Claude Code: Sandbox Escape via Git Worktree Path Confusion Allows Unsandboxed Code Execution

GHSA-7835-87q9-rgvv CVE-2026-55607 HIGH 4 days ago

Claude Code's worktree handling allowed creation of worktrees named ".git" and navigation to worktrees outside the sandbox context, enabling git di...

npm

No PRs yet

Netty: Denial of Service in XmlFrameDecoder via CPU Exhaustion

GHSA-v74w-7mr3-4qg3 HIGH 4 days ago

### Summary An attacker can cause Denial of Service by sending a specially crafted malicious XML payload (e.g., repeated `</` characters) to a Nett...

maven

No PRs yet

Netty: Memory Leak in DNS Record Decoder via Malformed Domain Names

GHSA-mfg7-5gfp-c4w3 MODERATE 4 days ago

### Summary A memory leak can be caused in Netty's DNS codec by sending malicious DNS packets containing invalid domain names. Because the leak occ...

maven

No PRs yet

kin-openapi: ValidationHandler.Load() Fail-Open Authentication Bypass via NoopAuthenticationFunc Default

GHSA-r277-6w6q-xmqw CRITICAL 4 days ago

### Summary `ValidationHandler.Load()` in `getkin/kin-openapi` silently replaces a nil `AuthenticationFunc` with `NoopAuthenticationFunc`, which al...

go

No PRs yet

cel-go: JSON Private Fields Exposed via NativeTypes and ParseStructTag

GHSA-gcjh-h69q-9w9g MODERATE 4 days ago

The function `ext.NativeTypes(ParseStructTag("json"))` does not honour the `encoding/json` skip directive `json:"-"`. Fields tagged `json:"-"` are ...

go

No PRs yet

js-yaml: Exponential parsing time in flow collections leads to denial of service

GHSA-pm4m-ph32-ghv5 HIGH 4 days ago

### Summary Parsing a small YAML document can take exponential time. An application that calls `load()` or `loadAll()` on untrusted input can be hu...

npm

No PRs yet

Russh: client wrong-length X25519 `clone_from_slice` panic (pre-auth DoS)

GHSA-g9hv-x236-4qp3 MODERATE 4 days ago

### Summary A malicious SSH server can crash a `russh` client session with a single malformed key-exchange reply, causing a pre-authentication Deni...

cargo

No PRs yet

Russh: Post-auth remote panic via pty-req with more than 130 terminal-mode records

GHSA-cqjc-rmpq-xprq MODERATE 4 days ago

## Summary A post-authentication denial-of-service panic in `russh` 0.62.2 (commit `c4be19f1915c8682f4615c3fd50008512b474491`, current default bra...

cargo

No PRs yet

Russh: Pre-auth remote panic via all-zero Curve25519 peer public value (encode_mpint OOB)

GHSA-5xvq-cp9x-6p6r MODERATE 4 days ago

A pre-authentication denial-of-service panic in `russh` 0.62.2 (commit `c4be19f1915c8682f4615c3fd50008512b474491`, current default branch `main` as...

cargo

No PRs yet

React Router: RSC Mode CSRF Bypass Allows Action Execution Before 400 Response

GHSA-qwww-vcr4-c8h2 HIGH 4 days ago

This is a follow up to CVE-2026-22030 to address related CSRF flows in unstable RSC code paths. > [!NOTE] > This only affects your application if ...

npm

No PRs yet

AWS CDK CodeBuild S3 Log Encryption Boolean Inversion

GHSA-464c-974j-9xm6 LOW 4 days ago

## Summary The AWS Cloud Development Kit (AWS CDK) is an open-source software development framework for defining cloud infrastructure in code and ...

go maven npm +2 more

No PRs yet

@fastify/static vulnerable to Authorization Bypass via Non-Canonical URL Paths

GHSA-8pvw-jcv7-9cmj CVE-2026-7120 MODERATE 4 days ago

### Impact `@fastify/static` evaluates the `allowedPath` callback before normalizing dot segments and duplicate slashes in the pathname used for f...

npm

No PRs yet

@fastify/static vulnerable to route guard bypass via path traversal

GHSA-83w8-p2f5-377r CVE-2026-15074 HIGH 4 days ago

### Impact `@fastify/static` is vulnerable to a bypass of route-based middleware and guards via non-leading `..` and `%2E%2E` path segments. `find...

npm

No PRs yet

GitPython: Unsafe git option guard bypass via single-character kwarg value token smuggling enables arbitrary command execution

GHSA-r9mr-m37c-5fr3 HIGH 4 days ago

## Summary GitPython's `check_unsafe_options` guard (the control introduced by CVE-2026-42215 / GHSA-2f96 and hardened since) can be bypassed for *...

pypi

No PRs yet

GitPython: Incomplete unsafe_git_clone_options denylist omits --template enabling arbitrary command execution via clone hooks

GHSA-6p8h-3wgx-97gf HIGH 4 days ago

## Summary GitPython's `unsafe_git_clone_options` denylist omits `--template`. `git clone --template=<dir>` copies `<dir>/hooks/` into the new repo...

pypi

No PRs yet

GitPython: Arbitrary file overwrite via git diff --output argument injection in Diffable.diff (key- and value-controlled)

GHSA-fjr4-x663-mwxc HIGH 4 days ago

## Summary `Diffable.diff()` forwards `**kwargs` straight into `diff`/`diff_tree` with **no** `check_unsafe_options` guard. `Diffable` is mixed int...

pypi

No PRs yet

Quadratic CPU blow-up reassembling fragmented WebSocket messages in Bandit

EEF-CVE-2026-65623 GHSA-vg8x-66vg-5pxh CVE-2026-65623 HIGH 4 days ago

## Summary Inefficient Algorithmic Complexity vulnerability in mtrudel bandit allows unauthenticated remote denial of service via CPU exhaustion d...

hex

No PRs yet

node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection

GHSA-r292-9mhp-454m MODERATE 4 days ago

## Summary `node-tar` (npm `tar`) contains an uncontrolled-recursion stack-exhaustion DoS in the internal `mapHas` helper used by `filesFilter`. Wh...

npm

No PRs yet

PostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosure

GHSA-r28c-9q8g-f849 HIGH 4 days ago

## Vulnerability Details **File**: `lib/previous-map.js` **Line**: 87-98 (`loadFile`), 129-144 (`loadMap`) ### Root Cause PostCSS auto-detects a...

npm

No PRs yet

Prompty: Server-Side Template Injection to Remote Code Execution in the @prompty/core Nunjucks Renderer

GHSA-w28w-gp39-m4p6 CRITICAL 4 days ago

## Summary The TypeScript Nunjucks renderer evaluated untrusted `.prompty` template bodies with unrestricted JavaScript member access. An attacker-...

npm

No PRs yet

Mongoose: Prototype pollution in mongoose update casting via __proto__-prefixed dotted path (Schema._getSchema/path getter)

GHSA-664h-wqgq-64gw MODERATE 4 days ago

### Impact _What kind of vulnerability is it? Who is impacted?_ Prototype pollution in update casting: passing a user-controlled update to a Mongo...

npm

No PRs yet

GitPython: git-config section-name injection enables arbitrary config directives (core.sshCommand RCE)

GHSA-3rp5-jjmw-4wv2 HIGH 4 days ago

### Summary In GitPython `<= 3.1.52`, the config writer neutralizes only CR, LF, and NUL in configuration **names**, but writes section names into...

pypi

No PRs yet

Velocity.js: Remote Code Execution via property-read to Function constructor (bypass of GHSA-j658-c2gf-x6pq fix)

GHSA-7gfh-x38p-prh3 CRITICAL 4 days ago

### Summary Remote Code Execution (RCE) in velocityjs v2.1.6 via property-read to the Function constructor. This bypasses the fix for GHSA-j658-c2...

npm

No PRs yet

@backstage/plugin-auth-backend: Unauthenticated OAuth account takeover via `redirect_uri` allowlist bypass

GHSA-38hq-7x33-php4 MODERATE 4 days ago

### Impact The allowlist matching used by the experimental dynamic client registration and client ID metadata document (CIMD) features in `@backsta...

npm

No PRs yet

ImageMagick: Integer Overflow in JNX decoder causes heap buffer over-write when processing extremly large files on 32-bit builds

GHSA-h22j-f9xw-xjjm CVE-2026-62946 MODERATE 4 days ago

When processing an extremely large JNX file on 32-bit platforms an integer overflow will happen that can cause a heap buffer over-write.

nuget

No PRs yet

ImageMagick: Heap Buffer Over-Write in fx operation

GHSA-422r-8c97-xcg4 CVE-2026-62363 MODERATE 4 days ago

A heap buffer over-write can occur in the fx operation by passing a crafted argument.

nuget

No PRs yet

ImageMagick: Heap Buffer Over-Write in morphology operation when an invalid kernel is provided

GHSA-f5m7-cqgw-8hm7 CVE-2026-62343 MODERATE 4 days ago

An invalid kernel can cause a heap buffer over-write when performing a morphology operation with a user supplied kernel.

nuget

No PRs yet

PyMdown Extensions: Path traversal in the b64 extension lets <img src> read files outside base_path

GHSA-9xwg-3r6f-jcx2 CVE-2026-61632 MODERATE 4 days ago

### Summary The `b64` extension inlines images referenced by `<img src="...">` as base64 data URIs. When resolving the `src` path it joins it onto...

pypi

No PRs yet

Trix: Stored XSS via HTMLParser attribute injection on paste

GHSA-53g2-mvcc-q9x3 MODERATE 4 days ago

### Impact The Trix editor, in versions prior to 2.1.18, is vulnerable to XSS when crafted HTML is pasted into the editor. The `HTMLParser` proces...

npm rubygems

No PRs yet

Microsoft Kiota: Path traversal in generated plugin manifest static_template.file reference (percent-encoding bypass)

GHSA-p5rm-jg5c-8c77 MODERATE 4 days ago

### Impact Kiota generates AI plugin manifests from an OpenAPI description. When the description contains an `x-ai-capabilities` response semantic...

nuget

No PRs yet

Valibot: record() issue paths can make flatten() throw for inherited Object property names

GHSA-5qjj-4xww-7phc CVE-2026-59952 MODERATE 4 days ago

## Summary `valibot` 1.4.1 can throw a `TypeError` inside its `flatten()` helper when validation issues contain attacker-controlled object keys su...

npm

No PRs yet

seroval: `seroval.fromJSON()` Promise resolver type confusion invokes attacker-controlled methods during deserialization

GHSA-mv8w-475r-vwqw CVE-2026-59940 CRITICAL 4 days ago

## Summary A type confusion issue in `seroval.fromJSON()` allowed attacker-controlled JSON input to cause Promise control nodes to operate on valu...

npm

No PRs yet

LZ4 Java: Native XXHash implementations can crash the JVM when passed invalid byte array ranges

GHSA-xx22-p4ch-683r CVE-2026-59949 MODERATE 4 days ago

### Summary Insufficient validation of byte array arguments in JNI-based XXHash implementations in lz4-java 1.11.0 and earlier allows callers to c...

maven

1

Dependabot PRs

Microsoft Kiota: Arbitrary file write + code-injection via x-ms-kiota-info clientClassName and clientNamespaceName

GHSA-4vv7-jj25-4gh6 CVE-2026-59866 HIGH 4 days ago

### Summary Microsoft Kiota emitted the `x-ms-kiota-info` extension's `clientClassName` or `clientNamespaceName` value **raw**, with no identifier...

nuget

No PRs yet

Microsoft Kiota: Command injection via x-ms-kiota-info dependencyInstallCommand surfaced by `kiota info`

GHSA-hq9q-27g5-qwpj CVE-2026-59865 CRITICAL 4 days ago

### Summary `kiota info` — the command developers run to learn which packages to install after generating a client — read the `x-ms-kiota-info` ex...

nuget

No PRs yet

Microsoft Kiota Workspace-config poisoning: out-of-repo file write + generation-time SSRF

GHSA-4rj6-vrwv-wr8m CVE-2026-59863 HIGH 4 days ago

### Summary Microsoft Kiota honors a poisoned `.kiota/workspace.json` — the workspace configuration that Kiota's documented team workflow has deve...

nuget

No PRs yet

Microsoft Kiota: Generation-time SSRF + remote/local file inclusion via unrestricted $ref

GHSA-rg4h-fpcp-2qm8 CVE-2026-59867 HIGH 4 days ago

## Summary Microsoft Kiota resolved OpenAPI `$ref`s by fetching remote `http(s)` URLs and reading local files (including absolute / out-of-tree pa...

nuget

No PRs yet

Microsoft Kiota: Path/URL injection into generated Copilot plugin manifest via x-ai-* extensions

GHSA-4jwf-m4wg-8p66 CVE-2026-59864 CRITICAL 4 days ago

### Summary `kiota plugin add` / `kiota plugin generate` (with `-t APIPlugin`) emits an attacker-controlled `static_template.file` path from the A...

nuget

No PRs yet

SvelteKit: Prototype pollution in file input deletion path in remote-function forms

GHSA-866w-xmhq-wj7x MODERATE 4 days ago

If you use remote form functions, have an input field of type `file`, and accept arbitrary user-controlled path names for the field, then you are v...

npm

No PRs yet

SvelteKit: Big remote form function payloads can cause Node process to crash

GHSA-wqjv-9729-c5q2 MODERATE 4 days ago

Big remote form function payloads can cause the Node process to crash. Doing this repeatedly can cause DoS.

npm

No PRs yet

AWS CLI: Overly permissive File Permissions

GHSA-wfp6-f47h-hxc3 CVE-2026-13769 MODERATE 4 days ago

### Summary The AWS Command Line Interface (AWS CLI) is a unified tool for managing AWS services from the command line. Certain CLI subcommands wro...

pypi

No PRs yet

ONNX: Heap-Buffer-Overflow READ in Gemm Version Converter Adapter via Undersized Input Shape

GHSA-p893-rvq9-2xf9 CVE-2026-63632 LOW 4 days ago

### Summary Heap-buffer-overflow READ (16 bytes) in `Gemm_7_6::adapt_gemm_7_6()` (`onnx/version_converter/adapters/gemm_7_6.h:41`) when `ConvertVe...

pypi

No PRs yet

Ray: Arbitrary code execution via ray.data.read_webdataset default decoder: pickle.loads(value) and torch.load(weights_only=False)

GHSA-hhrp-gw25-jr43 CVE-2026-57516 HIGH 4 days ago

## Summary `ray.data.read_webdataset(paths=...)` is a `@PublicAPI(stability="alpha")` reader for WebDataset-format TAR files. Its default `decoder...

pypi

No PRs yet

Microsoft Kiota: Code Generation Literal Injection in Kiota PHP Generator

GHSA-jqwh-526h-c92j CVE-2026-59859 HIGH 4 days ago

# Impact The Kiota PHP code generator is vulnerable to a code generation literal injection attack. The generator embeds string values from OpenAPI...

nuget

No PRs yet

Microsoft Kiota: Code Generation Literal Injection in Kiota Python Generator

GHSA-7f3j-j7jj-r3vr CVE-2026-59862 HIGH 4 days ago

Code Generation Literal Injection in Kiota Python Generator Leads to Arbitrary Code Execution at Import Time. The Kiota Python code generator is v...

nuget

No PRs yet

Microsoft Kiota: Code Generation Literal Injection in Kiota Ruby Generator

GHSA-xg2h-5xr2-29jw CVE-2026-59861 HIGH 4 days ago

Code Generation Literal Injection in Kiota Ruby Generator Leads to Arbitrary Code Execution # Impact The Kiota Ruby code generator is vulnerable ...

nuget

No PRs yet

Better Auth: Account takeover via pre-account hijacking on magic-link and email-OTP sign-in

GHSA-qq9h-g4jm-xgf3 HIGH 4 days ago

### Am I affected You are affected if all of the following hold: - You run a `better-auth` version below 1.6.22, or a `1.7.0-beta` below `1.7.0-b...

npm

No PRs yet

@better-auth/stripe: cross-organization billing tampering in organization subscription actions

GHSA-h3rm-78g3-j7cp HIGH 4 days ago

### Am I affected? You are affected if all of these are true: - You use `@better-auth/stripe` from version 1.4.11 up to a patched version below. ...

npm

No PRs yet

@better-auth/scim: account takeover and stale access via SCIM provider-id collision

GHSA-rjg6-39jm-rgg4 CRITICAL 4 days ago

### Am I affected? You are affected if your application registers the `@better-auth/scim` plugin and lets authenticated users generate SCIM tokens...

npm

No PRs yet

ImageMagick: Heap Buffer Over-Write in X11 import with crafted window title

GHSA-76q6-2p6h-xjqr LOW 4 days ago

Running an X11 import with a crafted window title can result in a heap buffer over-write.

nuget

No PRs yet