deepstream is vulnerable to prototype pollution

GHSA-9v98-6g37-x9g6 CVE-2026-49252 CRITICAL about 1 month ago

### Impact Prototype pollution in deepstream server v <=10.0.4. Potential privilege escalation from any authenticated user with write permission to...

npm

No PRs yet

Dosage Vulnerable to Stored Cross-Site Scripting (XSS) in HTML/RSS Output Handlers

GHSA-75mw-h36v-2jv7 MODERATE about 1 month ago

## Summary The HTML and RSS output handlers in `dosagelib/events.py` write user-controlled content (comic text and page URLs) directly into genera...

pypi

No PRs yet

Scriban: ExpressionDepthLimit guard is non-enforcing — parser-recursion DoS in 6.6.0–7.2.0 (incomplete fix for GHSA-wgh7-7m3c-fx25 / GHSA-p6q4-fgr8-vx4p)

GHSA-6q7j-xr26-3h2c MODERATE about 1 month ago

### Summary The `ExpressionDepthLimit` parser guard in Scriban does not actually stop parsing — it only logs a non-fatal error and lets recursive ...

nuget

No PRs yet

Scriban: array * int (ScriptArray<T>.TryEvaluate) bypasses LoopLimit — incomplete fix for GHSA-c875-h985-hvrc, missed sibling of GHSA-24c8-4792-22hx

GHSA-q6rr-fm2g-g5x8 MODERATE about 1 month ago

### Summary The array multiplication operator (`array * integer`) in Scriban allocates a result whose size is the product of the attacker-controll...

nuget

No PRs yet

nebula-mesh: Signed-poll nonce LRU is in-memory and bounded; replay survives restart + eviction

GHSA-v2jf-442r-6mjh LOW about 1 month ago

`internal/api/pop/nonce.go:25,40,86` + `internal/api/server.go:38` — the signed-poll nonce cache is an in-process LRU sized at 65,536 entries. `int...

go

No PRs yet

WebauthnAuthenticator leaks sensitive HTTP headers through INFO-level logs

GHSA-q683-8468-r6h6 MODERATE about 1 month ago

## Impact `Webauthn\Bundle\Security\Http\Authenticator\WebauthnAuthenticator` logs the full `Symfony\Component\HttpFoundation\Request` object insi...

packagist

No PRs yet

CakePHP: View::element() is missing a path containment check

GHSA-wpvj-hjcr-h3p2 CVE-2026-48820 MODERATE about 1 month ago

### Impact `View::_getElementFileName()` does not check that the resolved element path is within the application/plugin view template paths. When e...

packagist

No PRs yet

joserfc: b64=false RFC7797 JWS payloads bypass JWSRegistry payload-size limits during deserialization

GHSA-wphv-vfrh-23q5 CVE-2026-48990 MODERATE about 1 month ago

# RFC7797 b64=false JWS payloads bypass JWSRegistry payload-size limits during deserialization ## Summary Testing revealed that `joserfc` accepts...

pypi

No PRs yet

better-helperjs Vulnerable to Directory Traversal via String Prefix Bypass in Static Server

GHSA-3p34-w4f6-5xh2 HIGH about 1 month ago

## Summary A directory traversal vulnerability exists in the production static file server of `better-helperjs` (`<= 3.0.5`). Attackers can read ar...

npm

No PRs yet

PHP Standard Library: HTTP/2 server-side missing content-length validation enables request smuggling

GHSA-pw9p-jvrm-f7rm CVE-2026-48979 HIGH about 1 month ago

## Impact `Psl\H2\ServerConnection` does not validate that the total bytes received in DATA frames match the `content-length` header declared in t...

packagist

No PRs yet

Muhammara has a NULL pointer dereference in LZWDecode filter when DecodeParms omits EarlyChange key

GHSA-fhp4-pr5j-46m5 HIGH about 1 month ago

## Summary A NULL pointer dereference vulnerability exists in `PDFParser::CreateFilterForStream()` when processing a PDF stream with `/Filter /LZW...

npm

No PRs yet

Pterodactyl Panel: Client email change endpoint allows enumeration of accounts in system

GHSA-j7f5-gfqm-pcx3 MODERATE about 1 month ago

### Summary An unprotected user enumeration vulnerability exists in the account email update endpoint, allowing authenticated users to verify wheth...

packagist

No PRs yet

Pterodactyl Wings: Chmod operation can be used to change permissions of files outside of the server container

GHSA-rhq6-9rgh-v45c MODERATE about 1 month ago

In `wings/internal/ufs/fs_unix.go` (line 92-94), this function is defined and is used to change permissions of files in the server: ```go func (fs...

go

No PRs yet

Flawfinder output manipulation via untrusted filenames and source text

GHSA-4c3c-r6p8-c863 CVE-2026-48813 LOW about 1 month ago

### Impact This vulnerability is an improper input neutralization issue leading to output manipulation, specifically, Terminal/ANSI Escape Sequenc...

pypi

No PRs yet

python-socketio: Binary attachment accumulation can cause denial of service

GHSA-5w7q-77mv-v69f CVE-2026-48804 HIGH about 1 month ago

### Impact The python-socketio server stores binary `EVENT` and `ACK` messages in memory while it waits to receive their binary attachments. Once a...

pypi

No PRs yet

python-engineio has unbound thread allocation that can cause denial of service

GHSA-cgwc-pv48-fhj5 CVE-2026-48802 HIGH about 1 month ago

### Impact An attacker can cause the creation of unnecessary background threads in the python-engineio server by exploiting the heartbeat mechanism...

pypi

No PRs yet

semantic-router exposed to compromised litellm wheel (CVE-2026-42208) via unbounded transitive pin

GHSA-98x5-vq43-vc5p CRITICAL about 1 month ago

## Impact semantic-router versions 0.1.8 through 0.1.14 declare `litellm>=1.61.3` with no upper bound. During the window in which `litellm==1.82.8`...

pypi

No PRs yet

python-engineio has possible denial of service due to maximum payload size sometimes not being enforced

GHSA-m9gh-vj53-gvh9 CVE-2026-48809 HIGH about 1 month ago

### Impact There are two specific configurations of the python-engineio server in which the size of incoming messages is not checked before the mes...

pypi

No PRs yet

LinkifyIt#match scan loop has quadratic algorithmic complexity

GHSA-22p9-wv53-3rq4 CVE-2026-48801 HIGH about 1 month ago

## Summary `LinkifyIt.prototype.match` — the package's primary public API — has **O(N²) algorithmic complexity** for inputs containing many fuzzy ...

npm

No PRs yet

turso-cli persists Turso platform JWT with world-readable (0o644) file permissions

GHSA-57f6-pvx8-hwj6 CVE-2026-48790 MODERATE about 1 month ago

### Summary `turso-cli` persists the user's Turso platform JWT to `settings.json` using Viper's default `configPermissions` of `0o644`, leaving th...

go

No PRs yet

nono-py's policy JSON accepts unknown security fields

GHSA-m8j6-rc5x-wv36 MODERATE about 1 month ago

### Summary nono-py policy handling could fail open in two ways. First, resolving a policy-derived `ProxyConfig` did not automatically enforce `Ca...

pypi

No PRs yet

nono-py vulnerable to authorization bypass / policy confusion

GHSA-9j7f-3r4p-pwh6 MODERATE about 1 month ago

The python API made a restrictive-looking configuration unsafe by default. A caller could configure only reverse- proxy credential routes, put the ...

pypi

No PRs yet

Backpropagate: backprop ui --auth and backprop ui --share do not enforce authentication

GHSA-f65r-h4g3-3h9h CVE-2026-48797 CRITICAL about 1 month ago

## Summary In `backpropagate >= 1.1.0`, the optional Reflex web UI (`pip install backpropagate[ui]`, launched via `backprop ui`) exposes a trainin...

npm pypi

No PRs yet

nono-py has proxy-only network fallback bypass on older Linux kernels

GHSA-72w7-mf9g-733p MODERATE about 1 month ago

## Summary On Linux kernels that do not support Landlock network rules, `nono_py.sandboxed_exec()` could run `CapabilitySet.proxy_only(proxy)` wit...

pypi

No PRs yet

Fleet DM Vulnerable to Cross-Team Policy Data Exposure via Global Policy Read Endpoint

GHSA-gm7f-v959-fr2g CVE-2026-41262 MODERATE about 1 month ago

## Summary The global policy read endpoint (`GET /api/latest/fleet/policies/{policy_id}`) performs authorization against an empty `fleet.Policy{}`...

go

No PRs yet

Hysteria: http large header with sniff cause server DoS

GHSA-jqc5-2p7q-fqfc HIGH about 1 month ago

### Summary Sending an excessively large header by an attacker could lead to a server-side DoS attack. ### Details The current sniff implementati...

go

No PRs yet

Hysteria vulnerable to server crash when max_datagram_frame_size very small

GHSA-qh5x-rfwf-rvfv HIGH about 1 month ago

### Summary An authenticated client can crash the Hysteria server by advertising a very small QUIC `max_datagram_frame_size` and then triggering a...

go

No PRs yet

Hysteria has an authenticated UDP ACL bypass that enables localhost and private-network UDP SSRF

GHSA-vgrc-hq28-p3xp HIGH about 1 month ago

## Summary Hysteria's UDP relay treats the destination address as packet-scoped, but ACL and outbound policy are applied only once when a new UDP ...

go

No PRs yet

@cyclonedx/cdxgen: Maven project scanning may allow shell command injection through repository-controlled module paths

GHSA-5vwr-qchf-q4pf MODERATE about 1 month ago

## Summary A command injection vulnerability existed in the Maven scanning flow of cdxgen before version 12.4.3. When cdxgen scanned an attacker-...

npm

No PRs yet

Remark42: Cross-Site Scripting (XSS) on /api/v1/img via content-type spoofing

GHSA-4c8j-mgm4-qqvp CVE-2026-48788 HIGH about 1 month ago

### Summary The remark42 image proxy fetches an arbitrary remote URL and re-serves the response from remark42's own origin. The download path decid...

go

No PRs yet

Apptainer has incorrect path matching for 'limit container paths' directive

GHSA-cr2j-534f-mf3g CVE-2026-48785 MODERATE about 1 month ago

### Impact The `limit container paths directive` in `apptainer.conf` is intended to allow a system administrator limit the paths from which contai...

go

No PRs yet

pydantic-ai: SSRF blocklist bypass via IPv4-compatible, SIIT/IVI, and local NAT64 IPv6 addresses (incomplete fix of CVE-2026-46678)

GHSA-cg7w-rg45-pc59 CVE-2026-48782 MODERATE about 1 month ago

## Summary When an application using Pydantic AI opts a URL into `force_download='allow-local'` (which disables the default block on private/inter...

pypi

No PRs yet

Incus has an arbitrary file write on its client due to trusted image hash

GHSA-f6m5-xw2g-xc4x CVE-2026-48769 CRITICAL about 1 month ago

### Summary An arbitrary file write exists in the Incus client when a malicious image server returns a crafted `Incus-Image-Hash` header. This can...

go

No PRs yet

@sigstore/core has DSSE payloadType type-binding failure

GHSA-jfc7-64v2-mr8c CVE-2026-48758 MODERATE about 1 month ago

### Impact The `preAuthEncoding` function in `@sigstore/core` uses Node.js `'ascii'` encoding when converting the PAE (Pre-Authentication Encoding)...

npm

No PRs yet

Incus: CreateCustomVolumeFromBackup nil-pointer dereference on volume_snapshots[*].expires_at (sibling-field variant of GHSA-r7w7)

GHSA-xhqx-mgh3-3h7q CVE-2026-48756 LOW about 1 month ago

## Summary `(*backend).CreateCustomVolumeFromBackup` in [`internal/server/storage/backend.go`](https://github.com/lxc/incus/blob/985a1dedf9f3e7ba7...

go

No PRs yet

Incus has an argument injection in backup compression algorithm leading to AFW and ACE

GHSA-v6mj-8pf4-hhw4 CVE-2026-48755 CRITICAL about 1 month ago

### Summary Improper validation of user-provided backup compression algorithm leads to argument injection in the constructed command line. This le...

go

No PRs yet

Incus: Nil-pointer dereference in createDependentVolumesFromBackup on disk.{Volume,VolumeSnapshots,Pool}

GHSA-4xg6-52mh-fpw8 CVE-2026-48754 LOW about 1 month ago

## Summary `(*backend).createDependentVolumesFromBackup` in [`internal/server/storage/backend.go`](https://github.com/lxc/incus/blob/d768f81c0a1d9...

go

No PRs yet

Incus has an arbitrary file write via path traversal in S3 multipart upload

GHSA-ccjc-4qc3-jxqc CVE-2026-48753 CRITICAL about 1 month ago

## Summary The S3 protocol upload endpoint is vulnerable to path traversal and allows creation of arbitrary files on the host. This behavior could...

go

No PRs yet

Incus has arbitrary file read+write on host via templates/ symlink in malicious image

GHSA-vxp5-584q-c479 CVE-2026-48752 CRITICAL about 1 month ago

### Summary A specially crafted image or instance backup can be used to read or create/write arbitrary files on the host; possibly leading to arbi...

go

No PRs yet

Incus has a restricted project bypass leading to arbitrary command execution

GHSA-48q5-w887-33wv CVE-2026-48751 CRITICAL about 1 month ago

### Summary Instance snapshots ignore the `restricted.containers.lowlevel=block` setting; allowing for arbitrary command execution on the Incus se...

go

No PRs yet

Incus has an arbitrary file write on host via `exec-output` symlink in crafted image

GHSA-73hr-m85f-64v9 CVE-2026-48750 CRITICAL about 1 month ago

### Summary The `record-output` parameter of the `/instances/$name/exec` endpoint stores the output of the command in the `exec-output` directory ...

go

No PRs yet

Incus has an arbitrary file read+write on host via rootfs/ symlink in malicious image

GHSA-2q3f-q5pq-g8wv CVE-2026-48749 CRITICAL about 1 month ago

### Summary A specially crafted image can be used to read or create/write arbitrary files on the host; possibly leading to arbitrary command execu...

go

No PRs yet

ImageMagick has Null Pointer Dereference caused by the distort operation when passing incorrect arguments

GHSA-p9rq-q46c-g4x6 CVE-2026-53463 MODERATE about 1 month ago

When passing incorrect arguments in the distort operation a null pointer deference will occur.

nuget

No PRs yet

OpenAM Account Takeover via Unverified Password Change in OAuth2 Module

GHSA-gf57-4mp6-m85x CVE-2026-46623 HIGH about 1 month ago

## Summary **Description** An Unverified Password Change (CWE-620) and Use of Weak Credentials (CWE-1391) issue in OpenAM's OAuth2 authentication...

maven

No PRs yet

OpenAM Authentication Bypass via MSISDN LDAP Injection

GHSA-xq73-fvmr-jvmm CVE-2026-46619 HIGH about 1 month ago

## Summary **Description** An LDAP Injection (CWE-90) vulnerability in the MSISDN authentication module allows an unauthenticated, remote attacke...

maven

No PRs yet

fluent-plugin-opentelemetry Has Denial of Service (DoS) via Large Payloads and Decompression Bombs in `in_opentelemetry`

GHSA-2jc5-xhx8-qj6h CVE-2026-44163 MODERATE about 1 month ago

The `fluent-plugin-opentelemetry` plugin (specifically the `in_opentelemetry` HTTP input) lacked strict size limits on incoming requests. It was di...

rubygems

No PRs yet

fluent-plugin-s3 Vulnerable to Denial of Service (DoS) via Decompression Bomb in `in_s3`

GHSA-xv9w-7v6q-hpjh CVE-2026-44162 LOW about 1 month ago

The `fluent-plugin-s3` plugin (specifically the `in_s3` input plugin) supports reading and decompressing heavily compressed files (such as `gzip`, ...

rubygems

No PRs yet

Fluentd is Vulnerable to Server-Side Request Forgery (SSRF) via Placeholder Expansion in `out_http`

GHSA-72f5-rr8c-r6gr CVE-2026-44161 HIGH about 1 month ago

The `out_http` output plugin allows the use of placeholders (such as `${tag}`) in the `endpoint` configuration parameter. It was discovered that if...

rubygems

No PRs yet

Fluentd is Vulnerable to Denial of Service (DoS) via Gzip Decompression Bomb in `in_http` and `in_forward`

GHSA-j9cw-hwqf-85w7 CVE-2026-44160 HIGH about 1 month ago

Fluentd's `in_http` and `in_forward` plugins support receiving gzip-compressed data. While Fluentd correctly enforces size limits on the incoming c...

rubygems

No PRs yet

Fluentd is Vulnerable to Exposure of Sensitive Information via Monitor Agent API

GHSA-pr7j-96cj-549h CVE-2026-44025 HIGH about 1 month ago

Fluentd's Monitor Agent plugin (`in_monitor_agent`) exposes internal metrics and plugin information via a REST API. It was discovered that the API ...

rubygems

No PRs yet