OpenClaw's browser act interactions could bypass private-network navigation checks

GHSA-2hfg-4fh4-qp7f CVE-2026-53812 MODERATE about 1 month ago

### Summary OpenClaw's browser control SSRF checks blocked direct navigation to private or loopback URLs, but some Playwright `act` interactions c...

npm

No PRs yet

OpenClaw: Shell wrapper argv could change between approval and execution

GHSA-2j8v-hwgc-x698 HIGH about 1 month ago

### Summary Shell wrapper argv could change between approval and execution. In affected versions, a command request using a shell wrapper form cou...

npm

No PRs yet

OpenClaw: Bundle MCP loopback could miss its exec denylist on session spawn

GHSA-qh2f-99mv-mrcf MODERATE about 1 month ago

### Summary Bundle MCP loopback could miss its exec denylist on session spawn. In affected versions, a caller that can reach the affected bundled ...

npm

No PRs yet

OpenClaw: Exec approval display truncation could hide the command being approved

GHSA-xww8-gqvh-92x9 HIGH about 1 month ago

### Summary OpenClaw exec approvals could show a shortened command in the approval UI while keeping the full original command for execution. For v...

npm

No PRs yet

OpenClaw: Message read actions could skip channel allowlist checks

GHSA-q7q8-3mgw-q67r CVE-2026-53815 HIGH about 1 month ago

### Summary Message read actions could skip channel allowlist checks. In affected versions, a lower-trust caller with access to the affected messa...

npm

No PRs yet

mcp-memory-service: Missing Authentication on Document API Endpoints Allows Unauthenticated Memory Read/Write/Delete

GHSA-84hp-mqvj-3p8h CVE-2026-50027 CRITICAL about 1 month ago

## Missing Authentication on Document API Endpoints Allows Unauthenticated Memory Read/Write/Delete ### Summary All HTTP routes under `/api/docum...

pypi

No PRs yet

GoFiber Vulnerable to X-Real-IP Spoofing via Header.Add() in BalancerForward

GHSA-gcfq-8gqf-4876 CVE-2026-45045 MODERATE about 1 month ago

## Summary The `BalancerForward` proxy helper in GoFiber uses `Header.Add()` instead of `Header.Set()` when injecting the `X-Real-IP` header. This...

go

No PRs yet

GoFiber Vulnerable to Username Enumeration via Timing Oracle in BasicAuth Default Authorizer

GHSA-g5vh-55hw-rxm8 CVE-2026-44332 MODERATE about 1 month ago

## Summary The default `Authorizer` function in GoFiber's BasicAuth middleware uses short-circuit evaluation that skips password hash comparison f...

go

No PRs yet

OpenClaw MCP SSE redirects could forward Authorization headers

GHSA-9c3v-684m-579c MODERATE about 1 month ago

### Summary MCP SSE redirects could forward Authorization headers. In affected versions, a lower-trust caller or configured input path could execu...

npm

No PRs yet

Apify Model Context Protocol (MCP) server: Actor MCP path authority injection leaks Apify token

GHSA-6gr2-qh89-hxwm CVE-2026-50143 HIGH about 1 month ago

## Actor MCP path authority injection leaks Apify token ### Summary `@apify/actors-mcp-server` version `0.10.7` builds Actor standby URLs by dire...

npm

No PRs yet

goshs: Share-link ?token=… redemption races past download limit

GHSA-j48m-h7xq-2xpj CVE-2026-50139 MODERATE about 1 month ago

# Share-link `?token=…` redemption races past download limit **Ecosystem:** Go **Package:** `goshs.de/goshs/v2` (`github.com/patrickhener/goshs`) ...

go

No PRs yet

Ghost: Cache-poisoning XSS in Ghost frontend via x-ghost-preview header

GHSA-62q6-4hv4-vjrw CVE-2026-53943 CRITICAL about 1 month ago

### Impact When Ghost is behind a shared caching layer that results in cached content being shared between different visitors (e.g., Fastly, Cloud...

npm

No PRs yet

goshs: WebDAV listener ignores --read-only, --upload-only, and --no-delete mode flags

GHSA-3whc-qvhv-xqjp CVE-2026-50138 HIGH about 1 month ago

# WebDAV listener ignores `--read-only`, `--upload-only`, and `--no-delete` mode flags **Ecosystem:** Go **Package:** `goshs.de/goshs/v2` (`github...

go

No PRs yet

ORAS Go forwards registry credentials across registry redirects

GHSA-vh4v-2xq2-g5cg MODERATE about 1 month ago

# ORAS Go forwards registry credentials across registry redirects Reporter / public credit: JUNYI LIU ## Summary ORAS Go can forward registry cr...

go

No PRs yet

OnGres SCRAM silent channel-binding authentication downgrade via unsupported certificate algorithms

GHSA-p9jg-fcr6-3mhf CVE-2026-53712 HIGH about 1 month ago

## Summary A flaw in `com.ongres.scram:scram-client` allows an attacker capable of performing a TLS man-in-the-middle (MITM) attack to silently do...

maven

3

Dependabot PRs

`oras-go` tar extraction: Hardlink entry with relative Linkname escapes extract dir via process CWD resolution

GHSA-fxhp-mv3v-67qp CVE-2026-50163 HIGH about 1 month ago

### Root cause The tar-extraction helper `ensureLinkPath` at [`content/file/utils.go:262-275`](https://github.com/oras-project/oras-go/blob/main/c...

go

No PRs yet

oras-go has file store write outside workingDir via symlink traversal

GHSA-8xwf-rjm4-xvhv CVE-2026-50162 MODERATE about 1 month ago

The file content store in `oras-go` attempts to confine writes to `workingDir` when `AllowPathTraversalOnWrite=false`, but the guard is lexical and...

go

No PRs yet

oras-go blob upload vulnerable to credential forwarding via unvalidated Location header

GHSA-jxpm-75mh-9fp7 CVE-2026-50151 HIGH about 1 month ago

## Summary oras-go follows a registry-controlled `Location` header during the monolithic blob upload flow and reuses the `Authorization` header fr...

go

No PRs yet

Keycloak has privilege escalation via improper scope mapping enforcement

GHSA-32h4-44jj-c5vx CVE-2026-9795 HIGH about 1 month ago

### Description A flaw was found in Keycloak's Fine-Grained Admin Permissions (FGAPv2) feature. An administrator with limited client management per...

maven

No PRs yet

oras-go: Malicious registry can hijack Bearer token realm to exfiltrate credentials and refresh tokens

GHSA-xf85-363p-868w CVE-2026-48978 LOW about 1 month ago

## Summary oras-go's `auth.Client` follows the `realm` URL from a registry's `WWW-Authenticate: Bearer` challenge without validating its scheme or...

go

No PRs yet

Rancher has Privilege Escalation from Project Owner to Host

GHSA-vx8h-4prv-g744 CVE-2026-41052 CRITICAL about 1 month ago

### Impact A vulnerability has been identified in Rancher Manager that allows users assigned the Project Owner role to modify Pod Security Admissi...

go

No PRs yet

Mailpit: Sibling-endpoint memory-exhaustion DoS via unbounded JSON body on /api/v1/messages, /api/v1/tags, and /api/v1/message/{id}/release (incomplete fix of GHSA-fpxj-m5q8-fphw)

GHSA-28pq-6qxg-wg5r CVE-2026-48824 MODERATE about 1 month ago

### Summary The fix for GHSA-fpxj-m5q8-fphw (CVE-2026-45710, "Mailpit: Set a default 50MB p/m limit to prevent DoS via unlimited SMTP DATA and /ap...

go

No PRs yet

@hey-api/openapi-ts's `buildClientParams` template: prototype chain substitution via unknown `$<slot>___proto__` key

GHSA-hhx9-57xq-r5rw CVE-2026-48819 MODERATE about 1 month ago

### Summary `dist/clients/core/params.ts` in `@hey-api/openapi-ts` ships a runtime template that is copied verbatim into every generated SDK as `p...

npm

No PRs yet

Rancher has over-inclusive team membership expansion in GitHub App authentication provider

GHSA-4j6x-2764-m8gh CVE-2026-41053 HIGH about 1 month ago

### Impact A vulnerability has been identified within Rancher Manager in the GitHub App authentication provider. When evaluating permissions, the p...

go

No PRs yet

Rancher Fleet vulnerable to cross namespace secret disclosure via unvalidated `valuesFrom` references in Helm Deployer

GHSA-xr65-5cpm-g36x CVE-2026-44935 CRITICAL about 1 month ago

### Impact A vulnerability in Fleet for Rancher Manager affects multi-tenancy environments where different tenants share the same downstream cluste...

go

No PRs yet

Rancher Fleet has SSRF in Bundle Reader via Unvalidated Helm Repository URL in fleet.yaml

GHSA-hx4v-cxpf-vh8m CVE-2026-44936 MODERATE about 1 month ago

### Impact A vulnerability has been identified in Fleet when the `helmRepoURLRegex` field isn't set on a `GitRepo` resource. Fleet's bundle reader ...

go

No PRs yet

Rancher vulnerable to command injection through unsanitized YAML parameter

GHSA-mhc6-2gfq-xx62 CVE-2026-44939 CRITICAL about 1 month ago

### Impact A critical command injection vulnerability has been identified in the Rancher Manager cluster import endpoint `/v3/import/{token}_{clus...

go

No PRs yet

Rancher Fleet has Unauthenticated Webhook: Regex Injection via Unsanitized Repository URL Components

GHSA-jmf4-m7j9-g72r CVE-2026-44937 HIGH about 1 month ago

### Impact A vulnerability has been identified in Fleet when the webhook endpoint is configured without a secret; an attacker can forge webhook req...

go

No PRs yet

Fleet has PSS Bypass through addLabelsFromOptions in Fleet Agent

GHSA-864g-863m-vcvq CVE-2026-44938 HIGH about 1 month ago

### Impact A vulnerability has been identified in Fleet's agent-side deployer, which did not filter security-sensitive keys from `namespaceLabels` ...

go

No PRs yet

QUIC has Broken TLS verification

GHSA-2r8v-p65x-3663 CVE-2026-49457 CRITICAL about 1 month ago

### Impact The QUIC client did not authenticate the server during the TLS 1.3 handshake. The CertificateVerify signature was not checked, the cert...

hex

No PRs yet

land.oras:oras-java-sdk: Symlink-based path traversal in ArchiveUtils.untar / unzip allows arbitrary file write outside extraction directory

GHSA-j6hm-v3x2-qv6j LOW about 1 month ago

### Summary `ArchiveUtils.untar(InputStream, Path)` and `ArchiveUtils.unzip(InputStream, Path)` in `land.oras:oras-java-sdk` create symbolic-link ...

maven

No PRs yet

Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass

GHSA-g6vg-wj8f-48cj CVE-2026-49998 HIGH about 1 month ago

#### Summary Centrifugo's dynamic JWKS endpoint feature can verify a JWT for one allowed issuer using a public key cached from another allowed iss...

go

No PRs yet

SurrealDB: Edge PERMISSIONS FOR delete bypassed when a connected node is deleted

GHSA-whwg-vh4f-pmmf CVE-2026-49997 MODERATE about 1 month ago

In SurrealDB, records can be connected as a graph: a `RELATE` statement creates an edge record between two node records. If either endpoint node is...

cargo

No PRs yet

SurrealDB: ES512 silently downgraded to ES384 due to jsonwebtoken crate limitation

GHSA-fwg2-gr34-q3w8 MODERATE about 1 month ago

When a user configures `ALGORITHM ES512` for any JWT access method (`DEFINE ACCESS ... TYPE JWT ALGORITHM ES512`), SurrealDB silently substitutes E...

cargo

No PRs yet

SurrealDB: Field-level SELECT permissions bypassed via indexed COUNT fast paths

GHSA-c8jx-96c9-8xrp MODERATE about 1 month ago

A record user could learn the value of a hidden field by counting how many records match a guess. When `DEFINE FIELD ... PERMISSIONS FOR select WH...

cargo

No PRs yet

SurrealDB: USE NS/DB implicit creation bypasses DEFINE authorization

GHSA-wp87-mgvq-5j93 MODERATE about 1 month ago

An anonymous caller could create new namespaces and databases on a running SurrealDB instance without holding `DEFINE NAMESPACE` or `DEFINE DATABAS...

cargo

No PRs yet

SurrealDB: Port-specific --deny-net rules silently bypassed on HTTP redirect

GHSA-97vg-427p-8hx5 MODERATE about 1 month ago

SurrealDB offers `http::*` functions that can access external network endpoints, with the `--allow-net` and `--deny-net` capabilities used to restr...

cargo

No PRs yet

SurrealDB: Authenticated subscribers can read records hidden by SELECT permissions via LIVE subscriptions

GHSA-6wqw-vhfr-9999 MODERATE about 1 month ago

A record user could read records the table's SELECT permission expression should have hidden, when that expression referenced `$value`, `$before`, ...

cargo

No PRs yet

SurrealDB: `RELATE` overwrites existing edge records without `UPDATE` permission

GHSA-f82j-v89j-mf86 MODERATE about 1 month ago

`RELATE` creates an edge record between two existing records, and SurrealDB enforces the `CREATE` permission on the edge table for this operation. ...

cargo

No PRs yet

SurrealDB has bypass of field-level SELECT permissions through JSON Patch `copy` and `move` with empty `from`

GHSA-fpxg-5xmv-922m MODERATE about 1 month ago

SurrealDB lets callers modify records using JSON Patch operations via the `UPDATE … PATCH` statement (and SDK equivalents such as `db.patch()`). On...

cargo

No PRs yet

SurrealDB: Authenticated callers can read fields hidden by field-level SELECT permissions via error messages

GHSA-6g9v-7gq3-p2c6 MODERATE about 1 month ago

A record user with UPDATE access could read field values that field-level SELECT permissions hid from them. Arithmetic operators and `extend` embed...

cargo

No PRs yet

SurrealDB: LIVE query subscriptions survive session state changes, bypassing access controls

GHSA-4m82-p8cx-f94j MODERATE about 1 month ago

A `LIVE SELECT` subscription records the user's auth state (`$auth`, `$token`, `$session`, `$access`) when it is registered, and the server uses th...

cargo

No PRs yet

SurrealDB vulnerable to pre-auth memory amplification via unbounded `/sql` WebSocket frames

GHSA-65rj-r9fh-jp2v MODERATE about 1 month ago

An anonymous caller could degrade `/sql` availability by streaming WebSocket frames many times larger than the operator-configured per-connection l...

cargo

No PRs yet

SurrealDB: Authorization Bypass in KILL Statement Allows Termination of Other Users' Live Queries

GHSA-gcwr-5mrf-fvch MODERATE about 1 month ago

The `KILL` statement is used to terminate `LIVE SELECT` subscriptions that capture real-time changes to data within a table. The `KILL` statement i...

cargo

No PRs yet

SurrealDB: Crafting malicious LIVE queries writes to the database, resulting in DoS, without permission to the table required

GHSA-4v76-cw68-4vc9 MODERATE about 1 month ago

A `LIVE` query whose `WHERE` clause evaluates to an error caused the source data modifier (the user creating, updating, or deleting a record on the...

cargo

No PRs yet

SurrealDB has an Authorization Bypass via Composite Record-id Paths

GHSA-6vg3-hgrw-p5gf MODERATE about 1 month ago

An authenticated user could bypass permission rules that gated access on parts of a record's id — most commonly tenant-isolation rules of the form ...

cargo

No PRs yet

SurrealDB: Graph traversal bypasses table SELECT permissions

GHSA-vjjx-rfw4-rmfc MODERATE about 1 month ago

An authenticated record or scope user could read records on any table reachable through a graph edge or `REFERENCES TO` back-reference, regardless ...

cargo

No PRs yet

SurrealDB: Scraping a TABLE with no available PERMISSIONS to current auth level

GHSA-98fx-66cf-fc7c MODERATE about 1 month ago

A vulnerability was discovered where the user-supplied `WHERE` clause in a `SELECT` statement is evaluated against the full record data before `PER...

cargo

No PRs yet

SurrealDB vulnerable to Denial of Service due to nested types annotations

GHSA-q8qp-67f9-wr3f MODERATE about 1 month ago

The SurrealDB type/kind parser did not enforce the configured recursion depth limit when parsing nested type annotations. The expression parser alr...

cargo

No PRs yet

SurrealDB has unauthenticated remote DoS via malformed RPC `use` call

GHSA-wjjj-24cx-f28g HIGH about 1 month ago

A single unauthenticated WebSocket message to `/rpc` crashed the SurrealDB server. Sending `use { db: "x" }` without first selecting a namespace hi...

cargo

No PRs yet