitPython command wrappers omit unsafe protocol and option checks
• GHSA-fx3j-rwgx-fr94mediumGitPython: separate_git_dir leaks env vars via crafted .gitmodules submodule name
• GHSA-m64x-33q8-m5h7highGitPython parse_actor_and_date() is vulnerable to quadratic backtracking on malformed identity lines
• GHSA-4ffr-jq9g-5ffxmediumNodemailer: Quadratic backtracking in SMTP AUTH mechanism detection regexes allows pre-auth remote denial of s
• GHSA-g73g-hqqh-jr95mediumNodemailer: RFC 5322 comment inside an angle-bracket address is never stripped
• GHSA-4g23-2xm8-66gcmediumNodemailer: Quadratic (O(n^2)) SMTP client reply parsing lets a malicious server or MITM cause a pre-auth remo
• GHSA-j456-xh4h-cpf2highNLTK: WekaClassifier passes an unvalidated caller-controlled model path to the weka JVM, bypassing nltk.pathse
• GHSA-q84f-53jg-9ppmhighbetter-auth: Device login approval does not show the requesting client or permissions
• CVE-2026-49272highOAuthLib: Bearer token can be retrieved as long as client knows a valid client ID for device workflow
• CVE-2026-48705criticalMONAILabel Server Crash and Silent Inference Corruption via Crafted DICOM (pydicom DS/IS Validation Bypass)
• CVE-2026-46350lowdcmjs: DS/IS VALUE REPRESENTATION INPUT VALIDATION BYPASS
• CVE-2026-34157highWails: wildcardPatternToRegex allows Origin bypass via suffix match in BindingsAllowedOrigins
• CVE-2026-33944highDolibarr has SQL Injection in societe/class/societe.class.php via localtax1_value parameter
• CVE-2026-112913lowfilelock: ReadWriteLock on Windows acts on SQLite side files another local user places beside its database
• CVE-2026-112907lowfilelock: On Windows an oplock on a soft lock's marker holds SoftFileLock.acquire() past its timeout and block
• GHSA-h4fr-cmh5-qr62lowFallow: A `.*` glob segment let an analyzed repository make Fallow test paths in the parent of the project roo
• GHSA-f2hq-32vh-53cchighpostal-mime: Quadratic CPU consumption when decoding a header of many joinable RFC 2047 base64 encoded words
• GHSA-8c8m-p3m8-cjg8mediumNodemailer: A nested comment ends early in addressparser, releasing the rest of the comment as a recipient
• GHSA-m943-m63m-w62wmediumNodemailer: A ";" inside a quoted string or comment ends an address group early in addressparser, tu
• GHSA-85x2-q946-cp5hmediumNodemailer: A ">" inside a quoted local part ends an angle-addr early in addressparser, deliverin
• GHSA-xmj3-9gf7-h52wlowsetuptools: Windows path escape via namespace_packages.txt during legacy wheel installation Description
• GHSA-7xgj-8392-5q4rmediumFastMCP: Post-transform component authorization is skipped on direct calls
• GHSA-vqqp-x5qm-5qp4mediumFastMCP MCP client wrappers construct M2M OAuth providers without issuer binding — client secret redirectable
• GHSA-2rqm-h6hv-g79vmediumodf-kit has HTML injection leading to XSS in odsToHtml() via unescaped style attribute values
• GHSA-q54r-jf2p-rfr2highgitoxide gix: untrusted .git/config disables filesystem .git-protection path checks via unfiltered protect_opt
• GHSA-mhf7-xp6r-6qrcmediumLivewire: Authorization bypass in #[Authorize] via reordered parameter keys and #[Json] execution order
• GHSA-xp3q-r38w-vgqmmediumSiYuan: The publish filter for local storage returns the administrator's entire storage map with only three ke
• GHSA-w47m-j727-m843lowDuplicate Advisory: Namespace value starting with / forms a protocol-relative URL when loadPath/addPath places
• GHSA-8cqv-vvq2-6p8chighDuplicate Advisory: Mistune: Path Traversal and XSS in Include directive
• GHSA-78g4-xqwv-q3g8highPillow: Bundled libopenjp2 2.5.4 in all wheels since 11.1.0 carries OSV-2025-219 heap-buffer-overflow write re
• GHSA-673q-mjm6-r5xrcriticalNext.js: Unauthenticated Remote Code Execution in `use cache` functions returning typed arrays
• CVE-2026-114604highGraphQL Tools: Prototype pollution in mergeIncrementalResult via non-primitive path segments
• GHSA-cg2g-xh64-v4q7criticalDOMPurify SAFE_FOR_TEMPLATES bypass: split template expressions survive in attached shadow root content on DOM
• GHSA-mrv2-3pqr-j5jrhighDOMPurify IN_PLACE: hook that removes a parent or sibling leaves the detached subtree's event handlers armed (
• GHSA-c6gr-qvv4-5v3flowDOMPurify: SMIL attributeName=href guard is skipped when PARSER_MEDIA_TYPE is application/xhtml+xml
• CVE-2026-114134highBlack: GitHub Action installs unvalidated required-version from pyproject.toml
• GHSA-2464-fhr4-w9xwcriticalNext.js: Unauthenticated Remote Code Execution in Image Optimization API when SVG files are used
• GHSA-pxh4-856f-4h89highPyJWT: HS256/384/512 verify accepts empty HMAC key via oct JWK (PyJWK/PyJWKClient) enabling token forgery
• CVE-2026-112902highPillow: Memory disclosure and segfault in libtiff encoder via crafted TIFF tags
• GHSA-7cgw-qmxx-7fc2mediumDuplicate Advisory: chi: Client IP spoofing in ClientIPFromXFF via X-Forwarded-For
• GHSA-m3wx-qqmx-qxvfhighDuplicate Advisory: uv vulnerable to arbitrary file deletion through RECORD entries
• GHSA-pvhg-7v4p-f5q9lowDuplicate Advisory: SvelteKit before 3.0.0 Open Redirect via Enhanced Form Actions
• GHSA-85pr-xr59-r75hlowDuplicate Advisory: SvelteKit before 3.0.0 XSS via Cache-Control Header in Prerendered Pages
• GHSA-f623-hjm8-5wg5criticalDuplicate Advisory: vLLM: Request-controlled mm_processor_kwargs.code_revision allows remote code execution
• GHSA-3cgq-c484-rx5jhighDuplicate Advisory: vLLM 0.7.3 before 0.31.0 DoS via Unvalidated mm_processor_kwargs
• GHSA-hfwf-hgvp-4rr8highDuplicate Advisory: vLLM vulnerable to remote denial of service through forged multimodal UUID cache desynchro
• CVE-2026-112899mediumPillow: EPS load(scale) lets Ghostscript render past the decompression bomb limit
• CVE-2026-111753medium@angular/common: XSRF Token Leakage via URL Parsing Discrepancy in Angular HTTP Client (Incomplete fix for CVE
• CVE-2026-111770highMCP TypeScript server SDK: Shared transport or server instances delivered one HTTP client's messages to anothe
• CVE-2026-111768highMCP TypeScript SDK: One HTTP request within the default size limit could exhaust server memory during validati
• CVE-2026-111771mediumMCP TypeScript SDK: Server bearer authentication accepted tokens issued for another service
• GHSA-hq85-5cpj-mr62criticaluv's bundled CA store trusts an emSign root whose intermediate CA keys are compromised
• GHSA-6q48-6c7w-9gw2criticalcertifi bundles emSign root CAs with compromised intermediate CA keys
• CVE-2026-111769mediumMCP TypeScript client SDK: HTTP client transports and OAuth requests followed cross-origin redirects and re-se
• CVE-2026-111751highCVE-2026-111751 updated by NVD
• CVE-2026-111752highCVE-2026-111752 updated by NVD
• CVE-2026-111754mediumCVE-2026-111754 updated by NVD
• CVE-2026-61845highCVE-2026-61845 updated by NVD
• GHSA-2g87-pp6c-29x5highaiohttp: Multiple instances of excessive or unbounded memory/CPU use
• CVE-2026-111062lowA russh SSH server accepts a publickey authentication whose signature uses a different algorithm than the one
• GHSA-953h-535j-jg2vmediumagent-router: MCP session resume does not verify the embedded anti-hijacking subject; default Helm seed makes
• GHSA-pcc4-rvhr-2pr8mediumGraphify Fortran extractor: incomplete cpp #include hardening allows arbitrary host-file read/exfiltration whe
• GHSA-p3hm-x653-5rc6mediumDuplicate Advisory: ip-address: Address6 matches a zone identifier in quadratic time ahead of its length limit
• GHSA-6fj4-rcr3-r7rrhighlopdf has a stack overflow via deeply nested PDF objects
• CVE-2026-76894lowCVE-2026-76894 updated by NVD
• CVE-2026-68549lowClickMigrate has Path Traversal in "revision -m" argument
• CVE-2026-77622highSliver: Unauthenticated Memory Exhaustion Denial of Service in Sliver HTTP(S) Listener PNG Decoder
• CVE-2026-62268mediumborg extract might modify out-of-tree files when extracting maliciously crafted archives
• CVE-2026-64672mediumCVE-2026-64672 updated by NVD
• GHSA-wxxx-r42m-9rp8highDuplicate Advisory: Nodemailer: Quadratic (O(n^2)) DKIM header unfolding lets a large folded header cause remo
• CVE-2026-62847highCVE-2026-62847 updated by NVD
• GHSA-86xp-94pg-8r6rmediumMicrosoft Security Advisory CVE-2026-92707 - ASP.NET Core Denial of Service Vulnerability
• GHSA-m687-p538-r5hphighVikunja: Permissive Cross-domain Security Policy trusts every localhost origin which should not be trusted
• GHSA-fmmf-xq98-g327mediumVikunja: Write-level project members can delete admin-tier link shares through an unloaded permission check
• GHSA-pjr3-86v4-5p7wmediumVikunja: Explicit lower-permission share on a sub-project is silently overridden by an inherited parent permis
• GHSA-hjx8-qv73-f7cmmediumVikunja: Webhooks and link shares survive every revocation path, so a removed collaborator keeps a live feed
• GHSA-fprf-r6rv-xg99mediumVikunja: Saved filter creation with an empty filter string recalculates task positions across all tenants
• GHSA-4hv6-xc92-j86gmediumVikunja: WebSocket authentication ignores server-side session state, so revoked sessions keep receiving live p
• GHSA-w2ch-4xgr-22wwlowVikunja: Task relation deletion does not check read access to the other task, allowing cross-project relation
• GHSA-8wvg-r2j4-3737mediumVikunja: Assignee email addresses disclosed to read-only project members via the task assignees endpoint
• GHSA-3hc7-r24j-rpwcmediumVikunja: Cross-project task disclosure through subtask expansion
• GHSA-g38j-7v97-x298mediumVikunja: CalDAV relation creation bypasses TaskRelation.CanCreate, allowing an unauthorized write into any tas
• GHSA-68w4-83fh-f2w8highpyload-ng: getUserData/get_userdata exposed at Perms.ANY allow any authenticated account to brute-force the ad
• GHSA-9q47-3cm2-2rp8mediumpyLoad: Rate-Limit Bypass and Audit-Log Spoofing via Trusted Client-Controlled `X-Forwarded-For` Header
• GHSA-jq7h-wrvp-3rgxhighpyLoad: Privilege revocation and password change through the REST API do not invalidate the user's session
• GHSA-889w-m37p-88m5highpyLoad: Api.set_user_permission never invalidates the target's session
• GHSA-p3pr-8f3m-4qp8mediumpyLoad WindowsPhoneNotify addon: non-admin SETTINGS user triggers SSRF via unguarded http.client notification
• GHSA-fr26-jjhm-638chighpyLoad: Tar extraction creates device nodes and FIFOs (member types not filtered; tarfile extractall without f
• GHSA-r44w-v6gf-x3p6highpyLoad has an authentication bypass in API key validation (check_apikey cache)
• GHSA-94x4-5g3f-jjxphighDuplicate Advisory: snappy-java: Unbounded memory allocation from attacker-declared uncompressed lengtha
• GHSA-86gh-39m5-hhg6mediumDuplicate Advisory: PYTHON-6110 Out-of-bounds read in BSON decoding via a malformed Regex element
• CVE-2026-107381mediumCVE-2026-107381 updated by NVD
• GHSA-w253-m66g-rx24mediumCoraza: URL-encoded form Content-Type parameters bypass Coraza body inspection
• GHSA-3wr7-993q-jrffmediumCoraza: Multipart filename* (RFC 5987) charset restriction lets a decoy filename bypass FILES-based rules
• GHSA-g4qm-m288-5cp9mediumCoraza has Cookie Parser Confusion
• CVE-2026-104774mediumCVE-2026-104774 updated by NVD
• GHSA-5gj4-9gm7-2fx2mediumCoraza body processor has a JSON key collision that allows unauthenticated attackers to bypass OWASP CRS inspe
• CVE-2026-107226mediumCVE-2026-107226 updated by NVD
• CVE-2026-106108mediumCVE-2026-106108 updated by NVD
• GHSA-vv44-hjm2-qw2fcriticalDuplicate Advisory: Remote code execution via unsafe deserialization in multiprocess mode transport
• CVE-2026-41510highCVE-2026-41510 updated by NVD
• CVE-2026-41508mediumCVE-2026-41508 updated by NVD
• CVE-2026-41504mediumCVE-2026-41504 updated by NVD
• GHSA-2r3x-4mrv-mcxfmediumVyper: Memory corruption using function calls within tuples / nested calls
• GHSA-4v7v-gqf9-ww2gmediumVyper: Call stack corruption when passing complex type containing non-base type members as argument
• GHSA-vg88-3v92-rjx2mediumVyper: Return inside for loop more than 1 level deep
• GHSA-wq5f-xc86-pv6whighsharp : Vulnerability in librsvg dependency CVE-2026-96889
• GHSA-j8f7-x8jm-wmm4mediumLangflow: SSRF in URL-taking components (protection disabled by default / warn-only, not applied to RSS, SearX
• GHSA-f4ch-vxwc-3p2mmediumDuplicate Advisory: Docling: METS-GBS archive member limit enforced after full member enumeration (memory exha
• GHSA-6688-9rhm-gjv2lowDOMPurify: IN_PLACE returns a force-removed rawtext root whose text carries attacker markup — pure HTML repars
• GHSA-r4xh-jqrq-34v2mediumsmol-toml: Quadratic-time parse() from parseKey rescanning to end of document on each key line
• GHSA-2mjx-qc3c-rqvcmediumRustls: TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries
• GHSA-w2vw-w76x-qr89highNx: OS command injection via git revisions and remote refs
• GHSA-g7fw-3gjp-g5hfmediumOpenClaw: Channel read actions could skip target allowlists
• GHSA-6f2x-v7q7-m7m5mediumhickory-resolver follows irrelevant CNAME records
• GHSA-6w6g-hm98-mhgmhighhickory-resolver: Unbounded TC-retry loop in `NameServerPool::try_send` (resource-exhaustion DoS)
• GHSA-5j98-2g5x-46v6highhickory-resolver: Resolver::lookup() and Resolver::lookup_ip() APIs obscure DNSSEC validation failures
• GHSA-jggr-w7fw-pc2jmediumfast-copy: Stack exhaustion in fast-copy when copying deeply-nested values
• GHSA-g2v6-rqmx-r4w6high@vue/server-renderer: XSS via missing CR in attribute-name blacklist
• GHSA-v853-p72q-4cfwhighQuart leaks raw request body (incl. plaintext passwords) to stdout via stray debug print in Body.__await__
• GHSA-4wwp-f6gw-6qm5mediumSiYuan: TLS Private Keys Readable via getFile (Incomplete Blocklist)
• GHSA-3cm4-ccvw-6xr6mediumSiYuan: /history/*path and /repo/diff/*path potentially exposing historical snapshots of data/.siyuan/publishA
• CVE-2026-73802highCVE-2026-73802 updated by NVD
• GHSA-x8gv-g2g3-65fjhighSiYuan Agent Tools SSRF via DNS-Rebinding TOCTOU (Bypass of CheckHostSSRF)
• GHSA-p23f-cm6q-2qp8mediumSiYuan MCP asset.upload Reads Arbitrary Absolute File Paths (Workspace Boundary Bypass)
• GHSA-mwm8-39rw-8826mediumsqlite3-ruby: Use-After-Free in SQLite Aggregate Arguments in Heap-Allocated Argument Array
• GHSA-cjcg-cxmh-9wcrhighPraxis affected by HTTP/2 Bomb
• GHSA-fj2x-mqqp-3v2wmediumTrigger.dev: Trigger CLI debug deployment logs expose resolved environment secret values
• GHSA-v2f8-6655-7grjcriticalVibe-Trading FastAPI endpoints permit unauthenticated access, file upload, and an RCE chain
• GHSA-5rmq-chc7-m22fhighVibe-Trading file-read tools expose arbitrary server-readable files
• GHSA-jqmf-mx4f-hfr6criticalVibe-Trading LLM-callable tools permit command execution, code injection, and SSRF
• GHSA-4672-hwv6-gq62mediumTrigger.dev: Cross-environment deployment cancel
• GHSA-9q4r-4842-93vwhighTrigger.dev: Cross-tenant SQL injection in the TSQL query compiler (POST /api/v1/query) via unsanitized window
• GHSA-59h8-w5q6-mfmpmediumTrigger.dev: Unauthenticated Realtime Stream Data Injection via Run FriendlyId
• GHSA-pqxw-g93w-hj9xhighTrigger.dev Self-Hosted Deployment: Default Secrets allow Unauthenticated Infrastructure Compromise
• GHSA-gg6r-gp4c-89hpcriticalTrigger.dev: V1 coordinator default-secret unauth Socket.IO
• GHSA-5wf9-h793-w73chighXray-core: Pinning a CA certificate via pinnedPeerCertSha256 can lead to the success of MITM attacks
• GHSA-q567-cr4x-96w4mediumTrigger.dev: Blind SSRF via alert-channel webhook
• GHSA-pp95-gc86-jq6qhighTrigger.dev: Missing Authentication in Run Replay Action Allows Cross-Organization Task Execution (IDOR)
• GHSA-xxv7-2vv3-h682highTrigger.dev: Server-side request forgery via unvalidated webhook alert-channel URL
• GHSA-qxpp-qjg8-x4jvhighTrigger.dev: Run replay injects a task run into an attacker-chosen environment (cross-tenant write)
• GHSA-8mcx-5rqc-vhmfhighDulwich: Arbitrary File Write (RCE) on Windows via Unvalidated Drive Letters in Tree Paths
• GHSA-35mr-4567-66vgmediumDulwich: Infinite Loop Denial of Service (DoS) in Packfile Object Resolution
• GHSA-8w8g-wq8h-fq33highDulwich: Symlink write-through in checkout(paths=[]) via raw os.open bypasses all symlink protections
• GHSA-5fqc-mrg8-w798highDulwich: Symlink directory traversal in filter-branch index_filter via cross-commit state persistence
• GHSA-cm62-gvxx-vmxxhighDulwich: Symlink directory traversal in stash pop allows arbitrary file write via intermediate directory symli
• GHSA-6g2r-675j-hx59lowxxhash-rust: Safe xxh3 custom-secret API accepts too-short secret in release
• CVE-2026-61586highCVE-2026-61586 updated by NVD
• GHSA-c9xm-49cp-xcr9mediumrmcp OAuth client fetches server-controlled resource_metadata URLs
• GHSA-qqw9-2vj9-hx7rhighDuplicate Advisory: Title Authenticated Remote Code Execution in validate_code via Malicious Decorators Descri
• GHSA-9cqf-hhrq-7v45highSiYuan: getAttributeViewSearchTarget returns database row content to anonymous readers with no publish-access
• GHSA-hx4r-w6wj-j8fgmediumdevalue: Residual sparse-array CPU amplification in uneval
• GHSA-mcm9-63f2-9j32highdevalue: Repeated primitive strings cause quadratic expansion in uneval
• GHSA-wf3x-273g-mvxvlowdevalue: Sparse arrays emitted by uneval cause eager allocation when evaluated
• GHSA-r9w8-h9r3-54w4highdevalue: Custom ArrayBuffer revivers can bypass typed-array allocation validation
• GHSA-x5rw-q4pp-hg5ghighdevalue: stringifyAsync can cause an unhandled rejection despite a caught returned promise
• GHSA-4q55-j62x-fr9hmediumdevalue: Malformed null-prototype object keys bypass __proto__ rejection via property-key coercion
• GHSA-wj4w-mc24-pcfmhighDuplicate Advisory: Ghost: Authorization Bypass in Comment Like Feature
• GHSA-3hv7-mjh2-fv65mediumTornado: Unbounded query-string argument count allows event-loop-stalling DoS
• GHSA-chx6-46f5-w4vphightornado: CurlAsyncHTTPClient enforces no response-size limit — decompression bomb drives unbounded memory accu
• GHSA-c2m8-h5v5-343rhighTornado: StaticFileHandler follows symlinks outside static root (path traversal)
• GHSA-59cr-6r3x-644wmediumGitPython submodule update path traversal can write outside the repository
• GHSA-whh4-5q6c-9v3xmediumGitPython: --no-index bypasses diff unsafe-option protections and enables a blind local-file content oracle
• CVE-2026-101896highCVE-2026-101896 updated by NVD
• GHSA-p98j-92pf-mc4plowDOMPurify: IN_PLACE: node-removing afterSanitize hook leaves detached subtree event handlers armed, causing DO
• GHSA-97jj-33gv-5xf9mediumleague/commonmark: DisallowedRawHtml bypassed when a disallowed tag name ends the raw-HTML literal
• GHSA-3q6v-r5mr-hxv8highleague/commonmark: Quadratic-time denial of service in the GitHub Flavored Markdown Table extension block-star
• CVE-2026-101899mediumCVE-2026-101899 updated by NVD
• GHSA-vcvr-r3jv-pc5jcriticalNext.js: Remote Code Execution in next/og ImageResponse
• GHSA-96h4-vgxj-gvm2mediumNest: Unbounded memory growth in the NestJS TCP microservice transport
• GHSA-9c5c-9qcx-q35qhigh@nestjs/platform-fastify: Path-scoped middleware bypass via absolute-form request targets
• CVE-2026-102599highCVE-2026-102599 updated by NVD
• GHSA-g57g-f23g-4646mediumNodemailer: Quoted local-part can produce malformed envelope recipient through RFC 5322 comment parsing
• GHSA-v53p-9fqp-m79jhighNodemailer: Quadratic backtracking in the addressparser free-text fallback allows remote denial of service
• GHSA-p634-w6r4-rjp2mediumadm-zip: Duplicate ZIP entry names: getEntry() and extractAllTo() resolve to different content
• GHSA-c6fg-446q-cg94mediumadm-zip: getDataAsync() bypasses the maxOutputLength size guard enforced by the synchronous getData() path
• GHSA-8238-w5pm-2374highadm-zip: Unhandled error event in async DEFLATE decompression crashes Node.js process (DoS)
• CVE-2026-102342mediumCVE-2026-102342 updated by NVD
• GHSA-rcw4-f5rp-g42vhighadm-zip: Decompression-bomb protection (fix for CVE-2026-39244) can be bypassed by declaring uncompressed size
• CVE-2026-102282highCVE-2026-102282 updated by NVD
• GHSA-8vvx-rff5-p5rqmediumNodemailer: Nested structured recipient arrays bypass the parser depth limit and cause stack exhaustion DoS
• CVE-2026-102672mediumCVE-2026-102672 updated by NVD
• GHSA-253c-mchw-3w2rmediummarkdown-it linkify: true has two quadratic paths, so a few hundred KB of markdown blocks the event loop for t
• GHSA-r3ph-w7gj-g6xmmediumjs-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sources
• CVE-2026-65954highCVE-2026-65954 updated by NVD
• GHSA-6vj9-mwq6-2f5vmediumNodemailer: Process-global DNS cache reuses TLS `servername` across transports, enabling cross-tenant SMTP cre
• CVE-2026-101895highCVE-2026-101895 updated by NVD
• GHSA-6m87-8wg6-hh8wcriticalDuplicate Advisory: Authlib: empty signatures validation in JWS JSON deserialization
• GHSA-456v-xq2p-r4cjhighcode-ollama: `grep_search` Command Injection via Unescaped `$()` Shell Substitution (CWE-78)
• GHSA-7rr2-8fr3-fjqxhighDuplicate Advisory: vm2: Host Promise rejection from an exposed constructor can terminate the vm2 host process
• GHSA-43rv-jrfh-9mrrmediumDuplicate Advisory: vm2: NodeVM zlib Buffers expose pooled host memory across the VM boundary
• GHSA-c9wr-qm7p-p6vccriticalDuplicate Advisory: vm2: NodeVM custom resolution bypasses external path boundaries
• GHSA-vj8p-hp9x-gh47highmpp vulnerable to Gas Draining with low gas limit
• GHSA-qpxh-ff8m-c62vmediummpp vulnerable to Gas Draining with access list
• GHSA-vv77-66rf-pm86highmpp vulnerable to Gas Draining with no limit
• GHSA-62mm-xwmv-crhghighkhoj has an unauthenticated path traversal in /home/ endpoint that allows file read from server filesystem
• GHSA-29h2-jr22-frmhhighOpenZeppelin Confidential Contracts `VestingWalletConfidential`: a malicious ERC-7984 token is able to extract
• GHSA-g28h-2cmm-rj9xhighlangchain-nvidia-ai-endpoints has local file disclosure through VLM image inputs
• GHSA-2jx3-ff3v-j7jjmediumyara-x: Unvalidated deserialization in safe `Rules::deserialize` allows memory corruption and UB
• GHSA-8pcw-h6w9-h46gmediumplone.app.contenttypes has a Denial of Service in File Upload due to excessive filename length
• CVE-2026-76819highNuclei: Arbitrary Code Execution via Goja JavaScript Engine Vulnerability
• CVE-2026-63131mediumCVE-2026-63131 updated by NVD
• CVE-2026-63132criticalCVE-2026-63132 updated by NVD
• CVE-2026-77285lowCVE-2026-77285 updated by NVD
• GHSA-8qpc-6rxx-4pxfhighDuplicate Advisory: vllm p2p never connected zmq_exhaustion
• GHSA-jhjp-4c2q-xmx4mediumk8saudit shipped rules do not detect privileged/sensitive settings on init or ephemeral containers
• GHSA-6623-4q32-82v8lowDuplicate Advisory: hono/jsx renders plain strings unescaped in boundary components, leading to XSS
• GHSA-jgh3-fggc-mcpmhighObot: Server-Side Request Forgery via remote MCP server URL
• GHSA-pr6h-vr44-xq8jmediumObot: MCP Registry API readable without authentication
• GHSA-xwmw-prc4-v3crhighObot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion
• CVE-2026-63374criticalCVE-2026-63374 updated by NVD
• GHSA-39wr-7q6h-cf68highLMDeploy has an SSRF bypass
• GHSA-jr78-w6w5-m8f8highSemantic MediaWiki'a missing authorization in the smwtask API module allows unauthenticated access to admin-on
• GHSA-9rcc-pmj8-ffhrmediumSemantic MediaWiki's Special:FacetedSearch cstate hidden inputs enable reflected XSS (residual of CVE-2025-103
• GHSA-9hxx-m5g2-2q3hcriticalDuplicate Advisory: vm2 contains a sandbox escape vulnerability
• GHSA-wm36-87w8-wg22mediumDuplicate Advisory: snappy-java: Heap buffer overflow in Snappy.uncompress*Array typed-array methods
• GHSA-xjw9-38cr-6372highdjust: A template binding inherits a context safety grant it never earned (XSS)
• GHSA-9395-2g46-rj3fhighdjust: Six template-layer defects emit attacker-controlled markup unescaped (XSS)
• GHSA-gg6f-mhqm-f7gpcriticalDuplicate Advisory: Sandbox Escape (NodeVM)
• GHSA-538q-xxpg-6h4rcriticalDuplicate Advisory: vm2 sandbox escape via WebAssembly.compileStreaming Promise species bypass
• GHSA-5v7w-95g5-pj6qcriticalDuplicate Advisory: Default VM can mutate host TypedArray and ArrayBuffer intrinsics after the host-prototype
• GHSA-9f3g-34x8-92jcmediumDuplicate Advisory: vm2: vm.freeze()/vm.readonly() bypass via accessor descriptor
• GHSA-hc6q-4vvg-jf79criticalDuplicate Advisory: vm2 CLI provides no sandbox isolation - host-realm require() is reachable from sandboxed s
• GHSA-7c3p-84r8-h79qhighDuplicate Advisory: vm2: NodeVM builtin denylist bypass via fs/promises despite -fs, allowing host filesystem
• GHSA-9538-79j2-h62hhighDuplicate Advisory: `allowAsync: false` can be bypassed through Promise thenable assimilation in VM and NodeVM
• GHSA-hmpr-c9rf-qcrfhighDuplicate Advisory: Incomplete nodejs.* symbol filtering lets sandbox override host WebStream state checks
• GHSA-6fvh-fgmg-3x7vcriticalDuplicate Advisory: vm2 Custom Module Resolver Can Bypass the External Package Allowlist by Loading a Collidin
• GHSA-mgj2-jqjq-q8ggcriticalDuplicate Advisory: vm2: Host-returned Promise rejection can bypass vm2's unhandled-rejection hardening and te
• GHSA-28q4-xrqh-9479criticalDuplicate Advisory: vm2: NodeVM node:-prefixed negative builtin deny bypass exposes child_process
• GHSA-29x6-9qh5-83ggcriticalDuplicate Advisory: NodeVM `require.external` without an explicit `require.root` grants unrestricted host file
• GHSA-x5qg-8pq6-39h6criticalDuplicate Advisory: Sandboxed code can read and write host-realm memory via Node's shared Buffer pool
• GHSA-xq74-c7jx-8w5jcriticalDuplicate Advisory: vm2 NodeVM can replace the host process TLS trust store
• GHSA-8mvv-mcc3-xwhhlowDuplicate Advisory: External module allowlist uses a raw prefix test, so a prefix-sharing sibling package is t
• GHSA-wqg3-r97q-73xmcriticalDuplicate Advisory: NodeVM builtin allowlist bypass via node:test.run() execArgv allows sandbox escape
• GHSA-4xmw-hh9q-4q7ccriticalDuplicate Advisory: vm2 sandbox escape to host RCE via revisited host-wrapped AggregateError bypassing Error s
• GHSA-9fxx-mv6c-j5xpcriticalDuplicate Advisory: NodeVM nesting guard accepts array-shaped require and permits host RCE
• GHSA-m7cq-7f2q-f9fhcriticalDuplicate Advisory: vm2 3.11.6 allows a sandboxed plugin to execute native code through `node:sqlite`
• GHSA-5843-9mh5-hhgwcriticalDuplicate Advisory: vm2 exposes host HTTPS credentials and TLS traffic through globalAgent
• GHSA-vjcv-9j33-wj62highDuplicate Advisory: vm2: timeout Option Bypass via FinalizationRegistry Cleanup Callback (Unbounded Host Event
• GHSA-2vh9-cv26-p97mmediumDuplicate Advisory: vm2: util.getCallSites() bypasses GHSA-v27g host-frame redaction, leaks host call stack
• GHSA-6jgm-4w45-vh8jcriticalDuplicate Advisory: vm2 crypto builtin loads attacker native code through setEngine
• GHSA-hwr5-cm8v-c76qcriticalDuplicate Advisory: vm2 sandbox escape on Node.js 26 through a stale PromiseThenLookupChain protector
• GHSA-3f84-vwv5-r42gcriticalDuplicate Advisory: vm2: GHSA-m283-3h24-438v fix bypass leads to host RCE via call/apply indirection
• GHSA-63m2-qqch-jxv2mediumDuplicate Advisory: vm2 leaks absolute host filesystem paths to sandbox code via error stack formatting
• GHSA-mrx9-2rrp-rhpxhighDuplicate Advisory: joi: Quadratic regular-expression backtracking in `Joi.string().isoDate()`
• GHSA-5648-rgj9-v224high@zereight/mcp-gitlab has multiple safety-control bypasses: execute_graphql read-only + allow-list bypass, unau
• GHSA-rf68-8gjr-36q7lowNezha: OAuth2 redirect_uri Host header injection regression when dashboard_host is empty
• GHSA-p4h8-xg7f-xqrchighDuplicate Advisory: Vikunja: Denial of service via decompression bomb in the data import
• GHSA-m4vj-wr5q-cmvrhighDuplicate Advisory: Vikunja: Every /api/v2 pre-auth endpoint is unthrottled on a stock install while its /api/
• GHSA-37rx-7pj5-p885highDuplicate Advisory: Vikunja: Read-only project members can obtain any link share's access hash via the single-
• GHSA-jmr8-r558-3jhxmediumDuplicate Advisory: Vikunja: TOTP secret is readable after enrollment, no step-up auth
• GHSA-jfw3-2gcf-23r5highDuplicate Advisory: Vikunja: Unbounded nested task-filter recursion permits API process termination
• GHSA-69rj-q3v9-vffphighDuplicate Advisory: Vikunja: Unbounded image decode on avatar and project-background uploads enables decode/re
• GHSA-ccgq-fx7h-2v4cmediumDuplicate Advisory: Vikunja: Cross-tenant task-position rows can be injected into arbitrary project views via
• GHSA-55p4-8j34-jv53highDuplicate Advisory: Vikunja: Unbounded CSV row cardinality permits API process termination
• GHSA-p2vv-wrh8-x466highDuplicate Advisory: Vikunja: CalDAV and feeds BasicAuth endpoints have no rate limit, bypassing the anti-brute
• GHSA-c2g7-39fr-cp8qhighDuplicate Advisory: Vikunja: Planka migration retains an unbounded aggregate of attacker-served attachments an
• GHSA-phph-c358-5mwmmediumDuplicate Advisory: Vikunja: API token scopes bypassed via task expand parameter (comments, reactions, time en
• GHSA-vcgv-7rvm-m3vpmediumDuplicate Advisory: Vikunja: Link-share token can enumerate users through the v2 API
• GHSA-2922-qgfj-pr7vmediumDuplicate Advisory: Vikunja: Any user can enumerate every team and its members by attaching arbitrary teams to
• GHSA-2xmm-m4wv-3fjhlowOctober CMS: Incomplete Scheme Validation in Image Resizer
• GHSA-vm5r-23w9-m8hxhighDuplicate Advisory: Nodemailer addressparser: O(n^2) on comment-joined addresses enables a remote DoS (reachab
• CVE-2026-61534criticalCVE-2026-61534 updated by NVD
• CVE-2026-59973highCVE-2026-59973 updated by NVD
• CVE-2026-56825highCVE-2026-56825 updated by NVD
• CVE-2026-56830mediumCVE-2026-56830 updated by NVD
• CVE-2026-56829highCVE-2026-56829 updated by NVD
• CVE-2026-56828highCVE-2026-56828 updated by NVD
• CVE-2026-56826mediumCVE-2026-56826 updated by NVD
• CVE-2026-56831mediumCVE-2026-56831 updated by NVD
• CVE-2026-56827highCVE-2026-56827 updated by NVD
• CVE-2026-59971criticalCVE-2026-59971 updated by NVD
• GHSA-m3wp-48jr-vr4ghighmistral.rs: Unbounded Remote Media Fetch and Video Frame Expansion DoS
• GHSA-wfgq-w7cq-qj7jhighmistral.rs Media Loader: Unauthenticated SSRF and arbitrary local file read via image_url
• CVE-2026-55416highCVE-2026-55416 updated by NVD
• GHSA-8h2c-ghff-mpg9mediumDuplicate Advisory: pymongo: PYTHON-5994 Use exact match for file ID in GridFS delete methods
• GHSA-x6mc-fgjf-77r7mediumDuplicate Advisory: GridFS data disclosure and deletion via query-operator injection in file IDs
• GHSA-w47m-jpv2-qfw5criticalDuplicate Advisory: Knowns Sandbox Escape: Unauthenticated Header Injection Grants AI Agent Unrestricted Acces
• GHSA-x7m8-jrm8-hpvxhigh@eigenpal/docx-editor-react: CSS injection and print-time XSS via unescaped embedded font-family name
• CVE-2026-59185highCVE-2026-59185 updated by NVD
• CVE-2026-59179highCVE-2026-59179 updated by NVD
• CVE-2026-59177highCVE-2026-59177 updated by NVD
• CVE-2026-59172highCVE-2026-59172 updated by NVD
• GHSA-hxjg-93wc-h8p8highKomari: Management Interface CSRF
• CVE-2026-59160highCVE-2026-59160 updated by NVD
• CVE-2026-59158highCVE-2026-59158 updated by NVD
• CVE-2026-59157mediumCVE-2026-59157 updated by NVD
• CVE-2026-55864highCVE-2026-55864 updated by NVD
• CVE-2026-55073mediumCVE-2026-55073 updated by NVD
• CVE-2026-54529mediumCVE-2026-54529 updated by NVD
• CVE-2026-53495mediumCVE-2026-53495 updated by NVD
• CVE-2026-50024mediumCVE-2026-50024 updated by NVD
• CVE-2026-44282mediumCVE-2026-44282 updated by NVD
• CVE-2025-58363mediumLF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint
• CVE-2025-24979mediumLF Edge eKuiper: SSRF in External Service
• CVE-2025-24978lowLF Edge eKuiper: Self-XSS in External Service Creation
• CVE-2025-24890mediumCVE-2025-24890 updated by NVD
• GHSA-2pxq-5vcg-rq29highDuplicate Advisory: Repository content can impersonate the git directory, leading to arbitrary code execution
• GHSA-qpf5-3wfw-fh7qhighDuplicate Advisory: Denial of Service via catastrophic backtracking (ReDoS) in Actor.name_email_regex — commit
• GHSA-wmmp-3585-3rmpmediumNodemailer: IDN/Punycode domain allow-list bypass leads to email delivery to an attacker-controlled domain
• GHSA-2x7j-588g-ccc2highNodemailer: Quadratic (O(n²)) time complexity in addressparser allows remote denial of service via a crafted a
• GHSA-cc9r-2j5m-2m83mediumNodemailer: Recipient-domain validation bypass via RFC 5322 comment mis-parsing leads to email delivery to an
• GHSA-2q42-4q24-7rgvhighOpenAPI3 version value escapes `emitterOutputDir` and overwrites YAML/JSON outside the output tree
• GHSA-26w7-cxv4-gfx2criticalAstro: Remote code execution through AVIF image optimization
• GHSA-rgj7-g3m4-5g8chighsharp: Vulnerabilities in libheif: GHSA-g89c-p67h-r497 and GHSA-2jg2-4ch7-h545
• GHSA-j95f-988m-3j2fhighTiptap: Quadratic ReDoS in block and inline Markdown attribute parsing
• GHSA-2xp9-vwfh-vxw4criticalNext.js: Unauthenticated Remote Code Execution in Image Optimization API when AVIF files are used
• GHSA-8m3c-c648-2xjjmediumNodemailer: resolveContent() on a MailMessage bypasses disableFileAccess/disableUrlAccess when called with the
• GHSA-4qhr-qf46-fcrxhighDuplicate Advisory: Microsoft Security Advisory CVE-2026-71328 – .NET and Visual Studio Remote Code Execution
• GHSA-q72m-f2r4-w4cwhighDuplicate Advisory: Microsoft Security Advisory CVE-2026-69522 – .NET and Visual Studio Remote Code Execution
• GHSA-mqvm-gmc4-6rv2highDuplicate Advisory: Microsoft Security Advisory CVE-2026-69439 – .NET and Visual Studio Elevation of Privilege
• GHSA-v3f6-m9j2-437pmediumDuplicate Advisory: Microsoft Security Advisory CVE-2026-69304 – ASP.NET Core Denial of Service Vulnerability
• GHSA-57v5-wqx3-cgj4mediumSiYuan: Database view structure (all view names, layout types and per-field visibility) is returned to anonymo
• GHSA-5cwm-p7pj-gqp2mediumDuplicate Advisory: Sensitive information written to logs by Snowflake drivers
• GHSA-6ph4-r249-58p2highDuplicate Advisory: knowns vulnerable to command injection
• GHSA-qjrq-cvv4-3g9whighDuplicate Advisory: Knowns Unrestricted Path Traversal leading to out-of-bounds arbitrary .md file read, write
• GHSA-fg72-q65g-wm5whighDuplicate Advisory: H3: Unbounded Chunked Cookie Count in Session Cleanup Loop may Lead to Denial of Service
• GHSA-7q9c-hpx7-9cwmhighTypeSpec: Unauthenticated Remote Shutdown of Spector Mock Server via POST /.admin/stop
• GHSA-6hxq-p678-4hr2lowSimpleWebAuthn: Registration verification does not sufficiently ensure that attestation certificates chain to
• GHSA-w8wf-3qvj-6xqfhighOpenClaw Feishu permission tools could ignore per-account disablement
• GHSA-2q7j-2vhx-56g8highOpenClaw Feishu tools could ignore per-account disablement
• GHSA-gw25-m53r-qh88mediumSiYuan: path traversal via /export/temp/ short-circuit branch (incomplete fix for the export-disclosure harden
• GHSA-99rq-75j6-5j9fhighSiYuan: Stored and reflected XSS in SiYuan through an SVG sanitizer bypass
• GHSA-cp6q-959q-f8rhmediumTiptap: mergeAttributes() turns an own __proto__ key into inherited executable DOM attributes
• CVE-2026-12876mediumNLTK: Uncontrolled resource consumption in RecursiveDescentParser via ambiguous or left-recursive grammars
• GHSA-cvhv-g4rq-3hmwlowImageMagick: Memory Leak when providing invalid options to the cli
• GHSA-p498-v437-472gmediumhumanfs: Recursive copy follows symlinked files and copies data from outside the source tree
• GHSA-8rr7-cvq3-gmfhhighleague/commonmark: Denial of service via distinctly-named attributes in the Attributes extension
• GHSA-jjv6-8j6v-6j52highleague/commonmark: Denial of service in the SmartPunct and Attributes extensions
• GHSA-f8fg-pg57-v4j8highleague/commonmark XSS: `on*` event-handler filter in `AttributesExtension` bypassed with a U+000C form feed
• GHSA-j8pm-gj4c-rq4xhighleague/commonmark: Denial of service via crafted code fences, reference links, and emphasis delimiters
• GHSA-8423-8fgw-73vqmediumtornado: multipart split() creates huge temp list before max_parts check -> memory amplification DoS (httpu
• GHSA-wwv5-g3v4-889xlowTornado: Incomplete fix for CVE-2026-35536: cookie attribute injection re-opened via the legacy case-insensiti
• GHSA-vx52-2968-3vc6highpnpm: Environment secrets exfiltrated via env-placeholder expansion in proxy settings read from an untrusted p
• GHSA-2rx9-3g3h-c2jvhighpnpm: pacquet trust-lockfile install can create dependency symlinks outside the project
• GHSA-gqvg-gmmx-x4hmhighMLFLOW_ALLOW_PICKLE_DESERIALIZATION=False safety control bypassed by mlflow.statsmodels flavor — RCE via craft
• GHSA-3f6p-5ww8-9rcrhighMySQL2: Auth Plugin Downgrade to mysql_clear_password Leaks Plaintext Credentials
• GHSA-rgwj-5xj2-c3m3mediumMySQL2: Unbounded zlib inflate in compressed MySQL protocol handler allows decompression-bomb DoS
• GHSA-vf76-f5cp-9846highDuplicate Advisory: ReDoS in nltk.tgrep via unvalidated user-supplied regular expressions
• GHSA-h3hj-cmcx-xc66highDuplicate Advisory: Nodemailer: Message-level raw option bypasses disableFileAccess/disableUrlAccess, enabling
• GHSA-frj6-5rhh-vwfwhighDuplicate Advisory: Nodemailer: Improper TLS Certificate Validation in OAuth2 Token Fetch Enables Credential I
• GHSA-73p9-6hrp-8qhrmediumAIIR verification and policy gates could report success without enforcing the control (fail-open)
• GHSA-2vh6-hw4j-32wwmediumgix-packetline: reachable panic on empty side-band packet (pre-auth network DoS)
• GHSA-pf76-q698-37v8mediumDuplicate Advisory: Uncontrolled recursion in nltk.featstruct.FeatStructReader causes unhandled RecursionError
• GHSA-hqj7-phwp-c3fphighDuplicate Advisory: Model-artifact APIs bypass pathsec and touch files outside allowed roots
• GHSA-4xw3-jf9x-x7mfmediumDuplicate Advisory: Downloader.download follows hardlinks and overwrites outside-root files
• GHSA-3m7f-6hxv-6796mediumDuplicate Advisory: Pl196xCorpusReader has quadratic ReDoS on malformed TEI blocks
• GHSA-8x48-8g7j-rqxphighDuplicate Advisory: Quadratic-time DoS in PorterStemmer via long runs of 'y'
• GHSA-hqv3-xm29-p9hqmediumDuplicate Advisory: Quadratic CPU Exhaustion in `XMLCorpusView._read_xml_fragment()`
• GHSA-mf7q-r4rv-jv94highCrossplane's TOCTOU between cosign verification and image fetch in xpkg.CachedClient allows tag-based package
• GHSA-2rrw-hpqm-36pvhighDuplicate Advisory: ReDoS in nltk.text.Text.findall() via unvalidated user-supplied regular expressions
• CVE-2026-44701lowOpenSTAManager has HTML Injection in modules/utenti/edit.php
• GHSA-7w8c-qgxg-m7jxhighLibreNMS — Stored XSS via SNMP/Syslog Data in Legacy Templates
• GHSA-x287-5c68-36wpmediumOpenWISP IPAM has broken object-level authorization: ExportSubnetView lets a member of one organization export
• GHSA-93qj-5q5v-3c2hcriticalTrojanized pantheon-agents 0.6.1 and 0.6.2 on PyPI ship a credential stealer (supply-chain account compromise)
• GHSA-xqqh-3w52-q8p7mediumDuplicate Advisory: Nokogiri does not check the return value from xmlC14NExecute
• GHSA-3h2g-j4wp-7qqqcriticalDuplicate Advisory: JVM argument injection bypass via per-call options in the NLTK Stanford wrappers (incomple
• GHSA-5jhf-fpp7-v2pvhighDuplicate Advisory: Nokogiri CSS selector tokenizer has regular expression backtracking
• GHSA-rh9x-7xjc-vwx2mediumDuplicate Advisory: Nokogiri XSLT transform has a memory leak
• GHSA-w5q8-6jpp-4246highDuplicate Advisory: Corpus readers follow symlinks outside trusted roots despite pathsec enforcement
• GHSA-rcw8-9qrw-27m2highDuplicate Advisory: NLTK: Corpus Reader Sandbox Bypass
• GHSA-vwf3-4xxj-qg6hhighmcp-contextforge-gateway has Server-Side Template Injection (SSTI) leading to Remote Code Execution in `Prompt
• GHSA-pg62-f8g4-4wqhhighphpMyFAQ privilege escalation: GroupController::updatePermissions lets a GROUP_EDIT admin grant rights they do
• GHSA-mf8r-wm2w-f8c5mediumphpMyFAQ public FAQ APIs expose inactive FAQ content
• GHSA-88g4-74f3-63x9mediumphpMyFAQ has Potential Authenticated Path Traversal in PDF Export
• GHSA-8qx3-8gm5-9cj2highpickem vulnerable to terminal escape-sequence injection via unsanitized item text
• GHSA-8cp3-qxj6-px34highutcp-http has an OAuth2 `tokenUrl` Trust Boundary Bypass in OpenAPI Conversion
• GHSA-9qhg-99ww-9mqchighutcp-http SSRF: HTTP tool invocation follows redirects without re-validating the target
• GHSA-vp9c-2pjm-8925criticalDuplicate Advisory: Allowlisted pickle loaders still permit code execution in current source
• GHSA-jx89-3qg8-p2mrhighDuplicate Advisory: Entity-expansion DoS (billion laughs) via remaining raw ElementTree parses (CWE-776)
• GHSA-54xp-3ww7-6wjghighDuplicate Advisory: Uncontrolled search path when invoking the Graphviz 'dot' binary (CWE-426/CWE-427)
• GHSA-6rj2-96f5-chj9highDuplicate Advisory: GitPython: TagReference.create positional reference bypasses kwargs-only --file guard, ena
• GHSA-89ff-m8wv-p99rhighDuplicate Advisory: GitPython: Incomplete unsafe_git_revision_options denylist omits --contents/-S, enabling a
• GHSA-crp9-r7rq-c8cghighDuplicate Advisory: pathsec SSRF protection can be bypassed when a proxy is configured
• GHSA-gx65-c5hj-vpv5criticalDuplicate Advisory: [CWE-502] Unsafe Pickle Deserialization in TransitionParser Allows Remote Code Execution
• GHSA-8vp7-8q4w-vv7mhighDuplicate Advisory: Grav: UserInterface offsetget/offsetexists allow-listed in Twig sandbox let editor-authore
• GHSA-crmc-f4m7-33fjhighDuplicate Advisory: Arbitrary local file content disclosure via [include] directive in untrusted .gitmodules (
• GHSA-7r39-6q8m-qw68highDuplicate Advisory: clone_from()/clone() omit --separate-git-dir from unsafe_git_clone_options, enabling arbit
• GHSA-crrc-vpp2-f5x7highDuplicate Advisory: Grav: config_denied_paths default list omits `system`, exposing real secrets (e.g. system.
• GHSA-9557-234j-7rv9criticalDuplicate Advisory: Dormant multi-line git-config values are corrupted into live injected directives (e.g. cor
• GHSA-mw85-cjh9-8hp7highDuplicate Advisory: Grav: The system, site, and theme Twig variables bypass the content sandbox entirely and a
• GHSA-rj4c-4q9x-543xhighDuplicate Advisory: Grav: media_directory() Twig function allows filesystem path traversal and file content di
• GHSA-qh7h-6c7g-x8m6criticalDuplicate Advisory: Grav: Origin validation bypass in Uri::referrer() and Pages::referrerRoute() via unanchore
• GHSA-px9v-979x-qmh9mediumDuplicate Advisory: Grav: Non constant time nonce comparison in Utils::verifyNonce() used for CSRF protection
• GHSA-896w-cw95-xq7whighDuplicate Advisory: Grav: Path Traversal in MediaUploadTrait::deleteFile() Allows Arbitrary File Deletion
• GHSA-fx4f-mhw4-qm7jmediumvibeio-http has a DoS vulnerability in HTTP/1.x chunked encoding parser triggered by maliciously crafted chunk
• GHSA-w8j7-39hp-8x59mediumCloudreve's remote download file paths can escape the selected destination directory
• GHSA-vx2m-jpxr-xv7wmediumCloudreve has Broken Access Control - Revoked Share Access Still Allows Signed File URL Generation via Cached
• GHSA-w67g-5rqw-f597mediumGorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key
• GHSA-4ph6-mjv7-3fq6lownetfoil vulnerable to improper handling of untrusted DoH response data
• GHSA-3gjw-f78c-vvpwmediumtokio-postgres: Panic on a `DataRow` with fewer fields than columns allows denial of service
• GHSA-rgqc-3x5p-6gwgmediumpostgres-protocol: Panic decoding a malformed `hstore` value allows denial of service
• GHSA-5x78-73v4-xg6whighpostgres-protocol: Unbounded SCRAM iteration count allows a malicious server to cause CPU-exhaustion denial of
• GHSA-p3f5-w63m-mxphhighDuplicate Advisory: webpack-dev-middleware vulnerable to Path Traversal via non-slash-terminated publicPath
• GHSA-892m-gcq8-2468highDuplicate Advisory: Uncontrolled recursion DoS in JustHTML() via deeply nested HTML
• GHSA-8h9m-22mv-qv5rhighDuplicate Advisory: Symlink escape in CorpusReader allows arbitrary local file read outside the corpus root
• GHSA-qq3h-cgj8-w3fxhighDuplicate Advisory: Symlink-based sandbox bypass in FramenetCorpusReader (bypasses the fix for CVE-2026-54292)
• GHSA-343m-9fqq-97c7mediumDuplicate Advisory: NLTK: Symlink-based arbitrary file read in IPIPANCorpusReader, bypasses nltk.pathsec entir
• GHSA-8w48-h75v-cxpvhighDuplicate Advisory: Security Report: StreamBackedCorpusView Bypasses pathsec.ENFORCE - Arbitrary Local File Re
• GHSA-79ph-w9m5-4v5mhighDuplicate Advisory: FileSystemPathPointer.open() sandbox check is dead code — arbitrary file read via file://
• GHSA-cv2g-m8rr-888chighDuplicate Advisory: Natural Language Toolkit (NLTK) has unbounded recursion in JSONTaggedDecoder.decode_obj()
• GHSA-qg9p-xrhj-435mmediumDuplicate Advisory: nltk: SSRF Fail-Open in validate_network_url() via DNS Resolution Failure
• GHSA-8vh5-mgjj-w6hghighDuplicate Advisory: [CWE-1188] Default ENFORCE=False Disables All pathsec Security Controls
• GHSA-qp76-pq9f-gr9mhighDuplicate Advisory: Stable FrameNet and NKJP readers parse outside-root XML in 3.9.4
• GHSA-rp7c-4prv-9rrgmediumDuplicate Advisory: SiYuan: MCP file tool's blocklist is incomplete relative to the HTTP file API it claims to
• GHSA-989h-w3q9-3m2fmediumDuplicate Advisory: SiYuan: Missing consistency check between packageName and repoURL/repoHash in bazaar packa
• GHSA-8hgv-xc77-jmcrmediumGrav: Page editors can inject arbitrary script into rendered pages via the Twig sandbox's assets.addJs/addCss
• GHSA-486p-g8x4-77mgmediumDuplicate Advisory: ONNX: TOCTOU arbitrary file read/write in save_external_dat
• CVE-2026-55451highCVE-2026-55451 updated by NVD
• GHSA-jm5p-837g-rv8gmediumWagtail: Improper restriction handling on Page translation API endpoint
• GHSA-x5cx-w6p2-mxf2mediumWagtail: Improper permission handling when copying snippets
• GHSA-c2xx-cjmh-9q8fmediumWagtail: Improper restriction handling on descendant collections in Documents and Images API
• GHSA-92hv-j533-69wclowWagtail: Identification of documents by SHA1 hash
• GHSA-hq84-x37p-j6q5mediumWinter: Reflected XSS through the search query parameter in the backend Table widget
• GHSA-p2ch-c2c3-4xm5mediumWinter: CSRF through AJAX handler names reachable as backend page actions
• GHSA-5cwr-5jxg-pcf6mediumWinter: Stored XSS through cached Brand Settings and Editor Settings custom styles
• GHSA-fm29-4mq3-phg6highWinter: ImportExportController AJAX handlers bypass granular import/export permission gate
• GHSA-mpmw-f6h6-3g26mediumWinter: My Account preview exposes another backend user's profile by record ID
• GHSA-7mpf-4465-7fc2lowWinter: Stored XSS through Backend List widget image columns
• GHSA-rxhg-vcww-2mpwlowFleet: ORDER BY column injection on activity list endpoints
• GHSA-q9c5-pp7m-fm2gmediumFleet: Unauthenticated download of in-house iOS app binaries via predictable URLs
• GHSA-8cfw-pcwh-v63whighWinter: Authenticated Twig sandbox escape in CMS SecurityPolicy (bypass of CVE-2024-54149)
• GHSA-2223-f22x-24cqmediumWinter: Local File Inclusion through =include directives in JavaScript asset compilation
• CVE-2026-63202highnetty-incubator-codec-ohttp BinaryHttpParser: Unauthenticated CPU-exhaustion DoS via infinite loop in field-se
• CVE-2026-63179mediumCVE-2026-63179 updated by NVD
• CVE-2026-61827highnetty-incubator-codec-ohttp: BinaryHttpParser should enforce limits for variable lengths fields
• CVE-2026-63124highnetty-incubator-codec-ohttp: Binary HTTP parser infinite loop on known-length field section boundary
• CVE-2026-61799mediumnetty-incubator-codec-ohttp: Binary HTTP parser unchecked varint length overflow causes decoder crash
• CVE-2026-61798highnetty-incubator-codec-ohttp: BoringSSL HPKE private key bytes exposed through toString() and exception message
• CVE-2026-57570mediumCVE-2026-57570 updated by NVD
• CVE-2026-55468mediumCVE-2026-55468 updated by NVD
• GHSA-ghvf-qf6h-g8x5highNocoBase: Arbitrary File Write chained with Local file Inclusion leads to Remote code execution
• CVE-2026-54256mediumCVE-2026-54256 updated by NVD
• CVE-2026-54251highCVE-2026-54251 updated by NVD
• CVE-2026-54182highCVE-2026-54182 updated by NVD
• CVE-2026-54181mediumCVE-2026-54181 updated by NVD
• CVE-2026-54180highCVE-2026-54180 updated by NVD
• CVE-2026-54179mediumCVE-2026-54179 updated by NVD
• CVE-2026-54178highCVE-2026-54178 updated by NVD
• CVE-2026-54177mediumCVE-2026-54177 updated by NVD
• CVE-2026-54176mediumCVE-2026-54176 updated by NVD
• CVE-2026-54175highCVE-2026-54175 updated by NVD
• CVE-2026-54168mediumCVE-2026-54168 updated by NVD
• GHSA-22w5-2fxg-vrwxlowOpenTofu has high CPU usage when using K8S remote state backend or when parsing specifically crafted TLS certi
• CVE-2026-54162mediumCVE-2026-54162 updated by NVD
• CVE-2026-54156highCVE-2026-54156 updated by NVD
• CVE-2026-54155highCVE-2026-54155 updated by NVD
• CVE-2026-54150mediumCVE-2026-54150 updated by NVD
• GHSA-h58c-xccx-75m3lowCoder: Stored HTML injection via unescaped ApplicationName and LogoURL appearance settings
• GHSA-8fxq-53rx-ph5flowCoder: Login endpoint user enumeration via timing-defense placeholder in password comparison
• GHSA-mc9m-6fm9-pghcmediumZoo Design Studio: Memory-corruption in memory handling of lib-kcl
• GHSA-jgvr-6x5w-hx5wmediumZoo Design Studio: Recursive KCL parsing is vulnerable to denial-of-service
• GHSA-5p3m-vhh6-9236mediumstigmem-node has blind SSRF via unvalidated webhook subscription delivery_address
• CVE-2026-55253highCVE-2026-55253 updated by NVD
• CVE-2026-55244mediumCVE-2026-55244 updated by NVD
• GHSA-9w56-46f6-3qhxmediumasteval Sandbox Escape: arbitrary native memory read/write via numpy ctypes in default asteval Interpreter