Security Advisories

Browse security advisories and track which Dependabot PRs address them.

36,794

Total Advisories

3,363

With Dependabot PRs

4,768

Critical Severity

12,982

High Severity

Clear All Filters

SWC HTML minifier may allow script element breakout when minifying embedded JSON

GHSA-5qr2-v392-m9g8 CVE-2026-72925 MODERATE about 19 hours ago

## Impact `@swc/html` minifies JSON contained in `script` elements such as `application/json` and `application/ld+json` by parsing and serializing...

SurrealDB: Writes in a PERMISSIONS clause bypass table permissions

GHSA-66r2-5gwj-gxm2 CVE-2026-63733 MODERATE 5 days ago

A `PERMISSIONS ... WHERE` clause is evaluated with permission enforcement disabled, so it can't recurse into its own checks. But the clause could a...

SurrealDB: Custom API route lets authenticated callers override namespace/database scope via URL path

GHSA-848m-r628-vrxw CVE-2026-63735 HIGH 5 days ago

An authenticated user scoped to one namespace/database could invoke a custom API (`DEFINE API`) belonging to a different namespace/database, reachi...

CodeWhale: Project config `allow_shell` override enables arbitrary shell command execution via cloned repository

GHSA-gx45-xrj5-g6c4 CVE-2026-75911 HIGH 5 days ago

### Maintainer resolution The CodeWhale maintainers validated this report. The affected package ranges are recorded in the advisory metadata. Vers...

CodeWhale: rlm_eval auto-approves arbitrary Python execution, bypassing the user's approval policy (RCE)

GHSA-wrj3-vj8c-784f CVE-2026-75858 HIGH 5 days ago

### Maintainer resolution The CodeWhale maintainers validated this report. The affected package ranges are recorded in the advisory metadata. Vers...

CodeWhale: Argument Injection in `git_blame` Tool Allows Arbitrary File Read Without Approval

GHSA-c6mw-8xh8-gpq6 CVE-2026-75912 HIGH 5 days ago

### Maintainer resolution The CodeWhale maintainers validated this report. The affected package ranges are recorded in the advisory metadata. Vers...

CodeWhale: SSRF‌ bypass - TOCTOU on DNS failure for DNS pinning

GHSA-6v2g-fpxh-pmmh CVE-2026-75856 CRITICAL 5 days ago

### Maintainer resolution The CodeWhale maintainers validated this report. The affected package ranges are recorded in the advisory metadata. Vers...

CodeWhale: js_execution leaks parent environment to model context via missing env scrub

GHSA-h539-c7r8-3xq4 CVE-2026-75915 HIGH 5 days ago

### Maintainer resolution The CodeWhale maintainers validated this report. The affected package ranges are recorded in the advisory metadata. Vers...

CodeWhale: Argument Injection in `git_show` Tool Allows Arbitrary File Write Without Approval

GHSA-7j5w-7r7x-9v27 CVE-2026-75913 HIGH 5 days ago

### Maintainer resolution The CodeWhale maintainers validated this report. The affected package ranges are recorded in the advisory metadata. Vers...

CodeWhale: exec_shell_interact sends LLM-controlled input to a running shell without an approval prompt (privilege escalation)

GHSA-g29h-pfmp-qp9r CVE-2026-75857 HIGH 5 days ago

### Maintainer resolution The CodeWhale maintainers validated this report. The affected package ranges are recorded in the advisory metadata. Vers...

CodeWhale: Project config `instructions` override enables arbitrary file read into AI system prompt via cloned repository

GHSA-62f5-cp2p-vq95 CVE-2026-75859 HIGH 5 days ago

### Maintainer resolution The CodeWhale maintainers validated this report. The affected package ranges are recorded in the advisory metadata. Vers...

CodeWhale: image_analyze follows workspace symlinks, leaking external file bytes

GHSA-w7wx-5q49-r59w CVE-2026-75914 HIGH 5 days ago

### Maintainer resolution The CodeWhale maintainers validated this report. The affected package ranges are recorded in the advisory metadata. Vers...

SurrealDB allows bypass of deny-net flags via DNS resolution

GHSA-m3c3-78fh-w3w7 CVE-2025-71390 MODERATE 5 days ago

SurrealDB offers http functions that can access external network endpoints. A typical, albeit [not recommended ](https://surrealdb.com/docs/surreal...

Hurl: Cookies in Cookies section leak when redirecting to a different host

GHSA-7w2g-9mf9-324m CVE-2026-63481 MODERATE 7 days ago

## The Bug Hurl <= 8.0.1 lets you define cookies two ways in a .hurl file: 1. As a raw Cookie: header in the [Header]/headers area 2. In a dedica...

Buffa Vulnerable to Memory Exhaustion Denial of Service in decode_unknown_field via Unbounded Allocation

GHSA-f9qc-qg88-7pq5 CVE-2026-55407 MODERATE 12 days ago

The `decode_unknown_field` function in buffa's protobuf decoder allocated heap memory in proportion to untrusted input (unknown fields in the seria...

Buffa has a Use-After-Free in OwnedView via Unsound 'static Lifetime Promotion in Deref

GHSA-9pwq-gcrx-wghh CVE-2026-55406 MODERATE 12 days ago

A soundness bug in `buffa`'s `OwnedView<V>` allowed safe Rust code to trigger a use-after-free. The `OwnedView::decode` constructor transmuted a bo...

datadog-opentelemetry has unbounded W3C tracestate parsing that may lead to DoS

GHSA-gpwf-4h98-v82q CVE-2026-54788 HIGH 12 days ago

### Impact Datadog tracing libraries that implement W3C Trace Context (`tracecontext`) propagation parse the incoming `tracestate` header without e...

gix-packetline: reachable panic on empty side-band packet (pre-auth network DoS)

GHSA-2vh6-hw4j-32ww MODERATE 12 days ago

### Summary `gix-packetline` panics when it receives a side-band packet line that contains only the band-id byte with an empty payload. A malicious...

Wasmtime has a leak in WASIp1 `fd_renumber` implementation

GHSA-3p27-qvp9-27qf CVE-2026-54786 LOW 14 days ago

### Impact Wasmtime's native implementation of WASIp1 suffers from a leak in the `fd_renumber` function where the file descriptor being renumbered...

mediasoup: SCTP state cookie lacks cryptographic authentication, enabling unauthorized association establishment (RFC 9260 violation)

GHSA-p7x2-g5cq-fhmq CVE-2026-55663 MODERATE 15 days ago

### Summary mediasoup's built-in SCTP stack (introduced in v3.20.0) authenticates SCTP state cookies using only hardcoded magic byte sequences rat...

vibeio-http has a DoS vulnerability in HTTP/1.x chunked encoding parser triggered by maliciously crafted chunk lengths

GHSA-fx4f-mhw4-qm7j MODERATE 16 days ago

When using the affected versions of the `vibeio-http` crate, an attacker could craft a malicious HTTP/1.x request with a large chunk length (betwee...

tokio-postgres: Panic on a `DataRow` with fewer fields than columns allows denial of service

GHSA-3gjw-f78c-vvpw MODERATE 16 days ago

A malicious or compromised server can send a row containing fewer fields than its row description declares columns. Reading one of the missing colu...

postgres-protocol: Panic decoding a malformed `hstore` value allows denial of service

GHSA-rgqc-3x5p-6gwg MODERATE 16 days ago

A malicious or compromised server can return a binary `hstore` value with an invalid internal length field, causing the client to panic while decod...

postgres-protocol: Unbounded SCRAM iteration count allows a malicious server to cause CPU-exhaustion denial of service

GHSA-5x78-73v4-xg6w HIGH 16 days ago

A malicious, compromised, or man-in-the-middle server can supply an arbitrarily large SCRAM-SHA-256 PBKDF2 iteration count during authentication. T...

Zoo Design Studio: Memory-corruption in memory handling of lib-kcl

GHSA-mc9m-6fm9-pghc MODERATE 20 days ago

A race condition in kcl-lib can result in a use-after-free when accessing environments concurrently. During Vec reallocation, the previous buffer c...

Zoo Design Studio: Recursive KCL parsing is vulnerable to denial-of-service

GHSA-jgvr-6x5w-hx5w MODERATE 20 days ago

### Impact Feeding a KCL program that wraps an expression in deep, unnecessary parentheses triggers the parser’s recursive `expression` -> `unneces...

block_buffer: panic corrupts inline buffer position

GHSA-qwgh-2vcv-g2f7 MODERATE 21 days ago

### Summary A caught panic may leave the cursor position of `EagerBuffer` or `ReadBuffer` in a corrupted state; this in turn allows out-of-bounds ...

Triton VM Soundness Vulnerability due to Missing Constraint

GHSA-vjf8-9fx6-mv6x MODERATE 22 days ago

The instruction `sponge_absorb_mem` Triton VM fails to verify that hashed values come from the claimed memory location. Malicious provers can subst...

s2n-quic has excessive memory allocation

GHSA-9q54-f358-3fqf CVE-2026-10740 MODERATE 26 days ago

s2n-quic is a Rust implementation of the QUIC protocol. An unauthenticated user can attempt to exhaust server memory on an s2n-quic endpoint by sen...

SurrealDB: Array element-level (field.*) SELECT permissions leak denied elements to record users

GHSA-8rw6-p7m8-63jp CVE-2026-63740 MODERATE 26 days ago

A `SELECT` permission defined on an array element (`DEFINE FIELD field.* … PERMISSIONS FOR select …`) is not enforced correctly for `RECORD` users....

nimiq-blockchain: Validity store off by one error

GHSA-3763-qp59-59vf CVE-2026-46369 HIGH 28 days ago

### Impact The validity store treats a transaction with stored `block_number = X` as "in window" only when `X > last_bn - transaction_validity_wind...

Russh: Channel-scoped server callbacks can be reached without an open channel

GHSA-m65r-rprj-r5rg CVE-2026-68930 MODERATE about 1 month ago

There is a server-side channel state issue in `russh`. After a client is authenticated, `russh` can dispatch channel-scoped handler callbacks for ...

zaino-state has a Non-Finalized State Reorg — No Cycle Detection or Depth Limit

GHSA-3whf-vgf2-9w6g MODERATE about 1 month ago

### Summary `NonFinalizedState::handle_reorg` is a recursive, unbounded async function that traverses parent blocks until it finds a common ancesto...

skilo add follows symbolic links, allowing arbitrary local file disclosure from a malicious skill source

GHSA-6xx4-9wp6-65p7 MODERATE about 1 month ago

### Impact `skilo add` installs a skill by recursively copying the skill directory into the target skills directory. The copy routine (`copy_dir_a...

nono-cli'scregistry pack verification can fail open when provenance metadata is absent

GHSA-hc4m-q9jh-xw4j MODERATE about 1 month ago

## Summary Registry-installed nono packs are expected to be verified from local provenance metadata before they are used. Two files are relevant: ...

lettre has TLS hostname verification disabled when using Boring TLS backend

GHSA-4pj9-g833-qx53 CVE-2026-46428 CRITICAL about 1 month ago

### Summary An inverted-boolean bug in lettre's `boring-tls` integration silently disables TLS hostname verification for callers using the default ...

Smithy-RS: Allocation of resources without limits in the default aws-smithy-http-server serve() path allows unauthenticated Slowloris denial of service

GHSA-jvxp-qmx7-gjpx CVE-2026-16756 HIGH about 2 months ago

## Summary Smithy-RS is a Rust code generation and runtime framework that generates HTTP clients and servers from Smithy interface definitions, pow...

Hubuum client library (Rust): Sensitive data may be exposed through default diagnostics

GHSA-2625-rw7m-5q5x LOW about 2 months ago

## Summary `hubuum_client` diagnostics can expose sensitive request, response, import/export, task, delivery, or server-provided data when applica...

Hubuum client library (Rust): Configured custom transports may be bypassed, exposing credentials and network traffic

GHSA-qqc3-94qv-7fw3 MODERATE about 2 months ago

## Summary When an application configures hubuum_client with ClientBuilder::with_transport, several client operations still use the built-in reqwe...

Hubuum client library (Rust): Authenticated requests may escape the configured base path through redirects

GHSA-f45q-w629-wr25 MODERATE about 2 months ago

## Impact The built-in async and blocking clients used reqwest's default redirect policy. `BaseUrl` constrains the initial request to the configur...

Russh: client wrong-length X25519 `clone_from_slice` panic (pre-auth DoS)

GHSA-g9hv-x236-4qp3 CVE-2026-73429 MODERATE about 2 months ago

### Summary A malicious SSH server can crash a `russh` client session with a single malformed key-exchange reply, causing a pre-authentication Deni...

Russh: Post-auth remote panic via pty-req with more than 130 terminal-mode records

GHSA-cqjc-rmpq-xprq CVE-2026-73489 MODERATE about 2 months ago

## Summary A post-authentication denial-of-service panic in `russh` 0.62.2 (commit `c4be19f1915c8682f4615c3fd50008512b474491`, current default bra...

Russh: Pre-auth remote panic via all-zero Curve25519 peer public value (encode_mpint OOB)

GHSA-5xvq-cp9x-6p6r CVE-2026-73430 MODERATE about 2 months ago

A pre-authentication denial-of-service panic in `russh` 0.62.2 (commit `c4be19f1915c8682f4615c3fd50008512b474491`, current default branch `main` as...

Quinn: Remote memory exhaustion in quinn-proto from unbounded out-of-order stream reassembly

GHSA-4w2j-m93h-cj5j HIGH about 2 months ago

## Summary The `Assembler` component that assembles unordered stream fragments into consecutive chunks of the stream incurs some overhead for non-...

Prompty: Arbitrary file read via file reference expansion

GHSA-wxhm-2mq7-7697 CVE-2026-53598 HIGH about 2 months ago

## Summary Prompty loaders expanded `${file:...}` references in `.prompty` frontmatter without enforcing that the resolved path stayed within an au...

cargo npm nuget +1 more

nimiq-primitives: Out-of-bounds panic in KeyNibbles::Add from oversized child suffix in a deserialized proof

GHSA-5rg2-xv9j-gv5p CVE-2026-54542 LOW about 2 months ago

### Impact A malicious peer acting as a state-sync source can crash a syncing node with a crafted `TrieChunk` whose proof contains a `TrieNodeChil...

nimiq-primitives: Panic in TrieProof::verify via child_index unwrap on equal-length keys

GHSA-46wq-28cx-mhw4 CVE-2026-54541 LOW about 2 months ago

### Impact A malicious peer acting as a state-sync source can crash a syncing node by sending a crafted `TrieChunk` whose proof contains two `Trie...

Diesel has possible use after free when deserializing a SQLite database via `SqliteConnection::deserialize_readonly_database`

GHSA-ggxf-9f6j-w742 MODERATE about 2 months ago

Diesel allows loading a SQLite database from a byte buffer, represented as `&[u8]`, at runtime via the `SqliteConnection::deserialize_readonly_data...

serde_with: KeyValueMap serialization panics on empty sequence or map entries

GHSA-7gcf-g7xr-8hxj MODERATE about 2 months ago

### Summary The public `KeyValueMap` serializer assumes that each mapped element has at least one field or item to use as the map key, but it subt...

Wasmtime: Memory leak in C API with `externref` and `anyref` types

GHSA-vvp9-h8p2-xwfc CVE-2025-61670 LOW about 2 months ago

### Impact Wasmtime 37.0.0 and 37.0.1 have memory leaks in the C/C++ API when using bindings for the `anyref` or `externref` WebAssembly values. T...