# Vulnerabilities published in 2026


- [GHSA-vcvr-r3jv-pc5j](https://insights.sbomify.com/GHSA-vcvr-r3jv-pc5j/): Next.js: Remote Code Execution in next/og ImageResponse (not scored)
- [GHSA-vccx-p757-pv6h](https://insights.sbomify.com/GHSA-vccx-p757-pv6h/): mo has a XSS via inline SVG script tags in Markdown rendering (not scored)
- [GHSA-v853-p72q-4cfw](https://insights.sbomify.com/GHSA-v853-p72q-4cfw/): Quart leaks raw request body (incl. plaintext passwords) to stdout via stray debug print in Body.__await__ (not scored)
- [GHSA-v7qw-hx66-4w9x](https://insights.sbomify.com/GHSA-v7qw-hx66-4w9x/): netbox-data-flows has stored XSS in ObjectAlias names rendered inside DataFlow tables (not scored)
- [GHSA-v6wj-c83f-v46x](https://insights.sbomify.com/GHSA-v6wj-c83f-v46x/): @profullstack/mcp-server vulnerable to OS Command Injection in domain_lookup Module (not scored)
- [GHSA-v5mh-h5hx-7v92](https://insights.sbomify.com/GHSA-v5mh-h5hx-7v92/): When the kube-router routing controller starts (`--run-router`), it binds the GoBGP gRPC management server to the node's primary (not scored)
- [GHSA-v52w-28xh-v562](https://insights.sbomify.com/GHSA-v52w-28xh-v562/): Kozou compiles a PostgreSQL schema into an Admin UI, a REST API, and an MCP server. (not scored)
- [GHSA-v457-wxvj-p9w9](https://insights.sbomify.com/GHSA-v457-wxvj-p9w9/): @vitejs/plugin-rsc has a Denial of Service with React Server Components (not scored)
- [GHSA-v3rj-xjv7-4jmq](https://insights.sbomify.com/GHSA-v3rj-xjv7-4jmq/): smol-toml: Denial of Service via TOML documents containing thousands of consecutive commented lines (not scored)
- [GHSA-v2jf-442r-6mjh](https://insights.sbomify.com/GHSA-v2jf-442r-6mjh/): nebula-mesh: Signed-poll nonce LRU is in-memory and bounded; replay survives restart + eviction (not scored)
- [GHSA-rxmp-8h9v-56cx](https://insights.sbomify.com/GHSA-rxmp-8h9v-56cx/): NetBird has Race Condition on UpdateUser Function, Resulting in Privilege Escalation From Admin to Owner (not scored)
- [GHSA-rwr8-xrpw-9qf5](https://insights.sbomify.com/GHSA-rwr8-xrpw-9qf5/): solspace/craft-freeform Exposed to Known Axios Vulnerabilities via Precompiled Assets (not scored)
- [GHSA-rvr2-r3pv-5m4p](https://insights.sbomify.com/GHSA-rvr2-r3pv-5m4p/): oneshot has potential Use After Free when used asynchronously (not scored)
- [GHSA-rr55-jp92-8wp2](https://insights.sbomify.com/GHSA-rr55-jp92-8wp2/): claude-faf-mcp has an arbitrary local file read/write via unconfined `path` argument in FAF tools (not scored)
- [GHSA-rq7w-g337-39qq](https://insights.sbomify.com/GHSA-rq7w-g337-39qq/): When running `nuxt dev`, Nuxt registers an unauthenticated route at `/.well-known/appspecific/com.chrome.devtools.json` that ret (not scored)
- [GHSA-rpj2-4hq8-938g](https://insights.sbomify.com/GHSA-rpj2-4hq8-938g/): VCR.py: Arbitrary code execution via unsafe YAML deserialization of cassette files (not scored)
- [GHSA-rp7v-4384-hfrp](https://insights.sbomify.com/GHSA-rp7v-4384-hfrp/): k8sGPT has Prompt Injection through its k8sGPT-Operator (not scored)
- [GHSA-rp72-5v5q-2446](https://insights.sbomify.com/GHSA-rp72-5v5q-2446/): @cardano402/mcp-server missing spending limits, LAN-exposed HTTP transport, and SSRF via catalog.server.url (not scored)
- [GHSA-rm67-g9ch-vxff](https://insights.sbomify.com/GHSA-rm67-g9ch-vxff/): Poweradmin: Broken access control (IDOR): any zone owner can modify DNS records in zones they do not own (not scored)
- [GHSA-rjwr-m7qx-3fjr](https://insights.sbomify.com/GHSA-rjwr-m7qx-3fjr/): oapi-codegen: OpenAPI Server Description Escapes Generated Go Comment and Injects Executable Code (not scored)
- [GHSA-rjvx-x5h2-6px5](https://insights.sbomify.com/GHSA-rjvx-x5h2-6px5/): Gitea: API Fork Endpoint Authorization Bypass Allows Organization Members to Bypass Repository Creation Restrictions (not scored)
- [GHSA-rjr4-v43m-pxq6](https://insights.sbomify.com/GHSA-rjr4-v43m-pxq6/): Triton VM Soundness Vulnerability due to Improper Sampling of Randomness (not scored)
- [GHSA-rhq6-9rgh-v45c](https://insights.sbomify.com/GHSA-rhq6-9rgh-v45c/): Pterodactyl Wings: Chmod operation can be used to change permissions of files outside of the server container (not scored)
- [GHSA-rhfx-m35p-ff5j](https://insights.sbomify.com/GHSA-rhfx-m35p-ff5j/): `IterMut` violates Stacked Borrows by invalidating internal pointer (not scored)
- [GHSA-rgwj-5xj2-c3m3](https://insights.sbomify.com/GHSA-rgwj-5xj2-c3m3/): MySQL2: Unbounded zlib inflate in compressed MySQL protocol handler allows decompression-bomb DoS (not scored)
- [GHSA-rgqc-3x5p-6gwg](https://insights.sbomify.com/GHSA-rgqc-3x5p-6gwg/): postgres-protocol: Panic decoding a malformed `hstore` value allows denial of service (not scored)
- [GHSA-rf84-wr5g-m3rp](https://insights.sbomify.com/GHSA-rf84-wr5g-m3rp/): CAPM3 vulnerable to Cross-Namespace resource access (not scored)
- [GHSA-rchv-x836-w7xp](https://insights.sbomify.com/GHSA-rchv-x836-w7xp/): OpenClaw's dashboard leaked gateway auth material via browser URL/query and localStorage (not scored)
- [GHSA-rc6v-5rmx-w5mv](https://insights.sbomify.com/GHSA-rc6v-5rmx-w5mv/): arnika is affected by medium-severity issues in UDP rotation, PQC handling, and KMS TLS (not scored)
- [GHSA-r9w8-h9r3-54w4](https://insights.sbomify.com/GHSA-r9w8-h9r3-54w4/): devalue: Custom ArrayBuffer revivers can bypass typed-array allocation validation (not scored)
- [GHSA-r4xh-jqrq-34v2](https://insights.sbomify.com/GHSA-r4xh-jqrq-34v2/): smol-toml: Quadratic-time parse() from parseKey rescanning to end of document on each key line (not scored)
- [GHSA-r4v7-6wcg-ghj5](https://insights.sbomify.com/GHSA-r4v7-6wcg-ghj5/): FileBrowser: Missing Rate Limiting on Authentication Endpoint Enables Brute Force Attacks (not scored)
- [GHSA-r48f-3986-4f9c](https://insights.sbomify.com/GHSA-r48f-3986-4f9c/): fickling modules linecache, difflib and gc are missing from the unsafe modules blocklist (not scored)
- [GHSA-r44w-v6gf-x3p6](https://insights.sbomify.com/GHSA-r44w-v6gf-x3p6/): pyLoad has an authentication bypass in API key validation (check_apikey cache) (not scored)
- [GHSA-r3ph-w7gj-g6xm](https://insights.sbomify.com/GHSA-r3ph-w7gj-g6xm/): js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sources (not scored)
- [GHSA-r294-2894-92j3](https://insights.sbomify.com/GHSA-r294-2894-92j3/): OpenClaw has stored XSS in exported session HTML viewer via markdown/raw-HTML rendering (not scored)
- [GHSA-r27j-894h-3w3p](https://insights.sbomify.com/GHSA-r27j-894h-3w3p/): `icu-minify`'s runtime formatter resolves `select` branches by looking up the runtime value as a plain property on a prototype-bearing object. (not scored)
- [GHSA-qxvg-h7q2-hcxh](https://insights.sbomify.com/GHSA-qxvg-h7q2-hcxh/): motionEye: LFI → pass‑the‑hash admin → unsafe restore → unauth action exec (RCE) (not scored)
- [GHSA-qxrw-f6fh-34r7](https://insights.sbomify.com/GHSA-qxrw-f6fh-34r7/): Lemmy resend-verification endpoint exposes registered email addresses to unauthenticated users (not scored)
- [GHSA-qwww-vcr4-c8h2](https://insights.sbomify.com/GHSA-qwww-vcr4-c8h2/): React Router: RSC Mode CSRF Bypass Allows Action Execution Before 400 Response (not scored)
- [GHSA-qwgh-2vcv-g2f7](https://insights.sbomify.com/GHSA-qwgh-2vcv-g2f7/): block_buffer: panic corrupts inline buffer position (not scored)
- [GHSA-qw48-84f6-28gv](https://insights.sbomify.com/GHSA-qw48-84f6-28gv/): Graphite Has a Pickle Deserialization Vulnerability (not scored)
- [GHSA-qrfh-cc86-vc8c](https://insights.sbomify.com/GHSA-qrfh-cc86-vc8c/): Leantime has HTML injection through firstname and lastname fields (not scored)
- [GHSA-qr2g-p6q7-w82m](https://insights.sbomify.com/GHSA-qr2g-p6q7-w82m/): x402 SDK Security Advisory (not scored)
- [GHSA-qqc3-94qv-7fw3](https://insights.sbomify.com/GHSA-qqc3-94qv-7fw3/): Hubuum client library (Rust): Configured custom transports may be bypassed, exposing credentials and network traffic (not scored)
- [GHSA-qq2p-4282-cfc5](https://insights.sbomify.com/GHSA-qq2p-4282-cfc5/): eduMFA: Incorrect InnoDB snapshot isolation possibly allows token reusage (not scored)
- [GHSA-qprh-m6p3-hwxc](https://insights.sbomify.com/GHSA-qprh-m6p3-hwxc/): `sui-execution-cut` was removed from crates.io for malicious code (not scored)
- [GHSA-qp9x-wp8f-qgjj](https://insights.sbomify.com/GHSA-qp9x-wp8f-qgjj/): tuf has platform-dependent delegation path matching (not scored)
- [GHSA-qmwh-9m9c-h36m](https://insights.sbomify.com/GHSA-qmwh-9m9c-h36m/): The fix for ExifTool arbitrary file write (commit `043b158`, released in v8.29.0) uses a case-sensitive blocklist to filter dangerous pseudo-tags. (not scored)
- [GHSA-qjvr-435c-5fjh](https://insights.sbomify.com/GHSA-qjvr-435c-5fjh/): Nerdbank.MessagePack has a memory amplification DoS in collection deserialization (not scored)
- [GHSA-qj22-xqjr-v83v](https://insights.sbomify.com/GHSA-qj22-xqjr-v83v/): OpenClaw's Telegram message_reaction authorization bypass allows unauthorized system-event injection (not scored)
- [GHSA-qhrr-grqp-6x2g](https://insights.sbomify.com/GHSA-qhrr-grqp-6x2g/): OpenClaw's tools.exec.safeBins trusted PATH directories allowed binary shadowing in allowlist mode (not scored)
- [GHSA-qhh4-458h-xwh2](https://insights.sbomify.com/GHSA-qhh4-458h-xwh2/): @cyclonedx/cdxgen: Docker registry auth substring match forwards credentials to a different registry (not scored)
- [GHSA-qh5x-rfwf-rvfv](https://insights.sbomify.com/GHSA-qh5x-rfwf-rvfv/): Hysteria vulnerable to server crash when max_datagram_frame_size very small (not scored)
- [GHSA-qg8r-f7x3-25f7](https://insights.sbomify.com/GHSA-qg8r-f7x3-25f7/): imageproc: Out-of-bounds read via NaN coordinates in bilinear/bicubic sampling (not scored)
- [GHSA-qcxq-75wr-5cm8](https://insights.sbomify.com/GHSA-qcxq-75wr-5cm8/): ldap3_proto has LDAP Filter stack exhaustion (not scored)
- [GHSA-qcr8-x557-7cp3](https://insights.sbomify.com/GHSA-qcr8-x557-7cp3/): @asymmetric-effort/specifyjs: Production console warnings may leak internal framework state (not scored)
- [GHSA-qcc4-p59m-p54m](https://insights.sbomify.com/GHSA-qcc4-p59m-p54m/): OpenClaw: Sandbox dangling-symlink alias handling could bypass workspace-only write boundary (not scored)
- [GHSA-qc22-xmq4-qg46](https://insights.sbomify.com/GHSA-qc22-xmq4-qg46/): c2cciutils affected by CVE-2022-40896 (not scored)
- [GHSA-q9m2-fhv9-3jcf](https://insights.sbomify.com/GHSA-q9m2-fhv9-3jcf/): `potato-annotation` has a Project-Boundary Bypass (not scored)
- [GHSA-q95x-7g78-rccv](https://insights.sbomify.com/GHSA-q95x-7g78-rccv/): Use-after-free (not scored)
- [GHSA-q926-c743-49qj](https://insights.sbomify.com/GHSA-q926-c743-49qj/): Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning (not scored)
- [GHSA-q8x8-jrhj-fh9p](https://insights.sbomify.com/GHSA-q8x8-jrhj-fh9p/): Diesel: Possible unaligned data access for implementations of `SqliteAggregate` (not scored)
- [GHSA-q8qp-67f9-wr3f](https://insights.sbomify.com/GHSA-q8qp-67f9-wr3f/): SurrealDB vulnerable to Denial of Service due to nested types annotations (not scored)
- [GHSA-q855-8rh5-jfgq](https://insights.sbomify.com/GHSA-q855-8rh5-jfgq/): ha-mcp: Add-on settings and policy routes are reachable without authentication at the bare root path (not scored)
- [GHSA-q7j3-v8qv-22vq](https://insights.sbomify.com/GHSA-q7j3-v8qv-22vq/): OpenTofu: Possible arbitrary file read during certain git operations via a maliciously crafted URL (not scored)
- [GHSA-q6gh-6v2r-hjv3](https://insights.sbomify.com/GHSA-q6gh-6v2r-hjv3/): Micronaut: DefaultHttpClient follows redirects, forwarding Authorization, Cookie, and Proxy-Authorization headers (not scored)
- [GHSA-q683-8468-r6h6](https://insights.sbomify.com/GHSA-q683-8468-r6h6/): WebauthnAuthenticator leaks sensitive HTTP headers through INFO-level logs (not scored)
- [GHSA-q66h-m87m-j2q6](https://insights.sbomify.com/GHSA-q66h-m87m-j2q6/): Bitcoinrb Vulnerable to Command injection via RPC (not scored)
- [GHSA-q54r-jf2p-rfr2](https://insights.sbomify.com/GHSA-q54r-jf2p-rfr2/): gitoxide gix: untrusted .git/config disables filesystem .git-protection path checks via unfiltered protect_options() (not scored)
- [GHSA-q4gf-8mx6-v5v3](https://insights.sbomify.com/GHSA-q4gf-8mx6-v5v3/): Next.js has a Denial of Service with Server Components (not scored)
- [GHSA-q3v2-xj35-9grx](https://insights.sbomify.com/GHSA-q3v2-xj35-9grx/): Umbraco.AI discloses sensitive application configuration values (not scored)
- [GHSA-q382-vc8q-7jhj](https://insights.sbomify.com/GHSA-q382-vc8q-7jhj/): Improper handling of null Unicode character when parsing JSON in github.com/modelcontextprotocol/go-sdk (not scored)
- [GHSA-q29p-9pfr-j652](https://insights.sbomify.com/GHSA-q29p-9pfr-j652/): Incorrect Output of Incremental Portable SHAKE API (not scored)
- [GHSA-pxh5-6rrc-8rjv](https://insights.sbomify.com/GHSA-pxh5-6rrc-8rjv/): OpenTofu: Excessive resource usage in "tofu init" when installing dependencies from attacker-controlled server (not scored)
- [GHSA-pxh4-856f-4h89](https://insights.sbomify.com/GHSA-pxh4-856f-4h89/): PyJWT: HS256/384/512 verify accepts empty HMAC key via oct JWK (PyJWK/PyJWKClient) enabling token forgery (not scored)
- [GHSA-pv9v-5j35-xwcr](https://insights.sbomify.com/GHSA-pv9v-5j35-xwcr/): libcrux Panics During Standalone MAC Operations (not scored)
- [GHSA-prxj-3gcv-cqrh](https://insights.sbomify.com/GHSA-prxj-3gcv-cqrh/): Tesla Fleet Telemetry allows spoofing telemetry for arbitrary vehicles via compromised vehicle credentials (not scored)
- [GHSA-prh4-vhfh-24mj](https://insights.sbomify.com/GHSA-prh4-vhfh-24mj/): Harbor: LDAP password and OIDC secret are not redacted in the audit log (not scored)
- [GHSA-pqhr-mp3f-hrpp](https://insights.sbomify.com/GHSA-pqhr-mp3f-hrpp/): Nuxt OG Image vulnerable to Server-Side Request Forgery via user-controlled parameters (not scored)
- [GHSA-pqh8-p93p-2rx7](https://insights.sbomify.com/GHSA-pqh8-p93p-2rx7/): @dynatrace-oss/dynatrace-mcp-server has a DQL injection via parameters not documented as DQL (not scored)
- [GHSA-pqg7-v6wh-3pfp](https://insights.sbomify.com/GHSA-pqg7-v6wh-3pfp/): TsDProxy: X-Forwarded-For header injection allows IP spoofing in proxied requests to backend services (not scored)
- [GHSA-pp95-gc86-jq6q](https://insights.sbomify.com/GHSA-pp95-gc86-jq6q/): Trigger.dev: Missing Authentication in Run Replay Action Allows Cross-Organization Task Execution (IDOR) (not scored)
- [GHSA-pmwx-rm49-xv39](https://insights.sbomify.com/GHSA-pmwx-rm49-xv39/): ActiveRecord::Tenanted::Storage::DiskService#path_for has a possible path traversal (not scored)
- [GHSA-pmwq-pjrm-6p5r](https://insights.sbomify.com/GHSA-pmwq-pjrm-6p5r/): in-toto-golang and in-toto-python have inconsistent negation behavior (not scored)
- [GHSA-pm4j-7r4q-ccg8](https://insights.sbomify.com/GHSA-pm4j-7r4q-ccg8/): Soroban: Muxed address<->ScVal conversions may break after a conversion failure (not scored)
- [GHSA-pjvx-rx66-r3fg](https://insights.sbomify.com/GHSA-pjvx-rx66-r3fg/): OpenClaw: Cross-account sender authorization expansion in `/allowlist ... --store` account scoping (not scored)
- [GHSA-phv5-334h-mxcw](https://insights.sbomify.com/GHSA-phv5-334h-mxcw/): motionEye Partial Authentication Bypass: Unauthenticated Admin Credential Theft via Path Traversal (not scored)
- [GHSA-pfvm-w89x-94jw](https://insights.sbomify.com/GHSA-pfvm-w89x-94jw/): `TurnServer.ReceiveUdpAsync` places its generic `catch (Exception)` OUTSIDE the `while` receive loop, and `Start()` launches the (not scored)
- [GHSA-pfv7-rr5m-qmv6](https://insights.sbomify.com/GHSA-pfv7-rr5m-qmv6/): OpenClaw has auth inconsistency on local Browser Extension Relay /extension endpoint (not scored)
- [GHSA-pcgw-qcv5-h8ch](https://insights.sbomify.com/GHSA-pcgw-qcv5-h8ch/): Unsigned SAML LogoutRequest Acceptance in gosaml2 (not scored)
- [GHSA-pcc4-rvhr-2pr8](https://insights.sbomify.com/GHSA-pcc4-rvhr-2pr8/): The Fortran extractor's C-preprocessor step (`graphify/extractors/fortran.py`, `_cpp_preprocess`) applies an incomplete `#include` hardening. (not scored)
- [GHSA-pc9j-5v36-2mww](https://insights.sbomify.com/GHSA-pc9j-5v36-2mww/): AWS SDK for Swift adopted defense in depth enhancement for region parameter value (not scored)
- [GHSA-pc2w-4mq8-32qw](https://insights.sbomify.com/GHSA-pc2w-4mq8-32qw/): @dynatrace-oss/dynatrace-mcp-server's create_dynatrace_notebook missing the human-approval gate (not scored)
- [GHSA-p7w7-4929-vpj5](https://insights.sbomify.com/GHSA-p7w7-4929-vpj5/): `@dynatrace-oss/dynatrace-mcp-server` has Unauthenticated HTTP MCP Tool Invocation (not scored)
- [GHSA-p7mm-r948-4q3q](https://insights.sbomify.com/GHSA-p7mm-r948-4q3q/): Paperclip: Approval decision attribution spoofing via client-controlled `decidedByUserId` in paperclip server (not scored)
- [GHSA-p77j-g7h5-r2vw](https://insights.sbomify.com/GHSA-p77j-g7h5-r2vw/): GeoLens 1.2.4 fixes a set of vulnerabilities, the most serious of which allow authenticated or anonymous users to obtain data and metadata f (not scored)
- [GHSA-p5wc-9w9r-m232](https://insights.sbomify.com/GHSA-p5wc-9w9r-m232/): Ultimate Sitemap Parser (USP): XML Entity Expansion (Billion Laughs) DoS in XMLSitemapParser (not scored)
- [GHSA-p5vf-5754-x7p3](https://insights.sbomify.com/GHSA-p5vf-5754-x7p3/): `polymarket-client-sdks` was removed from crates.io for malicious code (not scored)
- [GHSA-p4h8-56qp-hpgv](https://insights.sbomify.com/GHSA-p4h8-56qp-hpgv/): SSH/SCP option injection allowing local RCE in @aiondadotcom/mcp-ssh (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/193/