Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 193 of 1013.
- GHSA-vcvr-r3jv-pc5j Next.js: Remote Code Execution in next/og ImageResponse
- GHSA-vccx-p757-pv6h mo has a XSS via inline SVG script tags in Markdown rendering
- GHSA-v853-p72q-4cfw Quart leaks raw request body (incl. plaintext passwords) to stdout via stray debug print in Body.__await__
- GHSA-v7qw-hx66-4w9x netbox-data-flows has stored XSS in ObjectAlias names rendered inside DataFlow tables
- GHSA-v6wj-c83f-v46x @profullstack/mcp-server vulnerable to OS Command Injection in domain_lookup Module
- GHSA-v5mh-h5hx-7v92 When the kube-router routing controller starts (`--run-router`), it binds the GoBGP gRPC management server to the node's primary
- GHSA-v52w-28xh-v562 Kozou compiles a PostgreSQL schema into an Admin UI, a REST API, and an MCP server.
- GHSA-v457-wxvj-p9w9 @vitejs/plugin-rsc has a Denial of Service with React Server Components
- GHSA-v3rj-xjv7-4jmq smol-toml: Denial of Service via TOML documents containing thousands of consecutive commented lines
- GHSA-v2jf-442r-6mjh nebula-mesh: Signed-poll nonce LRU is in-memory and bounded; replay survives restart + eviction
- GHSA-rxmp-8h9v-56cx NetBird has Race Condition on UpdateUser Function, Resulting in Privilege Escalation From Admin to Owner
- GHSA-rwr8-xrpw-9qf5 solspace/craft-freeform Exposed to Known Axios Vulnerabilities via Precompiled Assets
- GHSA-rvr2-r3pv-5m4p oneshot has potential Use After Free when used asynchronously
- GHSA-rr55-jp92-8wp2 claude-faf-mcp has an arbitrary local file read/write via unconfined `path` argument in FAF tools
- GHSA-rq7w-g337-39qq When running `nuxt dev`, Nuxt registers an unauthenticated route at `/.well-known/appspecific/com.chrome.devtools.json` that ret
- GHSA-rpj2-4hq8-938g VCR.py: Arbitrary code execution via unsafe YAML deserialization of cassette files
- GHSA-rp7v-4384-hfrp k8sGPT has Prompt Injection through its k8sGPT-Operator
- GHSA-rp72-5v5q-2446 @cardano402/mcp-server missing spending limits, LAN-exposed HTTP transport, and SSRF via catalog.server.url
- GHSA-rm67-g9ch-vxff Poweradmin: Broken access control (IDOR): any zone owner can modify DNS records in zones they do not own
- GHSA-rjwr-m7qx-3fjr oapi-codegen: OpenAPI Server Description Escapes Generated Go Comment and Injects Executable Code
- GHSA-rjvx-x5h2-6px5 Gitea: API Fork Endpoint Authorization Bypass Allows Organization Members to Bypass Repository Creation Restrictions
- GHSA-rjr4-v43m-pxq6 Triton VM Soundness Vulnerability due to Improper Sampling of Randomness
- GHSA-rhq6-9rgh-v45c Pterodactyl Wings: Chmod operation can be used to change permissions of files outside of the server container
- GHSA-rhfx-m35p-ff5j `IterMut` violates Stacked Borrows by invalidating internal pointer
- GHSA-rgwj-5xj2-c3m3 MySQL2: Unbounded zlib inflate in compressed MySQL protocol handler allows decompression-bomb DoS
- GHSA-rgqc-3x5p-6gwg postgres-protocol: Panic decoding a malformed `hstore` value allows denial of service
- GHSA-rf84-wr5g-m3rp CAPM3 vulnerable to Cross-Namespace resource access
- GHSA-rchv-x836-w7xp OpenClaw's dashboard leaked gateway auth material via browser URL/query and localStorage
- GHSA-rc6v-5rmx-w5mv arnika is affected by medium-severity issues in UDP rotation, PQC handling, and KMS TLS
- GHSA-r9w8-h9r3-54w4 devalue: Custom ArrayBuffer revivers can bypass typed-array allocation validation
- GHSA-r4xh-jqrq-34v2 smol-toml: Quadratic-time parse() from parseKey rescanning to end of document on each key line
- GHSA-r4v7-6wcg-ghj5 FileBrowser: Missing Rate Limiting on Authentication Endpoint Enables Brute Force Attacks
- GHSA-r48f-3986-4f9c fickling modules linecache, difflib and gc are missing from the unsafe modules blocklist
- GHSA-r44w-v6gf-x3p6 pyLoad has an authentication bypass in API key validation (check_apikey cache)
- GHSA-r3ph-w7gj-g6xm js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sources
- GHSA-r294-2894-92j3 OpenClaw has stored XSS in exported session HTML viewer via markdown/raw-HTML rendering
- GHSA-r27j-894h-3w3p `icu-minify`'s runtime formatter resolves `select` branches by looking up the runtime value as a plain property on a prototype-bearing object.
- GHSA-qxvg-h7q2-hcxh motionEye: LFI → pass‑the‑hash admin → unsafe restore → unauth action exec (RCE)
- GHSA-qxrw-f6fh-34r7 Lemmy resend-verification endpoint exposes registered email addresses to unauthenticated users
- GHSA-qwww-vcr4-c8h2 React Router: RSC Mode CSRF Bypass Allows Action Execution Before 400 Response
- GHSA-qwgh-2vcv-g2f7 block_buffer: panic corrupts inline buffer position
- GHSA-qw48-84f6-28gv Graphite Has a Pickle Deserialization Vulnerability
- GHSA-qrfh-cc86-vc8c Leantime has HTML injection through firstname and lastname fields
- GHSA-qr2g-p6q7-w82m x402 SDK Security Advisory
- GHSA-qqc3-94qv-7fw3 Hubuum client library (Rust): Configured custom transports may be bypassed, exposing credentials and network traffic
- GHSA-qq2p-4282-cfc5 eduMFA: Incorrect InnoDB snapshot isolation possibly allows token reusage
- GHSA-qprh-m6p3-hwxc `sui-execution-cut` was removed from crates.io for malicious code
- GHSA-qp9x-wp8f-qgjj tuf has platform-dependent delegation path matching
- GHSA-qmwh-9m9c-h36m The fix for ExifTool arbitrary file write (commit `043b158`, released in v8.29.0) uses a case-sensitive blocklist to filter dangerous pseudo-tags.
- GHSA-qjvr-435c-5fjh Nerdbank.MessagePack has a memory amplification DoS in collection deserialization
- GHSA-qj22-xqjr-v83v OpenClaw's Telegram message_reaction authorization bypass allows unauthorized system-event injection
- GHSA-qhrr-grqp-6x2g OpenClaw's tools.exec.safeBins trusted PATH directories allowed binary shadowing in allowlist mode
- GHSA-qhh4-458h-xwh2 @cyclonedx/cdxgen: Docker registry auth substring match forwards credentials to a different registry
- GHSA-qh5x-rfwf-rvfv Hysteria vulnerable to server crash when max_datagram_frame_size very small
- GHSA-qg8r-f7x3-25f7 imageproc: Out-of-bounds read via NaN coordinates in bilinear/bicubic sampling
- GHSA-qcxq-75wr-5cm8 ldap3_proto has LDAP Filter stack exhaustion
- GHSA-qcr8-x557-7cp3 @asymmetric-effort/specifyjs: Production console warnings may leak internal framework state
- GHSA-qcc4-p59m-p54m OpenClaw: Sandbox dangling-symlink alias handling could bypass workspace-only write boundary
- GHSA-qc22-xmq4-qg46 c2cciutils affected by CVE-2022-40896
- GHSA-q9m2-fhv9-3jcf `potato-annotation` has a Project-Boundary Bypass
- GHSA-q95x-7g78-rccv Use-after-free
- GHSA-q926-c743-49qj Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning
- GHSA-q8x8-jrhj-fh9p Diesel: Possible unaligned data access for implementations of `SqliteAggregate`
- GHSA-q8qp-67f9-wr3f SurrealDB vulnerable to Denial of Service due to nested types annotations
- GHSA-q855-8rh5-jfgq ha-mcp: Add-on settings and policy routes are reachable without authentication at the bare root path
- GHSA-q7j3-v8qv-22vq OpenTofu: Possible arbitrary file read during certain git operations via a maliciously crafted URL
- GHSA-q6gh-6v2r-hjv3 Micronaut: DefaultHttpClient follows redirects, forwarding Authorization, Cookie, and Proxy-Authorization headers
- GHSA-q683-8468-r6h6 WebauthnAuthenticator leaks sensitive HTTP headers through INFO-level logs
- GHSA-q66h-m87m-j2q6 Bitcoinrb Vulnerable to Command injection via RPC
- GHSA-q54r-jf2p-rfr2 gitoxide gix: untrusted .git/config disables filesystem .git-protection path checks via unfiltered protect_options()
- GHSA-q4gf-8mx6-v5v3 Next.js has a Denial of Service with Server Components
- GHSA-q3v2-xj35-9grx Umbraco.AI discloses sensitive application configuration values
- GHSA-q382-vc8q-7jhj Improper handling of null Unicode character when parsing JSON in github.com/modelcontextprotocol/go-sdk
- GHSA-q29p-9pfr-j652 Incorrect Output of Incremental Portable SHAKE API
- GHSA-pxh5-6rrc-8rjv OpenTofu: Excessive resource usage in "tofu init" when installing dependencies from attacker-controlled server
- GHSA-pxh4-856f-4h89 PyJWT: HS256/384/512 verify accepts empty HMAC key via oct JWK (PyJWK/PyJWKClient) enabling token forgery
- GHSA-pv9v-5j35-xwcr libcrux Panics During Standalone MAC Operations
- GHSA-prxj-3gcv-cqrh Tesla Fleet Telemetry allows spoofing telemetry for arbitrary vehicles via compromised vehicle credentials
- GHSA-prh4-vhfh-24mj Harbor: LDAP password and OIDC secret are not redacted in the audit log
- GHSA-pqhr-mp3f-hrpp Nuxt OG Image vulnerable to Server-Side Request Forgery via user-controlled parameters
- GHSA-pqh8-p93p-2rx7 @dynatrace-oss/dynatrace-mcp-server has a DQL injection via parameters not documented as DQL
- GHSA-pqg7-v6wh-3pfp TsDProxy: X-Forwarded-For header injection allows IP spoofing in proxied requests to backend services
- GHSA-pp95-gc86-jq6q Trigger.dev: Missing Authentication in Run Replay Action Allows Cross-Organization Task Execution (IDOR)
- GHSA-pmwx-rm49-xv39 ActiveRecord::Tenanted::Storage::DiskService#path_for has a possible path traversal
- GHSA-pmwq-pjrm-6p5r in-toto-golang and in-toto-python have inconsistent negation behavior
- GHSA-pm4j-7r4q-ccg8 Soroban: Muxed address<->ScVal conversions may break after a conversion failure
- GHSA-pjvx-rx66-r3fg OpenClaw: Cross-account sender authorization expansion in `/allowlist ... --store` account scoping
- GHSA-phv5-334h-mxcw motionEye Partial Authentication Bypass: Unauthenticated Admin Credential Theft via Path Traversal
- GHSA-pfvm-w89x-94jw `TurnServer.ReceiveUdpAsync` places its generic `catch (Exception)` OUTSIDE the `while` receive loop, and `Start()` launches the
- GHSA-pfv7-rr5m-qmv6 OpenClaw has auth inconsistency on local Browser Extension Relay /extension endpoint
- GHSA-pcgw-qcv5-h8ch Unsigned SAML LogoutRequest Acceptance in gosaml2
- GHSA-pcc4-rvhr-2pr8 The Fortran extractor's C-preprocessor step (`graphify/extractors/fortran.py`, `_cpp_preprocess`) applies an incomplete `#include` hardening.
- GHSA-pc9j-5v36-2mww AWS SDK for Swift adopted defense in depth enhancement for region parameter value
- GHSA-pc2w-4mq8-32qw @dynatrace-oss/dynatrace-mcp-server's create_dynatrace_notebook missing the human-approval gate
- GHSA-p7w7-4929-vpj5 `@dynatrace-oss/dynatrace-mcp-server` has Unauthenticated HTTP MCP Tool Invocation
- GHSA-p7mm-r948-4q3q Paperclip: Approval decision attribution spoofing via client-controlled `decidedByUserId` in paperclip server
- GHSA-p77j-g7h5-r2vw GeoLens 1.2.4 fixes a set of vulnerabilities, the most serious of which allow authenticated or anonymous users to obtain data and metadata f
- GHSA-p5wc-9w9r-m232 Ultimate Sitemap Parser (USP): XML Entity Expansion (Billion Laughs) DoS in XMLSitemapParser
- GHSA-p5vf-5754-x7p3 `polymarket-client-sdks` was removed from crates.io for malicious code
- GHSA-p4h8-56qp-hpgv SSH/SCP option injection allowing local RCE in @aiondadotcom/mcp-ssh