Cloudreve: OAuth access tokens bypass scope enforcement due to missing client_id claim

GHSA-vgj4-345g-jcf8 CVE-2026-54560 HIGH 9 days ago

## Summary Cloudreve's OAuth access tokens can bypass OAuth scope enforcement. This does not appear to be the intended design. The documentat...

go

No PRs yet

Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path

GHSA-4x4j-2g7c-83w6 CVE-2026-55798 MODERATE 9 days ago

### 1. Summary `WindowsViewer.get_command()` constructs a `cmd.exe` shell command by directly embedding a file path into an f-string without escap...

pypi

No PRs yet

Pillow `GdImageFile._open()`: image dimensions accepted without `_decompression_bomb_check()`

GHSA-phj9-mv4w-65pm CVE-2026-55380 HIGH 9 days ago

## Description `PIL/GdImageFile.py` `GdImageFile._open()` reads image dimensions from the GD 2.x header and stores them in `self._size` without ca...

pypi

No PRs yet

Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading

GHSA-45hq-cxwh-f6vc CVE-2026-55379 HIGH 9 days ago

### Summary `PIL/BdfFontFile.py` `bdf_char()` (lines 84–88) reads the `BBX width height` field from a BDF font file and passes the dimensions direc...

pypi

No PRs yet

Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`

GHSA-5x94-69rx-g8h2 CVE-2026-54060 HIGH 9 days ago

## Description `PIL/FontFile.py` `FontFile.compile()` assembles per-glyph images into a single combined bitmap using `Image.new("1", (xsize, ysize...

pypi

No PRs yet

Pillow `PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading

GHSA-8v84-f9pq-wr9x CVE-2026-54059 HIGH 9 days ago

## Description `PIL/PcfFontFile.py` `_load_bitmaps()` (line 227) reads glyph dimensions from the PCF `METRICS` section and passes them directly to ...

pypi

No PRs yet

Astro: Reflected XSS via unescaped View Transition animation properties

GHSA-4g3v-8h47-v7g6 MODERATE 9 days ago

## Summary Astro's server-side View Transition CSS generator interpolates animation properties into an inline `<style>` element without escaping t...

npm

No PRs yet

Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)

GHSA-62p4-gmf7-7g93 CVE-2026-54058 HIGH 9 days ago

## Summary When Pillow loads an uncompressed image whose tile uses the `raw` codec and a mode in `Image._MAPMODES`, and the image was opened **fro...

pypi

No PRs yet

@better-auth/sso: SSO provider may allow registration for any org member without a checking their role

GHSA-gv74-j8m3-fg5f CVE-2026-53515 HIGH 9 days ago

### Am I affected? You are affected if all of the following are true: - You depend on `@better-auth/sso` at any version in `>= 1.2.10, < 1.6.11`,...

npm

No PRs yet

brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups

GHSA-3jxr-9vmj-r5cp CVE-2026-13149 HIGH 9 days ago

### Summary brace-expansion's expand() exhibits exponential-time - O(2ⁿ) - behavior in the number of consecutive non-expanding {} groups. A short, ...

npm

13

Dependabot PRs

Composer: Arbitrary file write outside vendor via malicious transitive package name

GHSA-499r-g7pc-vmp9 CVE-2026-59948 HIGH 9 days ago

## Summary A maliciously crafted package, published on an untrusted third party repository other than Packagist.org or Private Packagist, can caus...

packagist

No PRs yet

vLLM denial of service via prompt embeds on M-RoPE models

GHSA-33cg-gxv8-3p8g CVE-2026-55514 HIGH 9 days ago

### Summary _Short summary of the problem. Make the impact and severity as clear as possible. For example: An unsafe deserialization vulnerability ...

pypi

No PRs yet

pillow-heif: Integer Overflow in Encode Path Buffer Validation Leads to Heap Out-of-Bounds Read

GHSA-5gjj-6r7v-ph3x CVE-2026-28231 MODERATE 9 days ago

### Summary An integer overflow in the encode path buffer validation of `_pillow_heif.c` allows an attacker to bypass bounds checks by providing l...

pypi

No PRs yet

changedetection.io is vulnerable to unauthenticated static path traversal

GHSA-9jj8-v89v-xjvw CVE-2026-25527 MODERATE 9 days ago

## Summary The `/static/<group>/<filename>` route accepts `group=".."`, which causes `send_from_directory("static/..", filename)` to execute. This ...

pypi

No PRs yet

Tornado: Quadratic DoS via Crafted Multipart Parameters

GHSA-jhmp-mqwm-3gq8 CVE-2025-67726 HIGH 9 days ago

## Summary The `_parseparam` function in Tornado's `httputil.py` is used to parse specific HTTP header values, such as those in `multipart/form-da...

pypi

No PRs yet

Tornado: Quadratic DoS via Repeated Header Coalescing

GHSA-c98p-7wgm-6p64 CVE-2025-67725 HIGH 9 days ago

## Summary The `HTTPHeaders.add` method in Tornado accumulates values using string concatenation when the same header name is repeated. Due to Pyt...

pypi

No PRs yet

Tornado vulnerable to Header Injection and XSS via reason argument

GHSA-pr2v-jx2c-wg9f CVE-2025-67724 MODERATE 9 days ago

# Header injection and XSS via `reason` argument ## Summary The `reason` argument (used by both `RequestHandler.set_status` and `tornado.web.HTTP...

pypi

No PRs yet

Axios: Excessive recursion in formDataToJSON can cause denial of service

GHSA-42h9-826w-cgv3 MODERATE 9 days ago

## Summary Axios versions `0.28.0` and later contain uncontrolled recursion in `formDataToJSON`, the helper behind the public `axios.formToJSON()` ...

npm

No PRs yet

Axios: Prototype pollution auth subfields can inject Basic auth

GHSA-xj6q-8x83-jv6g MODERATE 9 days ago

## Summary Axios versions after the `GHSA-q8qp-cvcw-x6jj` fix still contain prototype-pollution read-side gadgets in Basic auth subfield handling....

npm

No PRs yet

Axios: Deep formToJSON Key Recursion Can Cause Denial of Service

GHSA-pmv8-rq9r-6j72 MODERATE 9 days ago

## Summary Axios versions starting with `0.28.0` contain uncontrolled recursion in `formDataToJSON`, which is exposed as `axios.formToJSON()` and ...

npm

No PRs yet

Skipper: Incomplete fix for CVE-2026-50197: an oversized body can bypass OPA deny-on-presence Rego policies

GHSA-8qqm-fp2q-v734 HIGH 12 days ago

### Summary A wrong policy can be an open door. You have to check `input.attributes.request.http.truncated_body` in your policy. ### Description...

go

No PRs yet

Skipper's routesrv-no-auth component: All routesrv API Endpoints Lack Authentication

GHSA-5587-2x54-jj6h CVE-2026-54246 MODERATE 12 days ago

## Description The `routesrv` component exposes the full cluster route topology (Ingress/RouteGroup configurations, backend URLs, filter chains, O...

go

No PRs yet

CloudTAK: Authenticated full-read SSRF in the /api/esri* routes — user-controlled URL fetched with no IP-classification guard

GHSA-r95q-fp26-h3hc CVE-2026-55177 HIGH 12 days ago

# Authenticated full-read SSRF in CloudTAK `/api/esri*` routes — user-controlled URL fetched with no IP-classification guard ## Summary Every rou...

npm

No PRs yet

PocketSphinx: Buffer overflows in language and acoustic model loading code

GHSA-56r5-2p2f-7cxp CVE-2026-54559 MODERATE 12 days ago

### Impact The trie language model code introduced in PocketSphinx 5prealpha failed to check various boundary conditions when reading the headers ...

pypi

No PRs yet

AngleSharp HTML5 Spec Compliance: mXSS via annotation-xml HTML Integration Point Bypass

GHSA-pgww-w46g-26qg CVE-2026-54570 MODERATE 12 days ago

### Summary The HTML specification requires that a MathML `<annotation-xml>` element with `encoding="text/html"` or `encoding="application/xhtml+xm...

nuget

No PRs yet

PRoot-Distro has Path Traversal in proot-distro copy — Arbitrary Read, Write, and Persistent Code Execution Outside Container Rootfs

GHSA-mfr4-mq8w-vmg6 MODERATE 12 days ago

<html><head></head><body><h1>Path Traversal in <code>proot-distro copy</code> — Arbitrary Read, Write, and Persistent Code Execution Outside Contai...

pypi

No PRs yet

ExifReader HEIC/AVIF ISO-BMFF parser throws uncaught RangeError on truncated boxes

GHSA-g77h-45rf-hcx4 CVE-2026-53496 MODERATE 12 days ago

## Summary ExifReader 4.40.0 can throw an uncaught `RangeError: Offset is outside the bounds of the DataView` while parsing crafted HEIC/AVIF file...

npm

1

Dependabot PRs

Flask-Reuploaded: Extension-denylist bypass via case-folding asymmetry in name-override path (incomplete-fix variant of CVE-2026-27641)

GHSA-937x-gpqr-72gg CVE-2026-54567 HIGH 12 days ago

## 1. Header | Field | Value | |---|---| | **Title** | Extension-denylist bypass via case-folding asymmetry in name-override path (incomplete-fix ...

pypi

No PRs yet

Prompty: Arbitrary code execution via JavaScript frontmatter in TypeScript loader

GHSA-c4gh-rv8h-q9vw CVE-2026-53597 HIGH 12 days ago

## Summary The TypeScript Prompty loader used `gray-matter` without overriding executable frontmatter engines. `gray-matter` supports JavaScript fr...

npm

No PRs yet

Prompty: Arbitrary file read via file reference expansion

GHSA-wxhm-2mq7-7697 CVE-2026-53598 HIGH 12 days ago

## Summary Prompty loaders expanded `${file:...}` references in `.prompty` frontmatter without enforcing that the resolved path stayed within an au...

cargo npm nuget +1 more

No PRs yet

mcp-memory-keeper: Arbitrary local file read in context_import via unvalidated filePath

GHSA-f7wf-v2vw-mpcx CVE-2026-54561 MODERATE 12 days ago

### Impact `context_import` passed the caller-supplied `filePath` directly to `fs.readFileSync` with no path confinement. A malicious MCP client —...

npm

No PRs yet

Formie: Missing authorization in administrative settings allows low-privileged CP users to modify plugin configuration

GHSA-cvpc-hccg-wmw4 MODERATE 12 days ago

Formie contains a missing authorization vulnerability in administrative settings routes. An authenticated, non-admin Craft CMS control panel user w...

packagist

No PRs yet

Gitea has insufficient permission checks for Composer package source links

GHSA-8qw8-rq86-9pc2 CVE-2026-27771 HIGH 12 days ago

### CVE Description Gitea versions up to and including 1.26.1 have insufficient permission checks for Composer package source links, which can expo...

go

No PRs yet

TAK-PS-Stats Web UI: Authenticated full-read SSRF in CloudTAK basemap import (PUT /api/basemap) — no IP-classification guard

GHSA-vqrw-qphh-p34v CVE-2026-54546 MODERATE 12 days ago

### Summary `PUT /api/basemap` (the basemap import endpoint) fetches an attacker-supplied URL server-side with **no SSRF protection whatsoever**. ...

npm

No PRs yet

oapi-codegen: OpenAPI Server Description Escapes Generated Go Comment and Injects Executable Code

GHSA-rjwr-m7qx-3fjr LOW 12 days ago

## Summary The vulnerability in oapi-codegen seems to be similar with CVE-2026-22785, which is a generated-code injection issue where untrusted O...

go

No PRs yet

meta-ads-mcp: X-Pipeboard-Token Header Auth Bypass Reuses Operator Meta Token

GHSA-2v2f-mvfg-ph56 CVE-2026-54547 HIGH 12 days ago

## X-Pipeboard-Token Header Auth Bypass Reuses Operator Meta Token ### Summary `AuthInjectionMiddleware` in `meta-ads-mcp` rejects HTTP MCP reque...

pypi

No PRs yet

meta-ads-mcp: Server-Side Request Forgery (SSRF) in `upload_ad_image` via Unrestricted `image_url` Fetch

GHSA-45gf-fjxp-cjpq CVE-2026-54549 HIGH 12 days ago

## Server-Side Request Forgery (SSRF) in `upload_ad_image` via Unrestricted `image_url` Fetch ### Summary The `upload_ad_image` MCP tool in `meta...

pypi

No PRs yet

sh _uid does not drop supplementary groups (incomplete privilege drop)

GHSA-q38v-wp89-2w55 CVE-2026-54552 HIGH 12 days ago

### Impact The `_uid` option performed an incomplete privilege drop on Linux/Unix-like systems. When `sh` was run from a process with elevated pri...

pypi

No PRs yet

AWS-JDBC Wrapper: Privilege Escalation in Aurora PostgreSQL instance

GHSA-mhww-p97m-3368 CVE-2026-11400 HIGH 12 days ago

Aurora PostgreSQL is a fully managed relational database engine that's compatible with PostgreSQL. The team has identified CVE-2026-11400, an issu...

maven

No PRs yet

plone.restapi: Stored XSS by spoofing mime type

GHSA-8rqh-vxpr-x77p MODERATE 12 days ago

### Impact A stored XSS affecting RichText fields. RichTextValue.output returns the raw, unsanitized stored value whenever the stored mimeType equ...

pypi

No PRs yet

plone.app.textfield: Stored XSS by spoofing mime type

GHSA-4r4f-gg25-rmg5 CVE-2026-54503 MODERATE 12 days ago

### Impact A stored XSS affecting RichText fields. RichTextValue.output returns the raw, unsanitized stored value whenever the stored mimeType equ...

pypi

No PRs yet

Skipper: Unbounded Request Body Read in Admission Webhook Causes Memory Exhaustion DoS

GHSA-cwxq-rc9x-2jvv CVE-2026-54247 MODERATE 12 days ago

## Summary The Kubernetes admission webhook handler reads the entire request body using `io.ReadAll(r.Body)` without any size limit. Any client th...

go

No PRs yet

vLLM: Speech-to-text upload size limit is enforced after full UploadFile read

GHSA-v82g-2437-67m2 CVE-2026-55646 MODERATE 12 days ago

## Summary Current-head vLLM documents `VLLM_MAX_AUDIO_CLIP_FILESIZE_MB` as the maximum audio file size accepted by the speech-to-text APIs. The d...

pypi

No PRs yet

vLLM: ReDoS via structured_outputs.regex compiled without timeout in xgrammar and outlines backends

GHSA-rwxx-mrjm-wc2m CVE-2026-55574 HIGH 12 days ago

## Summary The `structured_outputs.regex` API parameter passes a user-supplied regex string directly to grammar compiler backends with no compilat...

pypi

No PRs yet

vLLM has Remote DoS via Invalid Recovered Token Reinjection

GHSA-8wr5-jm2h-8r4f CVE-2026-54234 HIGH 12 days ago

## Summary A frontend-legal multi-request speculative workload can make vLLM produce an out-of-vocabulary recovered token equal to `vocab_size`, c...

pypi

No PRs yet

vLLM: Processing differential in multi-channel audio downmixing enables hidden-input/moderation bypass for audio models

GHSA-6c4r-fmh3-7rh8 CVE-2026-34760 MODERATE 12 days ago

## Issue Description Librosa defaults to using `numpy.mean` for mono downmixing (`to_mono`), while the international standard ITU-R BS.775-4 specif...

pypi

No PRs yet

Missing gas_limit validation in mpp Tempo fee-payer enables wallet drain

EEF-CVE-2026-59252 GHSA-vj8p-hp9x-gh47 CVE-2026-59252 HIGH 12 days ago

## Summary Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to drain the fee-payer wallet...

hex

No PRs yet

Unbounded access list in mpp Tempo fee-payer inflates gas cost per payment

EEF-CVE-2026-59694 GHSA-qpxh-ff8m-c62v CVE-2026-59694 HIGH 12 days ago

## Summary Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to inflate the fee-payer's ga...

hex

No PRs yet

Unbounded max_fee_per_gas in mpp Tempo fee-payer enables single-request wallet drain

EEF-CVE-2026-59695 GHSA-vv77-66rf-pm86 CVE-2026-59695 HIGH 12 days ago

## Summary Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to drain the fee-payer wallet...

hex

No PRs yet

HTTP::Date versions before 6.08 for Perl allow CPU exhaustion via polynomial regex backtracking in parse_date. parse_date() matches the date string against a chain of alternative regexes, and str2time() delegates to it. Several of these patterns place...

CPANSA-HTTP-Date-2026-14741 CVE-2026-14741 13 days ago

HTTP::Date versions before 6.08 for Perl allow CPU exhaustion via polynomial regex backtracking in parse_date. parse_date() matches the date strin...

cpan

No PRs yet