Hubuum client library (Rust): Sensitive data may be exposed through default diagnostics

GHSA-2625-rw7m-5q5x LOW 3 days ago

## Summary `hubuum_client` diagnostics can expose sensitive request, response, import/export, task, delivery, or server-provided data when applica...

cargo

No PRs yet

Open WebUI: Private channel messages can be disclosed through cross-channel thread parent_id binding

GHSA-73x5-h92w-xc2j CVE-2026-59215 LOW 3 days ago

## Summary A normal authenticated user can read the content of a message in a private channel they do not belong to. `GET /api/v1/channels/{id}/me...

pypi

No PRs yet

Open WebUI: Cross-user model-list exposure via static cache key in get_all_models (aiocache key= vs key_builder= misuse)

GHSA-3wp3-xxj9-5jqq CVE-2026-59213 LOW 3 days ago

## Summary The `get_all_models` handlers in `routers/openai.py` and `routers/ollama.py` intended to cache their **permission-filtered** model list...

pypi

No PRs yet

Open WebUI: Unauthenticated WebSocket Access to Collaborative Document Handlers (ydoc:awareness:update, ydoc:document:leave)

GHSA-gmfw-g93r-vg53 CVE-2026-59715 LOW 3 days ago

## Summary The Socket.IO server is configured with `always_connect=True` (lines 78, 91 in `backend/open_webui/socket/main.py`) and the `connect` h...

pypi

No PRs yet

Open WebUI: Scheduled automations continue after pending-user deactivation and stored model ACL revocation

GHSA-mvx4-532p-xfm9 CVE-2026-59226 LOW 3 days ago

**Title:** Scheduled automations continue after pending-user deactivation and stored model ACL revocation ### Summary Open WebUI documents `pendi...

pypi

No PRs yet

AWS CDK CodeBuild S3 Log Encryption Boolean Inversion

GHSA-464c-974j-9xm6 LOW 3 days ago

## Summary The AWS Cloud Development Kit (AWS CDK) is an open-source software development framework for defining cloud infrastructure in code and ...

go maven npm +2 more

No PRs yet

ONNX: Heap-Buffer-Overflow READ in Gemm Version Converter Adapter via Undersized Input Shape

GHSA-p893-rvq9-2xf9 CVE-2026-63632 LOW 3 days ago

### Summary Heap-buffer-overflow READ (16 bytes) in `Gemm_7_6::adapt_gemm_7_6()` (`onnx/version_converter/adapters/gemm_7_6.h:41`) when `ConvertVe...

pypi

No PRs yet

ImageMagick: Heap Buffer Over-Write in X11 import with crafted window title

GHSA-76q6-2p6h-xjqr LOW 3 days ago

Running an X11 import with a crafted window title can result in a heap buffer over-write.

nuget

No PRs yet

ImageMagick: Memory Leak in TIFF encoder when invalid tiff:tile-geometry is specified

GHSA-h5r4-w88w-7ccr LOW 3 days ago

An invalid tiff:tile-geometry will cause a memory leak in the TIFF encoder.

nuget

No PRs yet

ImageMagick: Memory Leak in ICON decoder when allocation fails

GHSA-h58x-r7f7-rh84 LOW 3 days ago

A memory leak will occur in the ICON decoder when an allocation fails.

nuget

No PRs yet

ImageMagick: Memory leak in VIFF encoder when allocation fails

GHSA-m596-67p7-69wh LOW 3 days ago

When an allocation fails in the VIFF encoder a memory leak will occus.

nuget

No PRs yet

ImageMagick: Memory Leak in MIFF encoder when allocaton fails

GHSA-r628-69v2-2f9c LOW 3 days ago

A memory leak will occur in the MIFF encoder when an allocation fails.

nuget

No PRs yet

ImageMagick: Memory Leak in YUV decoder when opening of blob fails

GHSA-h7f2-f9cc-h2gv LOW 3 days ago

A memory leak will occur when a blob cannot be opened in the YUV decoder.

nuget

No PRs yet

ImageMagick: Memory Leak in TIFF encoder when an allocation fails

GHSA-jfq9-q63x-rc63 LOW 3 days ago

When an allocation fails in the TIFF encoder a small memory leak will occur.

nuget

No PRs yet

ImageMagick: Memory Leak in JNG encoder when a blob could not be opened

GHSA-99w9-hv66-rfv7 LOW 3 days ago

When a blob can not be opened a memory leak will occur when encoding a JNG file.

nuget

No PRs yet

ImageMagick: Memory Leak in hough lines operation when an operation fails

GHSA-j8rh-v2r8-v94x LOW 3 days ago

When a specific operation fails in the hough lines operation a small memory leak will occur.

nuget

No PRs yet

ImageMagick: Memory Leak in color transformation to log colorspace when operation fails

GHSA-7c7m-fpjw-gwcq LOW 3 days ago

When transforming an image to the log colorspace a small memory leak happens when the operation fails.

nuget

No PRs yet

ImageMagick: Memory Leak in TIFF encoder when a temporary file could not be created.

GHSA-6vxp-gfwf-hcr9 LOW 3 days ago

When a temporary file can not be created a small memory leak will happen in the TIFF encoder.

nuget

No PRs yet

ImageMagick: Information Disclosure when printing profiles with debug enabled

GHSA-hwf3-r46v-5ggx LOW 3 days ago

When a profile is displayed with the identify command and the value is not printable a single byte at the end of the profile can be printed.

nuget

No PRs yet

ImageMagick: Use-After-Free in FormatMagickCaption when memory allocation fails

GHSA-qvxh-prvr-85w2 LOW 3 days ago

When a memory allocation fails inside the FormatMagickCaption method a dangling pointer still points to the freed memory.

nuget

No PRs yet

ImageMagick: Use-After-Free when freetype initialization fails

GHSA-6jwg-7q3p-5fqm LOW 3 days ago

When the freetype initialization fails the method does not exit and uses memory that was freed.

nuget

No PRs yet

ImageMagick: Policy Bypass in script operation due to missing checks

GHSA-vghg-5jrg-2398 LOW 3 days ago

The -script operation is missing policy checks and that could result in both reading from paths disallowed by the security policy.

nuget

No PRs yet

ImageMagick: Policy Bypass in APNG encoder and delegates due to a missing check

GHSA-v3j6-27vc-7pw2 LOW 3 days ago

Due to a missing check in the APNG encoder and external delegates it is possibly to bypass the policy and write to a disallowed path.

nuget

No PRs yet

ImageMagick: Heap-use-after-free via XMP profile could result in a crash

GHSA-qh5g-q395-cx4j LOW 3 days ago

Because of a missing null check when parsing an XMP profile a use after free will happen that might result in a crash.

nuget

No PRs yet

ImageMagick: Policy Bypass possible with matrix-backed operations

GHSA-rvhp-75f6-9jqh LOW 3 days ago

Matrix bases operations like `-canny` are missing a check for allowed memory allocation that could result allocating more memory than allowed.

nuget

No PRs yet

Ruby json: JSON generator heap buffer overflow when streaming to an IO

GHSA-x2f5-4prf-w687 CVE-2026-54696 LOW 4 days ago

### Summary `JSON.dump(obj, io)` and `JSON::State#generate(obj, io)` can write past the internal JSON generator buffer when a streamed object cont...

rubygems

1

Dependabot PRs

JupyterLab: Allowlist/blocklist check in `PyPIExtensionManager.install()` not enforced for direct callers (missing `await`)

GHSA-whvh-wf3x-g77j LOW 5 days ago

The extension allowlist/blocklist check inside `PyPIExtensionManager.install()` was not enforced due to a missing await. For purposes of JupyterLab...

pypi

No PRs yet

LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks

GHSA-72m8-9m7m-h278 CVE-2026-59821 LOW 5 days ago

### Impact LiteLLM's Custom Code Guardrails production create/update paths did not apply the same sandboxing and validation used by the test endpo...

pypi

No PRs yet

LiteLLM: Local file read via request-supplied OIDC file references

GHSA-4g5m-c9r5-49xf CVE-2026-59819 LOW 5 days ago

### Impact LiteLLM's `/health/test_connection` endpoint resolved request-supplied environment and OIDC file references in `litellm_params`. A prox...

pypi

No PRs yet

Dompdf: File existence oracle via font-face stylesheet declaration

GHSA-7x2p-4jvh-6384 CVE-2026-55555 LOW 5 days ago

## Description Dompdf is vulnerable to a **File Existence Oracle** attack through the manipulation of the CSS `@font-face` directive. By providing...

packagist

No PRs yet

Dompdf: Chroot Validation Bypass

GHSA-wvh6-f5jh-8gw4 CVE-2026-55554 LOW 5 days ago

### Summary The chroot check for local files uses a prefix string check to enforce chroot boundaries. The simple string comparison it performs allo...

packagist

No PRs yet

Loofah `allowed_uri?` does not detect `javascript:` URIs split by numeric character references without semicolons

GHSA-5qhf-9phg-95m2 LOW 6 days ago

## Summary `Loofah::HTML5::Scrub.allowed_uri?` does not correctly reject `javascript:` or `vbscript:` URIs when the scheme is split by a numeric c...

rubygems

No PRs yet

Gitea: Webhook Authorization Header Returned in Plaintext via API

GHSA-3r5c-2xxx-h872 CVE-2026-58511 LOW 6 days ago

## Summary The `ToHook()` function in `services/webhook/general.go` decrypts the webhook's `HeaderAuthorizationEncrypted` field and returns the pl...

go

No PRs yet

Gitea: Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service

GHSA-m932-crvm-gcp5 CVE-2026-55984 LOW 6 days ago

### Summary The AddTime API handler continues execution after an error returned by `GetUserByName()`. When a repository administrator specifies a...

go

No PRs yet

Gitea: Private Repository Metadata Remains Accessible After Access Revocation

GHSA-j2w3-9c3r-g83q CVE-2026-58434 LOW 6 days ago

### Summary A user who previously had access to a private repository can continue to obtain repository metadata through `GET /api/v1/user/starred`...

go

No PRs yet

Gitea: Cross-repository label-ID enumeration oracle via unscoped DeleteIssueLabel API

GHSA-pgqf-926r-548m CVE-2026-58445 LOW 6 days ago

## Summary The API endpoint `DELETE /repos/{owner}/{repo}/issues/{index}/labels/{id}` loads the label by ID with a **global, unscoped** lookup and...

go

No PRs yet

Gitea: Cross-repository IDOR in issue-dependency removal lets an attacker tamper with and comment on private repos they cannot access

GHSA-xv9x-fj9g-vj6h CVE-2026-58438 LOW 6 days ago

### Details `RemoveDependency` in `routers/web/repo/issue_dependency.go` takes a `removeDependencyID` form parameter identifying the other issue by...

go

No PRs yet

Gitea: Blind SSRF in OAuth2 avatar synchronization via unvalidated OIDC picture claim

GHSA-x77v-q46j-393g CVE-2026-23603 LOW 6 days ago

### Summary When `[oauth2_client] UPDATE_AVATAR = true` is enabled, Gitea fetches the avatar URL received from an OAuth2/OIDC provider using Go's d...

go

No PRs yet

DOMPurify: `CUSTOM_ELEMENT_HANDLING` bypasses `afterSanitizeElements` for allowed custom elements.

GHSA-c2j3-45gr-mqc4 LOW 6 days ago

## Summary There is a possible hook-policy inconsistency in DOMPurify 3.4.11 involving `CUSTOM_ELEMENT_HANDLING`. When a custom element is allowe...

npm

No PRs yet

Loofah `allowed_uri?` does not detect `javascript:` URIs split by named whitespace character references

GHSA-8whx-365g-h9vv LOW 6 days ago

## Summary `Loofah::HTML5::Scrub.allowed_uri?` does not correctly reject `javascript:` URIs when the scheme is split or prefixed by the HTML5 name...

rubygems

No PRs yet

@astrojs/netlify generates an overly-broad Netlify Image CDN allowlist because remotePatterns.pathname metacharacters are not escaped

GHSA-hp3v-mfqw-h74c LOW 7 days ago

## Summary The `@astrojs/netlify` adapter converts each `image.remotePatterns` entry into a regular expression that is written to `.netlify/v1/con...

npm

No PRs yet

body-parser vulnerable to denial of service when invalid limit value silently disables size enforcement

GHSA-v422-hmwv-36x6 CVE-2026-12590 LOW 7 days ago

### Impact When body-parser is configured with an invalid `limit` option value, such as an unparseable string or `NaN`, `bytes.parse()` returns `n...

npm

14

Dependabot PRs

@astrojs/node: Backslash-prefixed paths not recognized as internal by trailing-slash redirect

GHSA-r557-wffq-wvrc CVE-2026-59730 LOW 7 days ago

### Impact With `trailingSlash: 'always'` configured, the `@astrojs/node` standalone server's static file handler appends a trailing slash to requ...

npm

No PRs yet

Astro: Cross-site scripting via unescaped transition:* directive values on hydrated islands

GHSA-7pw4-f3q4-r2p2 CVE-2026-59727 LOW 7 days ago

### Summary When a `transition:persist`, `transition:scope`, or `transition:persist-props` directive is applied to a client-hydrated (`client:*`) ...

npm

No PRs yet

File Browser: Share API exposes the password hash and bypass token

GHSA-833g-cqhp-h72j CVE-2026-62684 LOW 7 days ago

## Summary When a user creates a password-protected share or lists existing shares, the JSON response includes the full bcrypt `password_hash` and...

go

No PRs yet

oapi-codegen: OpenAPI Server Description Escapes Generated Go Comment and Injects Executable Code

GHSA-rjwr-m7qx-3fjr LOW 10 days ago

## Summary The vulnerability in oapi-codegen seems to be similar with CVE-2026-22785, which is a generated-code injection issue where untrusted O...

go

No PRs yet

nimiq-primitives: Out-of-bounds panic in KeyNibbles::Add from oversized child suffix in a deserialized proof

GHSA-5rg2-xv9j-gv5p CVE-2026-54542 LOW 11 days ago

### Impact A malicious peer acting as a state-sync source can crash a syncing node with a crafted `TrieChunk` whose proof contains a `TrieNodeChil...

cargo

No PRs yet

nimiq-primitives: Panic in TrieProof::verify via child_index unwrap on equal-length keys

GHSA-46wq-28cx-mhw4 CVE-2026-54541 LOW 11 days ago

### Impact A malicious peer acting as a state-sync source can crash a syncing node by sending a crafted `TrieChunk` whose proof contains two `Trie...

cargo

No PRs yet

ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation)

GHSA-pr64-jmmf-jp54 CVE-2026-58196 LOW 12 days ago

# Security Advisory: SSRF in remote MCP server authentication discovery **Severity:** High. **CWE:** CWE-918. **Affected:** ToolHive through the l...

go

No PRs yet

ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway

GHSA-pph6-vfjv-vpjw CVE-2026-54450 LOW 12 days ago

## Summary ToolHive's hand-rolled private/reserved-IP SSRF guard (`networking.IsPrivateIP` in `pkg/networking/utilities.go`) does not recognize th...

go

No PRs yet