Claude Code: TOCTOU Race in Edit Tool Allows File Writes Outside the Workspace

GHSA-5xjx-9qx6-jcrv CVE-2026-88968 HIGH about 19 hours ago

Claude Code validated Edit tool targets using point-in-time pathname and symlink resolution that was not bound to the underlying directory inodes o...

npm

No PRs yet

Moleculer: Unauthenticated Denial of Service via negative length field in the TCP transporter packet parser

GHSA-h89v-g948-47vp CVE-2026-97705 HIGH about 19 hours ago

### Summary The TCP transporter's packet parser (`src/transporters/tcp/parser.js`) reads the packet length field with `Buffer.prototype.readInt32B...

npm

No PRs yet

tsParticles: A single anonymous MCP session can monopolize HTTP mode and deny new clients

GHSA-h7c4-q426-7jh9 CVE-2026-76893 MODERATE about 20 hours ago

## Summary The HTTP mode of `@tsparticles/mcp-server` creates a single stateful `StreamableHTTPServerTransport` instance and reuses it for all cli...

npm

No PRs yet

tsParticles: Malformed JSON requests can terminate the @tsparticles/mcp-server HTTP process

GHSA-4p8p-pjpq-2w7h CVE-2026-76892 HIGH about 20 hours ago

## Summary The HTTP mode of `@tsparticles/mcp-server` parses incoming `/mcp` request bodies with `JSON.parse()` outside a request-local error boun...

npm

No PRs yet

tsParticles: Unbounded HTTP Request Body Buffering in @tsparticles/mcp-server Leads to Remote DoS

GHSA-447x-qqwf-m7xq CVE-2026-63655 HIGH about 20 hours ago

### Summary The HTTP server mode of `@tsparticles/mcp-server` accumulates all incoming request body chunks into an in-memory `Buffer[]` array with...

npm

No PRs yet

ag-psd: Uncontrolled Memory Allocation in PSD Layer Decoding (totalMemoryLimit bypass)

GHSA-6w3r-6hpr-hp6p CVE-2026-63501 HIGH about 20 hours ago

### Summary The `readPsd()` function in `ag-psd` accepts a `totalMemoryLimit` option to cap memory usage when parsing untrusted PSD files, but this...

npm

No PRs yet

isomorphic-git: Path traversal via a ".." tree-entry name writes files outside the working directory on clone/checkout

GHSA-cw2g-2vwq-88w6 CVE-2026-63478 MODERATE about 21 hours ago

### Summary isomorphic-git's tree parser (`src/models/GitTree.js`) validates each entry name only against the path separators `/` and `\`. It does ...

npm

No PRs yet

isomorphic-git: Circular symbolic references cause non-terminating resolution (DoS)

GHSA-96wc-2m84-2cj7 CVE-2026-63475 MODERATE about 21 hours ago

### Summary A malicious server can advertise circular `symref=` capabilities (e.g. `a → b` and `b → a`). isomorphic-git writes them to disk as loos...

npm

No PRs yet

isomorphic-git: Arbitrary file write outside of working tree via directory symlink during checkout (potential RCE)

GHSA-9qw7-j9xw-fv9c CVE-2026-63395 HIGH about 22 hours ago

### Summary `git.checkout` writes working-tree files through a directory **symlink** without checking the leading path, so a malicious repository c...

npm

No PRs yet

filecoin-pin: Unbounded DAG pinning can exhaust server resources

GHSA-m5ph-mmg5-6w5h CVE-2026-62300 MODERATE 5 days ago

## Summary The IPFS Pinning Service API implementation accepts a caller-controlled CID through `POST /pins`, queues background processing, and the...

npm

No PRs yet

@payloadcms/storage-vercel-blob has access control bypass of uploads in Vercel Storage adapter

GHSA-mc8m-rr6c-r5qr CVE-2026-93363 MODERATE 6 days ago

### Impact In affected configurations, client upload access does not consistently align with the associated collection’s access configuration. You...

npm

No PRs yet

odf-kit: HTML injection leading to XSS in odtToHtml() and odsToHtml() via unescaped style attribute values

GHSA-3cgg-c5pp-57h6 CVE-2026-113787 MODERATE 6 days ago

### Summary ODF style attribute values are interpolated into `style="..."` attributes without HTML-escaping in **both** of odf-kit's to-HTML rende...

npm

No PRs yet

Elo JavaScript emitter has sandbox escape to arbitrary Node.js / browser code execution via unfiltered `.constructor` member access

GHSA-33r5-xmm8-v6x5 CVE-2026-44267 CRITICAL 7 days ago

### Summary An unauthenticated attacker who controls a string passed to any Elo JavaScript-emission path — `defaultFormats.elo.parse()`, the `bin/...

npm

No PRs yet

Elo Ruby backend has Remote Code Execution via unescaped `#{...}` interpolation in emitted string literals and subtype-constraint labels

GHSA-7w38-ggh5-v542 CVE-2026-44266 CRITICAL 7 days ago

### Summary Elo's Ruby backend emits attacker-controlled text into Ruby double-quoted strings without escaping the `#` character. Because `#` begi...

npm

No PRs yet

Elo backends have code injection via unvalidated emission of programmatic AST fields

GHSA-x9rp-7wh3-2rj5 CVE-2026-44265 HIGH 7 days ago

### Summary Elo's programmatic AST API accepts arbitrary values in many node fields without runtime type or syntax validation. Each backend's emit...

npm

No PRs yet

DBHub: MySQL and MariaDB comment interpretation bypasses read-only SQL validation

GHSA-j656-3hf2-fvjc MODERATE 8 days ago

The read-only mode can be bypassed on the MySQL and MariaDB connectors. In read-only mode a caller can still execute arbitrary write and DDL statem...

npm

No PRs yet

SD JWT JS: Tampered disclosures silently dropped instead of rejected

GHSA-f9j6-8p6x-r9j6 CVE-2026-62374 HIGH 8 days ago

## Summary When one Disclosure in an SD-JWT presentation is tampered so its digest no longer matches the Issuer-signed `_sd` array, `@sd-jwt/decod...

npm

No PRs yet

joi: quadratic-time split in `string().email({ multiple: true })` allows denial of service

GHSA-4528-x5fx-h6hg CVE-2026-118772 HIGH 11 days ago

### Summary `Joi.string().email({ multiple: true })` takes quadratic time to split a value that contains a long run of whitespace. One request wit...

npm

1

Dependabot PRs

@hapi/content: quadratic-time parsing of Content-Disposition parameters allows denial of service

GHSA-8494-f6mr-cjpv CVE-2026-119202 HIGH 11 days ago

### Summary `Content.disposition()` takes quadratic time when a `Content-Disposition` parameter contains a long token without `=`. One unauthentic...

npm

No PRs yet

minimatch has potential denial of service via globparts amplification

GHSA-g3hv-75wg-m249 CVE-2026-118764 MODERATE 11 days ago

minimatch 10.2.6 contains an attacker-controlled pattern amplification in firstPhasePreProcess() when optimizationLevel >= 2. researcher: Reid Dow...

npm

4

Dependabot PRs

Glob: AbortSignal cancellation bypass allows post-timeout filesystem traversal

GHSA-3g3m-2fjr-6pw4 CVE-2026-118773 MODERATE 11 days ago

### Summary In glob 13.0.6, an aborted async walk rejects or emits an error but continues recursively reading directories in the background. The ...

npm

1

Dependabot PRs

Forge: ASN.1 OID first arc truncation in asn1.oidToDer

GHSA-4642-5mcj-2rqw CVE-2026-118775 LOW 11 days ago

### Summary `asn1.oidToDer()` did not range-check the first two arcs of an OID string, so an OID such as `0.42.840.113549.1.1.1` or `4294977127.18...

npm

No PRs yet

Forge: Prototype Pollution in forge.http cookie handling via a malicious Set-Cookie

GHSA-6wvx-3r32-xmcg CVE-2026-118777 MODERATE 11 days ago

### Summary The `forge.http` client stored cookies from `Set-Cookie` response headers in a plain object keyed by cookie name and path. A malicious ...

npm

No PRs yet

Forge: TLS client crash when the server sends no certificate

GHSA-525v-9gp9-w22h CVE-2026-118778 MODERATE 11 days ago

### Summary The forge TLS client's check for a missing server certificate read the wrong property and never ran. A malicious TLS server, or an on-p...

npm

No PRs yet

Forge: Regular expression denial of service in PEM decoding (pem.decode)

GHSA-7wch-p9px-956x CVE-2026-118779 HIGH 11 days ago

### Summary `pem.decode()`, which every node-forge API that parses PEM input uses, split messages with a regular expression that takes polynomial t...

npm

13

Dependabot PRs

Forge: Denial of Service via infinite loop in BigInteger.modInverse() with negative input (incomplete fix of CVE-2026-33891)

GHSA-h6cr-wjv9-3cpp CVE-2026-118781 LOW 11 days ago

### Summary `BigInteger.prototype.modInverse()` in node-forge's bundled jsbn library enters an infinite loop when the value or the modulus is nega...

npm

No PRs yet

Forge: verifyCertificateChain() removes trusted CA certificates with the same subject from the CA store

GHSA-4487-j8r4-4g2f CVE-2026-118780 LOW 11 days ago

### Summary When a CA store created by `pki.createCaStore()` holds two or more certificates with the same subject name, `pki.verifyCertificateChai...

npm

No PRs yet

Forge: AES-GCM authentication bypass via unvalidated tagLength option

GHSA-5cwg-6vw7-rj6p CVE-2026-119186 MODERATE 11 days ago

### Summary The AES-GCM mode in forge.cipher does not validate the tagLength option passed to start(). With a tagLength of 0 or a value that conve...

npm

No PRs yet

Forge: PKCS#12 MAC forgery and constant-key PBE via zero iteration count

GHSA-jc66-7q78-782g CVE-2026-118782 HIGH 11 days ago

### Summary forge.pkcs12.pkcs12FromAsn1() accepts a PKCS#12 MAC iteration count of zero (or less) from the input, and the PKCS#12 key derivation f...

npm

No PRs yet

Forge: Denial of service in TLS record processing via a record interleaved with a fragmented handshake message

GHSA-8hrf-8g6f-7xwp CVE-2026-119188 HIGH 11 days ago

### Summary A connection created with `forge.tls.createConnection()` throws an uncaught `TypeError` from `process()` when it receives a record of ...

npm

No PRs yet

Forge: Denial of service in TLS record processing via call stack exhaustion

GHSA-hqq3-7jhf-c5jx CVE-2026-119187 HIGH 11 days ago

### Summary Connections created with `forge.tls.createConnection()` processed received TLS records recursively, one stack level per record. A peer...

npm

No PRs yet

Forge: X.509 basicConstraints bypass in verifyCertificateChain() via deprecated extension OIDs 2.5.29.10 and 2.5.29.13

GHSA-5x38-2vff-x55p CVE-2026-119190 HIGH 11 days ago

### Summary node-forge parses certificate extensions with the deprecated OIDs `2.5.29.10` and `2.5.29.13` as `basicConstraints`, and `forge.pki.ver...

npm

No PRs yet

Nuxt dev server exposes generated appSecret through Vite file serving

GHSA-3xf4-9g3c-4h4w CVE-2026-119201 MODERATE 11 days ago

### Impact When no `appSecret` is configured (via `NUXT_APP_SECRET`, `NITRO_APP_SECRET` or `runtimeConfig.appSecret`), `nuxt dev` generates a deve...

npm

4

Dependabot PRs

Nuxt: Dot segments in the request path bypass `server/middleware` path checks and server route rules on page routes

GHSA-9v7c-q64q-vv33 CVE-2026-119200 MODERATE 11 days ago

### Summary Since `4.6.0`, Nuxt resolves `.` and `..` segments in the request path, including percent-encoded forms such as `%2e`, before renderin...

npm

4

Dependabot PRs

Nuxt dev server arbitrary file read through client error reports

GHSA-x287-wcfc-q46c CVE-2026-119198 MODERATE 11 days ago

### Summary A client that can connect to the dev server's HMR socket can send a `nuxt:dev:client-error` event whose message ends in an absolute fi...

npm

4

Dependabot PRs

Nuxt dev server exposes private runtime config through the Nitro dev bundle

GHSA-648h-gw55-m2g7 CVE-2026-119199 MODERATE 11 days ago

### Summary With Nitro 2 (the default server engine in Nuxt 3 and Nuxt 4), the Nitro development server bundle written by `nuxt dev` can be fetche...

npm

4

Dependabot PRs

@sigstore/oci sends the registry Authorization header to a cross-host blob-upload Location

GHSA-j63v-mwhm-56jx CVE-2026-118763 HIGH 11 days ago

### Summary @sigstore/oci sends the registry Authorization header to a cross-host blob-upload Location ## Affected versions and vulnerable locati...

npm

No PRs yet

follow-redirects: Cross-realm sensitiveHeaders arrays are discarded and custom credentials can follow redirects

GHSA-mrwp-f3q8-3g9p CVE-2026-116689 HIGH 11 days ago

### Summary follow-redirects 1.16.0 and 1.16.1 validate the documented sensitiveHeaders option with instanceof Array. An array created in another ...

npm

1

Dependabot PRs

signalk-server has SSRF via absolute signalk.appIcon URL in the app store icon fetcher

GHSA-7wpf-ch8f-5f4x MODERATE 11 days ago

### Summary The app store icon code (`dist/appstore/icon-probe.js` around line 200 and `icon-bytes.js` around line 138) resolves a plugin's declar...

npm

No PRs yet

Signal K resources API path traversal can disclose the JWT signing secret and enable remote code execution

GHSA-4xm8-rg9h-jhq2 CVE-2026-123807 CRITICAL 11 days ago

### Summary Path traversal in the Signal K resources and applicationData APIs lets an unauthenticated or low-privileged user read, write and delet...

npm

No PRs yet

@nx/maven and @nx/gradle have OS command injection via nx.json plugin options

GHSA-qm8w-vx34-5j9j CVE-2026-119282 HIGH 11 days ago

## Summary `@nx/maven` and `@nx/gradle` spawn their project-graph analyzers through a shell and interpolate plugin options read from `nx.json` str...

npm

No PRs yet

decode-uri-component vulnerable to denial of service via quadratic replacement of percent-encoded runs

GHSA-qr28-fpjm-wq7f CVE-2026-118664 HIGH 12 days ago

### Summary `decodeUriComponent()` takes quadratic time on malformed input that has many distinct percent-encoded runs. A single unauthenticated r...

npm

No PRs yet

Vite: `server.fs.deny` bypassed with queries

GHSA-8g5g-mxqh-grgj CVE-2026-118662 MODERATE 12 days ago

### Summary The contents of files that are specified by [`server.fs.deny`](https://vite.dev/config/server-options#server-fs-deny) can be returned ...

npm

No PRs yet

@eeacms/volto-chatbot has Unauthenticated Danswer API Confused Deputy Proxy

GHSA-w9x9-j56r-h98r HIGH 12 days ago

## Unauthenticated Danswer API Confused Deputy Proxy in @eeacms/volto-chatbot ### Summary `@eeacms/volto-chatbot` exposes an Express middleware r...

npm

No PRs yet

Cedar: JSON template is in scope missing slot-id validation allows link panic and decision divergence

GHSA-c33x-vcv4-vg3g LOW 12 days ago

Cedar users must be using all of the following features to be affected by this advisory: JSON format policies, policy templates, and the `is in` sc...

cargo npm

No PRs yet

@sylphx/pdf-reader-mcp: HTTP transport accepts unauthenticated requests despite a configured MCP_API_KEY

GHSA-q344-5v34-gm84 CVE-2026-62264 HIGH 12 days ago

### Impact When `@sylphx/pdf-reader-mcp` is run as an HTTP server (`MCP_TRANSPORT=http`), it reads the `MCP_API_KEY` environment variable and logs...

npm

No PRs yet

Parse Server vulnerable to stored XSS via malformed Content-Type bypassing file upload extension blocklist

GHSA-r899-h629-j84r CVE-2026-61448 LOW 12 days ago

### Impact Parse Server's file upload validation uses the `fileUpload.fileExtensions` option (enabled by default with a blocklist) to reject files...

npm

No PRs yet

systeminformation vulnerable to Windows command injection in services() through Unicode quotation marks

GHSA-3f7j-7jwc-fxfj CVE-2026-116576 HIGH 13 days ago

### Summary On Windows, `systeminformation@5.33.15` builds a PowerShell command using the value passed to `services()`. The default sanitizer remo...

npm

No PRs yet

Backstage catalog rules can be bypassed for URL locations using encoded path segments

GHSA-w658-mh9p-ww8f CVE-2026-115923 MODERATE 13 days ago

## Summary `@backstage/plugin-catalog-backend` matches URL-type locations against `catalog.rules` location patterns using the raw URL string submi...

npm

No PRs yet

Waline login accepts a non-string email as a match-all MongoDB query

GHSA-jf75-q64q-g65r MODERATE 13 days ago

## Summary The login endpoint POST /api/token reads the `email` field from the request body without checking its type and passes it straight into ...

npm

No PRs yet