mv: symlinks expanded during cross-device move (resource exhaustion / data duplication)

GHSA-h444-6j9x-p8vh CVE-2026-35365 MODERATE 25 days ago

When moving directories across filesystems, uutils `mv` dereferences symlinks inside the tree, copying their targets as real files/dirs instead of ...

cargo

No PRs yet

cp: -R reads device nodes as streams, destroying device semantics

GHSA-8vrf-r662-2w2v CVE-2026-35358 MODERATE 25 days ago

The cp utility in uutils coreutils, when performing recursive copies (-R), incorrectly treats character and block device nodes as stream sources ra...

cargo

No PRs yet

rm: 'rm -rf ./' (and ./// variants) silently deletes current directory contents, bypassing dot protection

GHSA-89p7-7cq3-hhr2 CVE-2026-35363 MODERATE 25 days ago

`rm -rf .` is correctly refused, but `clean_trailing_slashes` normalizes `.///` to `./` while `path_is_current_or_parent_directory` only matches `....

cargo

No PRs yet

comm: FIFO/pipe inputs are drained before comparison (data loss / hang)

GHSA-3wfc-mgpm-9rq6 CVE-2026-35347 MODERATE 25 days ago

The comm utility in uutils coreutils incorrectly consumes data from non-regular file inputs before performing comparison operations. The are_files_...

cargo

No PRs yet

id: groups= computed from real GID instead of effective GID

GHSA-47c7-qrm7-mqw7 CVE-2026-35370 MODERATE 25 days ago

The id utility in uutils coreutils miscalculates the groups= section of its output. The implementation uses a user's real GID instead of their effe...

cargo

No PRs yet

mkdir: -m exposes directory with umask perms before chmod (race window)

GHSA-mj6p-44ch-cq69 CVE-2026-35353 LOW 25 days ago

The mkdir utility in uutils coreutils incorrectly applies permissions when using the -m flag by creating a directory with umask-derived permissions...

cargo

No PRs yet

rm: --preserve-root bypassed via a symlink to / (string check instead of dev/inode)

GHSA-7cr3-h577-g38j CVE-2026-35349 MODERATE 25 days ago

The `--preserve-root` check uses a path-string test (`path.has_root() && path.parent().is_none()`) rather than comparing device/inode. A symlink to...

cargo

No PRs yet

id: pretty-print uses effective GID instead of effective UID for name lookup

GHSA-xv5w-cw7x-72gj CVE-2026-35371 LOW 25 days ago

The id utility in uutils coreutils exhibits incorrect behavior in its "pretty print" output when the real UID and effective UID differ. The impleme...

cargo

No PRs yet

kill: 'kill -1' parsed as PID -1, sending SIGTERM to all processes (system crash / DoS)

GHSA-p6rv-2qpm-fwvg CVE-2026-35369 MODERATE 25 days ago

`kill -1` is incorrectly parsed as a positional `pid = -1`; combined with the default SIGTERM this calls `kill(-1, SIGTERM)`, signaling nearly ever...

cargo

No PRs yet

install -D: symlink race in directory creation allows arbitrary file overwrite

GHSA-gwm6-q8ch-hcfr CVE-2026-35356 MODERATE 25 days ago

The `-D` path runs `fs::create_dir_all` on a pathname then later opens the destination via path-based `File::create`/`fs::copy`, neither anchored t...

cargo

No PRs yet

cut: -s (only-delimited) ignored when delimiter is a newline

GHSA-wv33-5pxh-r7j7 CVE-2026-35343 LOW 25 days ago

The cut utility in uutils coreutils incorrectly handles the -s (only-delimited) option when a newline character is specified as the delimiter. The ...

cargo

No PRs yet

install: TOCTOU symlink race (unlink-then-create without O_EXCL) allows arbitrary file overwrite

GHSA-239g-2685-54x3 CVE-2026-35355 MODERATE 25 days ago

`copy_file` in `install/src/install.rs` removes the destination then recreates it by pathname via `File::create` / `fs::copy` without `O_EXCL`/`cre...

cargo

No PRs yet

ln: rejects non-UTF-8 source filenames in target-directory mode

GHSA-jcjr-rh8q-7xqf CVE-2026-35373 LOW 25 days ago

In target-directory forms (`ln SOURCE... DIRECTORY`), `ln` rejects source paths with non-UTF-8 filename bytes, while GNU accepts them. Breaks GNU c...

cargo

No PRs yet

comm: lossy UTF-8 conversion silently corrupts non-UTF-8 output

GHSA-6gcw-w7cp-94g9 CVE-2026-35346 LOW 25 days ago

The comm utility in uutils coreutils silently corrupts data by performing lossy UTF-8 conversion on all output lines. The implementation uses Strin...

cargo

No PRs yet

mktemp: empty TMPDIR creates temp files in CWD instead of /tmp

GHSA-2w8r-9xj7-69j5 CVE-2026-35342 LOW 25 days ago

The mktemp utility in uutils coreutils fails to properly handle an empty TMPDIR environment variable. Unlike GNU mktemp, which falls back to /tmp w...

cargo

No PRs yet

chmod: recursive mode returns exit code 0 even when some files fail (last-file-wins)

GHSA-4x34-chg5-mwjj CVE-2026-35339 MODERATE 25 days ago

In `Chmoder::chmod()` the recursive branch overwrites the running result instead of accumulating it, so the exit code reflects only the *last* file...

cargo

No PRs yet

chmod: --preserve-root bypassed by any path that resolves to root (e.g. /../)

GHSA-4c7q-4928-8445 CVE-2026-35338 HIGH 26 days ago

`Chmoder::chmod()` only compares the literal argument against `Path::new("/")`, so the `--preserve-root` guard is bypassed by any path that *resolv...

cargo

No PRs yet

flyto-core has Unauthenticated Command Execution via HTTP MCP `execute_module`

GHSA-h9f9-h6gm-wc85 CVE-2026-55786 HIGH 26 days ago

## Unauthenticated Command Execution via HTTP MCP `execute_module` ### Summary The HTTP MCP endpoint (`POST /mcp`) in flyto-core accepts unauthen...

pypi

No PRs yet

flyto-core has SSRF guard bypass via IPv6 transition addresses (IPv4-mapped / 6to4 / NAT64) in validate_url_ssrf

GHSA-794r-5rp2-fpg8 CVE-2026-55787 HIGH 26 days ago

## Summary `flyto-core`'s SSRF protection (`validate_url_ssrf` / `is_private_ip` in `src/core/utils.py`) blocks private and metadata destinations ...

pypi

No PRs yet

Scriban: Template Writes to Arbitrary CLR Properties via `TypedObjectAccessor` (Mass Assignment + `private` / `init` / `internal` Setter Bypass)

GHSA-7jvp-hj45-2f2m HIGH 26 days ago

<!-- obsidian --><h2 data-heading="Description">Description</h2> <p>When a host pushes a CLR object into a Scriban <code>TemplateContext</code> via...

nuget

No PRs yet

WeasyPrint has CSS Injection via Presentational Hints

GHSA-jhhc-3hcp-qhm5 CVE-2026-49452 MODERATE 26 days ago

### Summary A CSS injection issue exists in WeasyPrint when HTML presentational hints are enabled. Unescaped attribute values are embedded into CSS...

pypi

No PRs yet

Cilium vulnerable to sensitive information disclosure and cluster disruption via local Envoy admin socket access

GHSA-3fcv-jvfp-m4q9 CVE-2026-49445 CRITICAL 26 days ago

### Impact When Cilium L7 functionality is enabled on a cluster, the Envoy instance supporting this functionality creates a world-accessible socke...

go

No PRs yet

OpenRemote read-only asset users can write predicted datapoints

GHSA-xj53-j257-hxvg CVE-2026-49439 MODERATE 26 days ago

# Summary The predicted datapoint write endpoint allows users with only `read:assets` privileges to write predicted datapoints. The endpoint: ``...

maven

No PRs yet

Formie Hidden field defaults vulnerable to Server-Side Template Injection

GHSA-565m-g33j-jq96 CVE-2026-52889 CRITICAL 26 days ago

## Summary Formie Hidden fields could evaluate request-derived values as Twig during front-end form rendering. When a Hidden field used a dynamic ...

packagist

No PRs yet

Open Babel has out-of-bounds write in MOPAC translationVectors[] (UNIT CELL TRANSLATION)

GHSA-55f6-pf8r-c2f4 CVE-2022-46292 HIGH 26 days ago

### Summary A memory-safety vulnerability in Open Babel's MOPAC output parser allowed an out-of-bounds write into the `translationVectors[]` array...

pypi

No PRs yet

Email-derived URL path injection in the Swoosh Microsoft Graph adapter

EEF-CVE-2026-54893 GHSA-754j-98wh-57rf CVE-2026-54893 LOW 26 days ago

## Summary URL path injection in the Microsoft Graph adapter of Swoosh. Swoosh.Adapters.MsGraph builds its Microsoft Graph API request URL by inte...

hex

No PRs yet

Apache Camel: KeycloakSecurityPolicy has Improper Authentication, Missing Authentication for Critical Function and Failing Open Vulnerabilities

GHSA-qvc3-6q9x-95pj CVE-2026-53913 CRITICAL 26 days ago

Improper Authentication, Missing Authentication for Critical Function, Not Failing Securely ('Failing Open') vulnerability in Apache Camel Keycloak...

maven

No PRs yet

Apache Camel DNS Has Improper Input Validation, Leading to Server-Side Request Forgery (SSRF)

GHSA-hcm8-x79p-wx2w CVE-2026-48205 CRITICAL 26 days ago

Improper Input Validation, Server-Side Request Forgery (SSRF) vulnerability in Apache Camel DNS component. The camel-dns producers read DNS operat...

maven

No PRs yet

Apache Camel: camel-mongodb-gridfs producer allows GridFS operation override and NoSQL operator injection via unfiltered  gridfs.*  HTTP headers

GHSA-f7g3-2cg6-f5hj CVE-2026-48204 CRITICAL 26 days ago

Improper Input Validation, Improper Access Control vulnerability in Apache Camel in Camel Mongodb Gridfs component. The camel-mongodb-gridfs produ...

maven

No PRs yet

mint buffers an entire chunked response chunk in memory in Mint.HTTP1.decode_body/5

EEF-CVE-2026-56810 GHSA-c59h-fq4p-r36r CVE-2026-56810 HIGH 26 days ago

## Summary Allocation of Resources Without Limits or Throttling vulnerability in elixir-mint mint (Mint.HTTP1 module) allows a denial of service v...

hex

No PRs yet

Unauthenticated denial-of-service via unbounded HPACK integer decoding in hpax

EEF-CVE-2026-58226 GHSA-jj2p-32j7-whj2 CVE-2026-58226 HIGH 26 days ago

## Summary Inefficient Algorithmic Complexity vulnerability in elixir-mint hpax allows unauthenticated denial-of-service via unbounded HPACK integ...

hex

No PRs yet

Imager versions before 1.032 for Perl have a heap out-of-bounds read in the bundled Imager::File::SGI reader via a 16-bit RLE literal run in read_rgb_16_rle. read_rgb_16_rle guards each literal run with if (count > data_left), but count is a pixel cou...

CPANSA-Imager-2026-13705 CVE-2026-13705 26 days ago

Imager versions before 1.032 for Perl have a heap out-of-bounds read in the bundled Imager::File::SGI reader via a 16-bit RLE literal run in read_r...

cpan

No PRs yet

Mojo::JSON versions before 9.47 for Perl allow memory exhaustion via unbounded recursion in the pure-Perl decoder. The pure-Perl decode path (`_decode_value` dispatching to `_decode_array` and `_decode_object`) recurses with no depth limit, so a small...

CPANSA-Mojolicious-2026-14803 CVE-2026-14803 26 days ago

Mojo::JSON versions before 9.47 for Perl allow memory exhaustion via unbounded recursion in the pure-Perl decoder. The pure-Perl decode path (`_de...

cpan

No PRs yet

Imager::File::JPEG versions before 1.003 for Perl leak heap memory when reading a JPEG with repeated APP13 markers in i_readjpeg_wiol. i_readjpeg_wiol walks the marker list libjpeg returns and, for each APP13 marker, allocates a new buffer with *iptc_...

CPANSA-Imager-File-JPEG-2026-13708 CVE-2026-13708 26 days ago

Imager::File::JPEG versions before 1.003 for Perl leak heap memory when reading a JPEG with repeated APP13 markers in i_readjpeg_wiol. i_readjpeg_...

cpan

No PRs yet

Crypt::DSA versions before 1.22 for Perl draw the DSA signing nonce and private key from a biased random generator, leading to private-key recovery. "Crypt::DSA::Util::makerandom forces the high bit of every value it returns to obtain an exactly N-bit...

CPANSA-Crypt-DSA-2026-14570 CVE-2026-14570 27 days ago

Crypt::DSA versions before 1.22 for Perl draw the DSA signing nonce and private key from a biased random generator, leading to private-key recovery...

cpan

No PRs yet

Plack::Middleware::OAuth versions through 0.10 for Perl do not support the OAuth 2.0 state parameter. RequestTokenV2 builds the provider authorization redirect without issuing a state value, and AccessTokenV2 exchanges the callback code and registers ...

CPANSA-Plack-Middleware-OAuth-2026-12740 CVE-2026-12740 28 days ago

Plack::Middleware::OAuth versions through 0.10 for Perl do not support the OAuth 2.0 state parameter. RequestTokenV2 builds the provider authoriza...

cpan

No PRs yet

Dancer2::Plugin::Auth::OAuth::Provider versions before 0.23 for Perl do not support the OAuth 2.0 state parameter. The authentication_url method builds the provider authorization redirect without issuing a state value, and the callback method exchange...

CPANSA-Dancer2-Plugin-Auth-OAuth-2026-12746 CVE-2026-12746 28 days ago

Dancer2::Plugin::Auth::OAuth::Provider versions before 0.23 for Perl do not support the OAuth 2.0 state parameter. The authentication_url method b...

cpan

No PRs yet

Net::IP::LPM versions through 1.10 for Perl allow a heap out-of-bounds read via an unbounded prefix length. add() passes the prefix string to the trie builder addPrefixToTrie() without checking it against the address width. addPrefixToTrie() then wal...

CPANSA-Net-IP-LPM-2026-56015 CVE-2026-56015 29 days ago

Net::IP::LPM versions through 1.10 for Perl allow a heap out-of-bounds read via an unbounded prefix length. add() passes the prefix string to the ...

cpan

No PRs yet

Recce server has unauthenticated SQL execution that allows local file read/write through DuckDB

GHSA-rh62-j648-g5qc CVE-2026-49360 HIGH 29 days ago

### Impact Recce OSS server deployments that expose the server to an untrusted network without authentication are vulnerable to unauthenticated SQL...

pypi

No PRs yet

9router has an Incomplete Fix: Local-Only Access Gate Bypass in 9router via Host Header SpoofING

GHSA-6g2f-w7g3-77vf CVE-2026-49353 HIGH 29 days ago

## Summary The fix for CVE-2026-46339 (unauthenticated RCE via unprotected MCP plugin routes) introduced a local-only access gate in `src/dashboar...

npm

No PRs yet

golang.org/x/image/tiff has excessive resource consumption in PackBits decompression

GHSA-q675-qj96-32m9 CVE-2026-46599 HIGH 29 days ago

The TIFF decoder does not place a limit on the size of PackBits-compressed data. A maliciously-crafted image can exploit this to cause a small imag...

go

No PRs yet

9router's Hardcoded Default fallback JWT Secret Allows Authentication Bypass

GHSA-jphh-m39h-6gwx CVE-2026-49352 CRITICAL 29 days ago

### Summary 9router uses a publicly known hardcoded string `"9router-default-secret-change-me"` as the fallback of JWT secret for all Dashboard ses...

npm

No PRs yet

Kiwi TCMS's /init-db/ page renders and responds to requests after first use

GHSA-v8rp-6xcv-fwgh CVE-2026-49292 LOW 29 days ago

Kiwi TCMS provides the /init-db/ page as part of its setup mechanism for administrators who prefer a browser instead of the command line. In previo...

pypi

No PRs yet

LaunchServer FileServerHandler has an unauthenticated path traversal issue

GHSA-5g75-477j-2c2f CVE-2026-54617 CRITICAL 29 days ago

### Summary An unauthenticated path traversal in the LaunchServer HTTP file server (`FileServerHandler`) lets any remote actor read **any file** re...

maven

No PRs yet

SimpleSAMLphp SP accepts a response from an unexpected IdP when unsigned `Response/InResponseTo` is combined with a signed assertion lacking `SubjectConfirmationData/InResponseTo`

GHSA-q8r6-xj3f-wrrm CVE-2026-49284 HIGH 29 days ago

## Summary SimpleSAMLphp's SAML SP ACS path does not enforce the IdP selected for an SP-initiated login. If a saved SP state contains `ExpectedIss...

packagist

No PRs yet

Algernon vulnerable to server-side script source disclosure on Windows via NTFS filename

GHSA-mm6c-5j6x-hq8m CVE-2026-52792 HIGH 29 days ago

### Summary Algernon selects its file handler from `filepath.Ext()` (engine/handlers.go:134), which does not treat the NTFS-equivalent names `x.lu...

go

No PRs yet

jxl-grid on 32-bit platforms has an out-of-bounds writes due to integer overflow

GHSA-5pmv-rx8r-wmv5 CVE-2026-52834 HIGH 29 days ago

### Summary On 32-bit platforms, decoding a crafted image may lead to out-of-bounds writes due to integer overflow in length calculation. ### Det...

cargo

No PRs yet

jxl-oxide: `FrameBuffer::new` creates out-of-bounds slices on overflow

GHSA-66m8-c62j-h6v5 MODERATE 29 days ago

### Summary `jxl-oxide` exposes a public safe API that can construct an undersized `FrameBuffer` due to unchecked `usize` multiplication, which imm...

cargo

No PRs yet

jxl-oxide: integer subtraction overflow panic in cluster_from_table via crafted JXL input (DoS)

GHSA-2v8p-fqpx-2q3w MODERATE 29 days ago

### Summary Logic bug in `decode_simple_table_slow` may cause integer arithmetic overflow when decoding Modular image with certain kind of MA tree,...

cargo

No PRs yet

Kimai Favorite Timesheet Add and Remove Endpoints Allows Cross-User Bookmark Manipulation

GHSA-j5mc-p8qg-39j7 LOW 29 days ago

### Summary Kimai 2.56.0 contains an authenticated improper authorization / IDOR vulnerability in the favorite timesheet add and remove endpoints....

packagist

No PRs yet