ViewComponent: Reused Component Instances Retain Stale Render Context

GHSA-9h85-g7w3-rh49 CVE-2026-54497 MODERATE 15 days ago

# Reused Component Instances Retain Stale Render Context ## Summary `ViewComponent::Base` instances retain multiple render-scoped objects across ...

rubygems

No PRs yet

ViewComponent: around_render HTML-Safety Bypass

GHSA-97jw-64cj-jc58 CVE-2026-54498 HIGH 15 days ago

## Summary `ViewComponent::Base#around_render` can return HTML-unsafe strings that bypass the escaping behavior applied to normal `#call` return v...

rubygems

No PRs yet

open-feature-operator: Cross-namespace FeatureFlagSource and InProcessConfiguration resolution exposes spec contents on multi-tenant clusters

GHSA-398h-7f66-3h4p CVE-2026-54495 MODERATE 15 days ago

## Summary A namespaced `FeatureFlagSource` or `InProcessConfiguration` resource can be referenced cross-namespace via the `openfeature.dev/featur...

go

No PRs yet

django-haystack: Remote Code Execution via `eval()` in Elasticsearch Result Deserialization

GHSA-r3hx-x5rh-p9vv HIGH 15 days ago

## Remote Code Execution via `eval()` in Elasticsearch Result Deserialization ### Summary The Elasticsearch backend in django-haystack calls `eva...

pypi

No PRs yet

serde_with: KeyValueMap serialization panics on empty sequence or map entries

GHSA-7gcf-g7xr-8hxj MODERATE 15 days ago

### Summary The public `KeyValueMap` serializer assumes that each mapped element has at least one field or item to use as the map key, but it subt...

cargo

4

Dependabot PRs

websocket-driver: Resource limit bypass via message compression

GHSA-mp7j-qc5w-4988 CVE-2026-54490 MODERATE 15 days ago

### Impact If this library is used in tandem with the `permessage-deflate` extension, a WebSocket server or client can be made to accept messages ...

npm

No PRs yet

websocket-driver: Message corruption via abuse of protocol length headers

GHSA-xv26-6w52-cph6 CVE-2026-54466 CRITICAL 15 days ago

### Impact The frame format in draft versions of the WebSocket protocol includes a length header that allows an arbitrarily large integer to be en...

npm

No PRs yet

websocket-driver: Memory exhaustion in HTTP header parser

GHSA-8j3g-f24p-4mpw CVE-2026-54465 MODERATE 15 days ago

### Impact If this library is used to implement a WebSocket server on top of a TCP server (rather than an HTTP server or framework) using the `Web...

rubygems

No PRs yet

websocket-driver: Resource limit bypass via message compression

GHSA-33ph-fccm-39pj CVE-2026-54464 MODERATE 15 days ago

### Impact If this library is used in tandem with the `permessage-deflate` extension, a WebSocket server or client can be made to accept messages ...

rubygems

No PRs yet

websocket-driver: Memory exhaustion via abuse of protocol length headers

GHSA-ghhp-3qvg-889p CVE-2026-54463 MODERATE 15 days ago

### Impact The frame format in draft versions of the WebSocket protocol includes a length header that allows an arbitrarily large integer to be en...

rubygems

No PRs yet

Pixeldrain API key shared with unverified thirdparty sites

GHSA-f5pf-q7c7-m3vv CVE-2026-54254 MODERATE 15 days ago

### Summary When processing Pixeldrain URLs, `cyberdrop-dl-patched` could send an `Authorization` header that includes the user's API key to unver...

pypi

No PRs yet

TensorZero Gateway: Arbitrary file read and SSRF in internal object storage endpoint

GHSA-824w-x939-6cmc CVE-2026-54457 HIGH 15 days ago

### Impact The `/internal/object_storage` endpoint accepts a caller-supplied JSON `storage_path` parameter that dynamically overrides the TensorZe...

pypi

No PRs yet

safeurl is Missing IPv6 CIDR Ranges in Blocklist

GHSA-xgch-x3mx-cm3c CVE-2026-54452 MODERATE 15 days ago

The `privateNetworks` blocklist was found to be missing newly added CIDR ranges. More specifically, the following CIDR ranges were not being blocke...

go

No PRs yet

FiftyOne App server uses wildcard CORS (Access-Control-Allow-Origin: *), enabling cross-origin reads of local server data

GHSA-q78p-hj9h-5466 CVE-2026-53656 MODERATE 15 days ago

### Impact The FiftyOne App/API server (`fiftyone/server/app.py`) and the `/media` route (`fiftyone/server/routes/media.py`) unconditionally set a...

pypi

No PRs yet

obsidian-local-rest-api: Authenticated path traversal via URL-encoded %2F in /vault/{path} — arbitrary host file read/write/delete

GHSA-62gx-5q78-wrvx HIGH 15 days ago

### Summary The Local REST API's `/vault/{path}` endpoints (GET/PUT/PATCH/POST/DELETE) percent-decode the request path *inside the handler — after*...

npm

No PRs yet

ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway

GHSA-pph6-vfjv-vpjw CVE-2026-54450 LOW 15 days ago

## Summary ToolHive's hand-rolled private/reserved-IP SSRF guard (`networking.IsPrivateIP` in `pkg/networking/utilities.go`) does not recognize th...

go

No PRs yet

MantisBT: Stored XSS in print_all_bug_page_word.php

GHSA-h2wf-967x-gxvw CVE-2026-62944 HIGH 15 days ago

A missing output encoding call in print_all_bug_page_word.php allows any authenticated user to inject arbitrary HTML into an IMG tag's *alt* attrib...

packagist

No PRs yet

MantisBT: Injection of TIME_TRACKING and REMINDER Notes via REST and SOAP APIs

GHSA-4vpf-w7qv-5h3q CVE-2026-52883 MODERATE 15 days ago

Unvalidated note_type Parameter in mc_issue_update SOAP Endpoint Allows creation of TIME_TRACKING and REMINDER Notes. The SOAP path passes the user...

packagist

No PRs yet

MantisBT: REST and SOAP API Issue Update Accepts Unreleased Product Versions From Updaters

GHSA-3v2j-6fw9-f57c CVE-2026-52882 MODERATE 15 days ago

### Impact Users below _report_issues_for_unreleased_versions_threshold_ can assign unreleased product versions. ### Patches - https://github.com/...

packagist

No PRs yet

MantisBT: Reflected XSS in admin/install.php via unescaped printf

GHSA-vcrw-4xvv-jh49 CVE-2026-52881 CRITICAL 15 days ago

MantisBT 2.28.3 and earlier contains six reflected XSS injection points in `/admin/install.php`. User-supplied parameters are echoed into HTML with...

packagist

No PRs yet

MantisBT: Reflected XSS in admin/install.php

GHSA-77x8-3v3h-hrhv CVE-2026-52847 CRITICAL 15 days ago

MantisBT 2.28.3 and earlier contains six reflected XSS injection points in `/admin/install.php`. User-supplied parameters are echoed into HTML with...

packagist

No PRs yet

Koel: Full-read SSRF via podcast enclosure URL: isPublicHost() filter_var guard does not reject NAT64 (64:ff9b::/96) or 6to4 (2002::/16) IPv6-transition wrappers of internal IPv4

GHSA-rjg7-r26h-cfp2 CVE-2026-54494 MODERATE 15 days ago

## Summary Koel's outbound-URL guard `App\Helpers\Network::isPublicHost()` classifies an IP as "public" using PHP's `filter_var($ip, FILTER_VALIDA...

packagist

No PRs yet

Koel: Server-Side Request Forgery (SSRF) in radio station creation due to missing validation bail

GHSA-jr4p-4xjh-fwvw CVE-2026-50552 MODERATE 15 days ago

Summary Koel v9.5.0 contains a Server-Side Request Forgery (SSRF) vulnerability in the radio station creation endpoint (POST /api/radio/stations)....

packagist

No PRs yet

Koel: Incomplete fix for CVE-2026-47260 — systemic SSRF in podcast & radio fetch paths

GHSA-6qvr-wjmv-v8mm CVE-2026-54491 HIGH 15 days ago

### Summary The fix for **CVE-2026-47260** (v9.3.5) added an **initial** `isSafeUrl()` check to several fetchers (`synchronizeEpisodes`, `getStrea...

packagist

No PRs yet

Protobuf: Unbounded recursion depth in embedded-message decoding

GHSA-rv48-qqj5-crxg CVE-2026-54451 HIGH 15 days ago

### Summary Unbounded recursion depth in `Protobuf.Decoder` (Hex package `protobuf`, versions `>= 0.8.0, < 0.16.1`) lets an unauthenticated attack...

hex

No PRs yet

LangBot: Authenticated RCE Via MCP Configuration

GHSA-3pvh-63gf-j9mw CVE-2026-54449 HIGH 15 days ago

### Summary Any authenticated user can achieve arbitrary command execution on the LangBot servers through changing the MCP Server Configuration by ...

pypi

No PRs yet

garminconnect Has Insecure Permission Assignment for Garmin OAuth Token Store

GHSA-wjhr-76vg-2hvc CVE-2026-54447 HIGH 15 days ago

## Insecure Permission Assignment for Garmin OAuth Token Store ### Summary `garminconnect` (≤ 0.3.4) wrote its OAuth token store to disk without ...

pypi

No PRs yet

Koel has SSRF through Authenticated Subsonic podcast feed URLs

GHSA-8q6q-m837-fv64 MODERATE 15 days ago

## Summary Koel's Subsonic `createPodcastChannel.view` endpoint accepts a user supplied podcast feed URL and fetches it server-side before applyin...

packagist

No PRs yet

Koel: Authenticated Full-Read SSRF via Subsonic Internet Radio Stations

GHSA-6p96-cfg5-4vhp CVE-2026-54493 HIGH 15 days ago

### Summary Koel v9.6.0 validates radio station URLs on the regular web API, but the Subsonic-compatible radio endpoints do not apply the same SSRF...

packagist

No PRs yet

Koel: Authenticated Blind SSRF via Subsonic Podcast Channel Creation

GHSA-w79m-f3jx-779v CVE-2026-54492 MODERATE 15 days ago

### Summary Koel `v9.6.0` protects the regular podcast subscription API with `SafeUrl`, but the Subsonic-compatible `createPodcastChannel.view` rou...

packagist

No PRs yet

MantisBT: REST API unauthorized Issue status change

GHSA-m7ph-9558-mrx3 CVE-2026-49280 MODERATE 15 days ago

A MantisBT user having *$g_update_bug_threshold* (UPDATER by default) can change an Issue's Status via REST and SOAP API, even if the *$g_set_statu...

packagist

No PRs yet

MantisBT: Remote Code Execution via eval() Class Hoisting in adm_config_set.php

GHSA-v84x-qvhg-f36r CVE-2026-49273 HIGH 15 days ago

MantisBT 2.28.3 and earlier contains a remote code execution vulnerability in the admin "Manage Configuration" feature (adm_config_set.php). When s...

packagist

No PRs yet

MantisBT: SOAP API Authentication Bypass with Privilege Escalation to Administrator

GHSA-c2xg-qjqw-2v98 CVE-2026-47156 CRITICAL 15 days ago

MantisBT 2.28.3 and earlier contains a critical authentication bypass in the SOAP API's mci_check_login() function. Any user knowing any valid cook...

packagist

No PRs yet

MantisBT: SQL Injection via history_order Configuration Value

GHSA-mw6p-33vw-46cc CVE-2026-47142 HIGH 15 days ago

MantisBT 2.28.3 and earlier versions contains a SQL injection vulnerability in core/history_api.php. The history_order configuration value is conca...

packagist

No PRs yet

FacturaScripts: Path traversal in UploadedFile::move() via getClientOriginalName() — arbitrary file write outside MyFiles/ leading to RCE

GHSA-hgjx-r89m-m7v4 CRITICAL 16 days ago

## Summary `FacturaScripts\Core\UploadedFile::move($destiny, $destinyName)` concatenates `$destiny` and `$destinyName` without normalizing the res...

packagist

No PRs yet

NetLicensing-MCP: Unauthenticated Use of Server-Side NetLicensing API Key in HTTP Mode

GHSA-x9vc-9ffq-p3gj CVE-2026-54446 HIGH 16 days ago

## Unauthenticated Use of Server-Side NetLicensing API Key in HTTP Mode ### Summary When `netlicensing-mcp` is run in HTTP transport mode, the `A...

pypi

No PRs yet

Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend

GHSA-qf34-295c-26v8 CVE-2026-61549 HIGH 16 days ago

### Impact A privilege escalation vulnerability affects Woodpecker instances using the **Kubernetes backend**. The pipeline option `backend_optio...

go

No PRs yet

Nebula-mesh allows non-admin operators to disable webhook SSRF protection via `allow_private`

GHSA-7rx3-5wx3-5v76 HIGH 16 days ago

### Summary Non-admin operators (role `user`) can set `allow_private: true` on their own managed webhook subscription (`POST`/`PATCH /api/v1/webho...

go

No PRs yet

nebula-mesh: Certificate revocation is never enforced at the mesh

GHSA-cm26-5974-52h8 CVE-2026-61699 HIGH 16 days ago

### Summary nebula-mesh revokes a host by adding its certificate fingerprint to a per-CA blocklist and shipping that list to every other agent on ...

go

No PRs yet

n8n-MCP: Incorrect authorization can expose default-scope workflow version backups in multi-tenant HTTP mode

GHSA-2cf7-hpwf-47h9 CVE-2026-55608 MODERATE 16 days ago

## Summary In multi-tenant HTTP mode (`ENABLE_MULTI_TENANT=true`), an authenticated tenant could, under certain conditions, reach n8n-mcp's local ...

npm

No PRs yet

nebula-mesh: Web UI host creation ignores configured enrollment token TTL and mints 24-hour bearer enrollment tokens

GHSA-g4x6-jcvr-9m3g CVE-2026-55513 MODERATE 16 days ago

### Summary The `nebula-mgmt` Web UI host-creation path ignores both the server-wide `enrollment_token_ttl` security setting and per-network `netwo...

go

No PRs yet

nebula-mesh: Unauthenticated OIDC login endpoint allocates unbounded in-memory state entries without rate limiting

GHSA-m3cx-mwpg-32jg CVE-2026-55512 MODERATE 16 days ago

### Summary When OIDC is enabled, `GET /ui/oidc/login` is reachable without authentication and is registered outside the Web UI rate-limited auth r...

go

No PRs yet

Anyquery: Local File Read (LFR) via Unrestricted SQLite Virtual Table Modules in Server Mode

GHSA-mf78-3rpf-r784 CVE-2026-54629 HIGH 16 days ago

## Summary Anyquery's `server` mode lacks input sanitization and access control over its built-in SQLite virtual table modules (e.g., `csv_reader`,...

go

No PRs yet

nebula-mesh: Operator session tokens stored in plaintext in the database

GHSA-q4vm-pq3q-8wgq CVE-2026-53603 HIGH 16 days ago

## Impact Operator session tokens are stored in plaintext in the `operator_sessions` table (the `token` column is the PRIMARY KEY). The session to...

go

No PRs yet

Netty: Denial of Service via Unbounded Headers in StompSubframeDecoder

GHSA-vhch-2wf3-m8rp CVE-2026-44891 HIGH 16 days ago

### Summary The StompSubframeDecoder fails to limit the total number of headers or their cumulative size per frame, allowing an attacker to cause a...

maven

No PRs yet

nebula-mesh: CA private key not zeroized on web mobile-bundle error paths

GHSA-2p2f-px33-4vv5 CVE-2026-53604 HIGH 16 days ago

## Impact The web handler `renderMobileBundle` (`internal/web/handlers.go:1325`) passes the real `*pki.CAResolver` directly into `mobilebundle.Bui...

go

No PRs yet

Anyquery: Server-Side Request Forgery (SSRF) via Unrestricted SQLite Virtual Table Modules in Server Mode

GHSA-hwrq-8wxh-q4xv CVE-2026-54628 HIGH 16 days ago

## Summary Anyquery's `server` mode does not restrict outbound HTTP requests initiated by its built-in SQLite virtual table modules (e.g., `json_re...

go

No PRs yet

Umbraco.AI discloses sensitive application configuration values

GHSA-q3v2-xj35-9grx MODERATE 16 days ago

### Impact Under certain configurations, a user with elevated privileges may be able to cause sensitive application configuration values, potential...

nuget

No PRs yet

Ech0: ParseAcceptLanguage `_` separator bypass enables ~70x CPU amplification via Accept-Language header in i18n.Middleware

GHSA-mqxv-9rm6-w8qc HIGH 16 days ago

### Summary Ech0's i18n middleware runs on every HTTP request and constructs a fresh `*goi18n.Localizer` from the raw `Accept-Language` header wit...

go

No PRs yet

TidGi Desktop Remote Code Execution via Malicious TiddlyWiki Repository Import — Tiddler Startup Module Auto-Execution

GHSA-9hc2-hjx8-q6pv CRITICAL 16 days ago

## Description TidGi Desktop through 0.13.0 contains a critical remote code execution vulnerability exploitable via a single Git repository import...

npm

No PRs yet