TanStack Router: Unauthenticated reflected XSS in TanStack Start server-function responses

GHSA-qx66-fv34-fjm8 CVE-2026-102989 CRITICAL about 19 hours ago

## Impact An unauthenticated attacker can craft a URL to a server function in an affected TanStack Start app. If someone opens the link, the app c...

npm

No PRs yet

Claude Code: Plugin Hash Pin Bypass Allows Bypass of Hash Pinning

GHSA-pq7j-f95f-qfcv CVE-2026-86063 HIGH about 19 hours ago

The plugin install flow in Claude Code and Claude Desktop checked out a marketplace's pinned commit SHA using `git checkout` without verifying that...

npm

No PRs yet

Qwik: Crashing any Qwik Server via Resource thenable

GHSA-x586-xvc8-g7q6 CVE-2026-84994 HIGH about 19 hours ago

### Summary A Qwik server in the default configuration can be crashed with one unauthenticated HTTP request. During qwik-json body parsing, `Resou...

npm

No PRs yet

Backstage: Improper access control in backend action invocation

GHSA-3xr5-8w6c-p5gw CVE-2026-106495 MODERATE about 19 hours ago

### Impact An authenticated user could invoke actions that an operator had excluded through action configuration. Existing action permissions and ...

npm

No PRs yet

Appium: Symlink based Zip Slip in @appium/support ZIP extraction

GHSA-qfxx-c367-67f8 CVE-2026-103975 MODERATE about 19 hours ago

### Summary CVE-2026-30973 [(GHSA-rfx7-4xw3-gh4m)](https://github.com/appium/appium/security/advisories/GHSA-rfx7-4xw3-gh4m) was a plain path trav...

npm

No PRs yet

Nuxt OG Image cache poisoning through derivable cache keys on unsigned dynamic image routes

GHSA-2x6f-rp82-ppmj CVE-2026-102527 MODERATE about 19 hours ago

**Vendor:** Nuxt **Product:** Nuxt OG Image **Version:** 6.2.5 **Description:** Due to the specifics of caching and key generation in the Open Grap...

npm

No PRs yet

OpenNext Cloudflare: Cache interception can bypass middleware protection for encoded paths

GHSA-2vc4-c4r6-p6v6 CVE-2026-100409 HIGH about 19 hours ago

## Summary When cache interception is enabled, `@opennextjs/cloudflare` can interpret percent-encoded paths differently during middleware matching...

npm

No PRs yet

AdonisJS HTTP Server: Uncontrolled Resource Consumption and Inefficient Regular Expression Complexity

GHSA-524c-h47v-m3h8 CVE-2026-104150 MODERATE about 19 hours ago

### Description A Regular Expression Denial of Service vulnerability in the built-in AdonisJS slug route matcher may allow a remote attacker to bl...

npm

No PRs yet

Tina: Code injection via unescaped Git branch name in generated client source

GHSA-pwhx-cvv3-qj5c CVE-2026-108259 HIGH 7 days ago

### Summary `@tinacms/cli` inserts the raw Git branch value into the generated `client.ts` source without escaping or encoding. A Git-valid branch...

npm

No PRs yet

TinaCMS admin preview iframe loads an attacker-controlled origin from the URL fragment

GHSA-x34j-47hf-4xg7 CVE-2026-108261 CRITICAL 7 days ago

### Summary The TinaCMS admin builds its preview `<iframe src>` from the `/~/*` hash-router splat without checking that the value stays same-origi...

npm

No PRs yet

@tinacms/web-components: `tina-markdown` writes rich-text link URLs into `href` without scheme validation, allowing stored XSS

GHSA-c42q-qvc3-j6vg CVE-2026-108260 HIGH 7 days ago

### Summary `<tina-markdown>` renders a rich-text AST into the DOM and, for `a` nodes, assigns the node's URL straight to the anchor's `href` with...

npm

No PRs yet

fast-jwt: Verifier cache accepts expired JWTs without iat.

GHSA-x937-hj6v-793p CVE-2026-107719 MODERATE 8 days ago

### Summary `cacheSet` only derives its `exp` cache deadline inside `hasIat` (`src/verifier.js:127-140`). JWT `iat` is optional. For a valid token ...

npm

No PRs yet

AdonisJS: Unencoded route parameters can produce open redirects

GHSA-2m6q-8v3h-jqww CVE-2026-107718 MODERATE 8 days ago

Route parameters are inserted into generated URLs without URI encoding. When an application passes untrusted input to a route whose first path seg...

npm

No PRs yet

fast-jwt: createVerifier accepts unsigned JWTs when key is '' or null and algorithms is explicitly set

GHSA-8wpc-h4q6-8fxv CVE-2026-107720 HIGH 8 days ago

### Summary `createVerifier` in fast-jwt ≤ 6.3.0 skips signature verification entirely when the `key` option is a falsy synchronous value (`''` or...

npm

No PRs yet

fast-jwt: Incomplete patch of CVE-2026-34950: Non-whitespace key-prefix re-enables RSA→HS256 algorithm confusion

GHSA-ww5h-9m49-7xx4 CVE-2026-107722 CRITICAL 8 days ago

### Summary The fix for CVE-2026-34950 (CVSS 9.1, released in v6.2.0) is **incomplete**. It adds `key.trim()` to the PEM-detection path in `src/cr...

npm

No PRs yet

fast-jwt clockTolerance: Infinity silently bypasses both exp and nbf validation (and persists in the verifier cache)

GHSA-687g-22h4-j4w4 CVE-2026-107721 MODERATE 8 days ago

## Summary `createVerifier({ clockTolerance: Infinity })` silently bypasses both `exp` (expiry) AND `nbf` (not-before) validation. Any expired or ...

npm

No PRs yet

fast-jwt : Silent claim-validator bypass when JWT payload is a JSON array

GHSA-5hjw-83fp-phq9 CVE-2026-107723 HIGH 8 days ago

### Summary `fast-jwt`'s `createVerifier` silently skips **all** configured claim validators (`exp`, `nbf`, `iss`, `aud`, `sub`, `jti`, `nonce`) w...

npm

No PRs yet

fast-jwt treats raw public JWK JSON as an HMAC secret, enabling HS256 token forgery

GHSA-g3jj-5cmm-3hxx CVE-2026-107724 HIGH 8 days ago

### Summary `fast-jwt` 6.2.4 silently classifies raw serialized public JWK JSON as an HMAC secret. If an application supplies public JWK JSON tex...

npm

No PRs yet

PraisonAI: AgentOS defaults to network-exposed no-auth mode, allowing unauthenticated agent invocation and instruction disclosure

GHSA-6wjp-v33h-5cvq CVE-2026-61426 HIGH 8 days ago

## Summary The AgentOS server in the `praisonai` TypeScript/npm package ships an insecure default: it binds `0.0.0.0`, sets no API key, and uses C...

npm

No PRs yet

music-metadata: MP4 stsd sample-entry size==0 causes a synchronous infinite loop (DoS) — unreleased regression on master

GHSA-f94x-6692-553q CVE-2026-107391 MODERATE 8 days ago

### Summary `StsdAtom.get()` in `lib/mp4/AtomToken.ts` parses an MP4 `stsd` (sample description) box's entry table by advancing a cursor with `off...

npm

No PRs yet

music-metadata: Uncontrolled memory allocation in APEv2 parser

GHSA-53v6-4h7p-p4gj CVE-2026-107387 MODERATE 8 days ago

## Summary `music-metadata` 11.15.0 is vulnerable to uncontrolled memory allocation in the APEv2 parser. The parser reads the size of an APEv2 ta...

npm

No PRs yet

music-metadata: ID3v2 tag size not validated before allocation, causing memory exhaustion DoS

GHSA-jjpr-9cvf-cq55 CVE-2026-107388 MODERATE 8 days ago

### Summary The ID3v2 parser in music-metadata trusts the tag size field without validation and allocates the full requested buffer before reading...

npm

No PRs yet

music-metadata: EBML parser trusts element lengths, allowing memory exhaustion or process abort

GHSA-5gfj-9q3v-qfp3 CVE-2026-107389 MODERATE 8 days ago

## Summary The Matroska/WebM EBML parser decodes attacker-controlled variable-length integer (VINT) element lengths without first validating that ...

npm

No PRs yet

MariaDB Connector/Node.js: SQL injection in the text protocol when the session uses NO_BACKSLASH_ESCAPES

GHSA-r3rv-jm3r-62q2 CVE-2026-107385 HIGH 8 days ago

### Description When escaping string and binary parameters for the text protocol, the connector always escaped the quote character with a backslash...

npm

No PRs yet

MariaDB Connector/Node.js: SQL injection through object keys in SET expansion (permitSetMultiParamEntries)

GHSA-v6pj-gxxw-phfw CVE-2026-107384 HIGH 8 days ago

### Description With the non-default permitSetMultiParamEntries option enabled, an object passed as a query parameter is expanded into a SET clause...

npm

No PRs yet

MariaDB Connector/Node.js exposes uninitialized process memory through malformed GeoJSON parameters

GHSA-48qf-xh34-q73r CVE-2026-107383 HIGH 8 days ago

### Description When encoding a GeoJSON Polygon or MultiPolygon parameter for the binary protocol, the connector sized its output buffer from the l...

npm

No PRs yet

MariaDB Connector/Node.js: Uncaught exception crashes the client during ed25519 authentication with zero-configuration TLS

GHSA-cx2f-j9fh-8g68 CVE-2026-107382 MODERATE 8 days ago

### Description On the zero-configuration TLS path, the connector accepts a self-signed server certificate at the TLS level and then validates the ...

npm

No PRs yet

music-metadata: uncatchable process crash parsing a crafted `.dsf` (residual of GHSA-v6c2-xwv6-8xf7)

GHSA-8j4c-6x6g-rq3j CVE-2026-107392 MODERATE 8 days ago

## Summary `DsfParser.parseChunks` skips an unrecognised chunk's payload with an **un-awaited** call: ```js this.tokenizer.ignore(Number(chunkHeade...

npm

No PRs yet

Handlebars: JavaScript Injection via Unsafe Inline Embedding of Precompiled Templates

GHSA-xw65-4hp5-5hc7 CVE-2026-106444 MODERATE 8 days ago

## Summary `Handlebars.precompile()` generates JavaScript source that is commonly embedded in browser `<script>` elements. Before the fix, static ...

npm

58

Dependabot PRs

Handlebars: JavaScript Injection via AST Type Confusion in compile (bypass of CVE-2026-33937)

GHSA-8r5x-fm3f-whwj CVE-2026-106446 CRITICAL 8 days ago

## Summary `Handlebars.compile()` and `Handlebars.precompile()` accept a pre-parsed AST as well as a template string. Handlebars 4.7.9 added valid...

npm

59

Dependabot PRs

Handlebars: JavaScript Injection via Own Property Check Bypass

GHSA-p8wg-vrv2-v86f CVE-2026-106445 CRITICAL 8 days ago

## Summary Handlebars can expose the `Function` constructor despite its prototype-access deny list. When a template reaches `Function.prototype`, ...

npm

59

Dependabot PRs

LangChain: MongoDBChatMessageHistory query injection can allow cross-session access

GHSA-m6rx-h84q-8r95 CVE-2026-106119 MODERATE 8 days ago

## Impact `MongoDBChatMessageHistory` did not enforce the documented string type for session identifiers at runtime. In affected applications, a s...

npm

No PRs yet

JHipster: SQL Injection in the Parameter of JHipster-Generated Reactive (WebFlux + R2DBC) Applicationssort

GHSA-r223-96jv-q533 CVE-2026-107375 HIGH 8 days ago

# SQL Injection in the `sort` Parameter of JHipster-Generated Reactive (WebFlux + R2DBC) Applications - **Product**: jhipster/generator-jhipster (...

npm

No PRs yet

JHipster: Generated Applications Allow Stored XSS via Unrestricted Blob ContentType Opened as Same-Origin Blob

GHSA-9ffp-22j7-56r2 CVE-2026-107303 HIGH 8 days ago

## Summary Applications generated by generator-jhipster v9.2.0 can persist user-controlled Blob ContentType values and later use those values as th...

npm

No PRs yet

msgpack5: Truncated map32 headers throw an unexpected error

GHSA-8f34-f56x-9xph CVE-2026-107302 HIGH 8 days ago

### Impact A truncated `map32` header causes an out-of-bounds buffer read and throws `RangeError` instead of `IncompleteBufferError`. Applications...

npm

No PRs yet

msgpack5: Many buffered values can exhaust the streaming decoder stack

GHSA-5x5g-h9x8-2fh9 CVE-2026-107300 HIGH 8 days ago

### Impact The streaming decoder recursively invokes itself for every complete value remaining in a chunk. A single chunk containing many small va...

npm

No PRs yet

msgpack5: Reserved byte can cause unbounded stream buffering

GHSA-26wq-p25c-j6fv CVE-2026-107299 MODERATE 8 days ago

### Impact The reserved MessagePack byte `0xc1` is incorrectly treated as incomplete input. When it appears at the start of a decoder stream, all ...

npm

No PRs yet

msgpack5: Partial options disable prototype protection

GHSA-8hq7-ggx2-cc6m CVE-2026-107301 MODERATE 8 days ago

### Impact Passing an empty or partial options object disables the default `protoAction: 'error'` protection. A map containing a `__proto__` key c...

npm

No PRs yet

msgpack5: Deeply nested input can exhaust the decoder stack

GHSA-24ch-f2g6-9hhh CVE-2026-107298 MODERATE 8 days ago

### Impact The decoder has no nesting-depth limit for arrays and maps. An attacker who can provide MessagePack input can use deeply nested contain...

npm

No PRs yet

msgpack5: Quadratic parsing in the streaming decoder

GHSA-gcx5-hxj7-gpqq CVE-2026-107297 MODERATE 8 days ago

### Impact The streaming decoder reparses an incomplete container from the beginning whenever another chunk arrives. A remote peer can split one v...

npm

No PRs yet

msgpack5: Decoding negative int64 values mutates the input buffer

GHSA-qw35-55vc-rhgj CVE-2026-107296 LOW 8 days ago

### Impact Decoding a negative signed 64-bit integer modifies the corresponding bytes in the caller-provided input buffer. Applications that retai...

npm

No PRs yet

Ghost: Remote Code Execution via Bookmark Card Images

GHSA-788w-68h3-cvxp CVE-2026-105642 HIGH 9 days ago

### Impact An image processing library bundled with Ghost contained a vulnerability in its SVG handling. Any staff user, including Contributors, c...

npm

No PRs yet

Ghost: Stored XSS via Embed Card Previews

GHSA-69qc-f5m6-889c CVE-2026-105643 HIGH 9 days ago

### Impact Embed cards in the Ghost editor could be used to bypass the fix for GHSA-8vhf-xxpj-4qrg. Any staff user, including Contributors, could ...

npm

No PRs yet

Ghost : Stored XSS via SVG Files in Content Imports

GHSA-hqq2-xqr2-fmx2 CVE-2026-105644 MODERATE 9 days ago

### Impact SVG images included in content imports were stored without sanitization. An attacker who convinced an Administrator to import a crafted...

npm

No PRs yet

Ghost: Regular Expression Denial of Service in External Media Inliner

GHSA-9m4w-fmjw-fvjq CVE-2026-105645 MODERATE 9 days ago

### Impact A crafted request to the external media inliner could cause excessive CPU usage, making the Ghost server unresponsive. Exploiting this ...

npm

No PRs yet

Ghost: Regular Expression Denial of Service in Content Import

GHSA-fwh9-qg68-vxp4 CVE-2026-105646 MODERATE 9 days ago

### Impact A crafted content import file could cause excessive CPU usage, making the Ghost server unresponsive. Exploiting this requires Administr...

npm

No PRs yet

Ghost: Server-Side Request Forgery in Bookmark Fetching

GHSA-322m-ff4g-9vx9 CVE-2026-105647 MODERATE 9 days ago

### Impact A validation issue allowed some functionality, such as Webmentions, to be abused by an unauthenticated user to make limited HTTP reques...

npm

No PRs yet

Ghost: Private IP Filtering Bypass via IPv6 Transition Addresses

GHSA-r7f2-6fj8-6fg2 CVE-2026-105648 MODERATE 9 days ago

### Impact A validation issue allowed some functionality, such as Webmentions, to be abused by an unauthenticated user to make limited HTTP reques...

npm

No PRs yet

Ghost: Stored XSS via SVG Uploads Bypassing Sanitization

GHSA-8575-cr6v-7jh4 CVE-2026-105649 HIGH 9 days ago

### Impact SVG media thumbnails, and SVG images uploaded with a non-SVG file extension, were stored without sanitization. This allowed any staff u...

npm

No PRs yet

Next.js: Pending `use cache` fill can leak Draft Mode content into regular responses and persisted pages

GHSA-3w37-wq28-93x7 CVE-2026-94544 MODERATE 9 days ago

Pending `use cache` fills are shared across requests for the same key without distinguishing Draft Mode requests from regular requests. When two su...

npm

160

Dependabot PRs