# Vulnerabilities published in 2026


- [HSEC-2026-0007](https://insights.sbomify.com/HSEC-2026-0007/): Denial of Service and Memory Exhaustion in aeson (not scored)
- [HSEC-2026-0006](https://insights.sbomify.com/HSEC-2026-0006/): Cabal deletes project source files during configure (not scored)
- [GO-2026-6237](https://insights.sbomify.com/GO-2026-6237/): Denial of service via malformed IPv4 packet in github.com/insomniacslk/dhcp (not scored)
- [GO-2026-6225](https://insights.sbomify.com/GO-2026-6225/): Credential leakage to untrusted hosts in github.com/chrismellard/docker-credential-acr-env (not scored)
- [GO-2026-6216](https://insights.sbomify.com/GO-2026-6216/): Cross-forge account takeover on login in codefloe.com/crowci/crow/v6 (not scored)
- [GO-2026-5932](https://insights.sbomify.com/GO-2026-5932/): The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues (not scored)
- [GO-2026-5781](https://insights.sbomify.com/GO-2026-5781/): Uncatchable stack-overflow denial of service in rsc.io/pdf (not scored)
- [GO-2026-5051](https://insights.sbomify.com/GO-2026-5051/): Out-of-bounds read and panic in ReadDir in github.com/cloudsoda/go-smb2 and github.com/hirochachacha/go-smb2 (not scored)
- [GO-2026-4950](https://insights.sbomify.com/GO-2026-4950/): Authorization bypass via double-encoded paths in github.com/valyala/fasthttp (not scored)
- [GHSA-xx6g-43w2-9g6g](https://insights.sbomify.com/GHSA-xx6g-43w2-9g6g/): OliveTin's email argument makes compliance harder, enables log injection (not scored)
- [GHSA-xx64-wwv2-hcqq](https://insights.sbomify.com/GHSA-xx64-wwv2-hcqq/): astral-tokio-tar: `unpack_in` can chmod arbitrary directories by following symlinks (not scored)
- [GHSA-xw57-23p8-9wc5](https://insights.sbomify.com/GHSA-xw57-23p8-9wc5/): @asymmetric-effort/specifyjs: Localhost bypass incomplete (IPv6, 0.0.0.0, 127.x range) (not scored)
- [GHSA-xvg2-cgv6-6h7v](https://insights.sbomify.com/GHSA-xvg2-cgv6-6h7v/): netfoil: Incorrect block responses could lead to localhost traffic (not scored)
- [GHSA-xv8g-fj9h-6gmv](https://insights.sbomify.com/GHSA-xv8g-fj9h-6gmv/): Linkdave Missing Authentication on REST and WebSocket endpoints (not scored)
- [GHSA-xrmj-5g4g-8987](https://insights.sbomify.com/GHSA-xrmj-5g4g-8987/): @dynatrace-oss/dynatrace-mcp-server has a workflow template injection via create_workflow_for_notification (not scored)
- [GHSA-xrmc-c5cg-rv7x](https://insights.sbomify.com/GHSA-xrmc-c5cg-rv7x/): SafeInstall agent guard shell parsing can miss raw package execution (not scored)
- [GHSA-xrf2-5r3p-5wgj](https://insights.sbomify.com/GHSA-xrf2-5r3p-5wgj/): libcrux: Panic in Signature Hint Decoding During Verification (not scored)
- [GHSA-xq7h-vwjp-5vrh](https://insights.sbomify.com/GHSA-xq7h-vwjp-5vrh/): @grackle-ai/powerline Runs Without Authentication by Default (not scored)
- [GHSA-xp3q-r38w-vgqm](https://insights.sbomify.com/GHSA-xp3q-r38w-vgqm/): Relationship to GHSA-hgfg-j9pg-43xw That advisory concerned the administrator's live UI layout, and commit `63c7d5474` resolved it by re (not scored)
- [GHSA-xmv6-r34m-62p4](https://insights.sbomify.com/GHSA-xmv6-r34m-62p4/): OpenClaw: Sandbox media fallback tmp symlink alias bypass allows host file reads outside sandboxRoot (not scored)
- [GHSA-xmj3-9gf7-h52w](https://insights.sbomify.com/GHSA-xmj3-9gf7-h52w/): setuptools: Windows path escape via namespace_packages.txt during legacy wheel installation Description (not scored)
- [GHSA-xm96-gfjx-jcrc](https://insights.sbomify.com/GHSA-xm96-gfjx-jcrc/): ORAS Java: Path traversal in pullArtifact via attacker-controlled org.opencontainers.image.title annotation (not scored)
- [GHSA-xjw9-38cr-6372](https://insights.sbomify.com/GHSA-xjw9-38cr-6372/): djust: A template binding inherits a context safety grant it never earned (XSS) (not scored)
- [GHSA-xhw7-jhmp-j62j](https://insights.sbomify.com/GHSA-xhw7-jhmp-j62j/): `dnp3times` was removed from crates.io due to malicious code (not scored)
- [GHSA-xhj4-g6w8-2xjw](https://insights.sbomify.com/GHSA-xhj4-g6w8-2xjw/): go-zserio has Unbounded Memory Allocation for All Platforms (not scored)
- [GHSA-xg43-5579-qw6v](https://insights.sbomify.com/GHSA-xg43-5579-qw6v/): adawolfa/isdoc: Uncontrolled resource consumption (decompression bomb) when reading untrusted ISDOCX or PDF files (not scored)
- [GHSA-xfx2-prg5-jq3g](https://insights.sbomify.com/GHSA-xfx2-prg5-jq3g/): INSATutorat has an authorization bypass vulnerability in its /api/admin/* endpoints (not scored)
- [GHSA-xfqj-r5qw-8g4j](https://insights.sbomify.com/GHSA-xfqj-r5qw-8g4j/): Paperclip: Unauthenticated Access to Multiple API Endpoints in Authenticated Mode (not scored)
- [GHSA-xf7x-x43h-rpqh](https://insights.sbomify.com/GHSA-xf7x-x43h-rpqh/): json_repair: Circular JSON Schema `$ref` causes unbounded CPU DoS (not scored)
- [GHSA-xf4v-w5x5-pv79](https://insights.sbomify.com/GHSA-xf4v-w5x5-pv79/): Spree: CSV Formula Injection in Customer Export (not scored)
- [GHSA-x9p2-77v6-6vhf](https://insights.sbomify.com/GHSA-x9p2-77v6-6vhf/): FrankenPHP has delayed propagation of security fixes in upstream base images (not scored)
- [GHSA-x845-2f78-7v36](https://insights.sbomify.com/GHSA-x845-2f78-7v36/): Blocky DNSSEC validation bypass and validation-cache scope pollution (not scored)
- [GHSA-x83w-23jp-g6pw](https://insights.sbomify.com/GHSA-x83w-23jp-g6pw/): OpenSearch Security plugin: DLS not applied on documents linked by has_child or has_parent relation (not scored)
- [GHSA-x82f-27x3-q89c](https://insights.sbomify.com/GHSA-x82f-27x3-q89c/): OpenClaw's TOCTOU symlink race in writeFileWithinRoot could create or truncate files outside root boundaries (not scored)
- [GHSA-x7mm-9vvv-64w8](https://insights.sbomify.com/GHSA-x7mm-9vvv-64w8/): unhead: Streaming SSR `streamKey` injected into inline script without identifier validation (not scored)
- [GHSA-x7m8-jrm8-hpvx](https://insights.sbomify.com/GHSA-x7m8-jrm8-hpvx/): @eigenpal/docx-editor-react: CSS injection and print-time XSS via unescaped embedded font-family name (not scored)
- [GHSA-x5rw-q4pp-hg5g](https://insights.sbomify.com/GHSA-x5rw-q4pp-hg5g/): devalue: stringifyAsync can cause an unhandled rejection despite a caught returned promise (not scored)
- [GHSA-x5hg-x4gv-j98m](https://insights.sbomify.com/GHSA-x5hg-x4gv-j98m/): OpenSearch has ineffective TLS certificate hostname verification (not scored)
- [GHSA-x5cx-w6p2-mxf2](https://insights.sbomify.com/GHSA-x5cx-w6p2-mxf2/): Wagtail: Improper permission handling when copying snippets (not scored)
- [GHSA-x4hg-hfwf-p9mw](https://insights.sbomify.com/GHSA-x4hg-hfwf-p9mw/): @asymmetric-effort/nogginlessdom vulnerable to ReDoS via user-controlled regex in HTMLInputElement pattern validation (not scored)
- [GHSA-x462-jjpc-q4q4](https://insights.sbomify.com/GHSA-x462-jjpc-q4q4/): PraisonAI: Cross-Origin Agent Execution via Hardcoded Wildcard CORS and Missing Authentication on AGUI Endpoint (not scored)
- [GHSA-x442-m7cc-hr92](https://insights.sbomify.com/GHSA-x442-m7cc-hr92/): kora-lib: Unrecognized Instruction Types Create Empty Stubs That Bypass Fee Payer Policy (not scored)
- [GHSA-x3ff-w252-2g7j](https://insights.sbomify.com/GHSA-x3ff-w252-2g7j/): StableLib Ed25519 Signature Malleability via Missing S < L Check (not scored)
- [GHSA-x3f4-v83f-7wp2](https://insights.sbomify.com/GHSA-x3f4-v83f-7wp2/): Authorizer: Password reset token theft and full auth token redirect via unvalidated redirect_uri (not scored)
- [GHSA-x287-5c68-36wp](https://insights.sbomify.com/GHSA-x287-5c68-36wp/): OpenWISP IPAM is multi-tenant: every `Subnet` belongs to an `organization`, and API access is scoped to the organizations a user belongs to. (not scored)
- [GHSA-wxjx-r2j2-96fx](https://insights.sbomify.com/GHSA-wxjx-r2j2-96fx/): AVideo: Full-Read SSRF Through Unvalidated statsURL Parameter in plugin/Live/test.php (not scored)
- [GHSA-wx9m-wx4f-4cmg](https://insights.sbomify.com/GHSA-wx9m-wx4f-4cmg/): Malicious dropper in mistralai 2.4.6 PyPI package (not scored)
- [GHSA-wx3m-whqv-xv47](https://insights.sbomify.com/GHSA-wx3m-whqv-xv47/): skillctl: Path traversal and symlink-follow in skillctl allow arbitrary file disclosure and deletion (not scored)
- [GHSA-wwhq-w58m-w29c](https://insights.sbomify.com/GHSA-wwhq-w58m-w29c/): Caddy CVE-2026-30852 Fix Bypass (not scored)
- [GHSA-wvr4-3wq4-gpc5](https://insights.sbomify.com/GHSA-wvr4-3wq4-gpc5/): MCP Connect has unauthenticated remote OS command execution via /bridge endpoint (not scored)
- [GHSA-wrr4-782v-jhwh](https://insights.sbomify.com/GHSA-wrr4-782v-jhwh/): neotoma has tenant isolation gap in relationship query endpoints (not scored)
- [GHSA-wp87-mgvq-5j93](https://insights.sbomify.com/GHSA-wp87-mgvq-5j93/): SurrealDB: USE NS/DB implicit creation bypasses DEFINE authorization (not scored)
- [GHSA-wjjj-24cx-f28g](https://insights.sbomify.com/GHSA-wjjj-24cx-f28g/): SurrealDB has unauthenticated remote DoS via malformed RPC `use` call (not scored)
- [GHSA-wfqx-gjrf-g28r](https://insights.sbomify.com/GHSA-wfqx-gjrf-g28r/): Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag (not scored)
- [GHSA-wfgq-w7cq-qj7j](https://insights.sbomify.com/GHSA-wfgq-w7cq-qj7j/): mistral.rs Media Loader: Unauthenticated SSRF and arbitrary local file read via image_url (not scored)
- [GHSA-wf8q-wvv8-p8jf](https://insights.sbomify.com/GHSA-wf8q-wvv8-p8jf/): A critical identity spoofing vulnerability in MCPHub allows any unauthenticated user to impersonate any other user — including a (not scored)
- [GHSA-wf6j-7hvr-gr93](https://insights.sbomify.com/GHSA-wf6j-7hvr-gr93/): Hydra legacy target blacklist permits unsafe PyYAML loading (not scored)
- [GHSA-wf45-3gpw-vrqv](https://insights.sbomify.com/GHSA-wf45-3gpw-vrqv/): `time_calibrators` was removed from crates.io due to malicious code (not scored)
- [GHSA-wf3x-273g-mvxv](https://insights.sbomify.com/GHSA-wf3x-273g-mvxv/): devalue: Sparse arrays emitted by uneval cause eager allocation when evaluated (not scored)
- [GHSA-wcr3-9x4c-f5gj](https://insights.sbomify.com/GHSA-wcr3-9x4c-f5gj/): Blnk has an API key authorization bypass in owner and scope enforcement (not scored)
- [GHSA-wcjx-v2wj-xg87](https://insights.sbomify.com/GHSA-wcjx-v2wj-xg87/): C2C CI utils is vulnerable to DoS via pyasn dependency (CVE-2026-30922) (not scored)
- [GHSA-wchh-9x6h-7f6p](https://insights.sbomify.com/GHSA-wchh-9x6h-7f6p/): olm dependency deprecation: CVE-2022-39255 and CVE-2024-45193 (not scored)
- [GHSA-wccx-j62j-r448](https://insights.sbomify.com/GHSA-wccx-j62j-r448/): Fickling has `always_check_safety()` bypass: pickle.loads and _pickle.loads remain unhooked (not scored)
- [GHSA-w9x9-j56r-h98r](https://insights.sbomify.com/GHSA-w9x9-j56r-h98r/): @eeacms/volto-chatbot has Unauthenticated Danswer API Confused Deputy Proxy (not scored)
- [GHSA-w9j9-w4cp-6wgr](https://insights.sbomify.com/GHSA-w9j9-w4cp-6wgr/): OpenClaw Host-Exec Environment Variable Injection (not scored)
- [GHSA-w9hm-4m3m-fxmm](https://insights.sbomify.com/GHSA-w9hm-4m3m-fxmm/): ngx-extended-pdf-viewer bundles a version of pdf.js vulnerable to CVE-2026-16633 (not scored)
- [GHSA-w9cg-v44m-4qv8](https://insights.sbomify.com/GHSA-w9cg-v44m-4qv8/): OpenClaw affected by BASH_ENV / ENV startup-file injection into spawned shell commands (not scored)
- [GHSA-w94c-4vhp-22gx](https://insights.sbomify.com/GHSA-w94c-4vhp-22gx/): @vitejs/plugin-rsc has a Denial of Service Vulnerability in React Server Components (not scored)
- [GHSA-w8hx-hqjv-vjcq](https://insights.sbomify.com/GHSA-w8hx-hqjv-vjcq/): Paperclip: Malicious skills able to exfiltrate and destroy all user data (not scored)
- [GHSA-w7j5-j98m-w679](https://insights.sbomify.com/GHSA-w7j5-j98m-w679/): OpenClaw has multiple E2E/test Dockerfiles that run all processes as root (not scored)
- [GHSA-w67g-5rqw-f597](https://insights.sbomify.com/GHSA-w67g-5rqw-f597/): Gorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key (not scored)
- [GHSA-w67g-2h6v-vjgq](https://insights.sbomify.com/GHSA-w67g-2h6v-vjgq/): Phlex XSS protection bypass via attribute splatting, dynamic tags, and href values (not scored)
- [GHSA-w5pp-99ch-qj29](https://insights.sbomify.com/GHSA-w5pp-99ch-qj29/): go-git: Malformed Git object data may cause panics or resource exhaustion (not scored)
- [GHSA-w5p8-4jcx-2j6r](https://insights.sbomify.com/GHSA-w5p8-4jcx-2j6r/): Improper check of an invariant resulting in incorrect bounds checks (not scored)
- [GHSA-w5cr-2qhr-jqc5](https://insights.sbomify.com/GHSA-w5cr-2qhr-jqc5/): Cloudflare Agents has a Reflected Cross-Site Scripting (XSS) vulnerability in AI Playground site (not scored)
- [GHSA-w5c7-9qqw-6645](https://insights.sbomify.com/GHSA-w5c7-9qqw-6645/): OpenClaw inter-session prompts could be treated as direct user instructions (not scored)
- [GHSA-w44r-93j7-qv28](https://insights.sbomify.com/GHSA-w44r-93j7-qv28/): The client records the server-selected key-exchange group per server name when it processes the ServerHello, before the server is authenticated. (not scored)
- [GHSA-w3hv-x4fp-6h6j](https://insights.sbomify.com/GHSA-w3hv-x4fp-6h6j/): @grackle-ai/server has Missing WebSocket Origin Header Validation (not scored)
- [GHSA-w2vw-w76x-qr89](https://insights.sbomify.com/GHSA-w2vw-w76x-qr89/): Nx: OS command injection via git revisions and remote refs (not scored)
- [GHSA-w2j7-f3c6-g8cw](https://insights.sbomify.com/GHSA-w2j7-f3c6-g8cw/): Flask-Security has an Open Redirect issue (not scored)
- [GHSA-w2fm-25vw-vh7f](https://insights.sbomify.com/GHSA-w2fm-25vw-vh7f/): mcp-handler has a tool response leak across concurrent client sessions ('Race Condition') (not scored)
- [GHSA-w2ch-4xgr-22ww](https://insights.sbomify.com/GHSA-w2ch-4xgr-22ww/): Vikunja: Task relation deletion does not check read access to the other task, allowing cross-project relation removal (not scored)
- [GHSA-vwf3-4xxj-qg6h](https://insights.sbomify.com/GHSA-vwf3-4xxj-qg6h/): `mcpgateway.services.prompt_service.PromptService` renders user-supplied prompt templates using Jinja2's plain `Environment()` r (not scored)
- [GHSA-vv65-f55v-xm6g](https://insights.sbomify.com/GHSA-vv65-f55v-xm6g/): The default git executor used for all worktree operations spawns `git` through a shell, and the untrusted task **branch** name fl (not scored)
- [GHSA-vr7g-88fq-vhq3](https://insights.sbomify.com/GHSA-vr7g-88fq-vhq3/): Paperclip: OS Command Injection via Execution Workspace cleanupCommand (not scored)
- [GHSA-vqvg-86cc-cg83](https://insights.sbomify.com/GHSA-vqvg-86cc-cg83/): OpenClaw: Mutating internal `/allowlist` chat commands missed `operator.admin` scope enforcement (not scored)
- [GHSA-vqqp-x5qm-5qp4](https://insights.sbomify.com/GHSA-vqqp-x5qm-5qp4/): Maintainer assessment and remediation This report is accepted as a FastMCP credential-binding vulnerability. (not scored)
- [GHSA-vpp8-g58w-m8mp](https://insights.sbomify.com/GHSA-vpp8-g58w-m8mp/): Twisted: Unauthenticated Remote Denial of Service in the Twisted HTTP/2 Server via Rapid Stream Reset (not scored)
- [GHSA-vp88-798v-h67f](https://insights.sbomify.com/GHSA-vp88-798v-h67f/): rustls: ECH rejection can expose buffered application data to authenticated outer server before `ech_required` alert (not scored)
- [GHSA-vjgj-42f6-7997](https://insights.sbomify.com/GHSA-vjgj-42f6-7997/): netfoil's optional seccomp sandboxing was not applied (not scored)
- [GHSA-vj8v-p5vw-m6v5](https://insights.sbomify.com/GHSA-vj8v-p5vw-m6v5/): xrootd has path traversal in directory listing that allows access to the parent directory via trailing ".." pattern (not scored)
- [GHSA-vj2p-7pgw-g2wf](https://insights.sbomify.com/GHSA-vj2p-7pgw-g2wf/): Postiz App has a High-Severity SSRF Vulnerability via Next.js (not scored)
- [GHSA-vhvq-fv9f-wh4q](https://insights.sbomify.com/GHSA-vhvq-fv9f-wh4q/): LookupResources Cursor section tampering can crash SpiceDB process via tuple.MustParse panic (not scored)
- [GHSA-vhj5-x93p-67jw](https://insights.sbomify.com/GHSA-vhj5-x93p-67jw/): actix-web-lab has host header poisoning in redirect middleware can generate attacker-controlled absolute redirects (not scored)
- [GHSA-vh4v-2xq2-g5cg](https://insights.sbomify.com/GHSA-vh4v-2xq2-g5cg/): ORAS Go forwards registry credentials across registry redirects (not scored)
- [GHSA-vgrc-hq28-p3xp](https://insights.sbomify.com/GHSA-vgrc-hq28-p3xp/): Hysteria has an authenticated UDP ACL bypass that enables localhost and private-network UDP SSRF (not scored)
- [GHSA-vg6v-j97m-h5xq](https://insights.sbomify.com/GHSA-vg6v-j97m-h5xq/): Hi Novu team, Reporting an SSRF blocklist gap in the shared `validateUrlSsrf` guard. (not scored)
- [GHSA-vfvv-c25p-m7mm](https://insights.sbomify.com/GHSA-vfvv-c25p-m7mm/): Potential use-after-free due to lack of panic safety in `InlineVec::clear` and `SerVec::clear` (not scored)
- [GHSA-vfpx-q664-h93m](https://insights.sbomify.com/GHSA-vfpx-q664-h93m/): Auth0 WordPress Plugin has Insufficient Entropy in Cookie Encryption (not scored)
- [GHSA-vf5j-r2hw-2hrw](https://insights.sbomify.com/GHSA-vf5j-r2hw-2hrw/): OpenCloud Affected by Public Link Exploit (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/192/