Mistune renderers/html.safe_url: HARMFUL_PROTOCOLS list misses legacy and chained schemes that historically chain to `javascript:` execution

GHSA-qfrw-5rxm-mhh2 CVE-2026-59929 MODERATE 9 days ago

## Summary **Type:** URL-scheme allowlist gap. The `safe_url` filter only blocks the four schemes `javascript:`, `vbscript:`, `file:`, `data:`. Se...

pypi

No PRs yet

Mistune toc / TableOfContents directive: heading IDs use predictable `toc_N` numbering with no slugification, allowing collision with attacker-controlled `id="toc_N"` content

GHSA-2hm2-hc3v-44h9 CVE-2026-59930 MODERATE 9 days ago

## Summary **Type:** Predictable identifier generation. The `toc` plugin and `TableOfContents` directive both default to generating heading IDs of...

pypi

No PRs yet

Mistune: Arbitrary File Read via Include directive path traversal

GHSA-r4rv-85jg-w4mf CVE-2026-59924 MODERATE 9 days ago

### Summary A path traversal issue exists in mistune's `Include` directive when markdown files are processed using `md.read()`. A crafted include ...

pypi

No PRs yet

Mistune plugins/formatting: quadratic-time parsing on long runs of `~~x~~`, `==x==`, and `^^x^^` markers (strikethrough / mark / insert)

GHSA-c8j7-8cv4-2xmq CVE-2026-59922 HIGH 9 days ago

## Summary **Type:** Algorithmic-complexity denial of service. A run of N closed pairs `~~x~~~~x~~...` (or the analogous `==x==` for `mark`, `^^x^...

pypi

No PRs yet

Mistune: XSS via unescaped class option in Admonition directive

GHSA-g97x-gvcm-x72h CVE-2026-59926 MODERATE 9 days ago

In `src/mistune/directives/admonition.py`, the `render_admonition()` function concatenates the `:class:` option directly into the HTML class attrib...

pypi

No PRs yet

Mistune: XSS via percent-encoded javascript URI bypass in safe_url()

GHSA-8c25-4j27-2rv3 CVE-2026-59923 MODERATE 9 days ago

### Summary An XSS vulnerability in Mistune allows bypassing of safe_url() protections via percent-encoded javascript URIs. ### Details The vulne...

pypi

No PRs yet

Mistune inline_parser: quadratic-time parsing on long runs of `**x**` and `***x***` emphasis pairs

GHSA-4j32-57v6-6g45 CVE-2026-59925 HIGH 9 days ago

## Summary **Type:** Algorithmic-complexity DoS in core emphasis parsing. A long sequence of well-formed `**x**` (strong) or `***x***` (strong-emp...

pypi

No PRs yet

Mistune directives/include: mutual `.. include::` recursion crashes the renderer with `RecursionError`, denial of service via two attacker-controlled markdown files

GHSA-8mpj-m6qm-5qr8 CVE-2026-59927 MODERATE 9 days ago

## Summary **Type:** Uncontrolled recursion via mutual include. The `Include` directive checks for direct self-reference (`a.md` cannot include `a...

pypi

No PRs yet

Mistune block_parser: quadratic-time parsing on long lists of repeated reference-link definitions

GHSA-ffq3-xpv3-j92q CVE-2026-59928 HIGH 9 days ago

## Summary **Type:** Algorithmic-complexity DoS in reference-link definition handling. A markdown document with N reference-link definitions of th...

pypi

No PRs yet

js-yaml: YAML merge-key chains can force quadratic CPU consumption in js-yaml

GHSA-g796-fgmg-93mv CVE-2026-59868 MODERATE 9 days ago

### Impact This is the same report as for v3/v4, but with lower severity, because in v5, merge is off by default When merge keys (`<<`) are enabl...

npm

No PRs yet

js-yaml: YAML merge-key chains can force quadratic CPU consumption

GHSA-52cp-r559-cp3m CVE-2026-59869 HIGH 9 days ago

### Impact js-yaml can spend quadratic CPU time parsing a document whose size grows only linearly. The issue is triggered by a chain of mappings w...

npm

No PRs yet

js-yaml: Quadratic-complexity (O(n^2)) DoS via !!omap tag in YAML11_SCHEMA

GHSA-724g-mxrg-4qvm CVE-2026-59870 MODERATE 9 days ago

### Summary `js-yaml` v5.x introduces `YAML11_SCHEMA` support with the `!!omap` (ordered map) tag. The `omapTag.addItem()` function performs a line...

npm

No PRs yet

File Browser: ScopedFs follows a dangling symlink on write, letting a scoped user create files outside their scope

GHSA-8wc8-hf36-mjh9 CVE-2026-55668 MODERATE 9 days ago

## Summary `ScopedFs` confines every File Browser user to a scope directory. Its `within()` guard is meant to reject any operation that follows a ...

go

No PRs yet

File Browser: Out-of-scope file deletion by a Create-only scoped user via symlink-following RemoveAll in upload failure-cleanup

GHSA-fmm7-x4gx-8jhr CVE-2026-55667 HIGH 9 days ago

## Summary A scoped, non-admin File Browser user holding only the **Create** permission can delete arbitrary files outside their scope (other tena...

go

No PRs yet

Cloudreve: Non-admin remote download users can SSRF loopback/internal services and read imported responses

GHSA-x756-g4x3-c64m CVE-2026-54562 MODERATE 9 days ago

## Summary Cloudreve's remote download workflow accepts user-supplied URLs and passes them to the configured downloader without blocking loopback,...

go

No PRs yet

Cloudreve: OAuth access tokens bypass scope enforcement due to missing client_id claim

GHSA-vgj4-345g-jcf8 CVE-2026-54560 HIGH 9 days ago

## Summary Cloudreve's OAuth access tokens can bypass OAuth scope enforcement. This does not appear to be the intended design. The documentat...

go

No PRs yet

Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path

GHSA-4x4j-2g7c-83w6 CVE-2026-55798 MODERATE 9 days ago

### 1. Summary `WindowsViewer.get_command()` constructs a `cmd.exe` shell command by directly embedding a file path into an f-string without escap...

pypi

No PRs yet

Pillow `GdImageFile._open()`: image dimensions accepted without `_decompression_bomb_check()`

GHSA-phj9-mv4w-65pm CVE-2026-55380 HIGH 9 days ago

## Description `PIL/GdImageFile.py` `GdImageFile._open()` reads image dimensions from the GD 2.x header and stores them in `self._size` without ca...

pypi

No PRs yet

Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading

GHSA-45hq-cxwh-f6vc CVE-2026-55379 HIGH 9 days ago

### Summary `PIL/BdfFontFile.py` `bdf_char()` (lines 84–88) reads the `BBX width height` field from a BDF font file and passes the dimensions direc...

pypi

No PRs yet

Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`

GHSA-5x94-69rx-g8h2 CVE-2026-54060 HIGH 9 days ago

## Description `PIL/FontFile.py` `FontFile.compile()` assembles per-glyph images into a single combined bitmap using `Image.new("1", (xsize, ysize...

pypi

No PRs yet

Pillow `PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading

GHSA-8v84-f9pq-wr9x CVE-2026-54059 HIGH 9 days ago

## Description `PIL/PcfFontFile.py` `_load_bitmaps()` (line 227) reads glyph dimensions from the PCF `METRICS` section and passes them directly to ...

pypi

No PRs yet

Astro: Reflected XSS via unescaped View Transition animation properties

GHSA-4g3v-8h47-v7g6 MODERATE 9 days ago

## Summary Astro's server-side View Transition CSS generator interpolates animation properties into an inline `<style>` element without escaping t...

npm

No PRs yet

Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)

GHSA-62p4-gmf7-7g93 CVE-2026-54058 HIGH 9 days ago

## Summary When Pillow loads an uncompressed image whose tile uses the `raw` codec and a mode in `Image._MAPMODES`, and the image was opened **fro...

pypi

No PRs yet

@better-auth/sso: SSO provider may allow registration for any org member without a checking their role

GHSA-gv74-j8m3-fg5f CVE-2026-53515 HIGH 9 days ago

### Am I affected? You are affected if all of the following are true: - You depend on `@better-auth/sso` at any version in `>= 1.2.10, < 1.6.11`,...

npm

No PRs yet

brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups

GHSA-3jxr-9vmj-r5cp CVE-2026-13149 HIGH 9 days ago

### Summary brace-expansion's expand() exhibits exponential-time - O(2ⁿ) - behavior in the number of consecutive non-expanding {} groups. A short, ...

npm

12

Dependabot PRs

Composer: Arbitrary file write outside vendor via malicious transitive package name

GHSA-499r-g7pc-vmp9 CVE-2026-59948 HIGH 9 days ago

## Summary A maliciously crafted package, published on an untrusted third party repository other than Packagist.org or Private Packagist, can caus...

packagist

No PRs yet

vLLM denial of service via prompt embeds on M-RoPE models

GHSA-33cg-gxv8-3p8g CVE-2026-55514 HIGH 9 days ago

### Summary _Short summary of the problem. Make the impact and severity as clear as possible. For example: An unsafe deserialization vulnerability ...

pypi

No PRs yet

pillow-heif: Integer Overflow in Encode Path Buffer Validation Leads to Heap Out-of-Bounds Read

GHSA-5gjj-6r7v-ph3x CVE-2026-28231 MODERATE 9 days ago

### Summary An integer overflow in the encode path buffer validation of `_pillow_heif.c` allows an attacker to bypass bounds checks by providing l...

pypi

No PRs yet

changedetection.io is vulnerable to unauthenticated static path traversal

GHSA-9jj8-v89v-xjvw CVE-2026-25527 MODERATE 9 days ago

## Summary The `/static/<group>/<filename>` route accepts `group=".."`, which causes `send_from_directory("static/..", filename)` to execute. This ...

pypi

No PRs yet

Tornado: Quadratic DoS via Crafted Multipart Parameters

GHSA-jhmp-mqwm-3gq8 CVE-2025-67726 HIGH 9 days ago

## Summary The `_parseparam` function in Tornado's `httputil.py` is used to parse specific HTTP header values, such as those in `multipart/form-da...

pypi

No PRs yet

Tornado: Quadratic DoS via Repeated Header Coalescing

GHSA-c98p-7wgm-6p64 CVE-2025-67725 HIGH 9 days ago

## Summary The `HTTPHeaders.add` method in Tornado accumulates values using string concatenation when the same header name is repeated. Due to Pyt...

pypi

No PRs yet

Tornado vulnerable to Header Injection and XSS via reason argument

GHSA-pr2v-jx2c-wg9f CVE-2025-67724 MODERATE 9 days ago

# Header injection and XSS via `reason` argument ## Summary The `reason` argument (used by both `RequestHandler.set_status` and `tornado.web.HTTP...

pypi

No PRs yet

Axios: Excessive recursion in formDataToJSON can cause denial of service

GHSA-42h9-826w-cgv3 MODERATE 9 days ago

## Summary Axios versions `0.28.0` and later contain uncontrolled recursion in `formDataToJSON`, the helper behind the public `axios.formToJSON()` ...

npm

No PRs yet

Axios: Prototype pollution auth subfields can inject Basic auth

GHSA-xj6q-8x83-jv6g MODERATE 9 days ago

## Summary Axios versions after the `GHSA-q8qp-cvcw-x6jj` fix still contain prototype-pollution read-side gadgets in Basic auth subfield handling....

npm

No PRs yet

Axios: Deep formToJSON Key Recursion Can Cause Denial of Service

GHSA-pmv8-rq9r-6j72 MODERATE 9 days ago

## Summary Axios versions starting with `0.28.0` contain uncontrolled recursion in `formDataToJSON`, which is exposed as `axios.formToJSON()` and ...

npm

No PRs yet

Skipper: Incomplete fix for CVE-2026-50197: an oversized body can bypass OPA deny-on-presence Rego policies

GHSA-8qqm-fp2q-v734 HIGH 12 days ago

### Summary A wrong policy can be an open door. You have to check `input.attributes.request.http.truncated_body` in your policy. ### Description...

go

No PRs yet

Skipper's routesrv-no-auth component: All routesrv API Endpoints Lack Authentication

GHSA-5587-2x54-jj6h CVE-2026-54246 MODERATE 12 days ago

## Description The `routesrv` component exposes the full cluster route topology (Ingress/RouteGroup configurations, backend URLs, filter chains, O...

go

No PRs yet

CloudTAK: Authenticated full-read SSRF in the /api/esri* routes — user-controlled URL fetched with no IP-classification guard

GHSA-r95q-fp26-h3hc CVE-2026-55177 HIGH 12 days ago

# Authenticated full-read SSRF in CloudTAK `/api/esri*` routes — user-controlled URL fetched with no IP-classification guard ## Summary Every rou...

npm

No PRs yet

PocketSphinx: Buffer overflows in language and acoustic model loading code

GHSA-56r5-2p2f-7cxp CVE-2026-54559 MODERATE 12 days ago

### Impact The trie language model code introduced in PocketSphinx 5prealpha failed to check various boundary conditions when reading the headers ...

pypi

No PRs yet

AngleSharp HTML5 Spec Compliance: mXSS via annotation-xml HTML Integration Point Bypass

GHSA-pgww-w46g-26qg CVE-2026-54570 MODERATE 12 days ago

### Summary The HTML specification requires that a MathML `<annotation-xml>` element with `encoding="text/html"` or `encoding="application/xhtml+xm...

nuget

No PRs yet

PRoot-Distro has Path Traversal in proot-distro copy — Arbitrary Read, Write, and Persistent Code Execution Outside Container Rootfs

GHSA-mfr4-mq8w-vmg6 MODERATE 12 days ago

<html><head></head><body><h1>Path Traversal in <code>proot-distro copy</code> — Arbitrary Read, Write, and Persistent Code Execution Outside Contai...

pypi

No PRs yet

ExifReader HEIC/AVIF ISO-BMFF parser throws uncaught RangeError on truncated boxes

GHSA-g77h-45rf-hcx4 CVE-2026-53496 MODERATE 12 days ago

## Summary ExifReader 4.40.0 can throw an uncaught `RangeError: Offset is outside the bounds of the DataView` while parsing crafted HEIC/AVIF file...

npm

1

Dependabot PRs

Flask-Reuploaded: Extension-denylist bypass via case-folding asymmetry in name-override path (incomplete-fix variant of CVE-2026-27641)

GHSA-937x-gpqr-72gg CVE-2026-54567 HIGH 12 days ago

## 1. Header | Field | Value | |---|---| | **Title** | Extension-denylist bypass via case-folding asymmetry in name-override path (incomplete-fix ...

pypi

No PRs yet

Prompty: Arbitrary code execution via JavaScript frontmatter in TypeScript loader

GHSA-c4gh-rv8h-q9vw CVE-2026-53597 HIGH 12 days ago

## Summary The TypeScript Prompty loader used `gray-matter` without overriding executable frontmatter engines. `gray-matter` supports JavaScript fr...

npm

No PRs yet

Prompty: Arbitrary file read via file reference expansion

GHSA-wxhm-2mq7-7697 CVE-2026-53598 HIGH 12 days ago

## Summary Prompty loaders expanded `${file:...}` references in `.prompty` frontmatter without enforcing that the resolved path stayed within an au...

cargo npm nuget +1 more

No PRs yet

mcp-memory-keeper: Arbitrary local file read in context_import via unvalidated filePath

GHSA-f7wf-v2vw-mpcx CVE-2026-54561 MODERATE 12 days ago

### Impact `context_import` passed the caller-supplied `filePath` directly to `fs.readFileSync` with no path confinement. A malicious MCP client —...

npm

No PRs yet

Formie: Missing authorization in administrative settings allows low-privileged CP users to modify plugin configuration

GHSA-cvpc-hccg-wmw4 MODERATE 12 days ago

Formie contains a missing authorization vulnerability in administrative settings routes. An authenticated, non-admin Craft CMS control panel user w...

packagist

No PRs yet

Gitea has insufficient permission checks for Composer package source links

GHSA-8qw8-rq86-9pc2 CVE-2026-27771 HIGH 12 days ago

### CVE Description Gitea versions up to and including 1.26.1 have insufficient permission checks for Composer package source links, which can expo...

go

No PRs yet

TAK-PS-Stats Web UI: Authenticated full-read SSRF in CloudTAK basemap import (PUT /api/basemap) — no IP-classification guard

GHSA-vqrw-qphh-p34v CVE-2026-54546 MODERATE 12 days ago

### Summary `PUT /api/basemap` (the basemap import endpoint) fetches an attacker-supplied URL server-side with **no SSRF protection whatsoever**. ...

npm

No PRs yet

oapi-codegen: OpenAPI Server Description Escapes Generated Go Comment and Injects Executable Code

GHSA-rjwr-m7qx-3fjr LOW 12 days ago

## Summary The vulnerability in oapi-codegen seems to be similar with CVE-2026-22785, which is a generated-code injection issue where untrusted O...

go

No PRs yet