Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 192 of 1013.
- HSEC-2026-0007 Denial of Service and Memory Exhaustion in aeson
- HSEC-2026-0006 Cabal deletes project source files during configure
- GO-2026-6237 Denial of service via malformed IPv4 packet in github.com/insomniacslk/dhcp
- GO-2026-6225 Credential leakage to untrusted hosts in github.com/chrismellard/docker-credential-acr-env
- GO-2026-6216 Cross-forge account takeover on login in codefloe.com/crowci/crow/v6
- GO-2026-5932 The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues
- GO-2026-5781 Uncatchable stack-overflow denial of service in rsc.io/pdf
- GO-2026-5051 Out-of-bounds read and panic in ReadDir in github.com/cloudsoda/go-smb2 and github.com/hirochachacha/go-smb2
- GO-2026-4950 Authorization bypass via double-encoded paths in github.com/valyala/fasthttp
- GHSA-xx6g-43w2-9g6g OliveTin's email argument makes compliance harder, enables log injection
- GHSA-xx64-wwv2-hcqq astral-tokio-tar: `unpack_in` can chmod arbitrary directories by following symlinks
- GHSA-xw57-23p8-9wc5 @asymmetric-effort/specifyjs: Localhost bypass incomplete (IPv6, 0.0.0.0, 127.x range)
- GHSA-xvg2-cgv6-6h7v netfoil: Incorrect block responses could lead to localhost traffic
- GHSA-xv8g-fj9h-6gmv Linkdave Missing Authentication on REST and WebSocket endpoints
- GHSA-xrmj-5g4g-8987 @dynatrace-oss/dynatrace-mcp-server has a workflow template injection via create_workflow_for_notification
- GHSA-xrmc-c5cg-rv7x SafeInstall agent guard shell parsing can miss raw package execution
- GHSA-xrf2-5r3p-5wgj libcrux: Panic in Signature Hint Decoding During Verification
- GHSA-xq7h-vwjp-5vrh @grackle-ai/powerline Runs Without Authentication by Default
- GHSA-xp3q-r38w-vgqm Relationship to GHSA-hgfg-j9pg-43xw That advisory concerned the administrator's live UI layout, and commit `63c7d5474` resolved it by re
- GHSA-xmv6-r34m-62p4 OpenClaw: Sandbox media fallback tmp symlink alias bypass allows host file reads outside sandboxRoot
- GHSA-xmj3-9gf7-h52w setuptools: Windows path escape via namespace_packages.txt during legacy wheel installation Description
- GHSA-xm96-gfjx-jcrc ORAS Java: Path traversal in pullArtifact via attacker-controlled org.opencontainers.image.title annotation
- GHSA-xjw9-38cr-6372 djust: A template binding inherits a context safety grant it never earned (XSS)
- GHSA-xhw7-jhmp-j62j `dnp3times` was removed from crates.io due to malicious code
- GHSA-xhj4-g6w8-2xjw go-zserio has Unbounded Memory Allocation for All Platforms
- GHSA-xg43-5579-qw6v adawolfa/isdoc: Uncontrolled resource consumption (decompression bomb) when reading untrusted ISDOCX or PDF files
- GHSA-xfx2-prg5-jq3g INSATutorat has an authorization bypass vulnerability in its /api/admin/* endpoints
- GHSA-xfqj-r5qw-8g4j Paperclip: Unauthenticated Access to Multiple API Endpoints in Authenticated Mode
- GHSA-xf7x-x43h-rpqh json_repair: Circular JSON Schema `$ref` causes unbounded CPU DoS
- GHSA-xf4v-w5x5-pv79 Spree: CSV Formula Injection in Customer Export
- GHSA-x9p2-77v6-6vhf FrankenPHP has delayed propagation of security fixes in upstream base images
- GHSA-x845-2f78-7v36 Blocky DNSSEC validation bypass and validation-cache scope pollution
- GHSA-x83w-23jp-g6pw OpenSearch Security plugin: DLS not applied on documents linked by has_child or has_parent relation
- GHSA-x82f-27x3-q89c OpenClaw's TOCTOU symlink race in writeFileWithinRoot could create or truncate files outside root boundaries
- GHSA-x7mm-9vvv-64w8 unhead: Streaming SSR `streamKey` injected into inline script without identifier validation
- GHSA-x7m8-jrm8-hpvx @eigenpal/docx-editor-react: CSS injection and print-time XSS via unescaped embedded font-family name
- GHSA-x5rw-q4pp-hg5g devalue: stringifyAsync can cause an unhandled rejection despite a caught returned promise
- GHSA-x5hg-x4gv-j98m OpenSearch has ineffective TLS certificate hostname verification
- GHSA-x5cx-w6p2-mxf2 Wagtail: Improper permission handling when copying snippets
- GHSA-x4hg-hfwf-p9mw @asymmetric-effort/nogginlessdom vulnerable to ReDoS via user-controlled regex in HTMLInputElement pattern validation
- GHSA-x462-jjpc-q4q4 PraisonAI: Cross-Origin Agent Execution via Hardcoded Wildcard CORS and Missing Authentication on AGUI Endpoint
- GHSA-x442-m7cc-hr92 kora-lib: Unrecognized Instruction Types Create Empty Stubs That Bypass Fee Payer Policy
- GHSA-x3ff-w252-2g7j StableLib Ed25519 Signature Malleability via Missing S < L Check
- GHSA-x3f4-v83f-7wp2 Authorizer: Password reset token theft and full auth token redirect via unvalidated redirect_uri
- GHSA-x287-5c68-36wp OpenWISP IPAM is multi-tenant: every `Subnet` belongs to an `organization`, and API access is scoped to the organizations a user belongs to.
- GHSA-wxjx-r2j2-96fx AVideo: Full-Read SSRF Through Unvalidated statsURL Parameter in plugin/Live/test.php
- GHSA-wx9m-wx4f-4cmg Malicious dropper in mistralai 2.4.6 PyPI package
- GHSA-wx3m-whqv-xv47 skillctl: Path traversal and symlink-follow in skillctl allow arbitrary file disclosure and deletion
- GHSA-wwhq-w58m-w29c Caddy CVE-2026-30852 Fix Bypass
- GHSA-wvr4-3wq4-gpc5 MCP Connect has unauthenticated remote OS command execution via /bridge endpoint
- GHSA-wrr4-782v-jhwh neotoma has tenant isolation gap in relationship query endpoints
- GHSA-wp87-mgvq-5j93 SurrealDB: USE NS/DB implicit creation bypasses DEFINE authorization
- GHSA-wjjj-24cx-f28g SurrealDB has unauthenticated remote DoS via malformed RPC `use` call
- GHSA-wfqx-gjrf-g28r Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag
- GHSA-wfgq-w7cq-qj7j mistral.rs Media Loader: Unauthenticated SSRF and arbitrary local file read via image_url
- GHSA-wf8q-wvv8-p8jf A critical identity spoofing vulnerability in MCPHub allows any unauthenticated user to impersonate any other user — including a
- GHSA-wf6j-7hvr-gr93 Hydra legacy target blacklist permits unsafe PyYAML loading
- GHSA-wf45-3gpw-vrqv `time_calibrators` was removed from crates.io due to malicious code
- GHSA-wf3x-273g-mvxv devalue: Sparse arrays emitted by uneval cause eager allocation when evaluated
- GHSA-wcr3-9x4c-f5gj Blnk has an API key authorization bypass in owner and scope enforcement
- GHSA-wcjx-v2wj-xg87 C2C CI utils is vulnerable to DoS via pyasn dependency (CVE-2026-30922)
- GHSA-wchh-9x6h-7f6p olm dependency deprecation: CVE-2022-39255 and CVE-2024-45193
- GHSA-wccx-j62j-r448 Fickling has `always_check_safety()` bypass: pickle.loads and _pickle.loads remain unhooked
- GHSA-w9x9-j56r-h98r @eeacms/volto-chatbot has Unauthenticated Danswer API Confused Deputy Proxy
- GHSA-w9j9-w4cp-6wgr OpenClaw Host-Exec Environment Variable Injection
- GHSA-w9hm-4m3m-fxmm ngx-extended-pdf-viewer bundles a version of pdf.js vulnerable to CVE-2026-16633
- GHSA-w9cg-v44m-4qv8 OpenClaw affected by BASH_ENV / ENV startup-file injection into spawned shell commands
- GHSA-w94c-4vhp-22gx @vitejs/plugin-rsc has a Denial of Service Vulnerability in React Server Components
- GHSA-w8hx-hqjv-vjcq Paperclip: Malicious skills able to exfiltrate and destroy all user data
- GHSA-w7j5-j98m-w679 OpenClaw has multiple E2E/test Dockerfiles that run all processes as root
- GHSA-w67g-5rqw-f597 Gorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key
- GHSA-w67g-2h6v-vjgq Phlex XSS protection bypass via attribute splatting, dynamic tags, and href values
- GHSA-w5pp-99ch-qj29 go-git: Malformed Git object data may cause panics or resource exhaustion
- GHSA-w5p8-4jcx-2j6r Improper check of an invariant resulting in incorrect bounds checks
- GHSA-w5cr-2qhr-jqc5 Cloudflare Agents has a Reflected Cross-Site Scripting (XSS) vulnerability in AI Playground site
- GHSA-w5c7-9qqw-6645 OpenClaw inter-session prompts could be treated as direct user instructions
- GHSA-w44r-93j7-qv28 The client records the server-selected key-exchange group per server name when it processes the ServerHello, before the server is authenticated.
- GHSA-w3hv-x4fp-6h6j @grackle-ai/server has Missing WebSocket Origin Header Validation
- GHSA-w2vw-w76x-qr89 Nx: OS command injection via git revisions and remote refs
- GHSA-w2j7-f3c6-g8cw Flask-Security has an Open Redirect issue
- GHSA-w2fm-25vw-vh7f mcp-handler has a tool response leak across concurrent client sessions ('Race Condition')
- GHSA-w2ch-4xgr-22ww Vikunja: Task relation deletion does not check read access to the other task, allowing cross-project relation removal
- GHSA-vwf3-4xxj-qg6h `mcpgateway.services.prompt_service.PromptService` renders user-supplied prompt templates using Jinja2's plain `Environment()` r
- GHSA-vv65-f55v-xm6g The default git executor used for all worktree operations spawns `git` through a shell, and the untrusted task **branch** name fl
- GHSA-vr7g-88fq-vhq3 Paperclip: OS Command Injection via Execution Workspace cleanupCommand
- GHSA-vqvg-86cc-cg83 OpenClaw: Mutating internal `/allowlist` chat commands missed `operator.admin` scope enforcement
- GHSA-vqqp-x5qm-5qp4 Maintainer assessment and remediation This report is accepted as a FastMCP credential-binding vulnerability.
- GHSA-vpp8-g58w-m8mp Twisted: Unauthenticated Remote Denial of Service in the Twisted HTTP/2 Server via Rapid Stream Reset
- GHSA-vp88-798v-h67f rustls: ECH rejection can expose buffered application data to authenticated outer server before `ech_required` alert
- GHSA-vjgj-42f6-7997 netfoil's optional seccomp sandboxing was not applied
- GHSA-vj8v-p5vw-m6v5 xrootd has path traversal in directory listing that allows access to the parent directory via trailing ".." pattern
- GHSA-vj2p-7pgw-g2wf Postiz App has a High-Severity SSRF Vulnerability via Next.js
- GHSA-vhvq-fv9f-wh4q LookupResources Cursor section tampering can crash SpiceDB process via tuple.MustParse panic
- GHSA-vhj5-x93p-67jw actix-web-lab has host header poisoning in redirect middleware can generate attacker-controlled absolute redirects
- GHSA-vh4v-2xq2-g5cg ORAS Go forwards registry credentials across registry redirects
- GHSA-vgrc-hq28-p3xp Hysteria has an authenticated UDP ACL bypass that enables localhost and private-network UDP SSRF
- GHSA-vg6v-j97m-h5xq Hi Novu team, Reporting an SSRF blocklist gap in the shared `validateUrlSsrf` guard.
- GHSA-vfvv-c25p-m7mm Potential use-after-free due to lack of panic safety in `InlineVec::clear` and `SerVec::clear`
- GHSA-vfpx-q664-h93m Auth0 WordPress Plugin has Insufficient Entropy in Cookie Encryption
- GHSA-vf5j-r2hw-2hrw OpenCloud Affected by Public Link Exploit