Tina: Code injection via unescaped Git branch name in generated client source

GHSA-pwhx-cvv3-qj5c CVE-2026-108259 HIGH 3 days ago

### Summary `@tinacms/cli` inserts the raw Git branch value into the generated `client.ts` source without escaping or encoding. A Git-valid branch...

npm

No PRs yet

TinaCMS admin preview iframe loads an attacker-controlled origin from the URL fragment

GHSA-x34j-47hf-4xg7 CVE-2026-108261 CRITICAL 3 days ago

### Summary The TinaCMS admin builds its preview `<iframe src>` from the `/~/*` hash-router splat without checking that the value stays same-origi...

npm

No PRs yet

@tinacms/web-components: `tina-markdown` writes rich-text link URLs into `href` without scheme validation, allowing stored XSS

GHSA-c42q-qvc3-j6vg CVE-2026-108260 HIGH 3 days ago

### Summary `<tina-markdown>` renders a rich-text AST into the DOM and, for `a` nodes, assigns the node's URL straight to the anchor's `href` with...

npm

No PRs yet

fast-jwt: Verifier cache accepts expired JWTs without iat.

GHSA-x937-hj6v-793p CVE-2026-107719 MODERATE 4 days ago

### Summary `cacheSet` only derives its `exp` cache deadline inside `hasIat` (`src/verifier.js:127-140`). JWT `iat` is optional. For a valid token ...

npm

No PRs yet

AdonisJS: Unencoded route parameters can produce open redirects

GHSA-2m6q-8v3h-jqww CVE-2026-107718 MODERATE 4 days ago

Route parameters are inserted into generated URLs without URI encoding. When an application passes untrusted input to a route whose first path seg...

npm

No PRs yet

fast-jwt: createVerifier accepts unsigned JWTs when key is '' or null and algorithms is explicitly set

GHSA-8wpc-h4q6-8fxv CVE-2026-107720 HIGH 4 days ago

### Summary `createVerifier` in fast-jwt ≤ 6.3.0 skips signature verification entirely when the `key` option is a falsy synchronous value (`''` or...

npm

No PRs yet

fast-jwt: Incomplete patch of CVE-2026-34950: Non-whitespace key-prefix re-enables RSA→HS256 algorithm confusion

GHSA-ww5h-9m49-7xx4 CVE-2026-107722 CRITICAL 4 days ago

### Summary The fix for CVE-2026-34950 (CVSS 9.1, released in v6.2.0) is **incomplete**. It adds `key.trim()` to the PEM-detection path in `src/cr...

npm

No PRs yet

fast-jwt clockTolerance: Infinity silently bypasses both exp and nbf validation (and persists in the verifier cache)

GHSA-687g-22h4-j4w4 CVE-2026-107721 MODERATE 4 days ago

## Summary `createVerifier({ clockTolerance: Infinity })` silently bypasses both `exp` (expiry) AND `nbf` (not-before) validation. Any expired or ...

npm

No PRs yet

fast-jwt : Silent claim-validator bypass when JWT payload is a JSON array

GHSA-5hjw-83fp-phq9 CVE-2026-107723 HIGH 4 days ago

### Summary `fast-jwt`'s `createVerifier` silently skips **all** configured claim validators (`exp`, `nbf`, `iss`, `aud`, `sub`, `jti`, `nonce`) w...

npm

No PRs yet

fast-jwt treats raw public JWK JSON as an HMAC secret, enabling HS256 token forgery

GHSA-g3jj-5cmm-3hxx CVE-2026-107724 HIGH 4 days ago

### Summary `fast-jwt` 6.2.4 silently classifies raw serialized public JWK JSON as an HMAC secret. If an application supplies public JWK JSON tex...

npm

No PRs yet

PraisonAI: AgentOS defaults to network-exposed no-auth mode, allowing unauthenticated agent invocation and instruction disclosure

GHSA-6wjp-v33h-5cvq CVE-2026-61426 HIGH 4 days ago

## Summary The AgentOS server in the `praisonai` TypeScript/npm package ships an insecure default: it binds `0.0.0.0`, sets no API key, and uses C...

npm

No PRs yet

music-metadata: MP4 stsd sample-entry size==0 causes a synchronous infinite loop (DoS) — unreleased regression on master

GHSA-f94x-6692-553q CVE-2026-107391 MODERATE 4 days ago

### Summary `StsdAtom.get()` in `lib/mp4/AtomToken.ts` parses an MP4 `stsd` (sample description) box's entry table by advancing a cursor with `off...

npm

No PRs yet

music-metadata: Uncontrolled memory allocation in APEv2 parser

GHSA-53v6-4h7p-p4gj CVE-2026-107387 MODERATE 4 days ago

## Summary `music-metadata` 11.15.0 is vulnerable to uncontrolled memory allocation in the APEv2 parser. The parser reads the size of an APEv2 ta...

npm

No PRs yet

music-metadata: ID3v2 tag size not validated before allocation, causing memory exhaustion DoS

GHSA-jjpr-9cvf-cq55 CVE-2026-107388 MODERATE 4 days ago

### Summary The ID3v2 parser in music-metadata trusts the tag size field without validation and allocates the full requested buffer before reading...

npm

No PRs yet

music-metadata: EBML parser trusts element lengths, allowing memory exhaustion or process abort

GHSA-5gfj-9q3v-qfp3 CVE-2026-107389 MODERATE 4 days ago

## Summary The Matroska/WebM EBML parser decodes attacker-controlled variable-length integer (VINT) element lengths without first validating that ...

npm

No PRs yet

MariaDB Connector/Node.js: SQL injection in the text protocol when the session uses NO_BACKSLASH_ESCAPES

GHSA-r3rv-jm3r-62q2 CVE-2026-107385 HIGH 4 days ago

### Description When escaping string and binary parameters for the text protocol, the connector always escaped the quote character with a backslash...

npm

No PRs yet

MariaDB Connector/Node.js: SQL injection through object keys in SET expansion (permitSetMultiParamEntries)

GHSA-v6pj-gxxw-phfw CVE-2026-107384 HIGH 4 days ago

### Description With the non-default permitSetMultiParamEntries option enabled, an object passed as a query parameter is expanded into a SET clause...

npm

No PRs yet

MariaDB Connector/Node.js exposes uninitialized process memory through malformed GeoJSON parameters

GHSA-48qf-xh34-q73r CVE-2026-107383 HIGH 4 days ago

### Description When encoding a GeoJSON Polygon or MultiPolygon parameter for the binary protocol, the connector sized its output buffer from the l...

npm

No PRs yet

MariaDB Connector/Node.js: Uncaught exception crashes the client during ed25519 authentication with zero-configuration TLS

GHSA-cx2f-j9fh-8g68 CVE-2026-107382 MODERATE 4 days ago

### Description On the zero-configuration TLS path, the connector accepts a self-signed server certificate at the TLS level and then validates the ...

npm

No PRs yet

music-metadata: uncatchable process crash parsing a crafted `.dsf` (residual of GHSA-v6c2-xwv6-8xf7)

GHSA-8j4c-6x6g-rq3j CVE-2026-107392 MODERATE 4 days ago

## Summary `DsfParser.parseChunks` skips an unrecognised chunk's payload with an **un-awaited** call: ```js this.tokenizer.ignore(Number(chunkHeade...

npm

No PRs yet

Handlebars: JavaScript Injection via Unsafe Inline Embedding of Precompiled Templates

GHSA-xw65-4hp5-5hc7 CVE-2026-106444 MODERATE 4 days ago

## Summary `Handlebars.precompile()` generates JavaScript source that is commonly embedded in browser `<script>` elements. Before the fix, static ...

npm

29

Dependabot PRs

Handlebars: JavaScript Injection via AST Type Confusion in compile (bypass of CVE-2026-33937)

GHSA-8r5x-fm3f-whwj CVE-2026-106446 CRITICAL 4 days ago

## Summary `Handlebars.compile()` and `Handlebars.precompile()` accept a pre-parsed AST as well as a template string. Handlebars 4.7.9 added valid...

npm

29

Dependabot PRs

Handlebars: JavaScript Injection via Own Property Check Bypass

GHSA-p8wg-vrv2-v86f CVE-2026-106445 CRITICAL 4 days ago

## Summary Handlebars can expose the `Function` constructor despite its prototype-access deny list. When a template reaches `Function.prototype`, ...

npm

29

Dependabot PRs

LangChain: MongoDBChatMessageHistory query injection can allow cross-session access

GHSA-m6rx-h84q-8r95 CVE-2026-106119 MODERATE 4 days ago

## Impact `MongoDBChatMessageHistory` did not enforce the documented string type for session identifiers at runtime. In affected applications, a s...

npm

No PRs yet

JHipster: SQL Injection in the Parameter of JHipster-Generated Reactive (WebFlux + R2DBC) Applicationssort

GHSA-r223-96jv-q533 CVE-2026-107375 HIGH 4 days ago

# SQL Injection in the `sort` Parameter of JHipster-Generated Reactive (WebFlux + R2DBC) Applications - **Product**: jhipster/generator-jhipster (...

npm

No PRs yet

JHipster: Generated Applications Allow Stored XSS via Unrestricted Blob ContentType Opened as Same-Origin Blob

GHSA-9ffp-22j7-56r2 CVE-2026-107303 HIGH 4 days ago

## Summary Applications generated by generator-jhipster v9.2.0 can persist user-controlled Blob ContentType values and later use those values as th...

npm

No PRs yet

msgpack5: Truncated map32 headers throw an unexpected error

GHSA-8f34-f56x-9xph CVE-2026-107302 HIGH 4 days ago

### Impact A truncated `map32` header causes an out-of-bounds buffer read and throws `RangeError` instead of `IncompleteBufferError`. Applications...

npm

No PRs yet

msgpack5: Many buffered values can exhaust the streaming decoder stack

GHSA-5x5g-h9x8-2fh9 CVE-2026-107300 HIGH 4 days ago

### Impact The streaming decoder recursively invokes itself for every complete value remaining in a chunk. A single chunk containing many small va...

npm

No PRs yet

msgpack5: Reserved byte can cause unbounded stream buffering

GHSA-26wq-p25c-j6fv CVE-2026-107299 MODERATE 4 days ago

### Impact The reserved MessagePack byte `0xc1` is incorrectly treated as incomplete input. When it appears at the start of a decoder stream, all ...

npm

No PRs yet

msgpack5: Partial options disable prototype protection

GHSA-8hq7-ggx2-cc6m CVE-2026-107301 MODERATE 4 days ago

### Impact Passing an empty or partial options object disables the default `protoAction: 'error'` protection. A map containing a `__proto__` key c...

npm

No PRs yet

msgpack5: Deeply nested input can exhaust the decoder stack

GHSA-24ch-f2g6-9hhh CVE-2026-107298 MODERATE 4 days ago

### Impact The decoder has no nesting-depth limit for arrays and maps. An attacker who can provide MessagePack input can use deeply nested contain...

npm

No PRs yet

msgpack5: Quadratic parsing in the streaming decoder

GHSA-gcx5-hxj7-gpqq CVE-2026-107297 MODERATE 4 days ago

### Impact The streaming decoder reparses an incomplete container from the beginning whenever another chunk arrives. A remote peer can split one v...

npm

No PRs yet

msgpack5: Decoding negative int64 values mutates the input buffer

GHSA-qw35-55vc-rhgj CVE-2026-107296 LOW 4 days ago

### Impact Decoding a negative signed 64-bit integer modifies the corresponding bytes in the caller-provided input buffer. Applications that retai...

npm

No PRs yet

Ghost: Remote Code Execution via Bookmark Card Images

GHSA-788w-68h3-cvxp CVE-2026-105642 HIGH 5 days ago

### Impact An image processing library bundled with Ghost contained a vulnerability in its SVG handling. Any staff user, including Contributors, c...

npm

No PRs yet

Ghost: Stored XSS via Embed Card Previews

GHSA-69qc-f5m6-889c CVE-2026-105643 HIGH 5 days ago

### Impact Embed cards in the Ghost editor could be used to bypass the fix for GHSA-8vhf-xxpj-4qrg. Any staff user, including Contributors, could ...

npm

No PRs yet

Ghost : Stored XSS via SVG Files in Content Imports

GHSA-hqq2-xqr2-fmx2 CVE-2026-105644 MODERATE 5 days ago

### Impact SVG images included in content imports were stored without sanitization. An attacker who convinced an Administrator to import a crafted...

npm

No PRs yet

Ghost: Regular Expression Denial of Service in External Media Inliner

GHSA-9m4w-fmjw-fvjq CVE-2026-105645 MODERATE 5 days ago

### Impact A crafted request to the external media inliner could cause excessive CPU usage, making the Ghost server unresponsive. Exploiting this ...

npm

No PRs yet

Ghost: Regular Expression Denial of Service in Content Import

GHSA-fwh9-qg68-vxp4 CVE-2026-105646 MODERATE 5 days ago

### Impact A crafted content import file could cause excessive CPU usage, making the Ghost server unresponsive. Exploiting this requires Administr...

npm

No PRs yet

Ghost: Server-Side Request Forgery in Bookmark Fetching

GHSA-322m-ff4g-9vx9 CVE-2026-105647 MODERATE 5 days ago

### Impact A validation issue allowed some functionality, such as Webmentions, to be abused by an unauthenticated user to make limited HTTP reques...

npm

No PRs yet

Ghost: Private IP Filtering Bypass via IPv6 Transition Addresses

GHSA-r7f2-6fj8-6fg2 CVE-2026-105648 MODERATE 5 days ago

### Impact A validation issue allowed some functionality, such as Webmentions, to be abused by an unauthenticated user to make limited HTTP reques...

npm

No PRs yet

Ghost: Stored XSS via SVG Uploads Bypassing Sanitization

GHSA-8575-cr6v-7jh4 CVE-2026-105649 HIGH 5 days ago

### Impact SVG media thumbnails, and SVG images uploaded with a non-SVG file extension, were stored without sanitization. This allowed any staff u...

npm

No PRs yet

Next.js: Pending `use cache` fill can leak Draft Mode content into regular responses and persisted pages

GHSA-3w37-wq28-93x7 CVE-2026-94544 MODERATE 5 days ago

Pending `use cache` fills are shared across requests for the same key without distinguishing Draft Mode requests from regular requests. When two su...

npm

95

Dependabot PRs

Next.js has cache poisoning of SSG and ISR pages in self-hosted applications

GHSA-4jqv-mc3x-m676 CVE-2026-94543 MODERATE 5 days ago

Self-hosted Next.js applications that use the Pages Router with statically generated (SSG) or incrementally regenerated (ISR) pages can have a page...

npm

112

Dependabot PRs

Next.js has information disclosure in development server's Model Context Protocol endpoint

GHSA-39w2-rjm5-chcv CVE-2026-94486 LOW 5 days ago

The Next.js development server (`next dev`) exposes a Model Context Protocol endpoint that does not verify which website a request originates from,...

npm

95

Dependabot PRs

Next.js has information disclosure in App Router metadata image routes via dynamicParams bypass

GHSA-f87g-xv8r-7p7x CVE-2026-94485 MODERATE 5 days ago

In Next.js App Router applications built with webpack, metadata image routes such as opengraph-image and twitter-image ignore the `dynamicParams` r...

npm

112

Dependabot PRs

Next.js has cache poisoning in SSG/ISR rendering that leads to cross-user content substitution and persistent denial of service

GHSA-mcj8-r9mp-w47p CVE-2026-94484 MODERATE 5 days ago

Next.js applications that use a root-level catch-all page together with statically generated or Incremental Static Regeneration routes can have the...

npm

112

Dependabot PRs

Next.js has Server-Side Request Forgery in Image Optimization

GHSA-cjq9-62q9-8jv4 CVE-2026-94483 HIGH 5 days ago

## Impact An attacker-controlled, allow-listed remote URL can lead to server-side request forgery (e.g. to private IPs) during Image Optimization....

npm

95

Dependabot PRs

Payload: SQL injection in SQLite/Postgres

GHSA-pj7x-6wpf-pgvp CVE-2026-105856 HIGH 5 days ago

### Impact An attacker who has read plus create or update access to a collection can submit a request that includes a SQL injection targeting a sp...

npm

No PRs yet

Payload: Remote Code Execution through first-register

GHSA-97rh-rhh2-7vjv CVE-2026-105858 HIGH 5 days ago

### Impact A crafted request to the public first-register operation can be used to perform a RCE exploit. **You are affected if:** - You use loca...

npm

No PRs yet

Payload has a tenant authorization bypass in Multi-Tenant Plugin

GHSA-p96c-xwx8-3cqj CVE-2026-105860 HIGH 5 days ago

## Impact When using the default tenant array field access, an authenticated user could assign themselves to other tenants. **You are affected if...

npm

No PRs yet