org.xwiki.contrib:discussions-server has Cross-Site Request Forgery (CSRF) issue that makes it possible to delete messages

GHSA-4j38-rw27-97gx CVE-2023-37465 MODERATE about 4 hours ago

### Impact It's possible to forge a request to delete a message. ### Patches The problem has been patched in version 2.0-rc-1 of Discussion Exten...

maven

No PRs yet

FrontMCP: Server-Side Request Forgery (SSRF) in the OpenAPI adapter spec-change poller

GHSA-8q49-2h5h-434x MODERATE 3 days ago

## Summary The OpenAPI adapter's spec-change **poller** (`OpenApiSpecPoller`) re-fetched the configured spec `url` on a timer using a raw global `...

npm

No PRs yet

kin-openapi openapi3filter: unauthenticated nil-pointer panic when validating a request against a `content` parameter whose media type has no schema

GHSA-jpcw-4wr7-c3vq MODERATE 3 days ago

| Field | Value | |---|---| | Ecosystem | Go | | Package | `github.com/getkin/kin-openapi` | | Affected versions | `<= 0.143.0` (introduced in `v0....

go

No PRs yet

Quasar: Prototype pollution in the extend() utility

GHSA-3r53-75j5-3g7j MODERATE 3 days ago

### Summary `quasar@2.20.1`, the latest published version at the time of testing, appears to be vulnerable to prototype pollution through the publ...

npm

No PRs yet

Oh My Posh: Terminal escape sequence injection via unsanitized prompt segment data

GHSA-fwjx-9p69-h25h MODERATE 3 days ago

### Summary Oh My Posh renders dynamic, potentially attacker-controlled strings (the current directory name, Git commit metadata, environment varia...

go

No PRs yet

Shescape: Home-directory disclosure in assignment context on Unix with Dash

GHSA-q53c-4prm-w95q MODERATE 3 days ago

### Impact This impacts users of Shescape on Unix systems that explicitly configure `shell` to Dash, or `true` when the default shell is Dash, usi...

npm

No PRs yet

Shescape: Path disclosure on Unix with Zsh

GHSA-6v4m-fw66-8r4x MODERATE 3 days ago

### Impact This impacts users of Shescape on Unix systems that explicitly configure `shell` to Zsh, or `true` when the default shell is Zsh, using...

npm

No PRs yet

OpenList: Arbitrary File Read via Path Prefix Confusion in Share Creation API

GHSA-86cx-wwf4-phq4 MODERATE 3 days ago

### Summary An authorization bypass vulnerability exists in the file sharing mechanism of `Openlist`. Due to a flawed, non-separator-aware path val...

go

No PRs yet

OpenList: Search metadata/count disclosure via Non-Separator-Aware Path Check in Bleve Search

GHSA-p6ph-3jx2-3337 MODERATE 3 days ago

### Summary An authorization bypass and information disclosure vulnerability exists in the search API of `Openlist`. Due to a non-separator-aware p...

go

No PRs yet

swift-nio-http2: Missing CR/LF/NUL validation in header values

GHSA-q3g2-m552-3r9c CVE-2026-64785 MODERATE 3 days ago

## Summary SwiftNIO HTTP/2 was missing validation on inbound HEADERS frames that let CR, LF, NUL, SP and other control characters reach an HTTP/1....

swift

No PRs yet

Cloudreve Admin.Read OAuth tokens can trigger server-side node test requests

GHSA-v6w6-358x-2433 MODERATE 3 days ago

## Summary Cloudreve exposes two admin node test endpoints under the `Admin.Read` OAuth scope. These endpoints accept attacker-controlled node def...

go

No PRs yet

Hubuum client library (Rust): Configured custom transports may be bypassed, exposing credentials and network traffic

GHSA-qqc3-94qv-7fw3 MODERATE 3 days ago

## Summary When an application configures hubuum_client with ClientBuilder::with_transport, several client operations still use the built-in reqwe...

cargo

No PRs yet

Hubuum client library (Rust): Authenticated requests may escape the configured base path through redirects

GHSA-f45q-w629-wr25 MODERATE 3 days ago

## Impact The built-in async and blocking clients used reqwest's default redirect policy. `BaseUrl` constrains the initial request to the configur...

cargo

No PRs yet

Kite Kubernetes proxy path traversal allows authenticated users to bypass RBAC and read cluster-wide resources

GHSA-c534-2w9c-x7fm MODERATE 3 days ago

## Summary Kite versions 0.6.9 through 0.14.0 authorize Kubernetes proxy requests against the pod or service identified by the original route para...

go

No PRs yet

Budibase: SSRF via bare fetch() in uploadUrl during AI table generation

GHSA-hfhx-w8p8-4hc7 MODERATE 3 days ago

# Budibase: SSRF via bare fetch() in uploadUrl during AI table generation ## Summary The `uploadUrl()` function in `packages/server/src/utilities...

npm

No PRs yet

Budibase: Account Enumeration via Login Lockout Response Differential

GHSA-cr7p-cr3q-h5cm MODERATE 3 days ago

## Summary The login lockout mechanism in Budibase creates an observable response discrepancy that allows unauthenticated attackers to enumerate v...

npm

No PRs yet

Budibase: OAuth2 Token Disclosure via Automation Test Results Broadcast to Other Builders

GHSA-gh4h-34gr-87r7 MODERATE 3 days ago

## Summary When an SSO-authenticated user tests an automation in the Budibase builder, their OAuth2 access token and refresh token are included in...

npm

No PRs yet

Cloudreve WOPI view sessions can write files and WOPI access token secret is ignored

GHSA-c3jm-gv5r-9wcp CVE-2026-62323 MODERATE 3 days ago

## Summary Cloudreve WOPI access tokens are generated as `<session-id>.<random-secret>`, but the WOPI middleware validates only the session id pre...

go

No PRs yet

Budibase: SSO OAuth2 Token Leakage via User Metadata Endpoints to Power-Role Users

GHSA-fcrw-f7gg-6g9f MODERATE 3 days ago

## Summary The `/api/users/metadata` and `/api/users/metadata/:id` endpoints in `@budibase/server` return full global user profiles to any user wi...

npm

No PRs yet

Budibase: Missing RBAC on GET /api/global/groups allows BASIC users to enumerate all tenant groups and role mappings

GHSA-4qcj-m5wp-jmf4 MODERATE 3 days ago

## Summary The `GET /api/global/groups` endpoint on the worker service has no role-based authorization middleware. Any authenticated user (includi...

npm

No PRs yet

OpenAM Reflected XSS in the OAuth2/OIDC `wap` consent page

GHSA-vqxv-6xrh-49cp CVE-2026-62280 MODERATE 3 days ago

### Description The OAuth2/OIDC consent page rendered for `display=wap` authorize requests reflected several request-derived values into the HTML r...

maven

No PRs yet

Open WebUI: Arena task endpoints can bypass underlying model access controls

GHSA-m3qf-58wf-w979 CVE-2026-59225 MODERATE 3 days ago

## Summary An authenticated non-admin user with read access to an arena wrapper model can reach a restricted underlying model through task endpoin...

pypi

No PRs yet

Open WebUI: Model meta.knowledge read-only file access can be upgraded to file write/delete

GHSA-2xwm-4h2q-ggfx CVE-2026-59212 MODERATE 3 days ago

## Summary Current `main` and `v0.9.6` still allow an authenticated user to turn read-only access to another user's file into write/delete access ...

pypi

No PRs yet

Open WebUI: `WEB_FETCH_FILTER_LIST` host allow/block filter bypassable via URL path and non-label-boundary matching

GHSA-qg3f-8x3j-ggf2 CVE-2026-59223 MODERATE 3 days ago

## Summary The administrator-configured `WEB_FETCH_FILTER_LIST` (the allow/block list applied to server-side web fetches: RAG URL ingestion, URL-t...

pypi

No PRs yet

webtransport-go: Memory Exhaustion Attack due to Buffering of Unknown Capsules

GHSA-g35j-m5xg-vh3q CVE-2026-57497 MODERATE 3 days ago

## Summary An attacker can cause excessive memory allocation in webtransport-go by sending an unknown WebTransport capsule with a large payload. T...

go

No PRs yet

Cloudreve: Broken Access Control in file event stream: a single-file share recipient is subscribed to the owner's parent folder and receives activity events for unshared siblings

GHSA-w8x7-h2px-xmq8 CVE-2026-55499 MODERATE 3 days ago

## Summary When an authenticated recipient of a **single-file** share opens the file event stream (`GET /api/v4/file/events?uri=<share-root>`), C...

go

No PRs yet

Cloudreve: Denial of Service - Image decompression / pixel bomb in thumbnail & avatar decoding crashes the server

GHSA-g9j2-8w95-3vwv CVE-2026-55497 MODERATE 3 days ago

## Summary Cloudreve's built-in image processor decodes user-supplied images with Go's standard-library decoders (`image/png`, `image/jpeg`, `imag...

go

No PRs yet

Cloudreve: Information Exposure in `GET /api/v4/user/search`: `SearchActive` omits the active-status predicate, leaking inactive/banned account emails

GHSA-8r7f-r8hj-r3rv CVE-2026-55496 MODERATE 3 days ago

## Summary `GET /api/v4/user/search` is available to any logged-in user. The service calls `userClient.SearchActive`, but despite its name that m...

go

No PRs yet

Cloudreve: Path Traversal in WOPI PUT_RELATIVE Allows Arbitrary File Creation in Owner Account

GHSA-49h3-cwhj-4737 CVE-2026-55495 MODERATE 3 days ago

## Summary Cloudreve's WOPI `PUT_RELATIVE` handler treats `X-WOPI-SuggestedTarget` as a path, not a filename. It splits the header on `/` and joi...

go

No PRs yet

Open WebUI: /api/v1/channels/{id}/members exposes full user model including sensitive credentials

GHSA-gh7p-78x6-jw6m CVE-2026-59222 MODERATE 3 days ago

### Summary The channel members endpoint serializes and returns **full user models** for channel participants, including settings objects. A norma...

pypi

No PRs yet

Open WebUI: Upload `metadata.knowledge_id` bypasses the knowledge-base write-access check (read-only users can add files to KB)

GHSA-7r7x-gjvr-448g CVE-2026-59217 MODERATE 3 days ago

# Open WebUI upload metadata can add files to knowledge bases without write permission ## Summary Open WebUI's file upload background processing ...

pypi

No PRs yet

Open WebUI: POST /api/v1/images/edit bypasses the global image-edit switch and the per-user image-generation permission

GHSA-rqj7-6wrp-6g2g CVE-2026-59227 MODERATE 3 days ago

## Summary `POST /api/v1/images/edit` performed no authorization beyond requiring a verified account. Every other image-editing surface in Open We...

pypi

No PRs yet

Open WebUI: ReDoS in skill-mention regexes causes whole-instance DoS on default config

GHSA-ffpj-xv5c-p3gw CVE-2026-59220 MODERATE 3 days ago

## Summary Two regexes in `backend/open_webui/utils/middleware.py` that parse `<$skillId|label>` skill-mention tags backtrack in O(n²) on input tha...

pypi

No PRs yet

Open WebUI: Account enumeration via observable login timing discrepancy

GHSA-7rw5-9f7q-xj36 CVE-2026-59218 MODERATE 3 days ago

### Summary The `/api/v1/auths/signin` endpoint leaked whether an email address belonged to a registered account through a response-time side chan...

pypi

No PRs yet

Netty: Memory Leak in DNS Record Decoder via Malformed Domain Names

GHSA-mfg7-5gfp-c4w3 MODERATE 3 days ago

### Summary A memory leak can be caused in Netty's DNS codec by sending malicious DNS packets containing invalid domain names. Because the leak occ...

maven

No PRs yet

cel-go: JSON Private Fields Exposed via NativeTypes and ParseStructTag

GHSA-gcjh-h69q-9w9g MODERATE 3 days ago

The function `ext.NativeTypes(ParseStructTag("json"))` does not honour the `encoding/json` skip directive `json:"-"`. Fields tagged `json:"-"` are ...

go

No PRs yet

Russh: client wrong-length X25519 `clone_from_slice` panic (pre-auth DoS)

GHSA-g9hv-x236-4qp3 MODERATE 3 days ago

### Summary A malicious SSH server can crash a `russh` client session with a single malformed key-exchange reply, causing a pre-authentication Deni...

cargo

No PRs yet

Russh: Post-auth remote panic via pty-req with more than 130 terminal-mode records

GHSA-cqjc-rmpq-xprq MODERATE 3 days ago

## Summary A post-authentication denial-of-service panic in `russh` 0.62.2 (commit `c4be19f1915c8682f4615c3fd50008512b474491`, current default bra...

cargo

No PRs yet

Russh: Pre-auth remote panic via all-zero Curve25519 peer public value (encode_mpint OOB)

GHSA-5xvq-cp9x-6p6r MODERATE 3 days ago

A pre-authentication denial-of-service panic in `russh` 0.62.2 (commit `c4be19f1915c8682f4615c3fd50008512b474491`, current default branch `main` as...

cargo

No PRs yet

@fastify/static vulnerable to Authorization Bypass via Non-Canonical URL Paths

GHSA-8pvw-jcv7-9cmj CVE-2026-7120 MODERATE 3 days ago

### Impact `@fastify/static` evaluates the `allowedPath` callback before normalizing dot segments and duplicate slashes in the pathname used for f...

npm

No PRs yet

node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection

GHSA-r292-9mhp-454m MODERATE 3 days ago

## Summary `node-tar` (npm `tar`) contains an uncontrolled-recursion stack-exhaustion DoS in the internal `mapHas` helper used by `filesFilter`. Wh...

npm

No PRs yet

Mongoose: Prototype pollution in mongoose update casting via __proto__-prefixed dotted path (Schema._getSchema/path getter)

GHSA-664h-wqgq-64gw MODERATE 3 days ago

### Impact _What kind of vulnerability is it? Who is impacted?_ Prototype pollution in update casting: passing a user-controlled update to a Mongo...

npm

No PRs yet

@backstage/plugin-auth-backend: Unauthenticated OAuth account takeover via `redirect_uri` allowlist bypass

GHSA-38hq-7x33-php4 MODERATE 3 days ago

### Impact The allowlist matching used by the experimental dynamic client registration and client ID metadata document (CIMD) features in `@backsta...

npm

No PRs yet

ImageMagick: Integer Overflow in JNX decoder causes heap buffer over-write when processing extremly large files on 32-bit builds

GHSA-h22j-f9xw-xjjm CVE-2026-62946 MODERATE 3 days ago

When processing an extremely large JNX file on 32-bit platforms an integer overflow will happen that can cause a heap buffer over-write.

nuget

No PRs yet

ImageMagick: Heap Buffer Over-Write in fx operation

GHSA-422r-8c97-xcg4 CVE-2026-62363 MODERATE 3 days ago

A heap buffer over-write can occur in the fx operation by passing a crafted argument.

nuget

No PRs yet

ImageMagick: Heap Buffer Over-Write in morphology operation when an invalid kernel is provided

GHSA-f5m7-cqgw-8hm7 CVE-2026-62343 MODERATE 3 days ago

An invalid kernel can cause a heap buffer over-write when performing a morphology operation with a user supplied kernel.

nuget

No PRs yet

PyMdown Extensions: Path traversal in the b64 extension lets <img src> read files outside base_path

GHSA-9xwg-3r6f-jcx2 CVE-2026-61632 MODERATE 3 days ago

### Summary The `b64` extension inlines images referenced by `<img src="...">` as base64 data URIs. When resolving the `src` path it joins it onto...

pypi

No PRs yet

Trix: Stored XSS via HTMLParser attribute injection on paste

GHSA-53g2-mvcc-q9x3 MODERATE 3 days ago

### Impact The Trix editor, in versions prior to 2.1.18, is vulnerable to XSS when crafted HTML is pasted into the editor. The `HTMLParser` proces...

npm rubygems

No PRs yet

Microsoft Kiota: Path traversal in generated plugin manifest static_template.file reference (percent-encoding bypass)

GHSA-p5rm-jg5c-8c77 MODERATE 3 days ago

### Impact Kiota generates AI plugin manifests from an OpenAPI description. When the description contains an `x-ai-capabilities` response semantic...

nuget

No PRs yet

Valibot: record() issue paths can make flatten() throw for inherited Object property names

GHSA-5qjj-4xww-7phc CVE-2026-59952 MODERATE 3 days ago

## Summary `valibot` 1.4.1 can throw a `TypeError` inside its `flatten()` helper when validation issues contain attacker-controlled object keys su...

npm

No PRs yet