FrontMCP: Server-Side Request Forgery (SSRF) in the OpenAPI adapter spec-change poller

GHSA-8q49-2h5h-434x MODERATE 3 days ago

## Summary The OpenAPI adapter's spec-change **poller** (`OpenApiSpecPoller`) re-fetched the configured spec `url` on a timer using a raw global `...

npm

No PRs yet

Quasar: Prototype pollution in the extend() utility

GHSA-3r53-75j5-3g7j MODERATE 3 days ago

### Summary `quasar@2.20.1`, the latest published version at the time of testing, appears to be vulnerable to prototype pollution through the publ...

npm

No PRs yet

Shescape: Quadratic-time denial of service in the flag-protection

GHSA-gm3r-q2wp-hw87 HIGH 3 days ago

### Impact This impacts users of Shescape that have flag protection enabled, which is on by default, regardless of the API being used. An attacke...

npm

No PRs yet

Shescape: Home-directory disclosure in assignment context on Unix with Dash

GHSA-q53c-4prm-w95q MODERATE 3 days ago

### Impact This impacts users of Shescape on Unix systems that explicitly configure `shell` to Dash, or `true` when the default shell is Dash, usi...

npm

No PRs yet

Shescape: Shell injection via unescaped parentheses on Windows with CMD

GHSA-w4hw-qcx7-56pr CRITICAL 3 days ago

### Impact This impacts users of Shescape on Windows that explicitly configure `shell` to CMD, or `true` with the default shell being CMD, using t...

npm

No PRs yet

Shescape: Path disclosure on Unix with Zsh

GHSA-6v4m-fw66-8r4x MODERATE 3 days ago

### Impact This impacts users of Shescape on Unix systems that explicitly configure `shell` to Zsh, or `true` when the default shell is Zsh, using...

npm

No PRs yet

brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash

GHSA-mh99-v99m-4gvg CVE-2026-14257 HIGH 3 days ago

### Summary `expand()` bounds the *number* of results it produces (the `max` option, `100_000` by default) but not their *length*. By chaining man...

npm

No PRs yet

sm-crypto: Predictable SM2 key generation in Node.js: default RNG uses Math.random + wall clock

GHSA-vh45-f885-3848 CRITICAL 3 days ago

## Summary `sm-crypto` (npm package **0.4.0**, the latest release, published 2026-01-20) generates SM2 private keys and signing ephemeral scalars ...

npm

No PRs yet

@anephenix/hub: Unauthenticated WebSocket RPC Waiter Resource Exhaustion

GHSA-g5vv-q72c-7j78 HIGH 3 days ago

### Summary `@anephenix/hub` starts a `setInterval` polling loop for every incoming WebSocket connection to request a client ID via RPC. If the re...

npm

No PRs yet

Budibase: SSRF via bare fetch() in uploadUrl during AI table generation

GHSA-hfhx-w8p8-4hc7 MODERATE 3 days ago

# Budibase: SSRF via bare fetch() in uploadUrl during AI table generation ## Summary The `uploadUrl()` function in `packages/server/src/utilities...

npm

No PRs yet

Budibase: SSRF via DNS rebinding in the REST datasource integration

GHSA-v42f-v8xc-j435 HIGH 3 days ago

### Summary Budibase's central outbound-fetch guard (`fetchWithBlacklist`) prevents SSRF/DNS-rebinding by resolving the target hostname, checking e...

npm

No PRs yet

Budibase: NoSQL injection in MongoDB integration: collection dump, $where JS exec, cross-collection pivot, arbitrary update/delete

GHSA-pmpg-2mxq-6xwr HIGH 3 days ago

## Summary An end-user injection in Budibase's MongoDB datasource lets any BASIC app user bypass the builder's query-level access controls. Builde...

npm

No PRs yet

Budibase: Account Enumeration via Login Lockout Response Differential

GHSA-cr7p-cr3q-h5cm MODERATE 3 days ago

## Summary The login lockout mechanism in Budibase creates an observable response discrepancy that allows unauthenticated attackers to enumerate v...

npm

No PRs yet

Budibase: Chat-Link Handoff Identity Confusion (Same-Tenant Account-Link CSRF)

GHSA-pvcr-8mvp-w8qr HIGH 3 days ago

### Summary The Budibase AI chat-link handoff flow (`GET/POST /api/chat-links/:instance/:token/handoff`) binds an **external chat identity** (Slac...

npm

No PRs yet

Budibase: MySQL DESCRIBE Backtick Injection via multipleStatements in Database Connector

GHSA-2xgg-r2wc-c5r2 HIGH 3 days ago

### Summary **This is a related but independently fixable vulnerability to GHSA-qqf5-x7mj-v43p (PostgreSQL SQL injection), reported in the same ori...

npm

No PRs yet

Budibase: NoSQL Injection via JSON Parameter Interpolation in MongoDB Query Execution

GHSA-qw6m-8fw2-2v64 HIGH 3 days ago

## Summary Budibase's MongoDB query execution endpoint (`POST /api/v2/queries/:queryId`) is vulnerable to NoSQL injection through user-supplied qu...

npm

No PRs yet

Budibase: OAuth2 Token Disclosure via Automation Test Results Broadcast to Other Builders

GHSA-gh4h-34gr-87r7 MODERATE 3 days ago

## Summary When an SSO-authenticated user tests an automation in the Budibase builder, their OAuth2 access token and refresh token are included in...

npm

No PRs yet

Budibase: Unauthenticated user information disclosure via public tenant user lookup endpoint

GHSA-hr66-5mqr-8mpx HIGH 3 days ago

#### Summary The Budibase Worker service exposes a public, unauthenticated API endpoint (`GET /api/global/users/tenant/:id`) that returns sensitive...

npm

No PRs yet

Budibase: Unauthenticated REST Datasource Credential Theft via Cross-Origin Auth Leak

GHSA-mqhr-6j6h-74p5 CRITICAL 3 days ago

## Summary Budibase attaches a REST datasource's stored credentials (Bearer/Basic tokens and static headers) to an outgoing request before it decid...

npm

No PRs yet

Budibase: OIDC SSO account takeover: incoming identity linked by email without checking email_verified

GHSA-hp6v-6jw7-gv2f CRITICAL 3 days ago

### Summary Budibase's OIDC SSO login links an incoming SSO identity to an existing Budibase account **by email address alone**, without ever check...

npm

No PRs yet

Budibase: DNS rebinding SSRF bypasses remain in OpenAPI import and REST query execution

GHSA-xg5g-26x8-cvf4 HIGH 3 days ago

## Impact A builder-level user can make Budibase issue server-side HTTP requests to loopback or private-network targets by using DNS rebinding aga...

npm

No PRs yet

Budibase: S3 presigned URL endpoint authorization regression in v3.39.4 allows BASIC users to obtain S3 PutObject presigned URLs

GHSA-xcx6-4f2g-hhgx HIGH 3 days ago

## Impact In Budibase v3.39.4, a regression in the authorization level for the S3 attachment upload endpoint allows any BASIC app user to obtain S...

npm

No PRs yet

Budibase: Server Filesystem Existence/Read Oracle via Builder-Controlled MongoDB tlsCertificateKeyFile

GHSA-ppr4-5f46-j9c6 HIGH 3 days ago

## Summary When creating a MongoDB datasource, Budibase passes the `tlsCertificateKeyFile` and `tlsCAFile` fields straight to the MongoDB driver as...

npm

No PRs yet

Budibase: SQL Injection via `multipleStatements: true`

GHSA-q6x4-v3qx-85qw CRITICAL 3 days ago

## Summary A critical SQL injection vulnerability was discovered in Budibase's MySQL integration that allows remote attackers to execute arbitrary ...

npm

No PRs yet

Budibase: Email Change IDOR via POST /api/v2/email allows full Account Takeover (accountId not validated against session)

GHSA-c8vc-7pv3-g98p HIGH 3 days ago

## Summary `POST /api/v2/email` on the account portal (`account.budibase.app`) starts an email-change workflow using a client-supplied `accountId`...

npm

No PRs yet

Budibase: SSO OAuth2 Token Leakage via User Metadata Endpoints to Power-Role Users

GHSA-fcrw-f7gg-6g9f MODERATE 3 days ago

## Summary The `/api/users/metadata` and `/api/users/metadata/:id` endpoints in `@budibase/server` return full global user profiles to any user wi...

npm

No PRs yet

Budibase: Missing RBAC on GET /api/global/groups allows BASIC users to enumerate all tenant groups and role mappings

GHSA-4qcj-m5wp-jmf4 MODERATE 3 days ago

## Summary The `GET /api/global/groups` endpoint on the worker service has no role-based authorization middleware. Any authenticated user (includi...

npm

No PRs yet

Budibase: Privilege escalation via public role assignment API missing app-level authorization

GHSA-j9fc-w3mr-x6mv HIGH 3 days ago

### Summary Budibase `3.39.19` (commit `03fbabae4`) is affected by a privilege-escalation / missing-authorization flaw in the public role-assignme...

npm

No PRs yet

react-server-dom: Denial of Service in Server Functions

GHSA-wx67-qw84-cm4g CVE-2026-44907 HIGH 3 days ago

### Impact A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this coul...

npm

No PRs yet

Claude Code: Sandbox Escape via Git Worktree Path Confusion Allows Unsandboxed Code Execution

GHSA-7835-87q9-rgvv CVE-2026-55607 HIGH 3 days ago

Claude Code's worktree handling allowed creation of worktrees named ".git" and navigation to worktrees outside the sandbox context, enabling git di...

npm

No PRs yet

js-yaml: Exponential parsing time in flow collections leads to denial of service

GHSA-pm4m-ph32-ghv5 HIGH 3 days ago

### Summary Parsing a small YAML document can take exponential time. An application that calls `load()` or `loadAll()` on untrusted input can be hu...

npm

No PRs yet

React Router: RSC Mode CSRF Bypass Allows Action Execution Before 400 Response

GHSA-qwww-vcr4-c8h2 HIGH 3 days ago

This is a follow up to CVE-2026-22030 to address related CSRF flows in unstable RSC code paths. > [!NOTE] > This only affects your application if ...

npm

No PRs yet

AWS CDK CodeBuild S3 Log Encryption Boolean Inversion

GHSA-464c-974j-9xm6 LOW 3 days ago

## Summary The AWS Cloud Development Kit (AWS CDK) is an open-source software development framework for defining cloud infrastructure in code and ...

go maven npm +2 more

No PRs yet

@fastify/static vulnerable to Authorization Bypass via Non-Canonical URL Paths

GHSA-8pvw-jcv7-9cmj CVE-2026-7120 MODERATE 3 days ago

### Impact `@fastify/static` evaluates the `allowedPath` callback before normalizing dot segments and duplicate slashes in the pathname used for f...

npm

No PRs yet

@fastify/static vulnerable to route guard bypass via path traversal

GHSA-83w8-p2f5-377r CVE-2026-15074 HIGH 3 days ago

### Impact `@fastify/static` is vulnerable to a bypass of route-based middleware and guards via non-leading `..` and `%2E%2E` path segments. `find...

npm

No PRs yet

node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection

GHSA-r292-9mhp-454m MODERATE 3 days ago

## Summary `node-tar` (npm `tar`) contains an uncontrolled-recursion stack-exhaustion DoS in the internal `mapHas` helper used by `filesFilter`. Wh...

npm

No PRs yet

PostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosure

GHSA-r28c-9q8g-f849 HIGH 3 days ago

## Vulnerability Details **File**: `lib/previous-map.js` **Line**: 87-98 (`loadFile`), 129-144 (`loadMap`) ### Root Cause PostCSS auto-detects a...

npm

No PRs yet

Prompty: Server-Side Template Injection to Remote Code Execution in the @prompty/core Nunjucks Renderer

GHSA-w28w-gp39-m4p6 CRITICAL 3 days ago

## Summary The TypeScript Nunjucks renderer evaluated untrusted `.prompty` template bodies with unrestricted JavaScript member access. An attacker-...

npm

No PRs yet

Mongoose: Prototype pollution in mongoose update casting via __proto__-prefixed dotted path (Schema._getSchema/path getter)

GHSA-664h-wqgq-64gw MODERATE 3 days ago

### Impact _What kind of vulnerability is it? Who is impacted?_ Prototype pollution in update casting: passing a user-controlled update to a Mongo...

npm

No PRs yet

Velocity.js: Remote Code Execution via property-read to Function constructor (bypass of GHSA-j658-c2gf-x6pq fix)

GHSA-7gfh-x38p-prh3 CRITICAL 3 days ago

### Summary Remote Code Execution (RCE) in velocityjs v2.1.6 via property-read to the Function constructor. This bypasses the fix for GHSA-j658-c2...

npm

No PRs yet

@backstage/plugin-auth-backend: Unauthenticated OAuth account takeover via `redirect_uri` allowlist bypass

GHSA-38hq-7x33-php4 MODERATE 3 days ago

### Impact The allowlist matching used by the experimental dynamic client registration and client ID metadata document (CIMD) features in `@backsta...

npm

No PRs yet

Trix: Stored XSS via HTMLParser attribute injection on paste

GHSA-53g2-mvcc-q9x3 MODERATE 3 days ago

### Impact The Trix editor, in versions prior to 2.1.18, is vulnerable to XSS when crafted HTML is pasted into the editor. The `HTMLParser` proces...

npm rubygems

No PRs yet

Valibot: record() issue paths can make flatten() throw for inherited Object property names

GHSA-5qjj-4xww-7phc CVE-2026-59952 MODERATE 3 days ago

## Summary `valibot` 1.4.1 can throw a `TypeError` inside its `flatten()` helper when validation issues contain attacker-controlled object keys su...

npm

No PRs yet

seroval: `seroval.fromJSON()` Promise resolver type confusion invokes attacker-controlled methods during deserialization

GHSA-mv8w-475r-vwqw CVE-2026-59940 CRITICAL 3 days ago

## Summary A type confusion issue in `seroval.fromJSON()` allowed attacker-controlled JSON input to cause Promise control nodes to operate on valu...

npm

No PRs yet

SvelteKit: Prototype pollution in file input deletion path in remote-function forms

GHSA-866w-xmhq-wj7x MODERATE 3 days ago

If you use remote form functions, have an input field of type `file`, and accept arbitrary user-controlled path names for the field, then you are v...

npm

No PRs yet

SvelteKit: Big remote form function payloads can cause Node process to crash

GHSA-wqjv-9729-c5q2 MODERATE 3 days ago

Big remote form function payloads can cause the Node process to crash. Doing this repeatedly can cause DoS.

npm

No PRs yet

Better Auth: Account takeover via pre-account hijacking on magic-link and email-OTP sign-in

GHSA-qq9h-g4jm-xgf3 HIGH 3 days ago

### Am I affected You are affected if all of the following hold: - You run a `better-auth` version below 1.6.22, or a `1.7.0-beta` below `1.7.0-b...

npm

No PRs yet

@better-auth/stripe: cross-organization billing tampering in organization subscription actions

GHSA-h3rm-78g3-j7cp HIGH 3 days ago

### Am I affected? You are affected if all of these are true: - You use `@better-auth/stripe` from version 1.4.11 up to a patched version below. ...

npm

No PRs yet

@better-auth/scim: account takeover and stale access via SCIM provider-id collision

GHSA-rjg6-39jm-rgg4 CRITICAL 3 days ago

### Am I affected? You are affected if your application registers the `@better-auth/scim` plugin and lets authenticated users generate SCIM tokens...

npm

No PRs yet

React Router: Unauthenticated Denial of Service via Inefficient Route Matching

GHSA-chx6-hx7r-mcp5 CVE-2026-55685 HIGH 3 days ago

This is a follow up to https://github.com/remix-run/react-router/security/advisories/GHSA-8x6r-g9mw-2r78 that covers additional reported scenarios ...

npm

No PRs yet