CISA-KEV
CRITICAL
Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability
Ivanti Connect Secure contains a generation of predictable numbers or identifiers vulnerability that allows a remote authenticated attacker to upload files with attacker-controlled content to a known location on disk. This vulnerability can be chained with CVE-2026-104935 and CVE-2026-111357.
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
CISA-KEV
CRITICAL
Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability
Ivanti Connect Secure contains a missing authentication for critical function vulnerability that could allow a local authenticated attacker to escalate their privileges. This vulnerability can be chained with CVE-2026-104935 and CVE-2026-118527.
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
CISA-KEV
CRITICAL
GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability
GitLab Community Edition and Enterprise Edition contain a integer overflow or wraparound vulnerability that could allow an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI/CD configuration, due to insufficient regular expression v…
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
CISA-KEV
CRITICAL
Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability
Cisco Secure Firewall ASA Software and Cisco Secure FTD Software contains an unchecked return value to NULL pointer dereference vulnerability that could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition.
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
CISA-KEV
CRITICAL
Broadcom VMWare ESX Insufficient Logging Vulnerability
Broadcom VMWare ESX contains an insufficient logging vulnerability that could allow a malicious actor with admin access to perform certain operations without being logged.
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
CISA-KEV
CRITICAL
Linux Kernel Missing Initialization of a Variable Vulnerability
Linux Kernel contains a missing initialization of a variable vulnerability that could allow for unintended modification of page-cache-backed data via failure to preserve the shared-fragment marker during socket buffer coalescing, causing ESP input processing to decrypt shared fragments in place. Thi…
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
CISA-KEV
CRITICAL
Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability
Adobe Commerce and Magento contain an unrestricted upload of file with dangerous type vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session.
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
CISA-KEV
CRITICAL
Google Brotli Unchecked Return Value Vulnerability
Google Brotli contains an unchecked return value vulnerability that allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
NVD
CRITICAL
CVE-2026-120338
Prefab UI's Generative UI sandbox runs caller-supplied Python inside Pyodide, Python compiled to WebAssembly, in a Deno subprocess. The feature is documented as isolation for untrusted code, including LLM-written UI. From prefab-ui 0.14.0 through 0.20.2 the launcher starts Deno with unrestricted –a…
CWE: CWE-94, CWE-269, CWE-693
NVD
CRITICAL
CVE-2026-61826
Bazarr is a companion application to Sonarr and Radarr. Prior to 1.5.7-beta.14, the `api_ns_plex` namespace in `bazarr/api/plex/oauth.py` omits `@authenticate` on its Resource handlers, while normal APIs require an API key and no global authentication hook compensates. Anonymous callers can invoke `…
CWE: CWE-352, CWE-862
NVD
CRITICAL
CVE-2026-120307
The Beta9 worker serves the sandbox file API from outside the container. getHostPathFromContainerPath turns the tenant's container path into a worker path. If the unresolved path starts with a mount destination, including the default upload mount at /tmp/.beta9, the remainder is joined onto that mou…
CWE: CWE-22, CWE-23, CWE-59
NVD
CRITICAL
CVE-2026-120306
Beta9 turns each shell command in a tenant image definition into a Dockerfile RUN line and executes it with Buildah on the build worker. The worker image sets BUILDAH_ISOLATION=chroot, and no buildah invocation passes –isolation, so the step only changes its filesystem root. It keeps the worker pod…
CWE: CWE-269, CWE-653
GitHub-GHSA
CRITICAL
Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction
GHSA-mghf-wjfp-p5xm
pkg: wasmtime, wasmtime, wasmtime
eco: rust
published: Oct 28, 2026
## Summary
When running with the Cranelift compiler backend on an aarch64 target, Wasmtime can compile a Wasm module with more than ~256k targets on one `br_table` instruction in a way that results in an incorrect conditional branch target. This conditional branch could then jump to arbitrary other…
CVE-2026-115893
NVD
CRITICAL
CVE-2026-102649
Burrito is a Terraform Automation Collaboration Software (TACoS) Kubernetes operator. Prior to 0.13.0, `POST /api/webhook` accepts unsigned GitHub and GitLab events when a `TerraformRepository`'s credentials omit `webhookSecret` or set it to an empty value, including credentials configured for git a…
CWE: CWE-306, CWE-863
NVD
CRITICAL
CVE-2026-115188
An unrestricted file upload vulnerability exists in the campaign import feature of Mautic 7. When processing an uploaded campaign archive, the application copies the bundled asset files into a publicly accessible media directory without restricting their file names or types. An authenticated user wi…
CWE: CWE-94, CWE-434
NVD
CRITICAL
CVE-2026-120209
AJ-Report through 1.7.1 signs share tokens with a hard-coded JWT secret, allowing attackers to forge valid Share-Tokens offline. Attackers can mint a token with reportCode 'dataSet' to access the testTransform endpoint, which passes scripts to GroovyClassLoader for unauthenticated remote code execut…
CWE: CWE-321
NVD
CRITICAL
CVE-2026-63377
TAKO AI Agent for Okta is a local-first AI agent that helps Okta administrators query tenant data using natural language. Prior to 3.0.1-beta, `POST /api/auth/setup` in `src/api/routers/auth.py` allows an unauthenticated network attacker to create the first administrator account before the legitimat…
CWE: CWE-306
GitHub-GHSA
CRITICAL
Signal K resources API path traversal can disclose the JWT signing secret and enable remote code execution
GHSA-4xm8-rg9h-jhq2
pkg: signalk-server, @signalk/resources-provider
eco: npm
published: Oct 30, 2026
### Summary
Path traversal in the Signal K resources and applicationData APIs lets an
unauthenticated or low-privileged user read, write and delete files outside
the storage root. Reading <config>/security.json discloses the JWT signing
secret, enabling admin token forgery and remote code execution…
GitHub-GHSA
CRITICAL
imgproxy has integer overflow in imgproxy ICO loader that causes denial of service and may permit remote code execution
GHSA-hff9-5pqw-6w9f
pkg: github.com/imgproxy/imgproxy/v3, github.com/imgproxy/imgproxy/v2, github.com/imgproxy/imgproxy
eco: go
published: Oct 30, 2026
## Summary
The ICO loader allocates `data_size + BMP_FILE_HEADER_LEN` bytes after reading a 32-bit attacker-controlled `data_size`. For `data_size > UINT32_MAX – BMP_FILE_HEADER_LEN`, the addition wraps before allocation. imgproxy then writes the ICO prefix and reads up to the original declared siz…
NVD
CRITICAL
CVE-2026-119597
OpenDeepWiki through 2.0.6 contains a hard-coded JWT signing key vulnerability that allows unauthenticated attackers to forge administrator tokens using the publicly known Jwt:SecretKey in appsettings.json. Attackers can mint HS256 bearer tokens with an Admin role claim to access /api/admin endpoint…
CWE: CWE-321
NVD
CRITICAL
CVE-2026-118690
Signal K Server before 2.33.0 contains a missing authentication vulnerability that allows unauthenticated remote attackers to download log archives via the /skServer/ziplogs endpoint. Attackers can extract the JWT secretKey from security.json in the ZIP, forge administrator tokens, and create persis…
CWE: CWE-306
NVD
CRITICAL
CVE-2026-106013
The Jupiter X Core plugin for WordPress is vulnerable to Authentication Bypass via the Twitter/X Social Login handler in all versions up to and including 4.61.0. The vulnerability exists within the verify_twitter_callback function because after exchanging the visitor's oauth_verifier for their acces…
CWE: CWE-287
GitHub-GHSA
CRITICAL
MLflow vulnerable to remote code execution on unauthenticated servers via third-party scorer deserialization importing caller-placed artifact modules
GHSA-26p8-2jq9-3vq9
pkg: mlflow
eco: pip
published: Oct 27, 2026
## Summary
MLflow 3.12.0 introduced registration and deserialization support for third-party scorers in OSS MLflow. During scorer deserialization, the server accepts a request-controlled Python module path beneath one of four allowed package prefixes, imports that module, obtains a request-controll…
CVE-2026-116692
NVD
CRITICAL
CVE-2026-116692
MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.12.0rc0 until 3.17.0, third-party scorer deserialization in mlflow/genai/scorers/base.py accepts request-selected descendants of THIRD_PARTY_SCORER_ALLOWED_MODULES rather than requ…
CWE: CWE-94, CWE-470
NVD
CRITICAL
CVE-2026-117564
nest-admin before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge administrator tokens by using a hardcoded JWT_SECRET committed in .env.production. Attackers can sign tokens with the known secret that JwtStrategy and RbacGuard trust, impersonatin…
CWE: CWE-321
GitHub-GHSA
CRITICAL
Agno: Arbitrary code execution via `eval()` on `field_type` in `FunctionCall`
GHSA-m4w4-3r8h-jw98
pkg: agno
eco: pip
published: Oct 27, 2026
### Impact
Agno versions prior to 2.3.24 contain an arbitrary code execution vulnerability
in the model execution component. The `field_type` parameter on a `FunctionCall`
input field was passed to Python's built-in `eval()`, allowing an attacker who
could influence that value to execute arbitrary P…
CVE-2026-35002
NVD
CRITICAL
CVE-2026-92885
The Qode Membership plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeover in all versions up to, and including, 2.0.6.2 via the qode_membership_check_facebook_user AJAX action. This is due to a typographic error in the Facebook OAuth token verification guard within …
CWE: CWE-287
NVD
CRITICAL
CVE-2026-10757
There is a SQL injection vulnerability in Esri ArcGIS Server versions 12.1 and earlier on Windows and Linux that may allow a remote attacker with privileges to access the service (which could, depending on the service being configured in a non-default access configuration “public”, include an an…
CWE: CWE-89
NVD
CRITICAL
CVE-2026-112346
OpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code execution vulnerability where the DockerWorkspace and Apptainer workspace launchers bind the sandbox agent server to all network interfaces (0.0.0.0) with an empty session_api_keys list, disabling authentication by de…
CWE: CWE-1327
NVD
CRITICAL
CVE-2026-118310
Improper input validation in Views in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CWE: CWE-20
NVD
CRITICAL
CVE-2026-61729
SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.76, `verify_graylog_header` in `backend/app/active_response/routes/graylog.py` and `verify_velociraptor_header` in `backend/app/incidents/routes/incident_alert.py` authenticate webhoo…
CWE: CWE-306, CWE-798
NVD
CRITICAL
CVE-2026-63190
FearlessCMS is a flat-file `content` management system centered on simplicity and open source. Prior to version 0.1.4, five debug/test PHP scripts under `admin/` perform privileged operations without `isLoggedIn()` authentication checks, CSRF protection or adequate `path` validation. On PHP's built-…
CWE: CWE-22, CWE-79, CWE-200, CWE-288, CWE-306
NVD
CRITICAL
CVE-2026-61730
SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. In affected deployments, the unauthenticated `/scoutsuite-report` `StaticFiles` mount in `backend/copilot.py` exposes the `scoutsuite-report` directory even though normal /api routes require JWT a…
CWE: CWE-200, CWE-306, CWE-522, CWE-552
GitHub-GHSA
CRITICAL
MONAILabel Server Crash and Silent Inference Corruption via Crafted DICOM (pydicom DS/IS Validation Bypass)
GHSA-6hp3-vr39-rqw8
pkg: monai
eco: pip
published: Oct 27, 2026
### Summary
An unauthenticated remote attacker can crash a running MONAILabel server or silently corrupt its medical AI inference results by uploading a single crafted DICOM file (~132 KB) via the REST API. The vulnerability stems from pydicom's lack of validation for Decimal String (DS) and Intege…
CVE-2026-48705
GitHub-GHSA
CRITICAL
better-auth: OAuth state can be used as a Magic Link to sign in as another user
GHSA-965c-763c-88jm
pkg: better-auth
eco: npm
published: Oct 27, 2026
## Am I affected?
You may be affected if you use `better-auth` from `1.4.0-beta.18` through versions before `1.7.7` with the Magic Link plugin and social or Generic OAuth sign-in.
You are affected if **all** of these are true:
– Magic Link is enabled with default `storeToken: "plain"`, or with `s…
CVE-2026-114607
GitHub-GHSA
CRITICAL
Authlib: empty signatures validation in JWS JSON deserialization
GHSA-6v38-4h7w-rj9h
pkg: authlib
eco: pip
published: Oct 27, 2026
Authlib (prior to 1.9.0) contains a signature verification bypass vulnerability. The JsonWebSignature.deserialize_json() method accepts a JSON Serialization JWS object and returns the payload as successfully verified without checking for a signature and without requiring a cryptographic key.
## Roo…
CVE-2026-96760
NVD
CRITICAL
CVE-2026-112362
@fastify/express is a Fastify plugin that runs Express middleware inside Fastify. In versions 4.0.5 through 4.0.8, when Fastify runs with the non-default ignoreDuplicateSlashes option enabled, the plugin matches path-scoped Express middleware against a URL whose duplicate-slash normalization has als…
CWE: CWE-436
NVD
CRITICAL
CVE-2026-61707
SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.76, in the reported deployment, case-report templates uploaded by `customer_user`, the lowest-privilege portal role, are later executed by non-sandboxed Jinja2 engines when an admin o…
CWE: CWE-94, CWE-862, CWE-1336
GitHub-GHSA
CRITICAL
Electrum: Malicious server can replace a just-broadcast tx and try to trick user into RBF-ing it
GHSA-6jp4-8v48-cc5v
pkg: electrum
eco: pip
published: Oct 28, 2026
### Summary
The main Electrum server the client connects to is trusted with mempool ("unconfirmed") transactions. This is documented [design](https://electrum.readthedocs.io/en/latest/faq.html#does-electrum-trust-servers). [0]
However now someone figured out a way to practically exploit it:
– when…
CVE-2026-117601
GitHub-GHSA
CRITICAL
zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite & RCE
GHSA-m665-v7pm-7grj
pkg: zip
eco: rust
published: Oct 28, 2026
## Summary
A critical architectural parser differential exists in the `zip` crate (`<= 9.0.4`) between random-access archive readers (`ZipArchive`) and streaming readers (`ZipStreamReader`). `ZipArchive` considers the Central Directory File Header (CDFH) authoritative and ignores the filename declar…
CVE-2026-115905
GitHub-GHSA
HIGH
LiteLLM: Privilege Escalation to Proxy Admin via Cross-Domain Reuse of the Salt Key
GHSA-7hp6-4w63-5g45
pkg: litellm, litellm, litellm
eco: pip
published: Oct 27, 2026
### Summary
An authenticated user with `internal_user` privileges can escalate to `proxy_admin` and achieve remote code execution. The proxy uses one encryption key for two purposes: sealing secrets at rest and minting session tokens. An attacker exploits this by requesting a new API key with a cra…
CVE-2026-114612
GitHub-GHSA
HIGH
Ajenti has potential Remote Code Execution
GHSA-vcw3-r3fx-j444
pkg: aj
eco: pip
published: Oct 27, 2026
### Impact
An unauthenticated user could gain access to a server to execute arbitrary code on this server.
### Patches
This is fixed in the version 2.2.13. Users should upgrade to this version as soon as possible.
CVE-2026-27975
NVD
HIGH
CVE-2026-45144
Chamilo LMS is an open-source learning management system. From 2.0.0 until 2.0.1, `GET /user/{username}` is anonymously reachable and renders six user-editable profile fields (`firstname`, `lastname`, `competences`, `openarea`, `teach`, and `diplomas`) inside `{% autoescape false %}`, without server…
CWE: CWE-79
NVD
HIGH
CVE-2026-120203
ShowDoc 2.8.14 before 3.9.6 contains a code injection vulnerability in its Mock feature that allows authenticated users to execute shell commands through mockjs templates. Attackers can store a template via MockController::add with escaped parentheses that mockjs evaluates with eval(), then trigger …
CWE: CWE-94
NVD
HIGH
CVE-2026-63378
TAKO AI Agent for Okta is a local-first AI agent that helps Okta administrators query tenant data using natural language. Prior to 3.0.1-beta, any authenticated user with a valid `fctr_session` cookie can submit arbitrary Python source in the `script_code` field of `POST /api/react/execute-script`, …
CWE: CWE-94
GitHub-GHSA
HIGH
Authlib RFC 7592 examples omit registration-access-token client binding
GHSA-c73q-w75p-j82v
pkg: Authlib
eco: pip
published: Oct 30, 2026
## Description
### Summary
RFC 7592 (OAuth 2.0 Dynamic Client Registration Management Protocol) lets a previously registered client read, update, or delete its own registration, authenticated by a `registration_access_token` issued specifically to that client at registration time. The entire secur…
CVE-2026-116672
NVD
HIGH
CVE-2026-16760
In Trail of Bits fickling through 0.1.12, the _process_import() method in fickle.py adds an imported name to the likely_safe_imports set whenever the source module is present in sys.stdlib_module_names and the name is absent from the UNSAFE_IMPORTS denylist, without inspecting what the name resolves…
CWE: CWE-502, CWE-693
NVD
HIGH
CVE-2026-118938
In Trail of Bits fickling through 0.1.12, a pickle STACK_GLOBAL operand carrying a dotted __qualname__ (for example "Values.read_file") is resolved by pickle's find_class through _getattribute to an arbitrary attribute path rather than to a module-level function. Fickling records only the leading co…
CWE: CWE-502, CWE-706
NVD
HIGH
CVE-2026-119979
LM Studio before 0.4.22+1 contains a path traversal vulnerability in the model downloader's resolveDownloadRequest that allows attackers to write files outside the models directory using backslash-separated traversal filenames. Attackers can trick users into downloading a crafted model repository th…
CWE: CWE-22
NVD
HIGH
CVE-2026-119420
Lago through 1.55.0 contains an authentication bypass vulnerability that allows organization administrators to obtain session tokens for existing accounts via the acceptInvite mutation without a password check. Attackers can invite a victim's email, accept with an arbitrary password, and receive a J…
CWE: CWE-288
NVD
HIGH
CVE-2026-59387
The Nginx routing configuration for Cloud Controller blocks unauthenticated access to /internal/v4/ and /internal/v5/ endpoints but omits an equivalent deny rule for /internal/v3/. As a result, the staging callback endpoints /internal/v3/staging/:guid/droplet_completed and /internal/v3/staging/:guid…
CWE: CWE-284
NVD
HIGH
CVE-2026-119144
Frappe Framework before 15.111.0 and 16.x before 16.21.0 contains a server-side template injection vulnerability because user-controlled message fields are rendered as templates without neutralization. An authenticated attacker holding a common operational role can inject template expressions that t…
CWE: CWE-1336
GitHub-GHSA
HIGH
rucio has an Authorization Bypass on REST API endpoint for signing URLs
GHSA-5j9r-fx4x-rpvg
pkg: rucio, rucio, rucio
eco: pip
published: Oct 28, 2026
## Summary
The `/credentials/signurl` endpoint decides authorization from the client-supplied `X-Rucio-Account` HTTP header instead of the authenticated token's account. Any client holding **any** valid auth token (even a low-privilege account they legitimately own) can send `X-Rucio-Account: root` …
CVE-2026-58273
NVD
HIGH
CVE-2026-118683
MONAI from 1.2.0 before 1.6.1 contains a remote code execution vulnerability in ConfigWorkflow.__init__, which passes a bundle's configs/logging.conf to logging.config.fileConfig that eval()s handler class and args fields. Attackers can publish a malicious bundle whose logging.conf runs arbitrary Py…
CWE: CWE-94
NVD
HIGH
CVE-2026-116778
FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to 1.5.10.2253 and 1.6.0-RC-1, an authenticated API-enabled user with uType=1 who possesses both the user's API token and the global FOG API token can use PUT /fog/storagenode/{id}/edit to modify Storage Node u…
CWE: CWE-78, CWE-862
NVD
HIGH
CVE-2026-59177
ESPHome Device Builder Dashboard is a dashboard for the ESPHome home management software. Prior to 1.0.10, the `Home Assistant` add-on's trusted `ingress` site binds to `0.0.0.0` while intentionally skipping dashboard authentication because the supervisor is expected to authenticate requests upstrea…
CWE: CWE-1327
NVD
HIGH
CVE-2026-118330
Use after free in Browser in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CWE: CWE-416
GitHub-GHSA
HIGH
Atlantis: OS command injection through PR-controlled Terraform workspace enables RCE during plan
GHSA-rjh2-4xgw-p2hj
pkg: github.com/runatlantis/atlantis
eco: go
published: Oct 27, 2026
### Summary
Atlantis passes the Terraform `workspace` value from a pull request's `atlantis.yaml` into a shell command without quoting or escaping it.
A contributor whose pull request is eligible for an Atlantis plan can include shell metacharacters in the workspace name and execute arbitrary comm…
CVE-2026-116676
NVD
HIGH
CVE-2026-116672
Authlib is a Python library which builds OAuth and OpenID Connect servers. From 0.15 until 1.9.1, the documented ClientConfigurationEndpoint.authenticate_client and ClientConfigurationEndpoint.check_permission reference implementations look up a target client from request-controlled client_id data a…
CWE: CWE-639, CWE-1188
NVD
HIGH
CVE-2026-92372
An out-of-bounds write vulnerability in the
screen-image decoder of TeamViewer Full Client for Linux and macOS prior to
version 15.83 allows a remote attacker to execute arbitrary code by supplying
crafted screen-image data during a remote-control session. The vulnerability
can also be exploited by …
CWE: CWE-123
NVD
HIGH
CVE-2026-112438
A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An unprivileged attacker may be able to execute arbitrary code as root.
NVD
HIGH
CVE-2026-119572
Traefik from 3.7.0-ea.1 before 3.7.15 contains an authentication bypass vulnerability in the Kubernetes Ingress NGINX provider that silently disables mTLS configured via the auth-tls-secret annotation. When another Ingress declares a path on the same host without matching auth-tls settings, Traefik …
CWE: CWE-287
NVD
HIGH
CVE-2026-118645
n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 contains a filter injection vulnerability in the Quick Base node, which sends the Where filter to the Quick Base API as raw query text. Attackers supplying untrusted input such as webhook data used to build the filter can make Get Many…
CWE: CWE-943
NVD
HIGH
CVE-2026-61572
AVideo is a video-sharing Platform. Before the initial remediation attempt in 8.1.0, `url_get_contents` in `objects/functions.php` accepts caller-controlled destinations after only `FILTER_VALIDATE_URL` syntax validation, without rejecting private, loopback, or link-local addresses, and disables TLS…
CWE: CWE-918
GitHub-GHSA
HIGH
Happy DOM: SSRF via iframe and link stylesheet when parsing untrusted HTML
GHSA-c8p4-j97h-3vg8
pkg: happy-dom
eco: npm
published: Oct 28, 2026
## Summary
happy-dom v20.8.9 makes real server-side HTTP requests to arbitrary URLs when parsing HTML containing `<iframe>` or `<link rel="stylesheet">` elements. This behavior is enabled by default (`disableIframePageLoading: false`, `disableCSSFileLoading: false`). When an application uses happy-d…
CVE-2026-118660
NVD
HIGH
CVE-2026-76418
A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of servic…
CWE: CWE-690
GitHub-GHSA
HIGH
FileBrowser: Symlink following escapes user scope allowing arbitrary file read outside the served directory
GHSA-mgqf-5mf5-prfj
pkg: github.com/gtsteffaniak/filebrowser/backend
eco: go
published: Oct 27, 2026
## Summary
File read paths resolve symbolic links with `filepath.EvalSymlinks` and then operate on the resolved target without re-checking that the target still lies inside the user's source/scope.
A symlink located inside a user's accessible directory that points outside the scope (for example t…
CVE-2026-116682
GitHub-GHSA
HIGH
NLTK: WekaClassifier passes an unvalidated caller-controlled model path to the weka JVM, bypassing nltk.pathsec containment
GHSA-j456-xh4h-cpf2
pkg: nltk
eco: pip
published: Oct 27, 2026
## Summary
`WekaClassifier` in NLTK passes a caller-controlled model file path to the weka Java VM without any `nltk.pathsec` validation. `WekaClassifier.train` puts the caller's `model_filename` verbatim into the weka argv `["-d", model_filename, …]` (weka *writes* the trained model there), and `…
GitHub-GHSA
HIGH
Rembg: Unauthenticated SAM model injection permits local-file disclosure through malicious ONNX graphs
GHSA-qr6x-7v33-6qmg
pkg: rembg
eco: pip
published: Oct 27, 2026
The public `/api/remove` endpoint uses attacker-controlled `extras.sam_model` in both SAM filenames and GitHub download URLs. Path traversal plus a URL fragment lets an unauthenticated attacker place malicious ONNX models beside a target file. The models read the file as ONNX external data and encod…
CVE-2026-115924
NVD
HIGH
CVE-2026-119115
Incorrect authorization in the issuer resolution logic in AWS Private CA Connector for Kubernetes (aws-privateca-issuer) before v1.10.1 might allow an authenticated remote user to obtain certificates, including subordinate CA certificates, signed by a cluster-scoped AWS Private CA issuer that their …
CWE: CWE-863
NVD
HIGH
CVE-2026-59185
identrail is a machine identity security platform for AWS, GitHub/OIDC, and Kubernetes. Prior to 1.0.2, the default-on `POST /v1/workspaces/:workspace_id/projects/:project_id/github/connect/complete` endpoint in `internal/api/router.go` accepts `installation_id` from the request body or `X-GitHub-In…
CWE: CWE-639, CWE-862
GitHub-GHSA
HIGH
OAuthLib: Bearer token can be retrieved as long as client knows a valid client ID for device workflow
GHSA-3jp2-3mrg-2vxc
pkg: oauthlib
eco: pip
published: Oct 27, 2026
### Summary
A call to the token endpoint with a grant type of `"urn:ietf:params:oauth:grant-type:device_code"` and a bogus `device_code` is able to get a bearer token as long as they know a valid client ID enabled for the device workflow.
### Details
[Section 3.4 of the RFC 8628 spec](https://data…
CVE-2026-49272
NVD
HIGH
CVE-2026-116249
In server mode pgAdmin 4 resolves a server's password file, SSL certificate, key, CRL and SSH tunnel identity file relative to the user's storage directory, but get_complete_file_path() only stripped leading slashes before joining the two. A path such as "../<another user>/.pgpass", set through the …
CWE: CWE-22, CWE-73
NVD
HIGH
CVE-2026-59179
OpenHop is a tool for creating interactive data-flow diagrams. Prior to 0.3.7, `@openhop/server` passes unauthenticated flow route parameters from `GET /api/flows/:id` and `DELETE /api/flows/:id` in `packages/server/src/routes.ts` to `FlowStore.filePath()` in `packages/server/src/store.ts` without a…
CWE: CWE-22
NVD
HIGH
CVE-2026-62331
praktor is a multi-agent Claude Code orchestrator with Telegram input and output, Docker isolation, and a Mission Control UI. Prior to 0.9.1, both Telegram upload sites in `internal/telegram/bot.go` concatenate the attacker-controlled document filename into a destination path without sanitization, a…
CWE: CWE-22
GitHub-GHSA
HIGH
@eeacms/volto-chatbot has Unauthenticated Danswer API Confused Deputy Proxy
GHSA-w9x9-j56r-h98r
pkg: @eeacms/volto-chatbot
eco: npm
published: Oct 29, 2026
## Unauthenticated Danswer API Confused Deputy Proxy in @eeacms/volto-chatbot
### Summary
`@eeacms/volto-chatbot` exposes an Express middleware route (`**/_v1_da/**`) that accepts unauthenticated HTTP requests from any network client and proxies them to the configured upstream Danswer API, automat…
GitHub-GHSA
HIGH
mcp-sanitizer: URL sanitizer allows localhost/IPv6 loopback SSRF bypass via explicit port or bracketed IPv6
GHSA-4mfg-r38w-w8fg
pkg: mcp-sanitizer
eco: npm
published: Oct 28, 2026
## URL sanitizer allows localhost/IPv6 loopback SSRF bypass via explicit port or bracketed IPv6
### Summary
`mcp-sanitizer` v1.3.3 fails to block Server-Side Request Forgery (SSRF) targets when a `localhost` URL includes an explicit port (e.g., `http://localhost:8080/`) or when an IPv6 loopback/li…
NVD
HIGH
CVE-2026-118647
n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 saves the SeaTable Trigger node's API token in error execution data, because failed poll requests store raw request headers. Users who can view workflow executions but cannot read the credential can recover the token and access the con…
CWE: CWE-532
NVD
HIGH
CVE-2026-118643
n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 stores credential secrets in execution error data when operations fail in the Git, MongoDB Atlas Vector Store, and Google Cloud Storage nodes. Users who can view a workflow's executions but cannot read the credential can recover Git pa…
CWE: CWE-209
NVD
HIGH
CVE-2026-103898
The Wp Social Login and Register Social Counter plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 3.2.2. This is due to the social login REST callback registered at `/wp-json/wslu-social-login/type/{provider}/` with `permission_callback => __return_tru…
CWE: CWE-287
NVD
HIGH
CVE-2026-119717
pybars4 through 0.9.13 contains a code injection vulnerability in pybars/_compiler.py that allows attackers to execute Python code via unescaped bracketed path segments in Handlebars templates. Attackers can supply a template with a crafted segment in a helper or block argument to break out of the g…
CWE: CWE-94
NVD
HIGH
CVE-2026-119716
pybars3 through 0.9.7 contains a code injection vulnerability in pybars/_compiler.py that allows template authors to execute Python code via unescaped bracketed path segments. Attackers can supply Handlebars templates with crafted segments in helper or block arguments to break out of string literals…
CWE: CWE-94
GitHub-GHSA
HIGH
Keycloak vulnerable to authorization bypass via incorrect uri comparison
GHSA-f5p5-6xmx-p252
pkg: org.keycloak:keycloak-services, org.keycloak:keycloak-policy-enforcer
eco: maven
published: Oct 29, 2026
### Description
A flaw was found in Keycloak Policy Enforcer. This vulnerability allows any authenticated user to bypass all authorization policies, including role, scope, and User-Managed Access (UMA) permission checks. By including the configured access-denied page path within a request URL, eithe…
CVE-2026-9800
NVD
HIGH
CVE-2026-119129
ZITADEL 3.0.0 through 3.4.15 and 4.0.0 before 4.19.5 contains a missing authorization vulnerability in Login V2 that allows attackers to approve OAuth 2.0 device authorizations using a victim's existing session without consent. Attackers can send a signed-in user a link carrying the attacker's user …
CWE: CWE-862
NVD
HIGH
CVE-2026-96228
SSL Wireless SMS Notification for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 3.8.1. The public final_login_ajax_action handler resolves a user and issues an authenticated session by matching the wp_sslcare_otp table on only the attacker-supplied phone and …
CWE: CWE-287
GitHub-GHSA
HIGH
vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCE
GHSA-h3rc-j82p-2c3h
pkg: vllm
eco: pip
published: Oct 28, 2026
### Summary
In vLLM 0.30.0, `ImageMediaIO` passes attacker-controlled image bytes to Pillow's format autodetection without restricting the accepted formats; the request's MIME label does not constrain decoder selection. An EPS payload labeled `image/png` reached the host's Ghostscript executable. O…
CVE-2026-115915
GitHub-GHSA
HIGH
CKEditor: Cross-site scripting (XSS) in the engine package
GHSA-rh54-vffm-5fvp
pkg: ckeditor5, @ckeditor/ckeditor5-engine, ckeditor5
eco: npm
published: Oct 27, 2026
### Impact
A Cross-Site Scripting (XSS) vulnerability has been discovered in the CKEditor 5 engine. This vulnerability is caused by a prototype pollution issue in the `es-toolkit` library used in the CKEditor 5 codebase. This vulnerability could lead to unauthorized JavaScript code execution when th…
CVE-2026-116688
GitHub-GHSA
HIGH
vLLM: Request-controlled mm_processor_kwargs.code_revision allows remote code execution
GHSA-h3rc-6mm3-gc2m
pkg: vllm
eco: pip
published: Oct 27, 2026
## Summary
An untrusted multimodal request can set `mm_processor_kwargs.code_revision`. When vLLM serves a model whose Hugging Face processor uses dynamic `auto_map` code and the operator enabled `–trust-remote-code`, this request value reaches `AutoProcessor.from_pretrained` and selects the Pytho…
CVE-2026-114053
GitHub-GHSA
HIGH
LiteLLM: internal_user_viewer arbitrary local file read via `vertex_ai_credentials`
GHSA-g5ff-637f-6q2m
pkg: litellm
eco: pip
published: Oct 27, 2026
## Summary
An authenticated LiteLLM proxy user could read arbitrary local files from the proxy runtime by sending a crafted `vertex_ai_credentials` value to `/utils/transform_request`. The request-body safety blocklist rejected `vertex_credentials` but missed its alias `vertex_ai_credentials`, whic…
GitHub-GHSA
HIGH
GitPython Remote.pull() refspec bypasses the –upload-pack unsafe-option guard, enabling arbitrary command execution
GHSA-f9j4-qggq-h239
pkg: GitPython
eco: pip
published: Oct 27, 2026
## Summary
`Remote.pull()` in GitPython forwards its positional `refspec` argument directly to the `git pull` child process while its unsafe-option guard inspects only keyword arguments. An application that passes attacker-influenced data as the `refspec` (for example a user-supplied branch or refs…
GitHub-GHSA
HIGH
better-auth: Device login approval does not show the requesting client or permissions
GHSA-q84f-53jg-9ppm
pkg: better-auth
eco: npm
published: Oct 27, 2026
## Am I affected?
You may be affected if you use `better-auth` from `1.3.8-beta.3` up to, but not including, `1.7.0-rc.3`, and you enable the `deviceAuthorization()` plugin. This range includes all 1.6 releases.
You are affected only if all of these are also true:
– An attacker can start a device…
NVD
HIGH
CVE-2026-112427
An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2. A remote attacker may be able to cause arbitrary code execution.
CWE: CWE-287
NVD
HIGH
CVE-2026-119335
Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. Prior to 6.5, advanced/Scripts/utils.sh getFTLPID() attempts to validate the pihole-owned /run/pihole-FTL.pid file with expr "${FTL_PID}" : "[^[:digit:]]", but this rejects only values …
CWE: CWE-78
NVD
HIGH
CVE-2026-119578
MONAI from 1.6.0 before 1.6.1 contains a remote code execution vulnerability in Auto3DSeg algo_from_json() that allows attackers to run Python code via a crafted work directory's algo_object.json. Attackers can ship a malicious algorithm_templates module plus a _target_ name that is imported and ins…
CWE: CWE-470
NVD
HIGH
CVE-2026-103665
The installer for Yamaha LAN Monitor for Windows provided by Yamaha Corporation may insecurely load Dynamic Link Libraries (DLLs). When the installer is launched in a directory containing a specially crafted DLL file, the malicious DLL may be loaded, resulting in arbitrary code execution with admini…
CWE: CWE-427
GitHub-GHSA
HIGH
systeminformation vulnerable to Windows command injection in services() through Unicode quotation marks
GHSA-3f7j-7jwc-fxfj
pkg: systeminformation
eco: npm
published: Oct 28, 2026
### Summary
On Windows, `systeminformation@5.33.15` builds a PowerShell command using the value passed to `services()`. The default sanitizer removes ASCII quotes but keeps Unicode curly quotes, spaces, and parentheses. A crafted service name can use those characters to break out of the generated f…
CVE-2026-116576
NVD
HIGH
CVE-2026-118618
Ultralytics parse_model Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open…
CWE: CWE-94
NVD
HIGH
CVE-2026-118616
Ultralytics parse_model Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open…
CWE: CWE-94
NVD
HIGH
CVE-2026-118614
Ultralytics check_det_dataset Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page o…
CWE: CWE-94
NVD
HIGH
CVE-2026-99117
In the Linux kernel, the following vulnerability has been resolved:
net: bridge: mcast: don't truncate the port group walk on teardown
__br_multicast_disable_port_ctx() and br_multicast_del_port() walk
port->mglist with hlist_for_each_entry_safe(). However,
br_multicast_find_del_pg() can also dele…
NVD
HIGH
CVE-2026-99116
In the Linux kernel, the following vulnerability has been resolved:
net: psp: do not inherit the Rx association on clone
sk->psp_assoc sits past sk_dontcopy_end, so sock_copy() copies it into
every socket accepted from a listener without taking a reference, while
inet_sock_destruct() puts for ever…
NVD
HIGH
CVE-2026-99109
In the Linux kernel, the following vulnerability has been resolved:
smb: client: reject SetEA requests that do not fit the request buffer
CIFSSMBSetEA() copies the caller's extended attribute value into the
SMB request buffer without checking that it fits. The requirement is
stated in the source …
NVD
HIGH
CVE-2026-99107
In the Linux kernel, the following vulnerability has been resolved:
ntfs: fix incorrect MFT record pointer passed to ntfs_attr_record_resize
ntfs_new_attr_flags() passes the wrong MFT record to ntfs_attr_record_resize().
When the attribute is in an extent record, ctx->mrec points to the extent
but…
NVD
HIGH
CVE-2026-115413
Missing token audience validation in the OAuth authentication mode of AWS API MCP Server before version 1.6.0 might allow local users to run AWS operations with the server's configured AWS credentials via an access token issued to another application by the same identity provider.
To remediate th…
CWE: CWE-346
GitHub-GHSA
HIGH
Hydra legacy target blacklist permits unsafe PyYAML loading
GHSA-wf6j-7hvr-gr93
pkg: hydra-core, hydra-core
eco: pip
published: Oct 27, 2026
## Summary
Hydra's legacy target blacklist omits PyYAML's unsafe loading surfaces. If an
application passes attacker-controlled targets and arguments to instantiate(),
a target such as yaml.unsafe_load can execute Python code through a
config-controlled YAML stream containing Python object-construc…
NVD
HIGH
CVE-2026-92377
Improper access control in the Patch
Management update mechanism of TeamViewer Full Client and Host for Windows
prior to version 15.82 allows a local authenticated attacker with low
privileges to supply a signed executable through a forged IPC response and
cause it to load a malicious DLL from a use…
CWE: CWE-732
NVD
HIGH
CVE-2026-92376
Improper authentication in the
inter-process communication (IPC) mechanism of TeamViewer Remote Management
Monitoring for Windows prior to version 26.10.1 allows a local authenticated
attacker with low privileges to impersonate the IPC broker and cause the
Monitoring service to execute arbitrary cod…
CWE: CWE-287
NVD
HIGH
CVE-2026-116576
systeminformation is a System and OS information library for node.js. Prior to 5.33.16, services() in lib/processes.js inserts a caller-supplied service name into a PowerShell Get-CimInstance filter after processing it with sanitizeShellString() in lib/util.js. On Windows, the sanitizer removes ASCI…
CWE: CWE-78
NVD
HIGH
CVE-2026-107091
An issue in HUION Inspiroy Frego S (L310) Windows Driver 20.0.1.118 allows a local attacker to execute arbitrary code via the HUION driver installer DLL-loading logic
CWE: CWE-94
NVD
HIGH
CVE-2026-99099
In the Linux kernel, the following vulnerability has been resolved:
x86/CPU/AMD: Fix AMD TLBI Erratum #1718
The processor may fail to invalidate a TLB entry while executing an
INVLPGB/TLBSYNC instruction pair.
Detect the erratum and apply a software workaround when a microcode fix
is not present.
NVD
HIGH
CVE-2026-106781
An issue in WCH CH340/CH341 USB-to-Serial Windows Driver setup package CH341SER.EXE version 4.0 allows a local attacker to escalate privileges.
CWE: CWE-269
NVD
HIGH
CVE-2026-13451
A flaw was found in KServe. A namespace-scoped user with create/update permissions on InferenceService custom resources can exploit this vulnerability by providing a malicious `storageUri`. This Server-Side Request Forgery (SSRF) vulnerability allows the `storage-initializer` init container to issue…
CWE: CWE-918
NVD
HIGH
CVE-2026-120194
A flaw was found in json-glib. The JSONPath slice evaluator used by json_path_query() can enter an infinite loop when given a slice expression with a negative step. An application that evaluates attacker-controlled JSONPath expressions can be forced into a hang, leading to a denial of service.
CWE: CWE-835
GitHub-GHSA
HIGH
Kubeflow Pipelines: Pipeline archive upload allows decompression bomb to exhaust server memory
GHSA-8fmv-6rg5-5924
pkg: github.com/kubeflow/pipelines, github.com/kubeflow/pipelines
eco: go
published: Oct 30, 2026
## Summary
The Kubeflow Pipelines API server decompresses uploaded pipeline archives without adequately bounding expanded data in affected versions. A small ZIP or gzip-compressed tar archive can consume disproportionately large amounts of memory while the server locates or reads the pipeline file,…
CVE-2026-118761
GitHub-GHSA
HIGH
Kubeflow Pipelines: Run-log endpoint permits unauthorized access to pod logs
GHSA-wg5q-x4j9-qm54
pkg: github.com/kubeflow/pipelines, github.com/kubeflow/pipelines
eco: go
published: Oct 30, 2026
## Summary
The Kubeflow Pipelines API server's `GET /apis/v1alpha1/runs/{run_id}/nodes/{node_id}/log` handler retrieves logs without authorizing the caller against the selected run. A caller who can reach the backend and knows a victim run ID and a suitable pod or node identifier can read live or a…
CVE-2026-118759
GitHub-GHSA
HIGH
joi: quadratic-time split in `string().email({ multiple: true })` allows denial of service
GHSA-4528-x5fx-h6hg
pkg: joi, @hapi/joi, joi
eco: npm
published: Oct 30, 2026
### Summary
`Joi.string().email({ multiple: true })` takes quadratic time to split a value that contains a long run of whitespace. One request with 100 KB of spaces blocks the Node.js event loop for several seconds, which causes a denial of service.
### Details
When the `multiple` option is set, …
CVE-2026-118772
GitHub-GHSA
HIGH
@hapi/content: quadratic-time parsing of Content-Disposition parameters allows denial of service
GHSA-8494-f6mr-cjpv
pkg: @hapi/content, content
eco: npm
published: Oct 30, 2026
### Summary
`Content.disposition()` takes quadratic time when a `Content-Disposition` parameter contains a long token without `=`. One unauthenticated multipart request can block the Node.js event loop for several minutes.
### Details
`Content.disposition()` reads the parameters with a global reg…
CVE-2026-119202
GitHub-GHSA
HIGH
pyasn1 has quadratic CPU consumption in constructed BIT STRING decoding
GHSA-2qm8-x737-gmw5
pkg: pyasn1
eco: pip
published: Oct 30, 2026
## Summary
In pyasn1 through 0.6.4, decoding a constructed BIT STRING with many fragments repeatedly shifts and copies the entire value accumulated so far. For fixed-size fragments, CPU time grows quadratically with the encoded input size. An application that passes sufficiently large, attacker-con…
CVE-2026-119196
GitHub-GHSA
HIGH
pyasn1 has quadratic-complexity denial of service in binary REAL decoding
GHSA-mm57-4v3p-rchx
pkg: pyasn1
eco: pip
published: Oct 30, 2026
## Summary
In pyasn1 0.6.4 and earlier, decoding a binary-encoded ASN.1 REAL with a large mantissa can consume CPU time quadratic in the mantissa length. The BER, CER, and DER decoders all use the affected `RealPayloadDecoder`. An application is exposed when it passes attacker-controlled ASN.1 cont…
CVE-2026-119197
GitHub-GHSA
HIGH
pyasn1 has quadratic-time denial of service in constructed string and indefinite-length ANY decoding
GHSA-9m75-vc3g-4×39
pkg: pyasn1
eco: pip
published: Oct 30, 2026
## Summary
In pyasn1 0.6.4 and earlier, decoding a constructed OCTET STRING or character string made of many fragments can spend disproportionate CPU time repeatedly copying the accumulated value. A separate indefinite-length `ANY` path has the same problem while collecting the encoded components. …
CVE-2026-119195
GitHub-GHSA
HIGH
pyasn1 has quadratic CPU use in schemaless BER/CER/DER container decoding
GHSA-fm9c-5rcf-2q5p
pkg: pyasn1
eco: pip
published: Oct 30, 2026
### Summary
When an application decodes attacker-controlled BER, CER, or DER data without an ASN.1 schema, a container with many distinct long tag IDs can cause quadratic CPU use. Repeated inputs can exhaust CPU and reduce service availability.
### Details
ConstructedPayloadDecoderBase._decodeCom…
CVE-2026-119194
GitHub-GHSA
HIGH
Forge: Regular expression denial of service in PEM decoding (pem.decode)
GHSA-7wch-p9px-956x
pkg: node-forge
eco: npm
published: Oct 30, 2026
### Summary
`pem.decode()`, which every node-forge API that parses PEM input uses, split messages with a regular expression that takes polynomial time on input without a matching END line, and parsed encapsulated headers with regular expressions that take quadratic time on long header lines. A remot…
CVE-2026-118779
GitHub-GHSA
HIGH
Forge: PKCS#12 MAC forgery and constant-key PBE via zero iteration count
GHSA-jc66-7q78-782g
pkg: node-forge
eco: npm
published: Oct 30, 2026
### Summary
forge.pkcs12.pkcs12FromAsn1() accepts a PKCS#12 MAC iteration count of zero (or less) from the input, and the PKCS#12 key derivation function then returns a constant key that does not depend on the password or salt. An attacker who does not know the password can modify a PKCS#12/PFX fil…
CVE-2026-118782
GitHub-GHSA
HIGH
Forge: Denial of service in TLS record processing via a record interleaved with a fragmented handshake message
GHSA-8hrf-8g6f-7xwp
pkg: node-forge
eco: npm
published: Oct 30, 2026
### Summary
A connection created with `forge.tls.createConnection()` throws an uncaught `TypeError` from `process()` when it receives a record of another content type while waiting for the rest of a handshake message that was split across records. A peer can trigger this with 18 bytes before the ha…
CVE-2026-119188
GitHub-GHSA
HIGH
Forge: Denial of service in TLS record processing via call stack exhaustion
GHSA-hqq3-7jhf-c5jx
pkg: node-forge
eco: npm
published: Oct 30, 2026
### Summary
Connections created with `forge.tls.createConnection()` processed received TLS records recursively, one stack level per record. A peer can send one chunk of thousands of small records, such as heartbeat records, which are accepted before the handshake, and `process()` throws `RangeError…
CVE-2026-119187
GitHub-GHSA
HIGH
GraphQL-core has denial of service via memory leak in aborted validations
GHSA-mpqx-q82w-9×46
pkg: graphql-core
eco: pip
published: Oct 30, 2026
### Summary
When a validation was aborted because the document contained more errors than allowed by `max_errors` (100 by default), `validate()` raised a single module-level `ValidationAbortedError` instance. Python appends the frames of every `raise` to the existing `__traceback__` of an exception…
CVE-2026-119286
GitHub-GHSA
HIGH
imgproxy has out-of-bounds heap read/write in ICO loader BMP header reconstruction that allows unauthenticated remote worker crash
GHSA-494m-4556-wf5p
pkg: github.com/imgproxy/imgproxy/v3
eco: go
published: Oct 30, 2026
### Summary
Out-of-bounds heap write in imgproxy's ICO loader (`vips/icoload.c`): when the ICO entry's image data buffer is small, the loader's BMP-header-reconstruction writes land past the allocation, corrupting the size field of the following heap chunk. The worker then aborts deterministically …
GitHub-GHSA
HIGH
imgproxy has unbounded memory allocation in ICO loader that allows unauthenticated memory-exhaustion DoS via crafted data_size field
GHSA-mmq5-xm89-9pfg
pkg: github.com/imgproxy/imgproxy/v3
eco: go
published: Oct 30, 2026
### Summary
Unbounded and unvalidated memory allocation in imgproxy's ICO loader (`vips/icoload.c`). An attacker-controlled `data_size` field (u32) from the ICO directory entry is passed directly to `VIPS_MALLOC` without any bounds check, so a single crafted 23-byte ICO file makes an imgproxy worke…
NVD
HIGH
CVE-2026-62864
Ring is a Clojure web applications library inspired by Python's WSGI and Ruby's Rack. Prior to 1.15.5, `wrap-nested-params` in the `ring.middleware.nested-params` namespace uses a backtracking regular expression to match parameter names from URL query strings and HTTP request bodies. An attacker can…
CWE: CWE-1333
NVD
HIGH
CVE-2026-119760
sniproxy through 0.7.0 contains a NULL pointer dereference vulnerability in resolv_cancel() that allows remote unauthenticated attackers to crash the daemon by sending overlong hostnames. Attackers can send a 254 or 255 character TLS SNI name or HTTP Host header matching a wildcard backend, then clo…
CWE: CWE-476
GitHub-GHSA
HIGH
joserfc: Unbounded JWE General JSON `recipients` Array Leads to CPU Exhaustion (DoS) via Repeated RSA Private-Key Decryption
GHSA-jpxq-7h8p-2q76
pkg: joserfc
eco: pip
published: Oct 30, 2026
### Summary
`joserfc.jwe.decrypt_json()`, the library's public parser for JWE General JSON Serialization, accepts an attacker-controlled `recipients` array of unbounded length and performs one full private-key decryption operation (`decrypt_cek`) for **every** recipient present in the input, with n…
CVE-2026-119283
NVD
HIGH
CVE-2026-110732
The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.8.6 This is due to the MCP module's OAuth 2.1 Dynamic Client Registration endpoint (/wp-json/mcp/v1/oauth/register) being registered wit…
CWE: CWE-862
NVD
HIGH
CVE-2026-119286
GraphQL-core is a Python port of the GraphQL.js reference implementation. From 3.3.0a3 until 3.3.1, validate() reuses a module-level ValidationAbortedError when a document exceeds max_errors. Python appends frames to the reused exception's traceback on every raise, retaining each document, validatio…
CWE: CWE-400, CWE-401
NVD
HIGH
CVE-2026-119283
joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE) standards. Prior to 1.7.5, joserfc.jwe.decrypt_json() accepts a JWE General JSON Serialization recipients array without a count limit and calls decrypt_cek() for every entry. An unauthent…
CWE: CWE-400
NVD
HIGH
CVE-2026-119202
@hapi/content provides HTTP Content-* header parsing. From 3.0.6 until 6.0.3, Content.disposition() uses an unanchored parameter-name expression in a global regular-expression scan, causing repeated failed matching over the remaining input when a Content-Disposition parameter contains a long token w…
CWE: CWE-1333
NVD
HIGH
CVE-2026-119197
pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5, binary REAL decoding builds a large mantissa one octet at a time by shifting a growing integer and slicing the remaining byte string. Attacker-controlled ASN.1 includes a binary-encoded REAL with a large mantissa and reaches BER, CER, or …
CWE: CWE-407
NVD
HIGH
CVE-2026-119196
pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5, constructed BIT STRING decoding repeatedly shifts and copies the complete bit value accumulated from earlier fragments. Attacker-controlled BER or CER input contains many constructed BIT STRING fragments; schema-driven DER also accepts a …
CWE: CWE-407
NVD
HIGH
CVE-2026-119195
pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5, constructed string and indefinite-length ANY decoding repeatedly concatenates each fragment onto a growing bytes value. Attacker-controlled BER or CER data can use many constructed OCTET STRING or character-string fragments. DER rejects c…
CWE: CWE-407
NVD
HIGH
CVE-2026-119194
pyasn1 is a generic ASN.1 library for Python. From 0.3.3 until 0.6.5, schemaless container decoding stores every decoded component's TagSet in a growing set even though only one-versus-multiple tag types must be distinguished. Attacker-controlled BER, CER, or DER input contains many distinct long ta…
CWE: CWE-407
NVD
HIGH
CVE-2026-119188
Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used forge.tls.createConnection(), fragmented handshake message, interleaved record to process the relevant input or security decision. node-forge continue…
CWE: CWE-248, CWE-476
NVD
HIGH
CVE-2026-119187
Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used forge.tls.createConnection(), TLS record processing, process() to process the relevant input or security decision. node-forge processed received TLS r…
CWE: CWE-674
NVD
HIGH
CVE-2026-118779
Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used pem.decode(), lib/pem.js, missing END line to process the relevant input or security decision. node-forge used polynomial-time regular expressions in …
CWE: CWE-400, CWE-1333
NVD
HIGH
CVE-2026-118772
joi is a schema description language and data validator for JavaScript. From 17.1.1 until 17.13.9 and 18.3.1, the Joi.string().email({ multiple: true }) rule uses a separator regular expression whose leading whitespace quantifier is retried at every position in a long whitespace run that contains no…
CWE: CWE-1333
NVD
HIGH
CVE-2026-118759
Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the API server's GET /apis/v1alpha1/runs/{run_id}/nodes/{node_id}/log handler retrieved logs without authorizing the caller against the selected run. A caller who can reach the backen…
CWE: CWE-200, CWE-862
GitHub-GHSA
HIGH
Twisted: Unauthenticated Remote Denial of Service in the Twisted HTTP/2 Server via Rapid Stream Reset
GHSA-vpp8-g58w-m8mp
pkg: Twisted
eco: pip
published: Oct 29, 2026
## Summary
An uncontrolled-resource-consumption vulnerability (CWE-400) in the Twisted HTTP/2 server lets any unauthenticated remote client exhaust server CPU over a single connection. A client that sends a request header block with `END_STREAM` and then immediately resets the stream makes the serv…
GitHub-GHSA
HIGH
zip: legacy Shrink/Reduce/Implode decoder: denial of service from attacker-controlled ZIP64 uncompressed size
GHSA-9hj8-73fh-9963
pkg: zip
eco: rust
published: Oct 29, 2026
### Summary
A malicious 149-byte ZIP archive can cause a denial of service in applications that enable `legacy-zip` and use `ZipArchive::extract()`. An attacker-controlled ZIP64 uncompressed size triggers a `capacity overflow` panic in the Shrink decoder in optimized builds, potentially terminating…
CVE-2026-115907
GitHub-GHSA
HIGH
zip: Unbounded Symlink-Target Handling Can Abort Or Exhaust Memory During Extraction
GHSA-q7v9-x93c-xqv3
pkg: zip
eco: rust
published: Oct 29, 2026
### Summary
The symbolic-link branch of `ZipArchive::extract_internal()` allocates a buffer using an attacker-declared size before reading any entry data. A 112-byte archive terminates the extracting process with `SIGABRT` through this infallible allocation.
### Details
“`rust
#[cfg(any(unix, wi…
CVE-2026-115909
GitHub-GHSA
HIGH
@sylphx/pdf-reader-mcp: HTTP transport accepts unauthenticated requests despite a configured MCP_API_KEY
GHSA-q344-5v34-gm84
pkg: @sylphx/pdf-reader-mcp
eco: npm
published: Oct 29, 2026
### Impact
When `@sylphx/pdf-reader-mcp` is run as an HTTP server (`MCP_TRANSPORT=http`), it reads the `MCP_API_KEY` environment variable and logs `API key authentication enabled (X-API-Key header)` at startup, but it never validated the `X-API-Key` header on incoming requests. The key was read int…
CVE-2026-62264
NVD
HIGH
CVE-2026-119120
Crawl4AI from 0.9.0 before 0.9.5 fails to filter the CosineStrategy model_name field in untrusted Docker API request bodies, allowing authenticated clients to choose which HuggingFace model the server loads. Attackers can reference a malicious repository with a pickle weight file to execute Python c…
CWE: CWE-502
NVD
HIGH
CVE-2026-119119
Crawl4AI before 0.9.5 contains a denial of service vulnerability in the Docker API server where _clamp_untrusted() fails to cap the delay_before_return_html, mean_delay, and max_range fields of untrusted CrawlerRunConfig bodies. Unauthenticated attackers can send huge values to /crawl or /crawl/stre…
CWE: CWE-770
NVD
HIGH
CVE-2019-25781
Python-Markdown 3.0 through 3.11.2 contains an algorithmic complexity vulnerability in inline link parsing that allows remote attackers to exhaust CPU through unmatched brackets. Attackers can submit short Markdown containing repeated [ or 
GHSA-97r2-qh9m-474h
pkg: seroval
eco: npm
published: Oct 28, 2026
### Summary
`fromJSON` and `fromCrossJSON` used two node fields without checking them.
– An array node's element list was not checked to be an array. A small payload could set the length the decoder looped over. This part is also tracked in GHSA-wp97-x4hv-qvhp.
– A sequence node's done index was n…
CVE-2026-116581
GitHub-GHSA
HIGH
Seroval `fromJSON`/`fromCrossJSON` denial of service via unvalidated array node length
GHSA-wp97-x4hv-qvhp
pkg: seroval
eco: npm
published: Oct 28, 2026
### Summary
`fromJSON` and `fromCrossJSON` did not check that an array node's element list is an array. A small crafted payload could set the length the decoder used. That length controlled how much memory was allocated and how many times the decoder looped, and it did not depend on the size of the…
CVE-2026-116584
GitHub-GHSA
HIGH
vLLM: Public multimodal SHM handle forgery reaches worker-side `pickle.loads()` with insecure serialization disabled
GHSA-6757-hggm-hp2w
pkg: vllm
eco: pip
published: Oct 28, 2026
## Affected
– **Ecosystem / package:** pip / `vllm`
– **Affected versions:** vLLM < 0.32.0.
## Summary
When `–mm-processor-cache-type shm` is enabled, vLLM's multimodal SHM cache represents a cached item with an `address` and `monotonic_id` pair and treats that pair as authority to dereference s…
CVE-2026-115912
GitHub-GHSA
HIGH
graphql-scalars PhoneNumber scalar is vulnerable to regular expression denial of service
GHSA-x8rm-f576-gq67
pkg: graphql-scalars
eco: npm
published: Oct 28, 2026
## Summary
The regular expression behind `GraphQLPhoneNumber` since 1.24.1 backtracks exponentially. A string made of a run of digits followed by one character that makes the match fail (for example `"1".repeat(30) + "x"`) blocks the JavaScript thread for seconds, and every additional digit doubles…
CVE-2026-115887
GitHub-GHSA
HIGH
RE2JS: Quadratic-time denial of service in re2js lookbehind matching
GHSA-gg6h-894w-4m9c
pkg: re2js
eco: npm
published: Oct 28, 2026
### Summary
Using the opt-in `LOOKBEHINDS` flag together with any repeated-matching API
(`matcher().find()` in a loop, `matchAll()`, `split()`, `matcher().replaceAll()`)
causes quadratic-time (Θ(n²)) matching, contradicting the library's own
"linear time matching" guarantee. A single call with a …
CVE-2026-116795
GitHub-GHSA
HIGH
Echo's middleware.Static: `%2F`-encoded path bypasses route/group middleware guarding a statically-served path
GHSA-375p-5qhx-8wq4
pkg: github.com/labstack/echo/v5, github.com/labstack/echo/v4
eco: go
published: Oct 28, 2026
## Summary
When `middleware.Static` is mounted globally (`e.Use(middleware.Static(…))`) and an application relies on a **route- or group-level middleware guard** to restrict a path that also falls under the served static root, a `%2F`-encoded request bypasses that guard while the file is still se…
CVE-2026-118650
GitHub-GHSA
HIGH
mcp-sanitizer: File Path Sanitizer Permits Arbitrary User-Home Absolute Paths
GHSA-7w82-6f9j-v9jp
pkg: mcp-sanitizer
eco: npm
published: Oct 28, 2026
## File Path Sanitizer Permits Arbitrary User-Home Absolute Paths
### Summary
`mcp-sanitizer` v1.3.3 explicitly whitelists `/home/` and `/Users/` as allowed absolute path prefixes in its file path validation logic (`src/utils/validation-utils.js:188-196`). As a result, paths such as `/home/alice/.…
NVD
HIGH
CVE-2026-118686
EspoCRM before 9.3.11 and 10.x before 10.0.8 contains a denial of service vulnerability in which the password-redaction regular expression applied during API error handling consumes excessive CPU on long request bodies. Unauthenticated remote attackers can concurrently send a small number of large A…
CWE: CWE-1333
NVD
HIGH
CVE-2026-118679
n8n before 1.123.83, 2.41.4, and 2.42.1 contains a server-side request forgery vulnerability in the Slack Trigger webhook that allows unauthenticated attackers to exfiltrate Slack tokens by bypassing signature verification when no signing secret is set. Attackers who know the webhook URL can name a …
CWE: CWE-918
NVD
HIGH
CVE-2026-118641
n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 contains an OData $filter injection vulnerability in the Microsoft Outlook contact lookup and Microsoft SharePoint v1 item update nodes, which build $filter string literals from expression-bindable parameters without escaping. Attacker…
CWE: CWE-943
NVD
HIGH
CVE-2026-116795
RE2JS is the JavaScript port of RE2, a regular expression engine that provides linear time matching. From 2.2.0 until 2.8.7, enabling LOOKBEHINDS and using repeated matching through matcher().find(), matchAll(), split(), or matcher().replaceAll() can cause quadratic total work. Machine.match restart…
CWE: CWE-407, CWE-1333
NVD
HIGH
CVE-2026-103410
An Integer Overflow vulnerability in the DPI certificate scanner in Juniper Networks Session Smart Router allows an unauthenticated remote attacker to cause a denial of service via a specially crafted TLS server certificate.
CWE: CWE-190, CWE-835
NVD
HIGH
CVE-2026-118037
In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recursion, infinite loop, unchecked loop condition and inefficient regular expression vulnerabilities in RadSpreadProcessing and RadSpreadStreamProcessing allow an unauthenticated attacker to terminate o…
CWE: CWE-606, CWE-674, CWE-835, CWE-1333
NVD
HIGH
CVE-2026-116393
Missing Authorization vulnerability in iHomefinder, Inc. Optima Express optima-express allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Optima Express: from n/a through 9.0.0.
CWE: CWE-862
NVD
HIGH
CVE-2026-104895
The asynchronous Smile parser (NonBlockingByteArrayParser) uses a raw-binary length prefix taken from untrusted input to allocate a byte[] before the body is read, with no upper bound and no overflow check. On the raw-binary marker 0xFD, _decodeVInt() computes (value << 6) + (i & 0x3F) without the (…
CWE: CWE-789
GitHub-GHSA
HIGH
MLflow vulnerable to arbitrary file read on unauthenticated servers via prompt model version source
GHSA-m65p-9j7q-6w33
pkg: mlflow
eco: pip
published: Oct 27, 2026
### Summary
On MLflow tracking servers running without authentication, which is the default for mlflow server, a remote attacker can read arbitrary files from the server’s filesystem by creating a model version tagged as a prompt whose source is a schemeless local path.
The fix for CVE-2026-2614 …
CVE-2026-116690
NVD
HIGH
CVE-2026-112350
Sunhillo SureLine before 9.1.5 contains a path traversal vulnerability in the radarUpdater.cgi endpoint that allows unauthenticated remote attackers to read arbitrary files with root privileges due to missing authentication checks and insufficient sanitization of the filename parameter. Attackers ca…
CWE: CWE-22
GitHub-GHSA
HIGH
undici vulnerable to Denial of Service via TLS 1.2 certificate-changing renegotiation
GHSA-qrxm-fqhp-jwvm
pkg: undici, undici, undici
eco: npm
published: Oct 27, 2026
## Impact
undici crashes the client process when a TLS 1.2 server renegotiates after the connection is established and presents a different, CA-trusted certificate whose hostname does not match the requested host. Node.js re-runs hostname verification on the renegotiated handshake and destroys the …
CVE-2026-87018
GitHub-GHSA
HIGH
MCP TypeScript SDK: HTTP server transports and handlers did not limit request body size or JSON-RPC batch length
GHSA-f897-62hf-6gxq
pkg: @modelcontextprotocol/sdk, @modelcontextprotocol/server, @modelcontextprotocol/node
eco: npm
published: Oct 27, 2026
### Summary
In affected versions, MCP servers reachable over HTTP put no limit on the size of a POST body or on the number of messages in a JSON-RPC batch. Large requests could exhaust the server's memory, and one long batch could block it from serving anyone else. No credentials were needed, unless…
GitHub-GHSA
HIGH
Go JOSE: DoS when parsing JWKs that contain RSA keys
GHSA-mgcc-cww5-fp2q
pkg: github.com/go-jose/go-jose/v4, github.com/go-jose/go-jose/v3
eco: go
published: Oct 27, 2026
### Summary
A crafted RSA key inside a JWK can cause operations that parse JWKs to consume excess CPU.
### Details
go-jose does not check for bounds on RSA modulus and primes before validating them. Values are passed directly to `crypto/rsa.PrivateKey.Validate()`. On Go 1.24+, this takes cubic ti…
CVE-2026-116587
GitHub-GHSA
HIGH
undici WebSocket client vulnerable to Denial of Service via failed HTTP/2 handshake
GHSA-qq8j-7v2v-3rwp
pkg: undici
eco: npm
published: Oct 27, 2026
### Impact
undici's experimental WebSocket client (enabled by default via `allowH2: true`) crashes the Node.js process when it connects to a malicious server over HTTP/2. If the server answers the WebSocket upgrade with a response that fails handshake validation, undici aborts the request, but the …
CVE-2026-109855
GitHub-GHSA
HIGH
dnspython dns.name.from_wire_parser() excessive CPU use
GHSA-45c3-73f7-pv4m
pkg: dnspython
eco: pip
published: Oct 27, 2026
### Impact
A maliciously crafted DNS message may cause dns.name.from_wire_parser() to use excessive CPU for DNS name decompression. Applications that process untrusted DNS wire form messages with dnspython may be degraded or DoS'd by the extra CPU use required.
### Patches
This problem is fixed in…
CVE-2026-114605
GitHub-GHSA
HIGH
snappy-java: Heap buffer overflow in Snappy.uncompress*Array typed-array methods
GHSA-gwq9-9ffj-mvrv
pkg: org.xerial.snappy:snappy-java
eco: maven
published: Oct 27, 2026
### Impact
`Snappy.uncompressCharArray`, `uncompressShortArray`, `uncompressIntArray`, `uncompressLongArray`, `uncompressFloatArray` and `uncompressDoubleArray` sized the result array by dividing the declared uncompressed byte length by the element size, but native code wrote the full byte length. I…
CVE-2026-93451
GitHub-GHSA
HIGH
snappy-java: Unbounded memory allocation from attacker-declared uncompressed lengtha
GHSA-q233-g92q-qxp6
pkg: org.xerial.snappy:snappy-java
eco: maven
published: Oct 27, 2026
### Impact
Several decompression paths in snappy-java allocate an output buffer sized by the uncompressed length declared in the first bytes of the compressed data, before decompressing or validating it. A few bytes of crafted input can therefore force an allocation of up to 2 GB, causing `OutOfMemo…
CVE-2026-108106
GitHub-GHSA
HIGH
GitPython command wrappers omit unsafe protocol and option checks
GHSA-w8jc-g24h-crhw
pkg: GitPython
eco: pip
published: Oct 27, 2026
### Summary
GitPython has spent 2022-2026 rolling out two reusable guards method-by-method: `Git.check_unsafe_protocols(url)` (raises `UnsafeProtocolError` for `<transport>::` remote-helper URLs – CVE-2022-24439) and `Git.check_unsafe_options(…)` (raises `UnsafeOptionError` for denylisted option …
GitHub-GHSA
HIGH
MessagePack: Unbounded memory leak in msgpack C extension on strict_map_key validation failure
GHSA-j586-36cw-2gc2
pkg: msgpack
eco: pip
published: Oct 27, 2026
### Impact
The msgpack-python C extension (`msgpack._cmsgpack`) leaks a decoded map value when deserialization rejects a key with `strict_map_key=True` (the default). Repeated malformed inputs can cause unbounded process memory growth and denial of service in applications that deserialize attacker-…
CVE-2026-114613
NVD
HIGH
CVE-2026-117553
Umbraco CMS before 17.7.2 and 18.2.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to register attacker-controlled OAuth redirect URIs by poisoning the Host header. Attackers send signed-in users authorization links using response_mode=form_post to capture cod…
CWE: CWE-601
NVD
HIGH
CVE-2026-116872
Semantic MediaWiki from 3.0.0 before 7.3.1 contains an algorithmic complexity vulnerability in TermParser::normalize_compact_form() that allows unauthenticated attackers to cause quadratic CPU consumption. Attackers can submit long search terms with many distinct in:(…) or has:(…) expressions to…
CWE: CWE-407
NVD
HIGH
CVE-2026-116584
Seroval facilitates JavaScript value stringification, including complex structures beyond JSON.stringify capabilities. From 1.4.1 until 1.6.8, fromJSON and fromCrossJSON do not require an array node's element list to be an actual array. A small crafted payload can supply an attacker-controlled lengt…
CWE: CWE-770
NVD
HIGH
CVE-2026-116581
Seroval facilitates JavaScript value stringification, including complex structures beyond JSON.stringify capabilities. Prior to 1.6.8, fromJSON and fromCrossJSON do not validate a sequence node's done index. A crafted done index can create an iterator that never finishes when application code consum…
CWE: CWE-835, CWE-1284
NVD
HIGH
CVE-2026-116638
The Windows Recovery Environment (WinRE) in Windows 10 and 11 may allow an attacker to bypass firmware security controls, including administrator-configured UEFI/BIOS passwords. An attacker with physical or administrative access to a device may be able to leverage WinRE-related boot mechanisms to ci…
CWE: CWE-288
NVD
HIGH
CVE-2026-115912
vLLM is an inference and serving engine for large language models. Prior to 0.32.0, an authenticated caller can place forged shared-memory address and monotonic_id values in public multimodal features.kwargs_data. In scale-out deployments with shared-memory multimodal caching enabled, workers trust …
CWE: CWE-502
NVD
HIGH
CVE-2026-99094
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: btintel_pcie: fix TX descriptor bounds check
btintel_pcie_prepare_tx() uses tfd_index to access the TFD and data
buffer arrays before the index is advanced modulo txq->count. An index
equal to txq->count is one past the…
NVD
HIGH
CVE-2026-90885
Improper Restriction of XML External Entity Reference vulnerability in Apache Camel Saxon component.
This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.2.
XQueryBuilder in camel-saxon, which evaluates expressions for the xquery language and the xquery component,…
CWE: CWE-611
GitHub-GHSA
HIGH
Forge: X.509 basicConstraints bypass in verifyCertificateChain() via deprecated extension OIDs 2.5.29.10 and 2.5.29.13
GHSA-5×38-2vff-x55p
pkg: node-forge
eco: npm
published: Oct 30, 2026
### Summary
node-forge parses certificate extensions with the deprecated OIDs `2.5.29.10` and `2.5.29.13` as `basicConstraints`, and `forge.pki.verifyCertificateChain()` used the first extension with that name. A certificate with a forged deprecated-OID extension (`cA` TRUE) before its genuine `basi…
CVE-2026-119190
GitHub-GHSA
HIGH
@sigstore/oci sends the registry Authorization header to a cross-host blob-upload Location
GHSA-j63v-mwhm-56jx
pkg: @sigstore/oci
eco: npm
published: Oct 30, 2026
### Summary
@sigstore/oci sends the registry Authorization header to a cross-host blob-upload Location
## Affected versions and vulnerable location
– Confirmed on sigstore-js at `3a83271` (current HEAD).
– File: `packages/oci/src/registry.ts`.
– `signIn()` installs the credential as a DEFAULT h…
CVE-2026-118763
NVD
HIGH
CVE-2026-119568
vsftpd through 3.0.5 contains an authentication bypass vulnerability in ssl_data_accept() that allows unauthenticated attackers to hijack FTPS data connections by resuming their own TLS session ticket. Attackers sharing the victim's source IP can obtain a ticket via AUTH TLS, then connect to the vic…
CWE: CWE-940
NVD
HIGH
CVE-2026-118763
sigstore-js provides JavaScript libraries for interacting with Sigstore services. Prior to 0.7.2, packages/oci/src/registry.ts contains a RegistryClient.signIn() method that stores registry Authorization and Docker configuration headers as defaults on a shared HTTP client, while RegistryClient.uploa…
CWE: CWE-522
GitHub-GHSA
HIGH
zip: Arbitrary file write outside the extraction directory, because ZipArchive::extract validates symlink targets lexically.
GHSA-hjqx-j4rw-g7xv
pkg: zip
eco: rust
published: Oct 29, 2026
### Summary
– **Verified version:** zip `9.0.0-pre3`
– **Affected versions:** `7.2.0` and later
– **Precondition:** The attacker knows (or can guess) the absolute path of the extraction destination
The validation applied to symlinks is purely lexical.
As a result, an attacker can write arbitrary f…
CVE-2026-115908
NVD
HIGH
CVE-2026-6647
In deployments of WSO2 Identity Server configured with a case-insensitive user store and a case-sensitive database for identity data, mismatches in username case handling can occur. This inconsistency results in OAuth token revocation operations failing to correctly identify usernames containing mix…
CWE: CWE-613
NVD
HIGH
CVE-2026-87103
Sensitive information disclosure and manipulation due to improper token validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.
CWE: CWE-347
NVD
HIGH
CVE-2026-87102
Sensitive information disclosure and manipulation due to improper token validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.
CWE: CWE-347
GitHub-GHSA
HIGH
undici vulnerable to cache poisoning and cross-user disclosure via cross-origin redirects
GHSA-4w7w-5xrc-9h26
pkg: undici, undici
eco: npm
published: Oct 27, 2026
### Impact
When an originless `Agent` composes the redirect and cache interceptors as `compose(redirect(), cache())` with a shared cache (`type: 'shared'`), the cache builds its key from the original request URL before the redirect handler changes the origin. The response produced after a redirect …
CVE-2026-109829
GitHub-GHSA
HIGH
undici vulnerable to TLS certificate validation bypass via dropped tls options in Agent
GHSA-2m5v-pch6-74hx
pkg: undici, undici, undici
eco: npm
published: Oct 27, 2026
### Impact
undici's `Agent` passes its constructor options through a JSON-based deep clone (`JSON.parse(JSON.stringify(…))`) before forwarding them to each per-origin `Pool`. JSON cannot represent functions, so a caller-supplied `tls` option containing a `checkServerIdentity` callback is silently…
CVE-2026-109383
GitHub-GHSA
HIGH
Authlib accepts an empty HMAC key, allowing JWS/JWT signature forgery (HS256/HS384/HS512)
GHSA-8m4g-j4wp-wgcg
pkg: Authlib
eco: pip
published: Oct 27, 2026
Reporter: Cavan Loughran, Celvex Group Inc.
Summary
Authlib's symmetric (oct) key handling accepts an empty key (empty bytes b'' / empty string '') as a valid HMAC signing and verification key. An empty HMAC key produces a deterministic digest that any party can reproduce, so an attacker who knows…
CVE-2026-114616
GitHub-GHSA
HIGH
Authlib incomplete algorithm-confusion fix permits HMAC forgery with prefixed public keys
GHSA-7vr2-2fgp-9w7p
pkg: authlib
eco: pip
published: Oct 27, 2026
## Summary
`OctKey.import_key()` carries the only guard that stops an asymmetric public key from being used as an
HMAC secret in `authlib.jose`. That guard is `raw_key.startswith(POSSIBLE_UNSAFE_KEYS)` — anchored at
byte 0 — while the loader that consumes the identical bytes on the asymmetric p…
CVE-2026-114615
GitHub-GHSA
HIGH
better-auth: OAuth Proxy lets an attacker sign in as another user
GHSA-r4xp-prcw-77qf
pkg: better-auth
eco: npm
published: Oct 27, 2026
## Am I affected?
You may be affected if you use `better-auth` from 1.5.0-beta.12 through versions before 1.7.7 with the OAuth Proxy plugin. You are affected only if **all** of these are also true:
– On a participating environment, the OAuth Proxy plugin has no dedicated `secret`, or its `secret` …
NVD
HIGH
CVE-2026-115908
zip is a zip library for Rust that supports reading and writing simple ZIP files. From 7.2.0 until 9.0.0, ZipArchive::extract and ZipArchive::extract_unwrapped_root_dir use safe_prepare_path in src/read/zipfile.rs and simplified_components in src/path.rs to validate symbolic link targets with a lexi…
CWE: CWE-22, CWE-59, CWE-61
GitHub-GHSA
HIGH
cert-manager: Direct ACME Challenge resources can bypass Issuer DNS01 solver policy and use ClusterIssuer DNS credentials
GHSA-8rvj-mm4h-c258
pkg: github.com/cert-manager/cert-manager, github.com/cert-manager/cert-manager
eco: go
published: Oct 29, 2026
## Summary
`Challenge` resources under `acme.cert-manager.io` can be created directly by namespace users. On create, cert-manager performs no admission validation tying the Challenge to an `Order`, an owner reference, or an Issuer-selected solver. The ACME Challenge controller then reconciles the d…
CVE-2026-62290
GitHub-GHSA
HIGH
Keycloak vulnerable to cross-site scripting (xss) via case-insensitive uri validation bypass
GHSA-v3f7-2p4r-mwfw
pkg: org.keycloak:keycloak-services
eco: maven
published: Oct 29, 2026
### Description
A flaw was found in Keycloak. A remote attacker with administrative privileges, specifically those with `manage-client` permission or access to client registration endpoints, could bypass client Uniform Resource Identifier (URI) validation. This is achieved by registering a malicious…
CVE-2026-9086
GitHub-GHSA
HIGH
PraisonAI vulnerable to Remote Code Execution via Broken AST Sandbox
GHSA-26mh-57q7-jfvr
pkg: praisonai
eco: pip
published: Oct 29, 2026
### Summary
JobWorkflowExecutor._exec_inline_python() is designed to safely execute inline Python expressions from YAML workflow script: steps using AST validation. The function claims to block dangerous operations by (a) checking all AST nodes against an allowlist, and (b) providing a __builtins__ …
CVE-2026-61438
GitHub-GHSA
HIGH
Seroval: Deserialization invokes attacker-chosen callables: AsyncIteratorFactoryInstance calls source.on(listener) without type check
GHSA-7rv5-mrxv-xcr9
pkg: seroval
eco: npm
published: Oct 28, 2026
### Summary
When `fromJSON` rebuilt an async iterator, it called `on()` on the iterator's source without checking that the source was a seroval stream. A crafted payload could pick another value as the source, such as a function returned by an application plugin. The deserializer then called that v…
CVE-2026-116580
NVD
HIGH
CVE-2026-99122
In the Linux kernel, the following vulnerability has been resolved:
vsock/vmci: validate packet source for connected sockets
vmci_transport_recv_stream_cb() looks up sockets first by the full source
and destination tuple, then by destination only in the bound table. The
fallback can select a non-l…
NVD
HIGH
CVE-2026-6064
Link following vulnerability in Data Shredder components in Norton Antivirus, Avast Antivirus, and AVG Internet Security prior to 26.5.10933 on Windows allows a local, low-privileged attacker to escalate privileges to SYSTEM. During a privileged shred operation, enabling arbitrary file/folder deleti…
CWE: CWE-59
NVD
HIGH
CVE-2026-117511
A vulnerability has been found in desmondmorris node-tesseract up to 0.2.7. Affected by this issue is the function process of the file lib/tesseract.js of the component Command Builder. Such manipulation of the argument image leads to os command injection. The attack can be executed remotely. The ex…
CWE: CWE-77, CWE-78
NVD
HIGH
CVE-2026-111584
A race condition in the installation
process of TeamViewer Remote Management – Patch Management for Windows prior to
version 26.9.1 allows a local authenticated attacker with low privileges to
execute arbitrary code with elevated privileges by replacing the service
executable in an insufficiently pr…
CWE: CWE-269
NVD
HIGH
CVE-2026-111583
Improper access control in the installer
staging directory used by TeamViewer Full Client and Host prior to version
15.82 for Windows during installation of Advanced Asset Management allows a
local authenticated user with low privileges to execute arbitrary commands as
SYSTEM. An attacker can place …
CWE: CWE-269
NVD
HIGH
CVE-2026-111582
A DLL loading vulnerability in the
TeamViewer Remote Management Monitoring installer for Windows prior to version 26.10.1
allows a local authenticated attacker with low privileges to execute arbitrary
code with elevated privileges. Exploitation requires user interaction.
CWE: CWE-269
NVD
HIGH
CVE-2026-116580
Seroval facilitates JavaScript value stringification, including complex structures beyond JSON.stringify capabilities. Prior to 1.6.8, fromJSON rebuilds an AsyncIteratorFactoryInstance by calling source.on(listener) without requiring source to be a genuine internal stream. With untrusted Seroval inp…
CWE: CWE-502
NVD
HIGH
CVE-2026-107759
The WPO365 | MICROSOFT 365 GRAPH MAILER plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Subject (via wp_mail/PHPMailer, e.g. CF7 your-subject)' parameter in all versions up to, and including, 6.2 due to insufficient input sanitization and output escaping. This makes it pos…
CWE: CWE-79
GitHub-GHSA
HIGH
Vue I18n: escapeParameter does not prevent XSS through srcdoc in translation messages
GHSA-83rm-6c8r-g728
pkg: vue-i18n, vue-i18n, vue-i18n
eco: npm
published: Oct 28, 2026
### Summary
When `escapeParameter` is enabled (`escapeParameterHtml` in the Legacy API), Vue I18n passes the translated string through `sanitizeTranslatedHtml()`. The sanitizer escapes `<` and `>` in attribute values and neutralizes event handler attributes such as `onerror`, but it does not handle…
CVE-2026-118257
NVD
HIGH
CVE-2026-118257
Vue I18n is the internationalization plugin for Vue.js. From 11.1.10 until 11.4.14 and from 12.0.0-alpha.4 until 12.0.0-alpha.5, sanitizeTranslatedHtml() escapes markup and event-handler text inside an iframe srcdoc value but leaves the srcdoc attribute active. Browsers decode the character referenc…
CWE: CWE-79, CWE-116
NVD
HIGH
CVE-2026-116808
OpenPanel before 3.0.0 contains an sql injection vulnerability that allows authenticated users to read cross-tenant data by supplying a crafted property parameter to profile.values. Attackers can inject a SELECT expression with their own FROM/WHERE clauses and comment out the project_id scope to exf…
CWE: CWE-89
NVD
HIGH
CVE-2026-119707
SonicJS through 3.0.0 contains a missing authorization vulnerability in the /api/:collection and /api/content write routes that only check coarse role labels. Authenticated authors or editors can use a bearer JWT or API key to create, modify, publish, or soft-delete other users' documents, bypassing…
CWE: CWE-862
NVD
HIGH
CVE-2026-118676
n8n before 1.123.85, 2.43.5, and 2.44.1 contains an authorization bypass vulnerability that allows member users to use credentials they cannot access by omitting default node parameters. Attackers can save and run workflows where pre-execution checks skip credential slots, causing decrypted credenti…
CWE: CWE-863
NVD
HIGH
CVE-2026-118675
n8n before 1.123.85, 2.43.5, and 2.44.1 contains a credential guard bypass vulnerability that allows editors of shared workflows to use restricted credentials by loading sub-workflows from URLs or local files. Attackers can configure the Execute Sub-workflow node with source url or localFile to serv…
CWE: CWE-863
NVD
HIGH
CVE-2026-118642
n8n before 1.123.85, 2.43.5, and 2.44.1 contains an authorization bypass vulnerability that allows authenticated members to use inaccessible credentials through inline sub-workflow nodes with non-boolean disabled values. Attackers knowing a credential id can run Execute Workflow nodes in inline JSON…
CWE: CWE-863
NVD
HIGH
CVE-2026-52729
Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to 4.4.3, missing access-control checks on `PUT/DELETE /action/{id}` allow an authenticated user to modify or delete actions on any Layout. Exploitation requires the privil…
CWE: CWE-862
NVD
HIGH
CVE-2026-99123
In the Linux kernel, the following vulnerability has been resolved:
vsock/virtio: validate packet source for connected sockets
virtio_transport_recv_pkt() looks up sockets first by the full source and
destination tuple, then by destination only in the bound table. The
fallback is needed for listen…
NVD
HIGH
CVE-2026-99112
In the Linux kernel, the following vulnerability has been resolved:
net/sched: cls_flower: validate mask pointer after nla_next()
fl_set_enc_opt() iterates the key's nested tunnel-option attributes
with nla_for_each_attr() while advancing a single mask pointer via
nla_next() at the bottom of each …
GitHub-GHSA
HIGH
Strands Agents: Local Privilege Escalation via Symlink Attack in Default Session File Storage
GHSA-3w55-933p-8pv5
pkg: strands-agents
eco: pip
published: Oct 27, 2026
## Summary
The `FileSessionManager` defaults to storing session data in `/tmp/strands/sessions/` (a world-writable directory) using predictable file paths and a write pattern (`open(path + ".tmp", "w")` → `os.replace()`) that follows symbolic links. A local attacker can exploit this to overwrite …
GitHub-GHSA
HIGH
Flexible GraphRAG: Cypher/Graph Injection via broken string-escaping in FalkorDB adapter (_escape()) – full graph wipe from ingested-document content
GHSA-vqrg-773h-4wxc
pkg: flexible-graphrag
eco: pip
published: Oct 27, 2026
**Description**
def _escape(v: str) -> str:
return str(v).replace("'", "\\'").replace("\\", "\\\\")
The escaping order is backwards, exactly like the classic HTML double-escape bug: step 1 inserts a literal backslash in front of every ', then step 2 re-matches that just-inserted backslash and do…
CVE-2026-114510
NVD
HIGH
CVE-2026-112457
A double free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An attacker on the local network may be able to cause unexpected system termination or corrupt process memory.
CWE: CWE-415
NVD
HIGH
CVE-2026-118905
Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions. In versions 0.31.2 through 0.40.5, `nvm_ls` filters installed versions with a sed program that embeds the requested version pattern in a `\#…#` address, escaping `.` (and, since 0.40.4, `#`) but …
CWE: CWE-78, CWE-94
NVD
HIGH
CVE-2026-99110
In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix heap overflow in cifs_do_set_acl()
cifs_set_acl() validates ACL size using posix_acl_xattr_size():
4 + (count * 8) // 4-byte header + 8 bytes per ACE
cifs_do_set_acl() then calls posix_acl_to_cifs() to …
GitHub-GHSA
HIGH
follow-redirects: Cross-realm sensitiveHeaders arrays are discarded and custom credentials can follow redirects
GHSA-mrwp-f3q8-3g9p
pkg: follow-redirects
eco: npm
published: Oct 30, 2026
### Summary
follow-redirects 1.16.0 and 1.16.1 validate the documented sensitiveHeaders option with instanceof Array. An array created in another JavaScript realm is silently replaced with an empty list, so a caller-declared custom credential header can be forwarded to an attacker-controlled cross-…
CVE-2026-116689
GitHub-GHSA
HIGH
Google Guava: CompactHashMap/CompactHashSet/MapMakerInternalMap deserialization triggers uncontrolled memory allocation
GHSA-xxph-c9ww-hj94
pkg: com.google.guava:guava
eco: maven
published: Oct 27, 2026
# CompactHashMap/CompactHashSet/MapMakerInternalMap native deserialization triggers uncontrolled memory allocation
## Summary
`CompactHashMap`, `CompactHashSet`, and `MapMakerInternalMap` implement `readObject(ObjectInputStream)` by reading an attacker-controlled `elementCount` or `initialCapacity…
CVE-2026-102554
GitHub-GHSA
HIGH
pypdf has possible infinite loop when hitting EOF in standard xref table during trailer search
GHSA-5849-834g-hvw5
pkg: pypdf
eco: pip
published: Oct 30, 2026
### Impact
An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires opening an incomplete file without a `trailer`.
### Patches
This has been fixed in [pypdf==6.21.4](https://github.com/py-pdf/pypdf/releases/tag/6.21.4).
### Workarounds
If you canno…
CVE-2026-119203
GitHub-GHSA
HIGH
pypdf has possible large memory usage when parsing page tree
GHSA-cggf-277g-3q54
pkg: pypdf
eco: pip
published: Oct 30, 2026
### Impact
An attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing the page tree with many shared resources.
### Patches
This has been fixed in [pypdf==6.21.4](https://github.com/py-pdf/pypdf/releases/tag/6.21.4).
### Workarounds
If you c…
CVE-2026-119204
GitHub-GHSA
HIGH
pypdf has possible infinite loop when cloning dictionaries
GHSA-mfr5-77xh-9j7h
pkg: pypdf
eco: pip
published: Oct 30, 2026
### Impact
An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires cloning/duplicating a `DictionaryObject`.
### Patches
This has been fixed in [pypdf==6.21.4](https://github.com/py-pdf/pypdf/releases/tag/6.21.4).
### Workarounds
If you cannot upgr…
CVE-2026-119205
GitHub-GHSA
HIGH
pypdf has possible long runtimes when retrieving page labels
GHSA-42gh-23hr-vphw
pkg: pypdf
eco: pip
published: Oct 30, 2026
### Impact
An attacker who uses this vulnerability can craft a PDF which leads to large runtimes. This requires retrieving the page labels of a file.
### Patches
This has been fixed in [pypdf==6.21.3](https://github.com/py-pdf/pypdf/releases/tag/6.21.3).
### Workarounds
If you cannot upgrade ye…
CVE-2026-119206
GitHub-GHSA
HIGH
pypdf has possible large memory usage for exceptions in strict mode
GHSA-4vqv-7265-gm2w
pkg: pypdf
eco: pip
published: Oct 30, 2026
### Impact
An attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires loading an invalid dictionary.
### Patches
This has been fixed in [pypdf==6.21.3](https://github.com/py-pdf/pypdf/releases/tag/6.21.3).
### Workarounds
If you cannot upgrade yet, …
CVE-2026-119207
GitHub-GHSA
HIGH
pypdf has possible long runtimes/large memory usage for encrypted PDF files
GHSA-62m5-6wh8-28×7
pkg: pypdf
eco: pip
published: Oct 30, 2026
### Impact
An attacker who uses this vulnerability can craft a PDF which leads to large runtimes/memory usage. This requires accessing the page count of an encrypted PDF file, which itself declares a wrong `/Count` value.
### Patches
This has been fixed in [pypdf==6.21.3](https://github.com/py-pd…
CVE-2026-119208
GitHub-GHSA
HIGH
pypdf has possible large memory usage when parsing cross-reference streams
GHSA-x3rh-gjgm-fmqc
pkg: pypdf
eco: pip
published: Oct 30, 2026
### Impact
An attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires opening a file with cross-reference streams.
### Patches
This has been fixed in [pypdf==6.21.3](https://github.com/py-pdf/pypdf/releases/tag/6.21.3).
### Workarounds
If you cannot…
CVE-2026-119209
GitHub-GHSA
HIGH
russh: Agent server never calls `Agent::confirm`, so keys added with the confirm constraint (`ssh-add -c`) sign without confirmation
GHSA-vp5q-ff62-jwqv
pkg: russh
eco: rust
published: Oct 30, 2026
### Summary
The agent server in `russh::keys::agent::server` never calls `Agent::confirm` before signing with a key that was added with the confirm constraint. That constraint is `SSH_AGENT_CONSTRAIN_CONFIRM` (RFC 9987 §5.2.7.2), which is what `ssh-add -c` sends.
The call was replaced by a hard-c…
CVE-2026-116794
GitHub-GHSA
HIGH
OAuthLib: Token grants can use attacker-supplied client_id for authorization after authenticating a different client
GHSA-7984-qgvg-3j9c
pkg: oauthlib
eco: pip
published: Oct 30, 2026
## Summary
OAuthlib's token grant handlers can authenticate one client while authorizing the grant type and requested scopes using a different, attacker-supplied `client_id` from the request body.
In affected token grant flows, `authenticate_client(request)` sets `request.client` to the authentica…
CVE-2026-118669
GitHub-GHSA
HIGH
@nx/maven and @nx/gradle have OS command injection via nx.json plugin options
GHSA-qm8w-vx34-5j9j
pkg: @nx/maven, @nx/maven, @nx/gradle
eco: npm
published: Oct 30, 2026
## Summary
`@nx/maven` and `@nx/gradle` spawn their project-graph analyzers through a shell and interpolate plugin options read from `nx.json` straight into the command line. Because a shell parses the whole line, an option value containing shell syntax is executed as a command by any `nx` command …
CVE-2026-119282
GitHub-GHSA
HIGH
decode-uri-component vulnerable to denial of service via quadratic replacement of percent-encoded runs
GHSA-qr28-fpjm-wq7f
pkg: decode-uri-component
eco: npm
published: Oct 29, 2026
### Summary
`decodeUriComponent()` takes quadratic time on malformed input that has many distinct percent-encoded runs. A single unauthenticated request of about 224 KB can block the Node.js event loop for about 20 seconds. Version 0.5.0, the release that fixed CVE-2026-45822, is affected.
### Det…
CVE-2026-118664
GitHub-GHSA
HIGH
Shopify App: Token exchange shop context confusion may allow cross-shop authorization bypass in affected apps
GHSA-6j52-38f8-qhxr
pkg: shopify_app
eco: rubygems
published: Oct 29, 2026
In token-exchange authenticated controllers, `shopify_app` exposes shop context through helpers such as `current_shopify_domain`. Prior to the fix, `current_shopify_domain` could resolve to the sanitized `shop` query parameter instead of the shop identity derived from the verified Shopify ID token o…
CVE-2026-63414
GitHub-GHSA
HIGH
Daptin: ParseAcceptLanguage `_` separator bypass enables >250x CPU amplification via Accept-Language header in LanguageMiddleware
GHSA-rhj7-vh3v-mcq6
pkg: github.com/daptin/daptin
eco: go
published: Oct 29, 2026
### Summary
Daptin's `LanguageMiddleware` (registered as a global gin middleware) calls `golang.org/x/text/language.ParseAcceptLanguage` on the raw `Accept-Language` header of every HTTP request without imposing any size or shape filter. The underlying parser has quadratic-time behaviour on long li…
CVE-2026-62160
GitHub-GHSA
HIGH
LangGraph JavaScript custom authentication may permit cross-user Store access
GHSA-4hm6-w6qq-w73v
pkg: langgraph-api
eco: pip
published: Oct 28, 2026
## Summary
LangGraph deployments using JavaScript or TypeScript custom authentication may fail to apply Store authorization changes returned by an authorization handler. In affected deployments, an authenticated user may be able to access Store data outside their authorized namespace.
## Required …
CVE-2026-118668
GitHub-GHSA
HIGH
GraphQL Tools: Per-request connection parameters persist into later users' WebSocket authentications
GHSA-434m-5hcj-pxf3
pkg: @graphql-tools/executor-legacy-ws
eco: npm
published: Oct 28, 2026
# Stale authentication state in `@graphql-tools/executor-legacy-ws`: per-request `extensions.connectionParams` persist in executor closure state and are replayed in a later caller's `connection_init`
## Report metadata
| Field | Value |
| — | — |
| Package | `@graphql-tools/executor-legacy-ws`…
CVE-2026-118665
GitHub-GHSA
HIGH
Highcharts Grid: `javascript:` URL in credits.href runs script on click
GHSA-6hgp-fmhr-mrg4
pkg: @highcharts/dashboards, @highcharts/grid-pro
eco: npm
published: Oct 28, 2026
### Impact
An attacker who controls the Grid configuration can set `credits.href` to a `javascript:` URL. The value is not validated against an allowed-scheme list before it is applied to the credits link, so activating that link runs attacker-supplied script in the origin of the page hosting the Gr…
CVE-2026-118255
GitHub-GHSA
HIGH
Highcharts Grid parses pagination language options as HTML
GHSA-r5wg-q8fc-p6w2
pkg: @highcharts/grid-lite, @highcharts/grid-pro
eco: npm
published: Oct 28, 2026
### Impact
The pagination language strings are written into the DOM as markup rather than as text. An attacker who controls those language options can supply elements carrying event handlers, and those handlers execute in the origin of the page hosting the Grid when the pagination controls render. E…
CVE-2026-118254
GitHub-GHSA
HIGH
Highcharts Dashboards parses fullscreen labels as HTML
GHSA-58g7-7f52-h92c
pkg: @highcharts/dashboards
eco: npm
published: Oct 28, 2026
### Impact
The edit mode fullscreen labels are parsed as HTML when the corresponding control is rendered. An attacker who controls the Dashboards language options can supply markup carrying event handlers, which then execute in the origin of the page hosting the dashboard. Exploitation requires that…
CVE-2026-118253
GitHub-GHSA
HIGH
Highcharts Dashboards parses sidebar component labels as HTML
GHSA-rcqf-f6h2-ccg9
pkg: @highcharts/dashboards
eco: npm
published: Oct 28, 2026
### Impact
The component language strings shown in the edit mode sidebar are parsed as HTML rather than inserted as text. An attacker who controls those language options can supply markup carrying event handlers, which execute in the origin of the page hosting the dashboard once the sidebar renders …
CVE-2026-118252
GitHub-GHSA
HIGH
Highcharts: `javascript:` URL in credits.href runs script on click
GHSA-5793-x2q3-c3q7
pkg: highcharts, highcharts, highcharts
eco: npm
published: Oct 28, 2026
### Impact
A `credits.href` value beginning with `javascript:` is assigned to the window location when the credits label is clicked, without being checked against an allowed-scheme list. An attacker who controls the chart configuration can therefore run script in the origin of the page hosting the c…
CVE-2026-118251
GitHub-GHSA
HIGH
Highcharts: dotted series.keys paths write to Object.prototype
GHSA-rmqc-xvr3-v46c
pkg: highcharts, highcharts, highcharts
eco: npm
published: Oct 28, 2026
### Impact
A dot-separated key path taken from `series.keys` is followed without filtering the individual segments. An attacker who controls `series.keys` and the matching point data can use a path such as `__proto__.polluted` to set arbitrary properties on `Object.prototype`. The resulting properti…
CVE-2026-118250
GitHub-GHSA
HIGH
Highcharts: series column construction writes to Object.prototype
GHSA-gfvx-2c2g-38wq
pkg: highcharts
eco: npm
published: Oct 28, 2026
### Impact
When series columns are built from point objects, the point option keys are used directly as data column ids, so the write that populates a column reaches `Object.prototype` and the `Object` constructor. Keys named `__proto__` and `constructor` survive `JSON.parse` as own enumerable prope…
CVE-2026-118249
GitHub-GHSA
HIGH
Highcharts Core: `breadcrumbs.style` keys become SVG event-handler attributes
GHSA-35rr-xwfh-x789
pkg: highcharts, highcharts, highcharts
eco: npm
published: Oct 28, 2026
### Impact
The breadcrumbs `style` option is applied to the breadcrumb button as SVG attributes rather than as CSS, and the attribute names are not filtered. An attacker who controls the chart configuration can supply keys under `breadcrumbs.style` that name event handlers, and those keys become liv…
CVE-2026-118246
GitHub-GHSA
HIGH
Highcharts Grid Pro: cell-renderer `attributes` map written with raw `setAttribute`
GHSA-5ghw-9mgr-jvx2
pkg: @highcharts/grid-pro, @highcharts/dashboards
eco: npm
published: Oct 28, 2026
### Impact
The input-type cell renderers copy every entry of the renderer's `attributes` option onto the input or select element they create, without checking the attribute names. An attacker who controls the Grid configuration can supply entries under a column's `cells.renderer.attributes` or `cell…
CVE-2026-116797
GitHub-GHSA
HIGH
Highcharts Grid: custom icon definition objects written with raw `setAttribute` on `<path>`
GHSA-6g3c-p4fg-xv47
pkg: @highcharts/grid-lite, @highcharts/grid-pro
eco: npm
published: Oct 28, 2026
### Impact
A custom icon supplied under `rendering.icons` as an icon definition object is built by creating an SVG path for each of its child entries and setting every key of that entry as an attribute of the path, without filtering the attribute names; only the string form of the option is passed t…
CVE-2026-118242
GitHub-GHSA
HIGH
Highcharts Dashboards: `chartConstructor` is an unchecked lookup into the Highcharts namespace
GHSA-grj7-r4jv-pw9j
pkg: @highcharts/dashboards
eco: npm
published: Oct 28, 2026
### Impact
The Highcharts component uses the value of `chartConstructor` to select a function from the Highcharts namespace and invokes it with the component's container element and its `chartOptions`, without checking the value against the supported chart constructors. An attacker who controls the …
CVE-2026-118245
GitHub-GHSA
HIGH
Highcharts Core: HTML text parsing falls back to unfiltered `innerHTML` during printing
GHSA-65hg-cf3f-5m39
pkg: highcharts, highcharts
eco: npm
published: Oct 28, 2026
### Impact
When the HTML text parser cannot obtain a document from `DOMParser` because the call throws, it falls back to assigning the raw markup to the `innerHTML` of an element created in the hosting document, and the allow-list is applied only to the resulting DOM afterwards. In Chromium the Trus…
CVE-2026-118244
GitHub-GHSA
HIGH
Highcharts Core: `javascript:` URL in an `xlink:href` attribute survives text filtering and reaches exported charts
GHSA-mw4f-gj5x-6xr4
pkg: highcharts, highcharts, highcharts
eco: npm
published: Oct 28, 2026
### Impact
The filter applied to markup in text options checks `href`, `src` and a few similar attributes against an allowed-scheme list, but accepts `xlink:href` without that check, so an SVG anchor whose `xlink:href` is a `javascript:` URL passes the filter, whether or not the option is rendered w…
CVE-2026-116796
GitHub-GHSA
HIGH
dd-trace: ReDOS in URL query string obfuscation
GHSA-x94g-w73q-hpcw
pkg: dd-trace, dd-trace
eco: npm
published: Oct 27, 2026
### Summary
A regular expression used to obfuscate URL query strings can consume excessive CPU when processing certain attacker-controlled input. This can stall request processing and cause denial of service in applications using affected HTTP tracing integrations.
### Details
The default query-s…
CVE-2026-116693
GitHub-GHSA
HIGH
TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` serialization
GHSA-mf2p-h6hf-fcwm
pkg: tinymce, TinyMCE, tinymce/tinymce
eco: npm
published: Oct 27, 2026
### Impact
Stored XSS vulnerability in the media plugin. Attackers can inject malicious scripts via elements crafted through the data-mce-object attribute, which are created and executed before sanitization. Impacts users of TinyMCE with the media plugin enabled.
### Patches
This vulnerability has …
CVE-2026-116675
GitHub-GHSA
HIGH
CTFer.io's CTFd Terraform Provider allows a local or remote attacker to read team passwords in state as non sensitive values
GHSA-vg84-c5mg-76xh
pkg: github.com/ctfer-io/terraform-provider-ctfd, github.com/ctfer-io/terraform-provider-ctfd/v2
eco: go
published: Oct 27, 2026
### Impact
CTFer.io's CTFd Terraform Provider stores `ctfd_team.password` as non-sensitive values (CWE-522). A local or remote attacker, who can have access to the Terraform state, can read team passwords without the need for the state password for decryption.
### Patches
Patched in v2.8.2.
### …
CVE-2026-116683
GitHub-GHSA
HIGH
compress zstd: Panic on two-block frames
GHSA-fpmh-frq8-7rj8
pkg: github.com/klauspost/compress/zstd
eco: go
published: Oct 27, 2026
### Summary
A crafted ~27 KB two-block zstd frame makes DecodeAll and the streaming decoder panic with an out-of-range slice index instead of returning a decode error. The same bytes decode fine with the reference zstd. Any program that decompresses untrusted zstd input can be crashed by it. Reprod…
CVE-2026-116591
GitHub-GHSA
HIGH
Datadog dd-trace-py: ReDoS in URL query string obfuscation
GHSA-3633-r77q-h3v3
pkg: ddtrace, ddtrace
eco: pip
published: Oct 27, 2026
### Summary
A regular expression used to obfuscate URL query strings can consume excessive CPU when processing certain attacker-controlled input. This can stall request processing and cause denial of service in applications using affected HTTP tracing integrations.
### Details
The default query-s…
CVE-2026-116588
GitHub-GHSA
HIGH
Datadog dd-trace-py: IAST instrumentation can lead to application DOS
GHSA-p3m5-h5v9-vqj6
pkg: ddtrace
eco: pip
published: Oct 27, 2026
### Summary
A flaw in dd-trace-py’s IAST instrumentation can cause the Python application process to terminate unexpectedly when processing certain attacker-controlled input. Only applications with IAST enabled are affected. IAST is disabled by default.
### Details
The affected IAST string-proc…
CVE-2026-116589
GitHub-GHSA
HIGH
MongoDB Python Driver: Out-of-bounds read in BSON decoding via a malformed Regex element
GHSA-98qm-wvgf-w4cf
pkg: pymongo
eco: pip
published: Oct 27, 2026
### Impact
The C extension's BSON decoder scans a Regex element's pattern and flags strings with strlen before checking the document's remaining length, so a crafted truncated Regex element can read past the end of the caller's buffer. bson.decode and bson.decode_all accept mmap and array buffers, w…
CVE-2026-106435
GitHub-GHSA
HIGH
GitPython: arbitrary file read via attacker-controlled branch name in `Head.checkout()` (incomplete fix of CVE-2026-78679)
GHSA-23mf-xhv8-69c2
pkg: GitPython
eco: pip
published: Oct 27, 2026
> **A note on the referenced files.** This report was submitted through GitHub's private
> vulnerability reporting API, which carries no attachments. Every transcript this report leans
> on is reproduced **inline above**, verbatim. The file names it mentions (`poc.sh`, `poc.log`,
> per-case transcri…
GitHub-GHSA
HIGH
GitPython parse_actor_and_date() is vulnerable to quadratic backtracking on malformed identity lines
GHSA-m64x-33q8-m5h7
pkg: GitPython
eco: pip
published: Oct 27, 2026
### Summary
This is a residual of GHSA-g5vv-9gxw-82hx / CVE-2026-87819. The 3.1.60 fix made `Actor._from_string` regex-free, but `parse_actor_and_date` still runs `_re_actor_epoch` on the same author/committer/tagger line one step earlier. That pattern backtracks quadratically when the trailing epo…
GitHub-GHSA
HIGH
Wails: wildcardPatternToRegex allows Origin bypass via suffix match in BindingsAllowedOrigins
GHSA-47hv-j4px-h3c9
pkg: github.com/wailsapp/wails/v2
eco: go
published: Oct 27, 2026
# Security Vulnerability Report: Wails v2 — Origin Validator Bypass via Wildcard Pattern
| | |
|—|—|
| **Product** | wailsapp/wails (v2) |
| **Affected File** | `v2/internal/frontend/originvalidator/originValidator.go` |
| **Affected Versions** | All versions containing originValidator (lates…
CVE-2026-34157
NVD
MEDIUM
CVE-2026-119764
Mythic 3.2.16 through 3.4.0.61 contains a stored cross-site scripting vulnerability that allows attackers controlling target endpoint files to run JavaScript in the Mythic UI origin by planting HTML in .pdf-named files. When an operator downloads the file and clicks Preview Media, content-sniffed HT…
CWE: CWE-79
NVD
MEDIUM
CVE-2026-115683
A race condition in Epiphany allows a malicious website to bypass the TLS/SSL certificate warning page.
Epiphany registers the main-world script message handler "tlsErrorPage" so its internal TLS error page can implement "Accept Risk and Proceed". The handler was registered immediately before loadi…
CWE: CWE-367
NVD
MEDIUM
CVE-2026-116641
The DB Tools rely on the TLS implementation in Golang’s standard library, which generally uses the system CA store. However, the crypto/x509 package also has its own internal denylist of known-bad CA certificates. Golang 1.27.3 adds the eMudhra certificates to this list.
DB Tools version 100.1…
CWE: CWE-295
GitHub-GHSA
MEDIUM
Python Social Auth: OpenID Connect nonce is not bound to the browser session, so a stolen authorization code logs the attacker in as the victim
GHSA-h2r5-x5m7-3935
pkg: social-auth-core
eco: pip
published: Oct 28, 2026
### Summary
The generic OpenID Connect backend (`OpenIdConnectAuth` and every backend built on it) stores the `nonce` in the shared Association table, not in the user's session. When the ID token comes back, `validate_claims` only checks that the nonce exists in that table and is not expired. It do…
CVE-2026-115910
NVD
MEDIUM
CVE-2026-87880
Sensitive information disclosure due to missing SSL certificate verification affecting one component. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.
CWE: CWE-295
GitHub-GHSA
MEDIUM
Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource server
GHSA-w4fh-qvv9-3v23
pkg: mcp, mcp
eco: pip
published: Oct 27, 2026
### Summary
In affected versions, the SDK's server-side bearer authentication had no way to check that a token was issued for your server (its audience). Where one authorization server issues tokens for several services, a valid token for another service was also accepted by your MCP server.
### Am…
CVE-2026-116684
NVD
MEDIUM
CVE-2026-116684
The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. From 1.10.0 until 1.30.0 and 2.2.0, server-side bearer authentication configured through AuthSettings with token_verifier accepts a valid token issued for another service when the authori…
CWE: CWE-863
GitHub-GHSA
MEDIUM
Authlib: Default JWT bearer grant accepts assertions for the wrong audience
GHSA-fch4-3c6x-j4gc
pkg: authlib
eco: pip
published: Oct 27, 2026
## Description
### Summary
Authlib's default RFC 7523 JWT bearer grant leaves `get_audiences()` empty, so `verify_claims()` only checks that an `aud` claim *exists* instead of requiring it to match the current authorization server's token endpoint. An attacker holding a legitimately issued JWT ass…
CVE-2026-114618
GitHub-GHSA
MEDIUM
LiteLLM vulnerable to reflected XSS in /sso/debug/callback
GHSA-hhww-mrg2-969h
pkg: litellm
eco: pip
published: Oct 27, 2026
### Summary
The `/sso/debug/callback` endpoint reflected identity-provider-controlled fields into an inline `<script>` block via `json.dumps`, which escapes JSON string syntax but not HTML context characters such as `</script>`. An IdP-returned string field containing `</script>` (for example a use…
NVD
MEDIUM
CVE-2026-115910
Python Social Auth is a social authentication and registration mechanism. Prior to 6.2.0, OpenIdConnectAuth in social_core/backends/open_id_connect.py uses get_and_store_nonce to place the OpenID Connect nonce in a shared OpenIdConnectAssociation table, and get_nonce and validate_claims verify only …
CWE: CWE-345, CWE-384
NVD
MEDIUM
CVE-2026-112344
Syncplify Server! 6.0.0 before 8.8.0 contains a path traversal vulnerability that allows attackers with a symbolic link placed inside a user's home folder to access files outside the virtual filesystem root because confinement is enforced only against the requested path and not the on-disk destinati…
CWE: CWE-59
NVD
MEDIUM
CVE-2026-115930
The MongoDB Shell (mongosh) relies on Node.js as a third-party runtime that carries its own TLS root certificate store. This certificate store has the recoverable eMudhra intermediate CA certificates. This issue impacts MongoDB Shell (mongosh) versions prior to 2.14.0 and can be resolved by upda…
CWE: CWE-295
NVD
MEDIUM
CVE-2026-97860
YMS-VPN8 and YMS-VPN8-CP provided by Yamaha Corporation register Windows services with unquoted file paths. A user who has write permissions on the system drive may be able to execute arbitrary code with SYSTEM privileges.
CWE: CWE-428
NVD
MEDIUM
CVE-2026-118598
A logic error in Epiphany's site permission handling can cause camera and microphone access to be granted when the user only approves a different permission.
In src/ephy-window.c, set_permission() stores the user's Allow/Deny choice after a WebKit permission dialog. Types CLIPBOARD and WEBSITE_DATA…
CWE: CWE-863
GitHub-GHSA
MEDIUM
Nuxt: Dot segments in the request path bypass `server/middleware` path checks and server route rules on page routes
GHSA-9v7c-q64q-vv33
pkg: nuxt, @nuxt/nitro-server
eco: npm
published: Oct 30, 2026
### Summary
Since `4.6.0`, Nuxt resolves `.` and `..` segments in the request path, including percent-encoded forms such as `%2e`, before rendering a page. Nitro's routing, Nitro's route rules and `server/middleware` see the path with those segments still in place. A request for `/%2e/admin` theref…
CVE-2026-119200
GitHub-GHSA
MEDIUM
anacrolix torrent has unbounded recursion in the bencode decoder that causes stack-overflow crash and CPU-exhaustion DoS
GHSA-2wrx-84qj-4pcg
pkg: github.com/anacrolix/torrent
eco: go
published: Oct 30, 2026
## Summary
anacrolix/torrent's bencode decoder (`bencode/`) applies **no limit on the nesting depth** of nested dictionaries and lists. Two distinct denial-of-service mechanisms follow from that single root cause, both reachable from a single crafted `.torrent` file or from metadata obtained from a…
NVD
MEDIUM
CVE-2026-59993
Picotls is a TLS protocol library that allows users select different crypto backends based on their use case. In affected revisions through 44bc503, when picotls is used as a `client-side TLS stack`, a peer can send a `HelloRetryRequest` followed by a `spoofed Hello message` that causes a null-point…
CWE: CWE-476
NVD
MEDIUM
CVE-2026-119300
Wekan is open source kanban built with Meteor. Prior to 11.11, the user-search publication in server/publications/users.js and the searchUsers method in server/models/users.js pass authenticated user-controlled searchTerm and query values to new RegExp() without escaping regular-expression metachara…
CWE: CWE-1333
NVD
MEDIUM
CVE-2026-119200
Nuxt is an open-source web development framework for Vue.js. From 4.6.0 until 4.6.3, Nuxt resolves literal or percent-encoded dot segments before rendering a page while Nitro routing, server/middleware checks, and server route rules evaluate the unresolved path. A request such as /%2e/admin can ther…
CWE: CWE-41, CWE-436, CWE-863
NVD
MEDIUM
CVE-2026-118760
Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. From 0.5.1 until 2.17.0, the frontend artifact routes did not check whether an authenticated user was authorized to access the requested namespace. A user who can reach the frontend and knows an artif…
CWE: CWE-639, CWE-862
GitHub-GHSA
MEDIUM
zip: AES Entry HMAC Authentication Bypass on Premature EOF
GHSA-8hxf-qr8p-62×4
pkg: zip
eco: rust
published: Oct 29, 2026
### Summary
An AES-encrypted (AE-x) entry's authentication code is verified only when the reader's byte counter lands exactly on zero. If the bounded entry reader reaches the archive's actual EOF before the attacker-controlled, header-declared `compressed_size`, the counter remains positive, the HM…
CVE-2026-115906
GitHub-GHSA
MEDIUM
Keycloak: Attacker can re-enable and take over disabled clients via registration access token
GHSA-r7rc-c989-86g6
pkg: org.keycloak:keycloak-services
eco: maven
published: Oct 29, 2026
### Description
A flaw was found in Keycloak's client registration service. A remote attacker, possessing a previously issued Registration Access Token (RAT), could exploit this vulnerability to re-enable a client that an administrator had explicitly disabled. This bypasses security controls, allowi…
CVE-2026-9705
NVD
MEDIUM
CVE-2026-18894
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker to trigger pre-existing stored Python component code in a public workflow, executing it under the flow owner's runtime context within the server process. This bypasses the intended trust boundary where public execution paths are res…
CWE: CWE-94
GitHub-GHSA
MEDIUM
Backstage catalog rules can be bypassed for URL locations using encoded path segments
GHSA-w658-mh9p-ww8f
pkg: @backstage/plugin-catalog-backend, @backstage/plugin-catalog-backend
eco: npm
published: Oct 28, 2026
## Summary
`@backstage/plugin-catalog-backend` matches URL-type locations against `catalog.rules` location patterns using the raw URL string submitted by the user, while URL readers resolve that same string in canonical form when fetching the location's content. A URL can therefore be crafted so th…
CVE-2026-115923
GitHub-GHSA
MEDIUM
knative.dev/pkg admission webhooks allow unbounded request-body memory exhaustion
GHSA-2hw4-c9m4-f2fj
pkg: knative.dev/pkg
eco: go
published: Oct 28, 2026
## ⚠️ Update (verification, 2026-05-19): C-2 confirmed end-to-end — **4.5× amplification observed** (worse than the advisory's conservative 2× claim)
Built a Go PoC ([`cmd/poc-c2/main.go`](https://github.com/knative/pkg/blob/1ad5a1ce0ee7043081cb50fd1acc6d36a9126844/cmd/poc-c2/main.go)) that…
GitHub-GHSA
MEDIUM
Waline login accepts a non-string email as a match-all MongoDB query
GHSA-jf75-q64q-g65r
pkg: @waline/vercel
eco: npm
published: Oct 28, 2026
## Summary
The login endpoint POST /api/token reads the `email` field from the request body without checking its type and passes it straight into the MongoDB storage query. When `email` is not a string (for example a JSON object such as {"$ne": null}), the MongoDB storage adapter's parseWhere silen…
GitHub-GHSA
MEDIUM
vLLM: Phi-4 multimodal audio encoder materializes and retains full attention matrices: a single max-length audio OOM-crashes the vLLM engine
GHSA-8397-8qf6-f2gm
pkg: vllm
eco: pip
published: Oct 28, 2026
### Summary
The Phi-4 multimodal audio encoder (`phi4mm_audio.py` / `phi4mm_utils.py`) runs its conformer attention in **eager mode by default**: the official HF config of `microsoft/Phi-4-multimodal-instruct` does not set `use_pt_scaled_dot_product_attention`, so the default `False` applies (`phi4…
CVE-2026-115913
GitHub-GHSA
MEDIUM
vLLM DeepSeek-OCR image processing vulnerable to denial of service
GHSA-gq5q-89c7-vhvx
pkg: vllm
eco: pip
published: Oct 28, 2026
## Summary
Any vLLM deployment serving a model of the DeepSeek-OCR family — `deepseek-ai/DeepSeek-OCR`, `deepseek-ai/DeepSeek-OCR-2`, or `baidu/Unlimited-OCR` (whose `UnlimitedOCRForCausalLM` subclasses `DeepseekOCRForCausalLM`) — can be **killed by a single unauthenticated chat request carryin…
CVE-2026-115914
GitHub-GHSA
MEDIUM
vLLM: Out-of-vocabulary prompt token id passes input validation and triggers a CUDA device-side assert (engine crash / DoS)
GHSA-q97c-p368-75c4
pkg: vllm
eco: pip
published: Oct 28, 2026
For a model whose vocabulary size is an exact multiple of the embedding padding size (64) — e.g. any Llama-2-family model, vocab 32000 — a single request carrying a pre-tokenized prompt with token id equal to the vocab size (32000) passes vLLM's input-id validation but is one past the last embed…
CVE-2026-115916
GitHub-GHSA
MEDIUM
vLLM: Responses API bypasses trust_request_chat_template for chat_template_kwargs
GHSA-x567-49g5-p4cf
pkg: vllm
eco: pip
published: Oct 28, 2026
## Summary
vLLM's `/v1/responses` endpoint accepts request-level `chat_template_kwargs`, but does not apply the `–trust-request-chat-template` gate that protects Chat Completions, render, tokenize, and pooling paths.
When the server is run with the documented default `trust_request_chat_template=…
CVE-2026-115918
GitHub-GHSA
MEDIUM
vLLM: DoS via unbounded chat_template Jinja2 rendering exhausts the renderer thread pool
GHSA-542m-9234-8gvf
pkg: vllm
eco: pip
published: Oct 28, 2026
### Summary
vLLM renders chat templates by passing the resolved Jinja2 source to `tokenizer.apply_chat_template()`, which compiles and `.render()`s it in an `ImmutableSandboxedEnvironment`. The sandbox prevents code-execution escapes but imposes **no wall-clock timeout, no output-size cap, and no ne…
CVE-2026-115911
GitHub-GHSA
MEDIUM
systeminformation has prototype pollution in `networkStats()` via the interface name
GHSA-7648-jmwf-vw7j
pkg: systeminformation
eco: npm
published: Oct 28, 2026
## Summary
`networkStats()` keeps a per interface cache for computing `rx_sec` / `tx_sec` between calls.
The cache is a plain JavaScript object and is indexed with the interface name the caller
supplied. Passing the name `__proto__` makes every cache write land on `Object.prototype`
instead of the …
CVE-2026-116674
GitHub-GHSA
MEDIUM
Happy DOM has cookie scope forgery: no DNS-label boundary on Domain= matching , attacker origin sets victim cookies
GHSA-5fpq-26gf-qwcr
pkg: happy-dom
eco: npm
published: Oct 28, 2026
### Summary
A cookie-scoping bug in happy-dom lets an attacker origin set cookies that a victim origin then receives, diverging from browser semantics.
### Details
happy-dom matches Domain=example.com against notexample.com (endsWith without a DNS-label boundary), diverging from browser semantics (…
CVE-2026-118661
NVD
MEDIUM
CVE-2026-118687
Coder before 2.29.21, 2.30.0 before 2.34.12, 2.35.0 before 2.35.9, 2.36.0 before 2.36.7, and 2.37.0 before 2.37.4 does not validate the audience claim of GCE instance-identity JWTs at the POST /api/v2/workspaceagents/google-instance-identity endpoint. Attackers who obtain an unexpired format=full id…
CWE: CWE-441
NVD
MEDIUM
CVE-2026-118646
n8n before 1.123.85, 2.43.5, and 2.44.1 contains a regular expression denial of service vulnerability that allows authenticated members to block the event loop via crafted glob patterns. Attackers who can create and run workflows can submit a wildcard-heavy File(s) Selector pattern causing exponenti…
CWE: CWE-1333
NVD
MEDIUM
CVE-2026-88858
A user with the Viewer role in Grafana can crash the server by submitting a crafted server-side math expression (uncontrolled recursion). A user with permission to provision alert rules can make the outage persist across restarts.
CWE: CWE-20, CWE-400, CWE-674
NVD
MEDIUM
CVE-2026-50539
Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to 4.4.3, missing object-level authorization on `/notification/export/{id}` allows an authenticated user to download attachments from any notification, including notificati…
CWE: CWE-862
NVD
MEDIUM
CVE-2026-50541
Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to 4.4.3, missing access-control checks on `GET /dataset/export/csv/{id}` allow an authenticated user to export data from any dataset, including datasets created by adminis…
CWE: CWE-862
GitHub-GHSA
MEDIUM
MLflow CrewAI autologging records LLM provider API keys in logged trace spans
GHSA-j7qq-vr8c-xvw3
pkg: mlflow
eco: pip
published: Oct 27, 2026
### Summary
`mlflow.crewai.autolog()` leaks CrewAI LLM provider API keys into MLflow trace telemetry.
When a CrewAI `Agent` is instrumented with MLflow autologging, MLflow serializes the agent's `__dict__` and converts its fields to strings. The `llm` field contains the CrewAI LLM object, whose st…
CVE-2026-116691
GitHub-GHSA
MEDIUM
Model Context Protocol Python SDK: Client fetched server-chosen $ref URLs while validating tool results against output schemas
GHSA-rwrf-2pqf-9j8j
pkg: mcp, mcp
eco: pip
published: Oct 27, 2026
### Summary
In affected versions, when a connected MCP server declared an `outputSchema` for a tool, the SDK's client validated each `call_tool` result with `jsonschema`'s default resolver, which fetches any `$ref` it cannot resolve locally by opening the URL. A server could therefore put an `http:/…
CVE-2026-116686
NVD
MEDIUM
CVE-2026-116686
The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. From 1.10.0 until 1.30.0 and 2.2.0, ClientSession, ClientSessionGroup, and Client tool calls validate server-declared outputSchema documents with jsonschema's default resolver, causing an…
CWE: CWE-918
NVD
MEDIUM
CVE-2026-116674
systeminformation is a System and OS information library for node.js. Prior to 5.33.13, networkStats(ifaces) in lib/network.js on FreeBSD, OpenBSD, and NetBSD stores per-interface data in the plain-object _network cache and indexes it with the sanitized caller-controlled interface name. Passing prot…
CWE: CWE-1321
GitHub-GHSA
MEDIUM
GitPython: separate_git_dir leaks env vars via crafted .gitmodules submodule name
GHSA-fx3j-rwgx-fr94
pkg: GitPython
eco: pip
published: Oct 27, 2026
### Summary
`Repo._clone()`'s handling of `separate_git_dir` never disables `Git.polish_url()`'s environment-variable expansion, unlike every other caller of that helper that handles attacker-influenced data. Since `separate_git_dir` can be derived from an attacker-controlled `.gitmodules` submodule…
GitHub-GHSA
MEDIUM
vllm p2p never connected zmq_exhaustion
GHSA-frvg-qw88-hww9
pkg: vllm
eco: pip
published: Oct 27, 2026
### Summary
When the `OffloadingConnector` uses `TieringOffloadingSpec` with a P2P secondary tier, an API client can submit many unique non-listening peer addresses through `kv_transfer_params.prefill`. vLLM keeps every never-established P2P session and its ZeroMQ sockets after the request finishes…
CVE-2026-94624
GitHub-GHSA
MEDIUM
Ghost: Authorization Bypass in Comment Like Feature
GHSA-qrh6-cwg3-343x
pkg: ghost
eco: npm
published: Oct 27, 2026
### Impact
An input validation issue allowed members to delete comment likes / dislikes that they were not authorized to delete.
### Vulnerable versions
This vulnerability is present in Ghost from v5.9.0 up to v6.44.1.
### Patches
v6.44.1 contains a fix for this issue.
### How to update
For s…
CVE-2026-103288
GitHub-GHSA
MEDIUM
fpdf2: Exponential SVG '<use>' expansion causes CPU and memory exhaustion in 'FPDF.image()'
GHSA-wqw6-wpr3-45rh
pkg: fpdf2
eco: pip
published: Oct 27, 2026
### Summary
fpdf2 expands SVG `<use>` references by deep-copying the complete referenced graphics tree. A small SVG can use nested references to make the number of in-memory objects grow exponentially, causing excessive CPU and memory consumption during `FPDF.image()` processing.
This was reproduc…
CVE-2026-114610
NVD
MEDIUM
CVE-2026-112415
An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. An app may be able to cause unexpected system termination or corrupt pr…
CWE: CWE-787
NVD
MEDIUM
CVE-2026-82389
In the Bluetooth Classic Hands-Free Profile Audio Gateway role, hfp_ag_create() in subsys/bluetooth/host/classic/hfp_ag.c starts an SDP discovery toward the peer, which links the embedded ag->sdp_param._node into the SDP client's pending request list in subsys/bluetooth/host/classic/sdp.c. If the su…
CWE: CWE-476
NVD
MEDIUM
CVE-2026-92171
A flaw was found in the Infinispan Operator for Red Hat Data Grid. When cross-site (xsite) TLS is enabled, the operator launches the Gossip Router container with keystore and truststore passwords passed as plain-text command-line arguments (`-tls_keystore_password`, `-tls_truststore_password`). Cont…
CWE: CWE-214
NVD
MEDIUM
CVE-2026-115804
HashiCorp Consul and Consul Enterprise are vulnerable to an authorization bypass in health check registration that may allow an authenticated user to modify health checks belonging to another service on the same node. This vulnerability (CVE-2026-115804) is fixed in Consul Community Edition 2.1.0 an…
CWE: CWE-639
NVD
MEDIUM
CVE-2026-63121
Kubewarden policies is a collection of WebAssembly policies for securing and governing Kubernetes clusters. For versions provisionally classified as affected before 2.1.2, `trusted-repos-policy` compares an image's `registry` hostname against `reject lists` and `allow lists` case-sensitively even th…
CWE: CWE-178
GitHub-GHSA
MEDIUM
Mem0: Cross-tenant conversation leak via unescaped delimiter collision in session-scope key (_build_session_scope)
GHSA-5324-3w58-qpp2
pkg: mem0ai, mem0ai
eco: npm
published: Oct 28, 2026
Summary
_build_session_scope() in mem0/memory/main.py builds the conversation-history scope key used to fetch/store the last N raw messages by naively joining caller-supplied user_id/agent_id/run_id values with unescaped & and = delimiters:
def _build_session_scope(filters):
parts = []
for…
CVE-2026-116575
GitHub-GHSA
MEDIUM
filelock: StrictSoftFileLock and SoftReadWriteLock adopt a protocol directory another user created first, losing mutual exclusion
GHSA-9c4x-gm8v-wgc4
pkg: filelock
eco: pip
published: Oct 28, 2026
`StrictSoftFileLock`, `AsyncStrictSoftFileLock`, `SoftReadWriteLock` and `AsyncSoftReadWriteLock` keep their whole ownership state as files in a directory derived from the lock path (`<path>.filelock/claims`, `<path>.rw/{gen,holders}`). When that directory already exists they adopt it after checking…
CVE-2026-112911
NVD
MEDIUM
CVE-2026-87878
Linux binaries have executable stack attribute enabled. The following products are affected: Acronis Cyber Protect 17 (Linux) before build 42587.
CWE: CWE-693
NVD
MEDIUM
CVE-2026-116575
Mem0 provides persistent memory infrastructure for AI agents and applications. Prior to Python SDK 2.0.18 and TypeScript SDK 3.1.6, _build_session_scope() in mem0/memory/main.py and Memory.buildSessionScope() in the TypeScript SDK join caller-controlled user_id, agent_id, and run_id values using une…
CWE: CWE-200, CWE-863
GitHub-GHSA
MEDIUM
ONNX: Out-of-bounds read in ConvTranspose shape inference via undersized weight rank
GHSA-6pwm-x34p-fvj2
pkg: onnx
eco: pip
published: Oct 28, 2026
## Summary
ONNX ConvTranspose shape inference performed an out-of-bounds read when the weight tensor had fewer than three dimensions and the model did not provide a `kernel_shape` attribute.
The inference function derived an empty `effective_kernel_shape` vector from the undersized weight tensor, …
CVE-2026-115920
GitHub-GHSA
MEDIUM
ONNX: Denial of service via unchecked expansion of packed sub-byte tensors in ONNX Python APIs
GHSA-q69g-f4f5-v8m7
pkg: onnx
eco: pip
published: Oct 28, 2026
## Summary
ONNX's Python tensor-materialization helpers could allocate memory according to attacker-controlled tensor dimensions without verifying that a packed sub-byte payload contained the declared number of elements.
A very small model could therefore cause a disproportionately large allocatio…
CVE-2026-115922
GitHub-GHSA
MEDIUM
ONNX: Null Pointer Dereference in ScanInferenceFunction Due to Missing Required Attribute
GHSA-m4pr-6v3c-6fgr
pkg: onnx
eco: pip
published: Oct 28, 2026
## Summary
ONNX shape inference did not safely validate the required Scan `num_scan_inputs` attribute. Two malformed values could terminate or disrupt the process:
1. If the attribute was missing, `ctx.getAttribute("num_scan_inputs")` returned null and was dereferenced.
2. If the attribute was neg…
CVE-2026-115921
GitHub-GHSA
MEDIUM
ONNX: Out-of-Bounds Read in RNN/GRU/LSTM Shape Inference (Old Opsets, Missing Rank Check)
GHSA-48m4-24cq-37qf
pkg: onnx
eco: pip
published: Oct 28, 2026
## Summary
ONNX shape inference performed an out-of-bounds read when processing a malformed RNN, GRU, or LSTM node from opsets 1–6 whose first input had a rank other than three.
`RNNShapeInference_opset1_to_6()` checked whether the input shape was present but accessed `dim(0)` and `dim(1)` witho…
CVE-2026-115919
NVD
MEDIUM
CVE-2026-87101
Sensitive information disclosure due to improper token validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.
CWE: CWE-347
NVD
MEDIUM
CVE-2026-115919
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to 1.22.0, RNNShapeInference_opset1_to_6() processes malformed RNN and LSTM nodes from opsets 1 through 6 and GRU nodes from opsets 3 through 6 without verifying that the first input has rank three. …
CWE: CWE-125
GitHub-GHSA
MEDIUM
filelock: UnixFileLock truncates and chmods any regular file another user renames or hard-links onto the lock path
GHSA-69hj-f68j-2879
pkg: filelock
eco: pip
published: Oct 28, 2026
`UnixFileLock`, the backend of `FileLock` and `AsyncFileLock` on Unix, empties whatever regular file it finds at the lock path once it holds the `flock` (a kernel lock on an open file). With an explicit `mode` it also chmods that file (sets its permission bits), whether or not this acquire created i…
CVE-2026-112909
GitHub-GHSA
MEDIUM
filelock: ReadWriteLock follows a symlink at the lock path into SQLite
GHSA-j8f7-rjxc-mr56
pkg: filelock
eco: pip
published: Oct 28, 2026
### Summary
`ReadWriteLock` and `AsyncReadWriteLock` resolve the lock path with `pathlib.Path.resolve()` and pass it to `sqlite3.connect()` without refusing a symlink. A local user who can create names in the lock's directory, such as `/tmp` or a shared cache, can plant a symlink at the lock path a…
CVE-2026-112936
GitHub-GHSA
MEDIUM
filelock: SoftReadWriteLock holder refresh writes through a hard link and hangs on a named pipe that another local user renames over its record
GHSA-fj95-fr6c-h845
pkg: filelock
eco: pip
published: Oct 28, 2026
`SoftReadWriteLock` (and `AsyncSoftReadWriteLock`, which wraps one) refreshes its holder record (the file under `<path>.rw/holders/` that says a process holds or wants the lock) on every poll of a waiting acquire and on every heartbeat (the periodic refresh a holder runs to keep its record fresh). I…
CVE-2026-112934
GitHub-GHSA
MEDIUM
Echo has Open Redirect via Control-Character Prefix Defeating sanitizeURI
GHSA-v753-g4cw-jm48
pkg: github.com/labstack/echo/v5, github.com/labstack/echo/v4
eco: go
published: Oct 28, 2026
## Summary
Echo's dedicated open-redirect guard, `sanitizeURI`, decides whether a redirect target is a local path by inspecting exactly two byte positions: `uri[0]` and `uri[1]`. If the value begins with a control character such as a tab or a newline, followed by a separator pair, the guard does no…
CVE-2026-118656
GitHub-GHSA
MEDIUM
Echo vulnerable to Reflected Cross-Site Scripting (XSS) via unsanitized JSONP callback in Context.JSONP / Context.JSONPBlob
GHSA-h9g5-28mm-hx3g
pkg: github.com/labstack/echo/v5, github.com/labstack/echo/v4
eco: go
published: Oct 28, 2026
### Summary
The `Context.JSONP`, `Context.JSONPBlob`, and internal `jsonPBlob` helper in `context.go` directly concatenate the caller-supplied `callback` parameter into a JavaScript response **without any validation, escaping, or allow-listing**.
This creates a high-impact **reflected XSS** that…
CVE-2026-118652
NVD
MEDIUM
CVE-2026-116804
DOMPurify from 3.4.4 before 3.4.17 contains a SAFE_FOR_TEMPLATES bypass that lets attackers preserve template expressions in attached shadow roots when using RETURN_DOM, RETURN_DOM_FRAGMENT, or IN_PLACE modes. Attackers can split expressions across text nodes separated by disallowed elements, which …
CWE: CWE-79
NVD
MEDIUM
CVE-2026-116803
DOMPurify before 3.4.17 contains a cross-site scripting vulnerability that allows attackers to keep event handlers armed when an IN_PLACE hook removes a parent or sibling node. Attacker markup in detached subtrees is never walked or neutralized, so handlers like img onerror fire after sanitize() ret…
CWE: CWE-79
NVD
MEDIUM
CVE-2026-50095
There is a stored cross site scripting issue in Esri ArcGIS Server 11.1 and earlier on Windows and Linux that in some configurations allows a remote unauthenticated attacker to store files that contain malicious code that may execute in the context of a victim’s browser. A patch is provided for Ar…
CWE: CWE-79
NVD
MEDIUM
CVE-2026-79656
A user with read access to Grafana's server logs, or to a log store they are shipped to, can recover the OAuth and OIDC access, refresh and ID tokens of users who sign in through the Generic OAuth, Google or GitLab providers. Grafana writes these tokens to its logs unredacted when an access or ID to…
CWE: CWE-532
GitHub-GHSA
MEDIUM
Forge: TLS client crash when the server sends no certificate
GHSA-525v-9gp9-w22h
pkg: node-forge
eco: npm
published: Oct 30, 2026
### Summary
The forge TLS client's check for a missing server certificate read the wrong property and never ran. A malicious TLS server, or an on-path attacker who removes the server's Certificate message, can make `connection.process()` throw a `TypeError`, which crashes applications that use the f…
CVE-2026-118778
GitHub-GHSA
MEDIUM
Forge: AES-GCM authentication bypass via unvalidated tagLength option
GHSA-5cwg-6vw7-rj6p
pkg: node-forge
eco: npm
published: Oct 30, 2026
### Summary
The AES-GCM mode in forge.cipher does not validate the tagLength option passed to start(). With a tagLength of 0 or a value that converts to 0 (such as null, false, '' or '0'), the authentication tag is empty, and decipher.finish() returns true for any ciphertext and additional data whe…
CVE-2026-119186
GitHub-GHSA
MEDIUM
Nuxt dev server arbitrary file read through client error reports
GHSA-x287-wcfc-q46c
pkg: @nuxt/vite-builder
eco: npm
published: Oct 30, 2026
### Summary
A client that can connect to the dev server's HMR socket can send a `nuxt:dev:client-error` event whose message ends in an absolute file path. The dev server reads that file while building the error report, and its contents are returned in the error overlay, on the dev error channel, an…
CVE-2026-119198
GitHub-GHSA
MEDIUM
Nuxt dev server exposes private runtime config through the Nitro dev bundle
GHSA-648h-gw55-m2g7
pkg: @nuxt/vite-builder
eco: npm
published: Oct 30, 2026
### Summary
With Nitro 2 (the default server engine in Nuxt 3 and Nuxt 4), the Nitro development server bundle written by `nuxt dev` can be fetched through the Vite dev server. Nitro inlines the resolved `runtimeConfig` into that bundle, so private runtime config values that were resolved at build …
CVE-2026-119199
GitHub-GHSA
MEDIUM
MariaDB Connector/J: Rogue server can drive large heap allocations from server-declared lengths in OK packets
GHSA-h599-m3w5-9m7x
pkg: org.mariadb.jdbc:mariadb-java-client, org.mariadb.jdbc:mariadb-java-client, org.mariadb.jdbc:mariadb-java-client
eco: maven
published: Oct 30, 2026
## Summary
MariaDB Connector/J sized heap allocations from lengths declared by the server
in OK packets before checking that those lengths fit in the packet. A rogue or
MitM server can make the client allocate megabytes from a packet of a few bytes.
## Details
When `CLIENT_SESSION_TRACK` is negot…
CVE-2026-119276
GitHub-GHSA
MEDIUM
MariaDB Connector/J: Length-encoded integers larger than Integer.MAX_VALUE were truncated before being used as lengths
GHSA-797x-p4mc-jwpm
pkg: org.mariadb.jdbc:mariadb-java-client, org.mariadb.jdbc:mariadb-java-client, org.mariadb.jdbc:mariadb-java-client
eco: maven
published: Oct 30, 2026
## Summary
MariaDB Connector/J narrowed 8-byte length-encoded integers received from the
server to `int` without validation. A rogue or MitM server can send a value above
`Integer.MAX_VALUE` whose truncation becomes a negative or arbitrary length.
## Details
The protocol encodes lengths as length…
CVE-2026-119279
GitHub-GHSA
MEDIUM
MariaDB Connector/J: LOAD DATA LOCAL INFILE file check could be satisfied by text inside quoted identifiers, letting a malicious server read client files
GHSA-fhx5-2xqw-2cgm
pkg: org.mariadb.jdbc:mariadb-java-client, org.mariadb.jdbc:mariadb-java-client, org.mariadb.jdbc:mariadb-java-client
eco: maven
published: Oct 30, 2026
## Summary
MariaDB Connector/J checked a server's LOAD DATA LOCAL INFILE file request by
searching the text of the command it had sent for
`LOAD DATA LOCAL INFILE '<file>'`. The search also matched inside quoted
identifiers, string literals and comments, so text returned by the server and
re-used i…
CVE-2026-119210
GitHub-GHSA
MEDIUM
MariaDB Connector/J: Server could switch character_set_results away from UTF-8 without the client noticing
GHSA-grfq-r75j-rw9x
pkg: org.mariadb.jdbc:mariadb-java-client, org.mariadb.jdbc:mariadb-java-client, org.mariadb.jdbc:mariadb-java-client
eco: maven
published: Oct 30, 2026
## Summary
MariaDB Connector/J decodes every result as UTF-8 and guards
`character_set_client` against a change to another charset, but did not guard
`character_set_results`, and relied on the server's global
`session_track_system_variables` list to be told about charset changes at all.
## Details…
CVE-2026-119281
GitHub-GHSA
MEDIUM
Fiber: CORS wildcard origins matched without a dot boundary, allowing credentialed cross-origin reads
GHSA-g5jq-qmqr-qrwf
pkg: github.com/gofiber/fiber/v2
eco: go
published: Oct 30, 2026
### Summary
In v2.52.1 and v2.52.2 the CORS middleware matched a wildcard origin such as `https://*.example.com` by suffix only, without a dot boundary and without comparing the scheme. Any origin whose host ends with the base domain, for example `https://evil-example.com` or `http://notexample.com…
CVE-2026-119285
NVD
MEDIUM
CVE-2026-62303
Pistache is a high-performance REST toolkit written in C++. From 0.0.5 through 0.4.26, `SegmentTreeNode::sanitizeResource()` in `src/server/router.cc` uses `std::regex_replace()` with the `//+` expression to collapse consecutive slashes. With libstdc++, a path containing tens of thousands of consecu…
CWE: CWE-400, CWE-674
GitHub-GHSA
MEDIUM
charmbracelet/soft-serve: Race in `SetPrivate` leaves a private repository readable by unauthenticated users
GHSA-f3fj-9625-rv3m
pkg: github.com/charmbracelet/soft-serve
eco: go
published: Oct 30, 2026
## Summary
Soft Serve cached repository records in memory with no expiry, and trusted the cached record for every access check. `SetPrivate` cleared the cached record before it saved the new visibility, and not afterwards.
A request that arrived between the two read the old, public record from the…
NVD
MEDIUM
CVE-2026-119285
Fiber is an Express inspired web framework written in Go. From 2.52.1 until 2.52.3, the CORS middleware's validateDomain wildcard matcher in middleware/cors/utils.go strips the scheme and checks only a host suffix without requiring a dot boundary. An application configured with a wildcard-subdomain …
CWE: CWE-346, CWE-942
NVD
MEDIUM
CVE-2026-119210
MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3.3.7, 3.4.5, and 3.5.11, the ClientMessage.validateLocalFileName() check used a regular expression that could match LOAD DATA LOCAL INFILE text inside quoted identifiers, string li…
CWE: CWE-20, CWE-73
NVD
MEDIUM
CVE-2026-119199
Nuxt is an open-source web development framework for Vue.js. From 3.0.0 until 4.6.3, the Nuxt development server can expose the Nitro 2 development bundle at <buildDir>/dev/index.mjs through Vite file serving when the server is reachable over HTTP. Nitro inlines private runtimeConfig values resolved…
CWE: CWE-200, CWE-538
NVD
MEDIUM
CVE-2026-119198
Nuxt is an open-source web development framework for Vue.js. From 4.6.0 until 4.6.3, a client with TCP access to an exposed Nuxt development server can send a nuxt:dev:client-error event over the HMR socket with an absolute file path at the end of its message. The development server reads that file …
CWE: CWE-73
NVD
MEDIUM
CVE-2026-118778
Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used forge.tls.createConnection(), c.session.serverCertificate, RSA key exchange to process the relevant input or security decision. node-forge's TLS clien…
CWE: CWE-476
NVD
MEDIUM
CVE-2026-119051
flat through 6.0.1 contains an uncontrolled resource allocation vulnerability in unflatten() that allows attackers to create huge sparse arrays via unbounded numeric keys. Attackers can supply flattened keys such as a.4294967294, causing iteration with forEach, spread or JSON.stringify to block the …
CWE: CWE-770
NVD
MEDIUM
CVE-2026-118657
Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, Context.Scheme unconditionally trusts forwarded scheme headers from any client. A client that reaches Echo directly over plaintext HTTP can claim an HTTPS scheme and bypass HTTPSRedirect because the request is treated as already secure. Separate…
CWE: CWE-346
GitHub-GHSA
MEDIUM
Autobahn Python: permessage-brotli inflates a whole frame before maxMessagePayloadSize is checked (incomplete fix of GHSA-hxp9-w8x3-p566)
GHSA-pjh6-c8mg-3x7m
pkg: autobahn
eco: pip
published: Oct 28, 2026
### Summary
permessage-brotli inflates each frame fully before checking maxMessagePayloadSize, so one 421-byte frame makes the server allocate about 545 MiB even with a 1 MiB message limit (brotli expands about 1,000,000:1). Any unauthenticated client can exhaust server memory this way on servers t…
CVE-2026-116579
GitHub-GHSA
MEDIUM
Echo: HTTPS Redirect and HSTS Bypass via Unconditional Trust of Forwarded Scheme Headers
GHSA-2ffq-g2xg-c22p
pkg: github.com/labstack/echo/v5, github.com/labstack/echo/v4
eco: go
published: Oct 28, 2026
## Description
`Context.Scheme()` unconditionally trusts four client-controlled HTTP headers to determine the request scheme, with no mechanism to configure trusted sources. This allows a remote unauthenticated attacker to bypass HTTPS redirect enforcement and suppress HSTS headers.
The trusted he…
CVE-2026-118657
GitHub-GHSA
MEDIUM
Echo static file middleware route protection bypass via encoded dot-dot traversal
GHSA-3pmx-cf9f-34xr
pkg: github.com/labstack/echo/v5, github.com/labstack/echo/v4
eco: go
published: Oct 28, 2026
## Summary
Echo v5.2.0 contains a bypass of the fix for GHSA-vfp3-v2gw-7wfq. The fix rejects encoded path separators such as `%2F` and `%5C` before static file path unescaping, but two traversal forms still bypass route-level middleware protections for static files.
The primary bypass uses encoded…
CVE-2026-118654
GitHub-GHSA
MEDIUM
Echo has a Static Middleware Double-Unescape Path Traversal
GHSA-xwq5-6cqp-vx96
pkg: github.com/labstack/echo/v5, github.com/labstack/echo/v4
eco: go
published: Oct 28, 2026
## Summary
Commit a9ede66a (PR #3006, issue #2599) silently fixed a path traversal vulnerability in the Echo web framework's static file middleware.
## Vulnerability
The static middleware double-unescaped URL paths. Go's net/http already decodes Request.URL.Path, but middleware/static.go uncondit…
CVE-2026-118655
NVD
MEDIUM
CVE-2026-87879
Sensitive information disclosure due to improper token validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.
CWE: CWE-347
NVD
MEDIUM
CVE-2026-110185
The Bit Flows: AI Agent Automation & Integrations for Forms, CRM, eCommerce, Google Sheets, and More plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.31.0 via the 'image (any body field referenced by the ImageHelper node's mix tag)' parameter paramet…
CWE: CWE-98
GitHub-GHSA
MEDIUM
Model Context Protocol Python SDK: HTTP client transports followed cross-origin redirects carrying custom headers and bodies
GHSA-5h93-6whr-6q8j
pkg: mcp, mcp
eco: pip
published: Oct 27, 2026
### Summary
In affected versions, the SDK's Streamable HTTP and SSE client transports followed HTTP redirects to any host. If the configured MCP endpoint answered with a redirect to a different origin:
– custom headers set on the client (for example an `X-API-Key` credential) were sent to that orig…
CVE-2026-116685
NVD
MEDIUM
CVE-2026-116689
follow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically follows redirects. From 1.16.0 until 1.16.2, the documented sensitiveHeaders option is checked with value instanceof Array, so an array created in another JavaScript realm is replaced with an empty list even though Array.…
CWE: CWE-201
NVD
MEDIUM
CVE-2026-116685
The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. From 1.8.0 until 1.30.0 and 2.2.0, streamable_http_client, streamablehttp_client, sse_client, ClientSessionGroup, OAuth, and create_mcp_http_client client paths enable follow_redirects an…
CWE: CWE-200
GitHub-GHSA
MEDIUM
undici WebSocket client vulnerable to Denial of Service via unbounded automatic PONG buffering
GHSA-9fm3-97px-rjf6
pkg: undici, undici, undici
eco: npm
published: Oct 27, 2026
### Impact
undici's WebSocket client (including Node.js's bundled `globalThis.WebSocket`) can be driven to exhaust process memory by a malicious or compromised WebSocket server. For every PING frame received, the receiver automatically writes a PONG response to the socket and ignores the `false` re…
CVE-2026-109932
GitHub-GHSA
MEDIUM
undici vulnerable to Denial of Service via unhandled exception in the decompress interceptor
GHSA-55wc-3pg8-jfw6
pkg: undici, undici
eco: npm
published: Oct 27, 2026
## Impact
undici's `decompress` interceptor forwards decompressed response data to the downstream handler from zlib stream event callbacks without catching exceptions those callbacks may throw. undici's engine converts a synchronous throw from a downstream handler into a per-request failure, but th…
CVE-2026-87029
GitHub-GHSA
MEDIUM
snappy-java: JVM crash from unchecked ranges in Snappy.arrayCopy and SnappyOutputStream.rawWrite
GHSA-xqrx-qh46-34m7
pkg: org.xerial.snappy:snappy-java
eco: maven
published: Oct 27, 2026
### Impact
`Snappy.arrayCopy(Object src, int offset, int byteLength, Object dest, int destOffset)` called a native `memcpy` without validating the ranges. A negative or oversized `byteLength` or offset read or wrote outside the arrays and crashed the JVM. `SnappyOutputStream.rawWrite` and `SnappyInp…
CVE-2026-116590
GitHub-GHSA
MEDIUM
Nodemailer: Quadratic backtracking in SMTP AUTH mechanism detection regexes allows pre-auth remote denial of service
GHSA-4ffr-jq9g-5ffx
pkg: nodemailer
eco: npm
published: Oct 27, 2026
## Summary
Nodemailer's SMTP client applies four regular expressions to a peer's EHLO response to detect the supported SASL mechanisms. Each pattern uses an alternation with two overlapping whitespace-matching sub-patterns, which produces quadratic (O(n^2)) backtracking whenever the mechanism name …
GitHub-GHSA
MEDIUM
Nodemailer: Quadratic (O(n^2)) SMTP client reply parsing lets a malicious server or MITM cause a pre-auth remote denial of service
GHSA-4g23-2xm8-66gc
pkg: nodemailer
eco: npm
published: Oct 27, 2026
## Summary
The SMTP client response parser reassembles multiline server replies by appending each continuation line onto a single response-queue entry and re-testing whether that entry is still a partial (continuation) reply on every line. The partial-response test runs `str.slice(str.lastIndexOf('…
NVD
MEDIUM
CVE-2026-41022
Eaton easySoft improperly validates TLS certificates presented by easyE4 devices. A network-adjacent attacker could exploit this weakness to perform a man-in-the-middle attack and potentially intercept or modify communications between easySoft and easyE4.
CWE: CWE-295
NVD
MEDIUM
CVE-2026-116579
Autobahn Python is a WebSocket and WAMP implementation for Python that supports Twisted and asyncio. From 26.7.1 until 26.10.1, PerMessageBrotli.decompress_message_data in compress_brotli.py calls the Brotli decompressor without an output limit and checks maxMessagePayloadSize only after a complete …
CWE: CWE-409, CWE-770
NVD
MEDIUM
CVE-2026-116541
Netty netty-tcnative before 2.0.84.Final contains a denial of service vulnerability in the tcn_write_to_bytebuffer BIO write callback that overreports bytes consumed. Remote TLS 1.3 peers can provoke queued post-handshake records like NewSessionTicket or KeyUpdate to truncate flights, fail connectio…
CWE: CWE-682
NVD
MEDIUM
CVE-2026-116540
netty-tcnative 2.0.66.Final before 2.0.84.Final built against OpenSSL 3.x contains a use-after-free vulnerability in ssl_tlsext_ticket_key_cb during session ticket key rotation. Remote clients performing TLS handshakes while setSessionTicketKeys0 frees the shared key array cause OpenSSL to read free…
CWE: CWE-416
NVD
MEDIUM
CVE-2026-116539
Netty netty-tcnative before 2.0.84.Final contains a heap buffer overflow vulnerability in the tcn_write_to_bytebuffer BIO callback caused by failing to wrap the non-application ring buffer write index. Remote TLS peers can drive handshake, renegotiation, or post-handshake messages into this buffer, …
CWE: CWE-787
GitHub-GHSA
MEDIUM
filelock: StrictSoftFileLock follows a symbolic link swapped in at <path>.filelock and creates claim files in a directory another local user chooses
GHSA-m462-7rxw-wvpg
pkg: filelock
eco: pip
published: Oct 28, 2026
`StrictSoftFileLock` and `AsyncStrictSoftFileLock` check `<path>.filelock` (the coordination directory that holds the lock's state) with one `lstat` call on its name. `lstat` reports what a name is without following a symbolic link (a file that redirects to another path). After that check, the code …
CVE-2026-112938
GitHub-GHSA
MEDIUM
fpdf2 implicitly loads external URLs and local image paths when rendering attacker-controlled content
GHSA-rw7v-4hrq-x6r9
pkg: fpdf2
eco: pip
published: Oct 27, 2026
## Summary
`fpdf2` implicitly dereferences image resource references supplied to rendering APIs. If an application passes untrusted HTML, SVG, template data, or image paths into those APIs, `fpdf2` may issue outbound HTTP(S) requests or attempt to open local filesystem paths.
This behavior is rele…
CVE-2026-114609
NVD
MEDIUM
CVE-2026-76654
An NTLM coercion vulnerability exists on Windows nodes when the subPath supplied in a pod's volumeMounts is set to a symbolic link that points to an attacker-controlled network share. When a kubelet resolves symlinks, it does not reject a target that resolves to a UNC path. As a result, the kubelet …
CWE: CWE-59
NVD
MEDIUM
CVE-2026-87099
Cross-site scripting (XSS) vulnerability due to improper input validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.
CWE: CWE-79
NVD
MEDIUM
CVE-2026-119591
SQLite before 3.54.0 contains a stack exhaustion vulnerability in countOfViewOptimization() that allows attackers to crash the host process via count(*) over a large multi-row VALUES clause. Attackers supplying SQL or a database file with a crafted view can trigger deeply nested TK_PLUS expressions …
CWE: CWE-674
NVD
MEDIUM
CVE-2026-119371
SQLite before 3.54.0 contains a stack exhaustion vulnerability that allows attackers to bypass the SQLITE_LIMIT_EXPR_DEPTH nesting limit because common table expressions are not counted against it. Attackers can supply a WITH clause chaining tens of thousands of CTEs, via plain SQL or a view in an u…
CWE: CWE-674
GitHub-GHSA
MEDIUM
filelock ReadWriteLock: a crafted lock database makes every acquire stall or hang regardless of timeout
GHSA-cwqr-hh33-gh44
pkg: filelock
eco: pip
published: Oct 28, 2026
`ReadWriteLock` and `AsyncReadWriteLock` (the SQLite-backed reader/writer lock) run `PRAGMA journal_mode=MEMORY` on a fresh connection for every acquire. That statement makes SQLite load the whole schema (the `sqlite_master` table, which lists every table and index with its `CREATE` text) of whateve…
CVE-2026-112915
NVD
MEDIUM
CVE-2026-112455
An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to access sensitive user da…
CWE: CWE-862
NVD
MEDIUM
CVE-2026-117627
A flaw was found in the JWT Authorization Grant implementation of the keycloak-services component. When an OIDC or Google identity provider is configured with specific login restrictions, such as claim filtering, these checks are correctly applied during standard browser logins but are skipped durin…
CWE: CWE-862
NVD
MEDIUM
CVE-2026-75520
Domoticz is a free, open source home automation system for Linux, Windows, macOS, and Raspberry Pi. Prior to 2026.3, the `udevices` JSON command handler, `Cmd_UpdateDevices` in `main/WebServerCmds.cpp`, performed no `session.rights` check before invoking a Lua parser script, while its sibling comman…
CWE: CWE-22, CWE-862
GitHub-GHSA
MEDIUM
LangGraph CLI prints the registry push token in `langgraph deploy –verbose` output
GHSA-8prr-f582-jqq3
pkg: langgraph-cli
eco: pip
published: Oct 28, 2026
### Summary
`langgraph deploy –verbose` printed the temporary registry push token that the CLI uses to log Docker in to the deployment's image registry. Anyone who could read that output, for example in CI logs, could use the token until it expired.
### Details
When Docker is available, `langgra…
CVE-2026-115885
NVD
MEDIUM
CVE-2026-50542
Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to 4.4.3, missing access-control checks on `GET /layout/status/{id}` allow an authenticated user with any privileges to view the `status and metadata` of any layout, includ…
CWE: CWE-862
GitHub-GHSA
MEDIUM
Neko: Authorization bypass in legacy WebRTC input handling
GHSA-5cp7-fp4j-wwcv
pkg: github.com/m1k1o/neko/server
eco: go
published: Oct 27, 2026
### Impact
When legacy mode is enabled and `session.implicit_hosting` is enabled, the legacy WebRTC data channel incorrectly authorizes input events due to a logic error in `LegacyIsHost()`.
As a result, an authenticated room member may be able to send mouse and keyboard input through the legacy W…
CVE-2026-116679
NVD
MEDIUM
CVE-2026-116679
Neko is a a self-hosted virtual browser that runs in Docker and uses WebRTC. From version 3.0.0 until 3.1.5, Neko deployments with legacy mode and session.implicit_hosting enabled incorrectly authorize legacy WebRTC data-channel input because LegacyIsHost() evaluates host status incorrectly. An auth…
CWE: CWE-863
GitHub-GHSA
MEDIUM
Authlib: Unvalidated request_uri fetch in JWT-secured authorization request (JAR) leading to SSRF
GHSA-x4rv-c3wx-4cr8
pkg: authlib
eco: pip
published: Oct 27, 2026
### Summary
Authlib's RFC 9101 (JAR) extension passes the attacker-controlled `request_uri` authorization parameter straight to the `get_request_object()` fetch hook with no validation, at a pre-authentication endpoint. Authlib already defines the pre-registration allowlist for this (`request_uris`…
CVE-2026-114620
NVD
MEDIUM
CVE-2026-117471
Psono Server CE && EE versions 0.1.0 through 7.2.3 accepted a user-controlled host when configuring a personal Duo device and passed it to the Duo client without an allowlist or explicit timeout. An authenticated remote attacker could cause the server to connect to selected hosts over HTTPS on port …
CWE: CWE-918
NVD
MEDIUM
CVE-2026-120250
OpenAlgo 1.0.0.29 before 2.0.3.1 contains an improper certificate validation vulnerability in utils/email_utils.py and utils/email_debug.py that disables TLS hostname and certificate checks for STARTTLS and SMTPS. Network-positioned attackers can present a forged certificate to intercept SMTP creden…
CWE: CWE-295
NVD
MEDIUM
CVE-2026-7003
WIT SynApps Runtime through 1.4.11 contains a hardcoded credentials vulnerability that allows unauthenticated attackers to recover static OAuth clientId and clientSecret values embedded in JavaScript delivered to the frontend, such as in parameters.js. Attackers can extract these exposed application…
CWE: CWE-798
GitHub-GHSA
MEDIUM
charmbracelet/soft-serve HTTP responses disclose the existence and names of private repositories
GHSA-fgxm-5hvv-x4vh
pkg: github.com/charmbracelet/soft-serve
eco: go
published: Oct 30, 2026
## Summary
Soft Serve answers Go's `?go-get=1` requests by walking up the requested path until it finds a repository, then rendering that repository's name and clone URL into a `go-import` meta tag. The walk checked that each candidate repository existed, but never that the caller could read it.
A…
NVD
MEDIUM
CVE-2026-119122
Crawl4AI before 0.9.5 contains a blind server-side request forgery vulnerability in the Docker server that allows API clients to bypass the egress proxy by enabling check_cache_freshness. Attackers can cache a controlled URL, then trigger CacheValidator to follow 302 redirects or DNS rebinding to in…
CWE: CWE-918
NVD
MEDIUM
CVE-2026-27401
Missing Authorization vulnerability in YITH YITH PayPal Express Checkout for WooCommerce yith-paypal-express-checkout-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YITH PayPal Express Checkout for WooCommerce: from n/a through 1.62.0.
CWE: CWE-862
GitHub-GHSA
MEDIUM
Tornado: Event loop blocking and excess memory use from chunked bodies with many small chunks
GHSA-r4j5-9xpp-3985
pkg: tornado
eco: pip
published: Oct 28, 2026
### Summary
When Tornado reads an HTTP/1.1 body that uses chunked transfer encoding, it processes all chunks that have already arrived without yielding to the event loop. A client can send a body made of millions of 1-byte chunks, which blocks the event loop (and therefore every other connection se…
CVE-2026-115927
GitHub-GHSA
MEDIUM
Tornado: Quadratic CPU usage when parsing HTTP headers with line folding
GHSA-pcg2-g6cj-q92c
pkg: tornado
eco: pip
published: Oct 28, 2026
### Summary
Tornado's HTTP header parser takes quadratic time (O(n²)) when a header value is continued across many "obsolete line folding" (obs-fold) lines. An unauthenticated attacker can send a request whose header block is mostly short continuation lines. Parsing it uses a large amount of CPU o…
CVE-2026-116577
NVD
MEDIUM
CVE-2026-118663
@hono/node-server allows running the Hono application on Node.js. From 1.19.10 until 2.1.3, serveStatic decodes a request path a second time after Hono has already decoded it for routing, so a malformed percent-encoded sequence can make route middleware evaluate an encoded path while static file res…
CWE: CWE-174
GitHub-GHSA
MEDIUM
filelock: StrictSoftFileLock creates its claim directories without the lock mode, so another local user with a write bit on them can end a live hold
GHSA-6627-m3xw-93mp
pkg: filelock
eco: pip
published: Oct 28, 2026
`StrictSoftFileLock` and `AsyncStrictSoftFileLock` apply the caller's `mode` to the sentinel (the lock file at `<path>`) and to both claim files (the files whose presence says a process wants or holds the lock). They create the two directories that hold the claims, `<path>.filelock` and `<path>.file…
CVE-2026-112908
GitHub-GHSA
MEDIUM
filelock: WindowsFileLock ignores mode: a 0o600 lock file and the ReadWriteLock database inherit the directory ACL
GHSA-8mx5-7m5m-r77g
pkg: filelock
eco: pip
published: Oct 28, 2026
filelock on Windows ignores the `mode` argument. `FileLock(path, mode=0o600)` creates the same file as `FileLock(path)`: one with no security descriptor of its own (the Windows record that says who may access a file). Its access list, or ACL, is whatever the lock directory hands down to new files. f…
CVE-2026-112910
GitHub-GHSA
MEDIUM
opentelemetry-java: Quadratic CPU consumption in W3C tracestate parsing
GHSA-ccrj-gw8r-854m
pkg: io.opentelemetry:opentelemetry-api
eco: maven
published: Oct 28, 2026
### Summary
OpenTelemetry Java's W3C trace-context propagator permits excessive CPU consumption when extracting crafted `tracestate` headers, potentially leading to denial of service. Regex backtracking causes quadratic parsing time for headers containing long runs of spaces or tabs without a follo…
CVE-2026-118259
GitHub-GHSA
MEDIUM
@hono/node-server: `serveStatic` decodes the request path a second time, leading to bypass of middleware on static paths
GHSA-rmxm-3fg6-px4f
pkg: @hono/node-server
eco: npm
published: Oct 28, 2026
### Summary
`serveStatic` decodes the request path a second time after Hono has already decoded it for routing. A crafted request can be routed as one path and served as another, so middleware mounted on a static prefix does not run for a file under that prefix.
### Details
Hono decodes the reque…
CVE-2026-118663
GitHub-GHSA
MEDIUM
Echo has Rate Limiter Bypass via Spoofed X-Forwarded-For Header in Default Configuration
GHSA-246p-cpwv-v3jq
pkg: github.com/labstack/echo/v5, github.com/labstack/echo/v4
eco: go
published: Oct 28, 2026
## Summary
When `echo.New()` is used without explicitly setting `Echo#IPExtractor`, the `RealIP()` method falls back to reading the client-supplied `X-Forwarded-For` (or `X-Real-IP`) header without any proxy-origin validation. The default `RateLimiter()` middleware derives its per-client identifier…
CVE-2026-118653
GitHub-GHSA
MEDIUM
Echo has CSRF Protection Bypass via MethodOverride Rewriting POST to Safe Method
GHSA-r7w9-592q-9vg4
pkg: github.com/labstack/echo/v5, github.com/labstack/echo/v4
eco: go
published: Oct 28, 2026
## Summary
The `MethodOverride` middleware accepts any non-empty string as the override target method — including safe methods (GET, HEAD, OPTIONS, TRACE) — when rewriting a POST request. When `MethodOverride` is registered before `CSRF` in the post-routing middleware chain (`e.Use()`), it rewr…
CVE-2026-118266
GitHub-GHSA
MEDIUM
Echo: Reverse Proxy Forwards Attacker-Supplied X-Real-IP to Upstream by Default
GHSA-99jh-6h7p-pp36
pkg: github.com/labstack/echo/v5, github.com/labstack/echo/v4
eco: go
published: Oct 28, 2026
## Summary
The Echo proxy middleware (`middleware/proxy.go`) preserves an incoming `X-Real-IP` header verbatim and forwards it to the upstream service when `Echo#IPExtractor` is not configured — which is the default. Because any HTTP client can supply an arbitrary `X-Real-IP` value, an attacker c…
CVE-2026-118651
NVD
MEDIUM
CVE-2026-87097
Sensitive information disclosure due to insufficiently protected credentials. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.
CWE: CWE-522
GitHub-GHSA
MEDIUM
qs : qs.stringify with arrayFormat 'comma' throws an uncaught TypeError on array elements carrying a non-callable own toString (DoS)
GHSA-6pq8-jhm2-2vcw
pkg: qs
eco: npm
published: Oct 27, 2026
## Summary
`qs.stringify(obj, { arrayFormat: 'comma' })` throws an uncaught `TypeError: Cannot convert object to primitive value` when an array in `obj` contains an element that carries an own, non-callable `toString` property (for example `{ a: [ { toString: 'x' } ] }`). A remote, unauthenticated …
CVE-2026-110816
GitHub-GHSA
MEDIUM
Nodemailer: RFC 5322 comment inside an angle-bracket address is never stripped
GHSA-g73g-hqqh-jr95
pkg: nodemailer
eco: npm
published: Oct 27, 2026
## Summary
Nodemailer's address parser has three published, patched fixes for RFC 5322 comment `( … )` handling inside an addr-spec: GHSA-cc9r-2j5m-2m83 (comment glued two domain atoms into one), GHSA-g57g-f23g-4646 (the same glue for a quoted local part), and the related ReDoS fixes GHSA-prgh-xp…
NVD
MEDIUM
CVE-2026-116577
Tornado is a Python web framework and asynchronous networking library. Prior to 6.6, Tornado's HTTP header parser accepts obsolete line folding and repeatedly concatenates short continuation lines, causing quadratic CPU consumption on the IOLoop thread. An unauthenticated client can submit a header …
CWE: CWE-407, CWE-770
NVD
MEDIUM
CVE-2026-115927
Tornado is a Python web framework and asynchronous networking library. Prior to 6.6.0, Tornado decodes HTTP/1.1 chunked transfer encoding by processing body data that has already arrived without yielding to the event loop. A remote unauthenticated peer can send millions of one-byte chunks to monopol…
CWE: CWE-400, CWE-770
NVD
MEDIUM
CVE-2026-116467
A security flaw has been discovered in ggml-org llama.cpp up to 0.7.0. Affected by this vulnerability is an unknown functionality of the file src/llama-sampler.cpp of the component Mirostat Sampler. The manipulation results in reachable assertion. It is possible to launch the attack remotely. The pr…
CWE: CWE-617
NVD
MEDIUM
CVE-2026-82388
bt_hfp_hf_connect() in subsys/bluetooth/host/classic/hfp_hf.c allocates the per-connection HFP Hands-Free object with hfp_hf_create(), which starts an SDP discovery by passing the object's embedded hf->sdp_param to bt_sdp_discover(). That call links the caller-owned parameter block into the SDP clie…
CWE: CWE-416
NVD
MEDIUM
CVE-2026-88941
Kaspersky has fixed a vulnerability in the Network Agent for Windows module of Kaspersky Security Center. The vulnerability could potentially cause the Network Agent module of Kaspersky Security Center to malfunction. There are no evidence of the vulnerability exploitation in-the-wild.
CWE: CWE-306
GitHub-GHSA
MEDIUM
Keycloak vulnerable to information disclosure through arbitrary filesystem path probing
GHSA-9jrw-8xf7-xqhq
pkg: org.keycloak:keycloak-services
eco: maven
published: Oct 29, 2026
### Description
A flaw was found in Keycloak. A realm administrator with the "manage-realm" role can exploit this vulnerability by submitting an arbitrary filesystem path as a keystore parameter when creating a key provider component. This allows the administrator to probe arbitrary filesystem paths…
CVE-2026-9083
NVD
MEDIUM
CVE-2026-115223
The Smart Popup by Supsystic WordPress plugin before 2.0.2 does not prevent template-injection payloads from being stored in a popup text block and later evaluated by its template engine, because the filter meant to strip template delimiters runs before a decoding step that reconstructs them, allowi…
CWE: CWE-1336
GitHub-GHSA
MEDIUM
SiYuan: MCP file tool's blocklist is incomplete relative to the HTTP file API it claims to align with, exposing publish-mode passwords and other sensitive workspace files
GHSA-c8r8-95hg-mp34
pkg: github.com/siyuan-note/siyuan/kernel
eco: go
published: Oct 27, 2026
## Summary
`kernel/mcp/tools/file.go`'s `resolvePath()` includes an explicit comment stating its
sensitive-path blocklist is meant to align with the HTTP file API's established blacklist
(`refuseToAccess()` in `kernel/api/file.go`), following the remediation for GHSA-cvhv-7xhj-xjp8
("Unauthenticate…
CVE-2026-60083
GitHub-GHSA
MEDIUM
Forge: Prototype Pollution in forge.http cookie handling via a malicious Set-Cookie
GHSA-6wvx-3r32-xmcg
pkg: node-forge
eco: npm
published: Oct 30, 2026
### Summary
The `forge.http` client stored cookies from `Set-Cookie` response headers in a plain object keyed by cookie name and path. A malicious server could use the cookie name `__proto__` to add properties to `Object.prototype`, use inherited names such as `constructor` to add properties to `Obj…
CVE-2026-118777
GitHub-GHSA
MEDIUM
Nuxt dev server exposes generated appSecret through Vite file serving
GHSA-3xf4-9g3c-4h4w
pkg: @nuxt/vite-builder
eco: npm
published: Oct 30, 2026
### Impact
When no `appSecret` is configured (via `NUXT_APP_SECRET`, `NITRO_APP_SECRET` or `runtimeConfig.appSecret`), `nuxt dev` generates a development secret and stores it in `<buildDir>/app-secret` (by default `.nuxt/app-secret`). The build directory is inside the directories that Nuxt passes t…
CVE-2026-119201
GitHub-GHSA
MEDIUM
NationalSecurityAgency/emissary has an incomplete fix for CVE-2026-35571
GHSA-c6q7-wqw2-h65w
pkg: gov.nsa.emissary:emissary
eco: maven
published: Oct 30, 2026
### Summary
The URL validation regex `^(https?:/)?/.*` added to emissary's `NavAction.java` allows protocol-relative URLs (`//evil.com/…`) and single-slash scheme variants (`http:/evil.com`) to bypass validation, enabling SSRF and open redirect attacks.
### Affected Package
– **Ecosystem:** Mav…
CVE-2026-54442
NVD
MEDIUM
CVE-2026-119201
Nuxt is an open-source web development framework for Vue.js. From 4.6.0 until 4.6.3, nuxt dev stores a generated appSecret in <buildDir>/app-secret, by default .nuxt/app-secret, within a directory allowed by Vite's server.fs configuration. A client with direct HTTP access to an exposed development s…
CWE: CWE-552
NVD
MEDIUM
CVE-2026-118767
Botan is a C++ cryptography library. From 1.11.22 until 3.13.0, Botan's Python binding converted Python strings containing U+0000 to const char* values without consistently rejecting the embedded NUL, causing bcrypt and check_bcrypt to process only the prefix before the NUL. Applications could valid…
CWE: CWE-158
NVD
MEDIUM
CVE-2026-71569
Server-Side Request Forgery (SSRF) vulnerability in Apache Camel A2A component.
This issue affects Apache Camel: from 4.21.0 before 4.22.2.
WebhookUrlValidator classified a push notification webhook host in two places that did not agree. A host written as an IP literal was matched against a li…
CWE: CWE-918
NVD
MEDIUM
CVE-2026-116844
Fclairamb ftpserverlib through 0.32.4 contains a cleartext transmission vulnerability because TransferOpen checks only the transferTLS flag set by PROT, not whether the prepared data connection uses TLS. When a client sends PROT P after PASV or PORT, file contents and directory listings cross the ne…
CWE: CWE-319
NVD
MEDIUM
CVE-2026-94386
Use of Cache Containing Sensitive Information vulnerability in Apache Camel Oauth component.
This issue affects Apache Camel: from 4.19.0 before 4.22.2.
OAuthClientCredentialsTokenResolver obtains OAuth 2.0 bearer tokens through the client credentials grant on behalf of the components that aut…
CWE: CWE-524
GitHub-GHSA
MEDIUM
Seroval: Script injection through RegExp sources in serialized output
GHSA-9wx9-5pv9-3349
pkg: seroval, seroval
eco: npm
published: Oct 28, 2026
### Summary
seroval writes a `RegExp` as a regular expression literal. In affected versions, the `<` character in a `RegExp` source is written without escaping. A source built from untrusted input can then end the HTML `<script>` element that the serialized output is placed in, and run script in th…
CVE-2026-116582
GitHub-GHSA
MEDIUM
filelock: SoftFileLock removes a live holder's marker when another user forges the PID in a writable marker
GHSA-rfpc-qcw5-3pc4
pkg: filelock
eco: pip
published: Oct 28, 2026
`SoftFileLock`, `MarkerSoftFileLock`, `SoftFileLease`, their async variants and a `FileLock` that has fallen back to a soft lock on `ENOSYS` decide from the record inside the marker file whether its owner is gone. The marker is the file whose presence says a process holds the lock. They do not check…
CVE-2026-112939
GitHub-GHSA
MEDIUM
filelock: SoftFileLock stale-lock break removes a live lock file on a reused inode number and admits two holders
GHSA-fq56-3cx3-fjxp
pkg: filelock
eco: pip
published: Oct 28, 2026
The stale-lock break shared by `SoftFileLock`, `MarkerSoftFileLock` and `SoftFileLease` (and their async variants, and a `FileLock` that has fallen back to a soft lock on `ENOSYS`, the "not implemented" error) recognises the marker it judged stale by two values. The marker is the lock file at `<path…
CVE-2026-112935
GitHub-GHSA
MEDIUM
Echo has Arbitrary Scheme Injection in WWWRedirect/NonWWWRedirect Middlewares via X-Forwarded-Proto
GHSA-23wf-92cp-8pcj
pkg: github.com/labstack/echo/v5, github.com/labstack/echo/v4
eco: go
published: Oct 28, 2026
## Summary
The `c.Scheme()` method in Echo (`context.go:162-181`) trusts the `X-Forwarded-Proto`, `X-Forwarded-Protocol`, and `X-Url-Scheme` request headers without validating that the value is `http` or `https`. The `WWWRedirect()` and `NonWWWRedirect()` middlewares use this unsanitized scheme to …
CVE-2026-118658
NVD
MEDIUM
CVE-2026-116582
Seroval facilitates JavaScript value stringification, including complex structures beyond JSON.stringify capabilities. Prior to 1.0.0 and from 1.5.5 until 1.6.10, the JavaScript-output APIs serialize a RegExp source containing a less-than character without the escaping needed for an HTML script elem…
CWE: CWE-79, CWE-116
GitHub-GHSA
MEDIUM
Keycloak allows unauthorized access to resources via uma permission ticket bypass
GHSA-w3p3-7cjg-vgfw
pkg: org.keycloak:keycloak-services
eco: maven
published: Oct 29, 2026
### Description
A flaw was found in org.keycloak.authorization. An authenticated user with a granted User-Managed Access (UMA) permission ticket for one resource can exploit this by using a specific permission request prefix to bypass per-resource access control. This allows the user to gain unautho…
CVE-2026-9799
NVD
MEDIUM
CVE-2026-87897
A SSRF vulnerability found that enables access to internal Chrome Devtools Protocol APIs that can leak the JWT authentication token for another user. A low privileged attacker could continually exploit this vulnerability to leak the JWT authentication token for another user when they start a recordi…
CWE: CWE-918
GitHub-GHSA
MEDIUM
Authlib: OpenID implicit grant checks raw scope instead of allowed scope before issuing ID tokens
GHSA-q686-2qmg-hqc7
pkg: authlib
eco: pip
published: Oct 27, 2026
## Report metadata
| Field | Value |
| — | — |
| Package | `authlib` (PyPI, `pkg:pypi/authlib`) |
| Repository | https://github.com/authlib/authlib |
| Component | `authlib.oidc.core.grants.implicit.OpenIDImplicitGrant.validate_authorization_request` |
| Vulnerability class | Authorization bypa…
CVE-2026-114619
NVD
MEDIUM
CVE-2026-119573
Traefik 3.7.11 before 3.7.15 contains an authorization bypass in the Kubernetes Ingress NGINX provider that skips the cross-namespace check on the auth-tls-secret annotation when a cached client authentication TLS option is reused. Users who can create Ingresses can reference another namespace's CA …
CWE: CWE-863
NVD
MEDIUM
CVE-2026-118680
SiYuan 3.8.7 through 3.8.8 fails to normalize Windows GLOBALROOT device-namespace aliases, bypassing the IsSensitivePath denylist. Attackers can invoke importStdMd with a GLOBALROOT-prefixed path to copy the API token and TLS private key into the publicly served assets directory.
CWE: CWE-22
NVD
MEDIUM
CVE-2026-120217
A vulnerability was detected in Delgan loguru 0.7.3. The affected element is the function AnsiParser.feed of the file loguru/_colorizer.py of the component ANSI Color-Markup Parser. Performing a manipulation results in inefficient regular expression complexity. The attack is possible to be carried o…
CWE: CWE-400, CWE-1333
NVD
MEDIUM
CVE-2026-109386
The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.8.14.3. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authe…
CWE: CWE-862
GitHub-GHSA
MEDIUM
russh: peer-declared zero maximum packet size permanently stalls channel writes (silent AsyncWrite hang)
GHSA-fw5c-8223-6h42
pkg: russh
eco: rust
published: Oct 30, 2026
## Summary
A peer can advertise `maximum packet size = 0` in its channel-open message (`CHANNEL_OPEN` when attacking a server, `CHANNEL_OPEN_CONFIRMATION` when attacking a client). russh accepts the value without validation and copies it into the channel write state, where it caps the size of every…
CVE-2026-116774
GitHub-GHSA
MEDIUM
russh's SSH client is susceptible to unbounded allocations via EXT_INFO packets
GHSA-4p9f-7p9m-5vfg
pkg: russh
eco: rust
published: Oct 30, 2026
### Summary
**All evidence, reproduction steps, and scripts in the report were verified against a real running instance. Nothing is fabricated or synthetic; every verdict is backed by captured output from an actual deployment.** Concretely, the evidence comes from executing the real russh v0.64.1 c…
CVE-2026-116773
NVD
MEDIUM
CVE-2026-119121
Crawl4AI from 0.9.0 before 0.9.5 contains a JavaScript injection vulnerability in the Docker API server that allows authenticated API clients to run arbitrary JavaScript in the crawl page via allowlisted css_selector and wait_for fields. Attackers can inject quotes into css_selector or supply js: co…
CWE: CWE-95
NVD
MEDIUM
CVE-2026-118667
LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and stream runs from Python applications. From langgraph-sdk 0.4.0 until 0.4.6, and from langgraph 1.2.3 until 1.2.14 when RemoteGraph v3 streaming uses an affected langgraph-sdk version, the synchro…
CWE: CWE-22
GitHub-GHSA
MEDIUM
LangGraph: Unencoded identifiers in LangGraph SDK v3 streaming can redirect authenticated GET requests
GHSA-3fx2-cqw9-xr3c
pkg: langgraph-sdk, langgraph
eco: pip
published: Oct 28, 2026
### Summary
The LangGraph Python SDK v3 streaming client interpolates caller-supplied `thread_id` and `assistant_id` values into request paths without encoding them at four synchronous and asynchronous call sites. Relative path segments can therefore redirect an authenticated GET request to another…
CVE-2026-118667
NVD
MEDIUM
CVE-2026-50543
Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to 4.4.3, missing authorization on `POST /displaygroup/criteria/{displayGroupId}` allows an authenticated user to send criteria updates to any display via `XMR`. These crit…
CWE: CWE-862
NVD
MEDIUM
CVE-2026-112471
A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted image may lead to unexpected process termination.
CWE: CWE-119
GitHub-GHSA
MEDIUM
signalk-server has SSRF via absolute signalk.appIcon URL in the app store icon fetcher
GHSA-7wpf-ch8f-5f4x
pkg: signalk-server
eco: npm
published: Oct 30, 2026
### Summary
The app store icon code (`dist/appstore/icon-probe.js` around line 200 and `icon-bytes.js` around line 138) resolves a plugin's declared `signalk.appIcon`. Relative paths are pinned to the CDN, but an absolute http(s) URL is used as-is: the server fetches it, follows redirects, and stor…
NVD
MEDIUM
CVE-2026-81472
Dell iDRAC Service Module (iSM) for Windows, Dell iDRAC Service Module (iSM) for Linux, and Dell iDRAC Service Module (iSM) for ESXi, versions prior to 6.1.1.0, contains an Improper Control of Generation of Code ('Code Injection') vulnerability. A high privileged attacker with local access could pot…
CWE: CWE-94
GitHub-GHSA
MEDIUM
Authlib: ID token can disable its own nonce validation via the nonce_supported claim
GHSA-c5mf-xmp2-59rc
pkg: authlib
eco: pip
published: Oct 27, 2026
### Summary
`OpenIDMixin.parse_id_token()` reads the `nonce_supported` claim from the ID token it is validating. When that claim is boolean `false`, the expected nonce is set to `None` and nonce validation is skipped for that token.
An ID token that carries this claim is therefore accepted in a se…
CVE-2026-114617
GitHub-GHSA
MEDIUM
Rustls: Session Debug formatting exposes TLS master secrets and resumption PSKs
GHSA-c8m5-c952-6cm4
pkg: rustls, rustls
eco: rust
published: Oct 27, 2026
### Summary
Formatting a client session value with Debug exposes its TLS 1.2 master secret or TLS 1.3 resumption PSK. A custom session store that logs these values can disclose keys to readers of the logs. Ordinary connection and built-in cache diagnostics remain redacted, and the session-store int…
GitHub-GHSA
MEDIUM
minimatch has potential denial of service via globparts amplification
GHSA-g3hv-75wg-m249
pkg: minimatch
eco: npm
published: Oct 30, 2026
minimatch 10.2.6 contains an attacker-controlled pattern amplification in firstPhasePreProcess() when optimizationLevel >= 2.
researcher: Reid Downing (b1nv0id)
files:
– src/index.ts: 690-770
– src/index.ts: 780-796
issue:
input-controlled growth of globParts during first-phase preprocessing, fo…
CVE-2026-118764
GitHub-GHSA
MEDIUM
Glob: AbortSignal cancellation bypass allows post-timeout filesystem traversal
GHSA-3g3m-2fjr-6pw4
pkg: glob
eco: npm
published: Oct 30, 2026
### Summary
In glob 13.0.6, an aborted async walk rejects or emits an error but continues recursively reading directories in the background.
The root cause is that abort branches in src/walker.ts call cb() without returning. As a result, callers that rely on signal or AbortSignal.timeout() to boun…
CVE-2026-118773
GitHub-GHSA
MEDIUM
OpenWISP Controller CA CRL REST API does not scope requests to managed organizations
GHSA-9gh4-xw24-9xh5
pkg: openwisp-controller
eco: pip
published: Oct 30, 2026
## Summary
The authenticated REST API endpoint for downloading a CA Certificate Revocation List resolves the requested CA without applying the organization-scoped queryset used by the rest of the PKI API.
An organization manager with CA view permission can request another organization's sequential…
CVE-2026-116677
GitHub-GHSA
MEDIUM
joserfc: Compact JWS size guard allocates attacker-controlled segments before rejection
GHSA-9pg5-8c7x-5hfx
pkg: joserfc
eco: pip
published: Oct 30, 2026
## Summary
joserfc 1.7.4 defines compact-JWS header, payload, and signature limits, but
calls `value.split(b".")` before validating them. Python `bytes.split()` copies
the attacker-controlled segments, so the current guard allocates roughly one
complete payload before rejecting it.
## Reproduction…
CVE-2026-119284
GitHub-GHSA
MEDIUM
Vite: `server.fs.deny` bypassed with queries
GHSA-8g5g-mxqh-grgj
pkg: vite
eco: npm
published: Oct 29, 2026
### Summary
The contents of files that are specified by [`server.fs.deny`](https://vite.dev/config/server-options#server-fs-deny) can be returned to the browser. This is the same as https://github.com/vitejs/vite/security/advisories/GHSA-v2wj-q39q-566r.
### Impact
Only apps that match the followi…
CVE-2026-118662
GitHub-GHSA
MEDIUM
Crass: Non-ASCII characters cause superlinear CPU consumption
GHSA-8vfg-2r28-hvhj
pkg: crass
eco: rubygems
published: Oct 29, 2026
### Impact
When parsing an input containing non-ASCII characters, inefficiencies in how Crass tracks the positions of multi-byte characters result in superlinear parsing time. An attacker-controlled input consisting of many non-ASCII characters could cause excessive CPU consumption and potentially …
CVE-2026-61848
GitHub-GHSA
MEDIUM
Crass: A large number of adjacent CSS comments can trigger a SystemStackError
GHSA-wwpr-jff3-395c
pkg: crass
eco: rubygems
published: Oct 29, 2026
### Impact
When the `:preserve_comments` option is not enabled (which is the default behavior), Crass discards CSS comments by recursively consuming the next token. An attacker who provides a stylesheet containing a very large number of adjacent comments can cause excessive recursion and trigger a …
CVE-2026-61847
GitHub-GHSA
MEDIUM
Crass: Deeply nested CSS blocks and functions can trigger a SystemStackError or excessive memory usage
GHSA-6jxj-px6v-747w
pkg: crass
eco: rubygems
published: Oct 29, 2026
### Impact
Crass recursively parses CSS simple blocks and functions without a depth guard. An attacker-controlled value containing many deeply nested blocks can recurse until Ruby raises `SystemStackError: stack level too deep`, or can cause excessive memory usage.
### Patches
This is fixed in Cr…
CVE-2026-61846
GitHub-GHSA
MEDIUM
Crass: Incorrect tokenization of bad URLs enables CSS sanitizer bypass
GHSA-pq4g-8rxf-4g29
pkg: crass
eco: rubygems
published: Oct 28, 2026
## Summary
Crass's tokenizer didn't terminate a bad URL token at a `)` that followed an escaped backslash (`\\`). As a result, Crass consumed more input as part of the bad URL than a spec-compliant browser does. CSS sanitizers that parse untrusted CSS with Crass and re-emit it could be tricked into…
CVE-2026-116695
GitHub-GHSA
MEDIUM
Seroval: Code injection through a typed array's own constructor property
GHSA-f86p-h4j2-7qgj
pkg: seroval
eco: npm
published: Oct 28, 2026
### Summary
seroval writes a typed array as a call to its constructor. In affected versions, the constructor name in the output is read from a property that data on the value can replace, and it is written without checks. A typed array that received properties from untrusted data can then put arbit…
CVE-2026-116583
GitHub-GHSA
MEDIUM
Go JOSE: Panics in JSON parsing
GHSA-vvm8-gf78-28g4
pkg: github.com/go-jose/go-jose/v4, github.com/go-jose/go-jose/v3
eco: go
published: Oct 28, 2026
### Summary
Parsing deeply nested JSON structures can hit Go's stack limit, causing the application to crash.
Note: this advisory is the same as https://github.com/go-jose/go-jose/security/advisories/GHSA-6mp9-8xrw-74r4.
### Impact
Denial of service vulnerability. Any application that parses unt…
CVE-2026-116586
GitHub-GHSA
MEDIUM
Go JOSE: Panic during CBC-HMAC processing
GHSA-4w3g-jfj2-cw2q
pkg: github.com/go-jose/go-jose/v4, github.com/go-jose/go-jose/v3
eco: go
published: Oct 28, 2026
### Summary
Decrypting a ciphertext with "A128CBC-HS256", "A192CBC-HS384", or "A256CBC-HS512" can result in a panic on untrusted input.
Note this advisory is the same as https://github.com/go-jose/go-jose/security/advisories/GHSA-6mp9-8xrw-74r4.
### Details
Insufficient validation of parameters …
CVE-2026-116585
GitHub-GHSA
MEDIUM
GraphQL Tools: Shared legacy executor routes one subscription's results to a different caller
GHSA-mp66-8ww2-pcwm
pkg: @graphql-tools/executor-legacy-ws
eco: npm
published: Oct 28, 2026
# Cross-tenant subscription data leak in `@graphql-tools/executor-legacy-ws`: a shared `websocket.onmessage` is replaced on every `subscribe()`, and `DATA` frames are delivered without checking the protocol operation id
## Report metadata
| Field | Value |
| — | — |
| Package | `@graphql-tools…
CVE-2026-118666
GitHub-GHSA
MEDIUM
Highcharts Dashboards / Grid Pro: `DataTable.setCell` and column writers treat `__proto__` as an existing column.
GHSA-c75x-9x9h-28rm
pkg: @highcharts/dashboards, @highcharts/grid-pro
eco: npm
published: Oct 28, 2026
### Impact
When a single cell value is written to a data table, the column id is used as a key on the table's column collection without filtering, so a column id of `__proto__` resolves to `Object.prototype`, is taken for an existing column, and the write lands at the row index on `Object.prototype`…
CVE-2026-118247
GitHub-GHSA
MEDIUM
Highcharts Dashboards: `__proto__` data table id writes sync listeners to `Object.prototype`
GHSA-jqgh-w3cc-7jqw
pkg: @highcharts/dashboards
eco: npm
published: Oct 28, 2026
### Impact
The data cursor keeps its listener and state bookkeeping in plain objects keyed by data table id, so a table id of `__proto__` supplied in the `dataPool` connector configuration resolves to `Object.prototype` when a sync registers its listeners, and the registration creates a property on …
CVE-2026-118243
GitHub-GHSA
MEDIUM
MySqlConnector: Account password disclosed to a man-in-the-middle in zero-configuration TLS mode (clear-text password sent before certificate is verified)
GHSA-473q-m89c-ghf8
pkg: MySqlConnector
eco: nuget
published: Oct 28, 2026
## Summary
With `SslMode` set to `VerifyCA` or `VerifyFull` with no configured CA certificate, an unvalidated TLS connection is treated as secure and a clear-text password can be sent before the certificate is checked. This can occur when relying on the password to validate a self-signed cert, e.g.…
GitHub-GHSA
MEDIUM
OpenTelemetry Python: Unbounded memory allocation in Jaeger baggage propagation
GHSA-f5m9-jfrj-jjj7
pkg: opentelemetry-propagator-jaeger
eco: pip
published: Oct 27, 2026
## Summary
`JaegerPropagator.extract()` in `opentelemetry-propagator-jaeger` did not enforce limits when extracting inbound `uberctx-*` baggage headers. Attacker-controlled baggage could cause unnecessary CPU work and short-lived heap allocations while processing more data than the propagator shoul…
CVE-2026-116694
GitHub-GHSA
MEDIUM
Strands Agents: Default FileSessionManager storage is world-readable on shared systems
GHSA-763v-5pjm-fx36
pkg: strands-agents
eco: pip
published: Oct 27, 2026
There is a local confidentiality issue in the default `FileSessionManager` storage behavior. By default it writes session data under `/tmp/strands/sessions` and relies on the process umask for directory and file permissions. On systems using the common `umask 022`, the session directories are `0755`…
GitHub-GHSA
MEDIUM
GitPython: Submodule.move() follows an attacker-committed intermediate symlink outside the worktree
GHSA-gq48-pqfc-9p58
pkg: GitPython
eco: pip
published: Oct 27, 2026
## Summary
GitPython's public `Submodule.move()` API verifies that its destination is lexically inside the parent repository, but it does not reject symbolic links in the destination's intermediate components before filesystem operations. On systems that check out Git symlinks, an untrusted reposit…
GitHub-GHSA
MEDIUM
Pylint: Arbitrary code execution via pickle deserialization of the stats cache in PYLINT_HOME
GHSA-22qq-2fwx-7p67
pkg: pylint
eco: pip
published: Oct 27, 2026
### Impact
Since 2006 / pylint 0.15.2, pylint caches its stats as pickles in `PYLINT_HOME` and reload them on the next run with `pickle.load`. Someone without access to the configuration or linted code, but with access to the cache directory (predictable `PYLINT_HOME` on a multi-user host) can writ…
CVE-2026-114608
GitHub-GHSA
MEDIUM
Satori-generated SVG has improper escaping
GHSA-wx4j-mvgx-mqwp
pkg: satori
eco: npm
published: Oct 27, 2026
## Impact
Satori does not properly escape certain values before including them in generated SVG output. This can allow crafted values to be interpreted as SVG markup.
The impact depends on how the generated SVG is consumed.
## Workaround
No complete workaround exists besides upgrading. Applicati…
CVE-2026-94545