filecoin-pin: Unbounded DAG pinning can exhaust server resources

GHSA-m5ph-mmg5-6w5h CVE-2026-62300 MODERATE 1 day ago

## Summary The IPFS Pinning Service API implementation accepts a caller-controlled CID through `POST /pins`, queues background processing, and the...

npm

No PRs yet

@payloadcms/storage-vercel-blob has access control bypass of uploads in Vercel Storage adapter

GHSA-mc8m-rr6c-r5qr CVE-2026-93363 MODERATE 3 days ago

### Impact In affected configurations, client upload access does not consistently align with the associated collection’s access configuration. You...

npm

No PRs yet

odf-kit: HTML injection leading to XSS in odtToHtml() and odsToHtml() via unescaped style attribute values

GHSA-3cgg-c5pp-57h6 CVE-2026-113787 MODERATE 3 days ago

### Summary ODF style attribute values are interpolated into `style="..."` attributes without HTML-escaping in **both** of odf-kit's to-HTML rende...

npm

No PRs yet

Elo JavaScript emitter has sandbox escape to arbitrary Node.js / browser code execution via unfiltered `.constructor` member access

GHSA-33r5-xmm8-v6x5 CVE-2026-44267 CRITICAL 4 days ago

### Summary An unauthenticated attacker who controls a string passed to any Elo JavaScript-emission path — `defaultFormats.elo.parse()`, the `bin/...

npm

No PRs yet

Elo Ruby backend has Remote Code Execution via unescaped `#{...}` interpolation in emitted string literals and subtype-constraint labels

GHSA-7w38-ggh5-v542 CVE-2026-44266 CRITICAL 4 days ago

### Summary Elo's Ruby backend emits attacker-controlled text into Ruby double-quoted strings without escaping the `#` character. Because `#` begi...

npm

No PRs yet

Elo backends have code injection via unvalidated emission of programmatic AST fields

GHSA-x9rp-7wh3-2rj5 CVE-2026-44265 HIGH 4 days ago

### Summary Elo's programmatic AST API accepts arbitrary values in many node fields without runtime type or syntax validation. Each backend's emit...

npm

No PRs yet

DBHub: MySQL and MariaDB comment interpretation bypasses read-only SQL validation

GHSA-j656-3hf2-fvjc MODERATE 5 days ago

The read-only mode can be bypassed on the MySQL and MariaDB connectors. In read-only mode a caller can still execute arbitrary write and DDL statem...

npm

No PRs yet

SD JWT JS: Tampered disclosures silently dropped instead of rejected

GHSA-f9j6-8p6x-r9j6 CVE-2026-62374 HIGH 5 days ago

## Summary When one Disclosure in an SD-JWT presentation is tampered so its digest no longer matches the Issuer-signed `_sd` array, `@sd-jwt/decod...

npm

No PRs yet

joi: quadratic-time split in `string().email({ multiple: true })` allows denial of service

GHSA-4528-x5fx-h6hg CVE-2026-118772 HIGH 8 days ago

### Summary `Joi.string().email({ multiple: true })` takes quadratic time to split a value that contains a long run of whitespace. One request wit...

npm

1

Dependabot PRs

@hapi/content: quadratic-time parsing of Content-Disposition parameters allows denial of service

GHSA-8494-f6mr-cjpv CVE-2026-119202 HIGH 8 days ago

### Summary `Content.disposition()` takes quadratic time when a `Content-Disposition` parameter contains a long token without `=`. One unauthentic...

npm

No PRs yet

minimatch has potential denial of service via globparts amplification

GHSA-g3hv-75wg-m249 CVE-2026-118764 MODERATE 8 days ago

minimatch 10.2.6 contains an attacker-controlled pattern amplification in firstPhasePreProcess() when optimizationLevel >= 2. researcher: Reid Dow...

npm

3

Dependabot PRs

Glob: AbortSignal cancellation bypass allows post-timeout filesystem traversal

GHSA-3g3m-2fjr-6pw4 CVE-2026-118773 MODERATE 8 days ago

### Summary In glob 13.0.6, an aborted async walk rejects or emits an error but continues recursively reading directories in the background. The ...

npm

1

Dependabot PRs

Forge: ASN.1 OID first arc truncation in asn1.oidToDer

GHSA-4642-5mcj-2rqw CVE-2026-118775 LOW 8 days ago

### Summary `asn1.oidToDer()` did not range-check the first two arcs of an OID string, so an OID such as `0.42.840.113549.1.1.1` or `4294977127.18...

npm

No PRs yet

Forge: Prototype Pollution in forge.http cookie handling via a malicious Set-Cookie

GHSA-6wvx-3r32-xmcg CVE-2026-118777 MODERATE 8 days ago

### Summary The `forge.http` client stored cookies from `Set-Cookie` response headers in a plain object keyed by cookie name and path. A malicious ...

npm

No PRs yet

Forge: TLS client crash when the server sends no certificate

GHSA-525v-9gp9-w22h CVE-2026-118778 MODERATE 8 days ago

### Summary The forge TLS client's check for a missing server certificate read the wrong property and never ran. A malicious TLS server, or an on-p...

npm

No PRs yet

Forge: Regular expression denial of service in PEM decoding (pem.decode)

GHSA-7wch-p9px-956x CVE-2026-118779 HIGH 8 days ago

### Summary `pem.decode()`, which every node-forge API that parses PEM input uses, split messages with a regular expression that takes polynomial t...

npm

12

Dependabot PRs

Forge: Denial of Service via infinite loop in BigInteger.modInverse() with negative input (incomplete fix of CVE-2026-33891)

GHSA-h6cr-wjv9-3cpp CVE-2026-118781 LOW 8 days ago

### Summary `BigInteger.prototype.modInverse()` in node-forge's bundled jsbn library enters an infinite loop when the value or the modulus is nega...

npm

No PRs yet

Forge: verifyCertificateChain() removes trusted CA certificates with the same subject from the CA store

GHSA-4487-j8r4-4g2f CVE-2026-118780 LOW 8 days ago

### Summary When a CA store created by `pki.createCaStore()` holds two or more certificates with the same subject name, `pki.verifyCertificateChai...

npm

No PRs yet

Forge: AES-GCM authentication bypass via unvalidated tagLength option

GHSA-5cwg-6vw7-rj6p CVE-2026-119186 MODERATE 8 days ago

### Summary The AES-GCM mode in forge.cipher does not validate the tagLength option passed to start(). With a tagLength of 0 or a value that conve...

npm

No PRs yet

Forge: PKCS#12 MAC forgery and constant-key PBE via zero iteration count

GHSA-jc66-7q78-782g CVE-2026-118782 HIGH 8 days ago

### Summary forge.pkcs12.pkcs12FromAsn1() accepts a PKCS#12 MAC iteration count of zero (or less) from the input, and the PKCS#12 key derivation f...

npm

No PRs yet

Forge: Denial of service in TLS record processing via a record interleaved with a fragmented handshake message

GHSA-8hrf-8g6f-7xwp CVE-2026-119188 HIGH 8 days ago

### Summary A connection created with `forge.tls.createConnection()` throws an uncaught `TypeError` from `process()` when it receives a record of ...

npm

No PRs yet

Forge: Denial of service in TLS record processing via call stack exhaustion

GHSA-hqq3-7jhf-c5jx CVE-2026-119187 HIGH 8 days ago

### Summary Connections created with `forge.tls.createConnection()` processed received TLS records recursively, one stack level per record. A peer...

npm

No PRs yet

Forge: X.509 basicConstraints bypass in verifyCertificateChain() via deprecated extension OIDs 2.5.29.10 and 2.5.29.13

GHSA-5x38-2vff-x55p CVE-2026-119190 HIGH 8 days ago

### Summary node-forge parses certificate extensions with the deprecated OIDs `2.5.29.10` and `2.5.29.13` as `basicConstraints`, and `forge.pki.ver...

npm

No PRs yet

Nuxt dev server exposes generated appSecret through Vite file serving

GHSA-3xf4-9g3c-4h4w CVE-2026-119201 MODERATE 8 days ago

### Impact When no `appSecret` is configured (via `NUXT_APP_SECRET`, `NITRO_APP_SECRET` or `runtimeConfig.appSecret`), `nuxt dev` generates a deve...

npm

4

Dependabot PRs

Nuxt: Dot segments in the request path bypass `server/middleware` path checks and server route rules on page routes

GHSA-9v7c-q64q-vv33 CVE-2026-119200 MODERATE 8 days ago

### Summary Since `4.6.0`, Nuxt resolves `.` and `..` segments in the request path, including percent-encoded forms such as `%2e`, before renderin...

npm

4

Dependabot PRs

Nuxt dev server arbitrary file read through client error reports

GHSA-x287-wcfc-q46c CVE-2026-119198 MODERATE 8 days ago

### Summary A client that can connect to the dev server's HMR socket can send a `nuxt:dev:client-error` event whose message ends in an absolute fi...

npm

4

Dependabot PRs

Nuxt dev server exposes private runtime config through the Nitro dev bundle

GHSA-648h-gw55-m2g7 CVE-2026-119199 MODERATE 8 days ago

### Summary With Nitro 2 (the default server engine in Nuxt 3 and Nuxt 4), the Nitro development server bundle written by `nuxt dev` can be fetche...

npm

4

Dependabot PRs

@sigstore/oci sends the registry Authorization header to a cross-host blob-upload Location

GHSA-j63v-mwhm-56jx CVE-2026-118763 HIGH 8 days ago

### Summary @sigstore/oci sends the registry Authorization header to a cross-host blob-upload Location ## Affected versions and vulnerable locati...

npm

No PRs yet

follow-redirects: Cross-realm sensitiveHeaders arrays are discarded and custom credentials can follow redirects

GHSA-mrwp-f3q8-3g9p CVE-2026-116689 HIGH 8 days ago

### Summary follow-redirects 1.16.0 and 1.16.1 validate the documented sensitiveHeaders option with instanceof Array. An array created in another ...

npm

1

Dependabot PRs

signalk-server has SSRF via absolute signalk.appIcon URL in the app store icon fetcher

GHSA-7wpf-ch8f-5f4x MODERATE 8 days ago

### Summary The app store icon code (`dist/appstore/icon-probe.js` around line 200 and `icon-bytes.js` around line 138) resolves a plugin's declar...

npm

No PRs yet

Signal K resources API path traversal can disclose the JWT signing secret and enable remote code execution

GHSA-4xm8-rg9h-jhq2 CRITICAL 8 days ago

### Summary Path traversal in the Signal K resources and applicationData APIs lets an unauthenticated or low-privileged user read, write and delet...

npm

No PRs yet

@nx/maven and @nx/gradle have OS command injection via nx.json plugin options

GHSA-qm8w-vx34-5j9j CVE-2026-119282 HIGH 8 days ago

## Summary `@nx/maven` and `@nx/gradle` spawn their project-graph analyzers through a shell and interpolate plugin options read from `nx.json` str...

npm

No PRs yet

decode-uri-component vulnerable to denial of service via quadratic replacement of percent-encoded runs

GHSA-qr28-fpjm-wq7f CVE-2026-118664 HIGH 9 days ago

### Summary `decodeUriComponent()` takes quadratic time on malformed input that has many distinct percent-encoded runs. A single unauthenticated r...

npm

No PRs yet

Vite: `server.fs.deny` bypassed with queries

GHSA-8g5g-mxqh-grgj CVE-2026-118662 MODERATE 9 days ago

### Summary The contents of files that are specified by [`server.fs.deny`](https://vite.dev/config/server-options#server-fs-deny) can be returned ...

npm

No PRs yet

@eeacms/volto-chatbot has Unauthenticated Danswer API Confused Deputy Proxy

GHSA-w9x9-j56r-h98r HIGH 9 days ago

## Unauthenticated Danswer API Confused Deputy Proxy in @eeacms/volto-chatbot ### Summary `@eeacms/volto-chatbot` exposes an Express middleware r...

npm

No PRs yet

Cedar: JSON template is in scope missing slot-id validation allows link panic and decision divergence

GHSA-c33x-vcv4-vg3g LOW 9 days ago

Cedar users must be using all of the following features to be affected by this advisory: JSON format policies, policy templates, and the `is in` sc...

cargo npm

No PRs yet

@sylphx/pdf-reader-mcp: HTTP transport accepts unauthenticated requests despite a configured MCP_API_KEY

GHSA-q344-5v34-gm84 CVE-2026-62264 HIGH 9 days ago

### Impact When `@sylphx/pdf-reader-mcp` is run as an HTTP server (`MCP_TRANSPORT=http`), it reads the `MCP_API_KEY` environment variable and logs...

npm

No PRs yet

Parse Server vulnerable to stored XSS via malformed Content-Type bypassing file upload extension blocklist

GHSA-r899-h629-j84r CVE-2026-61448 LOW 9 days ago

### Impact Parse Server's file upload validation uses the `fileUpload.fileExtensions` option (enabled by default with a blocklist) to reject files...

npm

No PRs yet

systeminformation vulnerable to Windows command injection in services() through Unicode quotation marks

GHSA-3f7j-7jwc-fxfj CVE-2026-116576 HIGH 10 days ago

### Summary On Windows, `systeminformation@5.33.15` builds a PowerShell command using the value passed to `services()`. The default sanitizer remo...

npm

No PRs yet

Backstage catalog rules can be bypassed for URL locations using encoded path segments

GHSA-w658-mh9p-ww8f CVE-2026-115923 MODERATE 10 days ago

## Summary `@backstage/plugin-catalog-backend` matches URL-type locations against `catalog.rules` location patterns using the raw URL string submi...

npm

No PRs yet

Waline login accepts a non-string email as a match-all MongoDB query

GHSA-jf75-q64q-g65r MODERATE 10 days ago

## Summary The login endpoint POST /api/token reads the `email` field from the request body without checking its type and passes it straight into ...

npm

No PRs yet

Seroval: Code injection through a typed array's own constructor property

GHSA-f86p-h4j2-7qgj CVE-2026-116583 MODERATE 10 days ago

### Summary seroval writes a typed array as a call to its constructor. In affected versions, the constructor name in the output is read from a pro...

npm

No PRs yet

Seroval: Script injection through RegExp sources in serialized output

GHSA-9wx9-5pv9-3349 CVE-2026-116582 MODERATE 10 days ago

### Summary seroval writes a `RegExp` as a regular expression literal. In affected versions, the `<` character in a `RegExp` source is written wit...

npm

No PRs yet

Seroval: fromJSON deserializer trusts node-supplied array length and sequence doneAt (unauthenticated event-loop DoS)

GHSA-97r2-qh9m-474h CVE-2026-116581 HIGH 10 days ago

### Summary `fromJSON` and `fromCrossJSON` used two node fields without checking them. - An array node's element list was not checked to be an ar...

npm

No PRs yet

Seroval `fromJSON`/`fromCrossJSON` denial of service via unvalidated array node length

GHSA-wp97-x4hv-qvhp CVE-2026-116584 HIGH 10 days ago

### Summary `fromJSON` and `fromCrossJSON` did not check that an array node's element list is an array. A small crafted payload could set the leng...

npm

No PRs yet

Seroval: Deserialization invokes attacker-chosen callables: AsyncIteratorFactoryInstance calls source.on(listener) without type check

GHSA-7rv5-mrxv-xcr9 CVE-2026-116580 HIGH 10 days ago

### Summary When `fromJSON` rebuilt an async iterator, it called `on()` on the iterator's source without checking that the source was a seroval st...

npm

No PRs yet

Mem0: Cross-tenant conversation leak via unescaped delimiter collision in session-scope key (_build_session_scope)

GHSA-5324-3w58-qpp2 CVE-2026-116575 MODERATE 10 days ago

Summary _build_session_scope() in mem0/memory/main.py builds the conversation-history scope key used to fetch/store the last N raw messages by nai...

npm pypi

No PRs yet

systeminformation has path traversal in Linux networkStats() that allows symlink-based file disclosure outside /sys/class/net

GHSA-4vjg-vx72-qq4g CVE-2026-116673 LOW 10 days ago

### Summary On Linux, `systeminformation@5.33.13` builds `/sys/class/net/<iface>` paths from the caller-supplied `networkStats(iface)` value witho...

npm

No PRs yet

systeminformation has prototype pollution in `networkStats()` via the interface name

GHSA-7648-jmwf-vw7j CVE-2026-116674 MODERATE 10 days ago

## Summary `networkStats()` keeps a per interface cache for computing `rx_sec` / `tx_sec` between calls. The cache is a plain JavaScript object an...

npm

No PRs yet

graphql-scalars PhoneNumber scalar is vulnerable to regular expression denial of service

GHSA-x8rm-f576-gq67 CVE-2026-115887 HIGH 10 days ago

## Summary The regular expression behind `GraphQLPhoneNumber` since 1.24.1 backtracks exponentially. A string made of a run of digits followed by ...

npm

No PRs yet