Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 194 of 1013.
- GHSA-p498-v437-472g humanfs: Recursive copy follows symlinked files and copies data from outside the source tree
- GHSA-p3pr-8f3m-4qp8 pyLoad WindowsPhoneNotify addon: non-admin SETTINGS user triggers SSRF via unguarded http.client notification host
- GHSA-p2ch-c2c3-4xm5 Winter: CSRF through AJAX handler names reachable as backend page actions
- GHSA-mxwc-wh95-pw4g Trapster Community: Unauthenticated malformed DNS compression pointers crash per-packet honeypot handler
- GHSA-mxhj-88fx-4pcv Fickling: OBJ opcode call invisibility bypasses all safety checks
- GHSA-mxg3-432p-mr72 goshs: SSH host key verification disabled, allowing transparent MITM of every tunnelled HTTP request
- GHSA-mx64-mj3q-7prj iskorotkov/avro: Denial-of-Service Vulnerability in Decoder
- GHSA-mwv9-gp5h-frr4 Sveltejs devalue's `devalue.parse` and `devalue.unflatten` emit objects with `__proto__` own properties
- GHSA-mwm8-39rw-8826 sqlite3-ruby: Use-After-Free in SQLite Aggregate Arguments in Heap-Allocated Argument Array
- GHSA-mw8f-w6p8-xrf4 wger: cross-tenant account deletion / deactivation / activation by gym.manage_gym + gym=None
- GHSA-mvm6-f9r3-fgfx AWS SDK for .NET: Improper escaping of special characters in CloudFront policy document construction
- GHSA-mqxv-9rm6-w8qc Ech0's i18n middleware runs on every HTTP request and constructs a fresh `*goi18n.Localizer` from the raw `Accept-Language` head
- GHSA-mqq7-wxx5-mp8h ps_checkout allows unauthorized method invocation through unvalidated parameter
- GHSA-mpwr-8vm7-h73f package pkcs12: Authentication bypass in Decode functions
- GHSA-mpwp-4h2m-765c Active Job - Object injection security vulnerability
- GHSA-mpmw-f6h6-3g26 Winter: My Account preview exposes another backend user's profile by record ID
- GHSA-mph8-9v29-pm42 axonflow-sdk-typescript: Webhook signing-key (HMAC-SHA256) not exposed by SDK type, preventing signature verification
- GHSA-mmpx-jh39-wrv6 FileBrowser Vulnerable to Stored XSS via SVG File in Public Share (Missing CSP Header)
- GHSA-mm2q-qcmx-gw4w `ListServiceAccount` (`GET /rustfs/admin/v3/list-service-accounts?user=<other>`) authorizes cross-user requests against `UpdateSe
- GHSA-mj63-m3rc-8ppr league/commonmark: Denial of service via deeply nested XML output
- GHSA-mhwj-73qx-jqxm @theecryptochad/merge-guard has Prototype Pollution in its deepMerge() function
- GHSA-mhm7-754m-9p8w jackson-databind: `@JsonView` bypass for creator properties with `@JsonTypeInfo(include=As.EXTERNAL_PROPERTY)`
- GHSA-mhf7-xp6r-6qrc Livewire: Authorization bypass in #[Authorize] via reordered parameter keys and #[Json] execution order
- GHSA-mhc9-48gj-9gp3 Fickling has safety check bypass via REDUCE+BUILD opcode sequence
- GHSA-mhc4-qq83-fmrr axonflow-sdk-go: Webhook signing-key (HMAC-SHA256) not exposed by SDK type, preventing signature verification
- GHSA-mh6w-vxff-9wqp PHPUnit: Argument injection via newline in PHP INI values forwarded to child processes
- GHSA-mh23-rw7f-v5pq `time-sync` was removed from crates.io due to malicious code
- GHSA-mggx-p7jf-jgw4 jdbi3-freemarker Vulnerable to Improper Neutralization of Special Elements Used in FreeMarker Template Engine
- GHSA-mfr4-mq8w-vmg6 <html><head></head><body><h1>Path Traversal in <code>proot-distro copy</code> — Arbitrary Read, Write, and Persistent Code Execution Outside
- GHSA-mcm9-63f2-9j32 devalue: Repeated primitive strings cause quadratic expansion in uneval
- GHSA-mc9m-6fm9-pghc Zoo Design Studio: Memory-corruption in memory handling of lib-kcl
- GHSA-m9p2-fxp5-v3fp Diesel: Command injection in Diesel's implementation of `COPY FROM`/`COPY TO`
- GHSA-m943-m63m-w62w Vulnerability summary addressparser ends an RFC 5322 group at the first `;`, including one inside a quoted display name or a comment.
- GHSA-m8j6-rc5x-wv36 nono-py's policy JSON accepts unknown security fields
- GHSA-m4w9-hjfw-vwj4 Impact The `HmacSha256` class contained two functions: - `hash(payload)` — a plain unkeyed SHA-256 digest.
- GHSA-m3wp-48jr-vr4g mistral.rs: Unbounded Remote Media Fetch and Video Frame Expansion DoS
- GHSA-m38g-vww2-mvgx Talos Linux has a local privilege escalation from untrusted workloads
- GHSA-m23h-6mwm-39m8 A vulnerability in the Kong Ingress Controller (KIC) allows for the unauthorized exfiltration of TLS certificates and private key
- GHSA-jxrq-8fm4-9p58 OpenClaw: Zip extraction symlink traversal could write outside destination
- GHSA-jxh8-jh77-xh6g The validator-mode sandbox executor (`src/gep/validator/sandboxExecutor.js`) places `npm` and `npx` in its hard executable allowlist.
- GHSA-jwjp-4649-v8jp SIPSorcery vulnerable to Denial of Service via out-of-bounds read in SCTP SACK chunk parsing
- GHSA-jv2j-mqmw-xvv5 SurrealDB: Denial of Service via deep operator chains
- GHSA-jqq5-8px3-9m6m ImageMagick: Heap Buffer Over-Write in json and yaml encoder of a single byte due to incorrect fix
- GHSA-jqc5-2p7q-fqfc Hysteria: http large header with sniff cause server DoS
- GHSA-jq7h-wrvp-3rgx pyLoad: Privilege revocation and password change through the REST API do not invalidate the user's session
- GHSA-jpvj-wpmj-h7rv Supply chain compromise via malicious @cap-js/openapi
- GHSA-jmxc-hhwx-gvv3 Private Lemmy instances expose multi-community metadata without authentication
- GHSA-jm5p-837g-rv8g Wagtail: Improper restriction handling on Page translation API endpoint
- GHSA-jjgj-cpp9-cvpv OpenClaw Vulnerable to Local File Exfiltration via MCP Tool Result MEDIA: Directive Injection
- GHSA-jhjp-4c2q-xmx4 k8saudit shipped rules do not detect privileged/sensitive settings on init or ephemeral containers
- GHSA-jgvr-6x5w-hx5w Zoo Design Studio: Recursive KCL parsing is vulnerable to denial-of-service
- GHSA-jggr-w7fw-pc2j fast-copy: Stack exhaustion in fast-copy when copying deeply-nested values
- GHSA-jgg6-4rpr-wfh7 Broken dropper in @mistralai/mistralai, @mistralai/mistralai-azure, @mistralai/mistralai-gcp
- GHSA-jfwg-rxf3-p7r9 Authorizer: CQL/N1QL Injection in Cassandra and Couchbase Backends via fmt.Sprintf String Interpolation
- GHSA-jfm3-95jq-q3rf league/commonmark: Denial of service via duplicate footnote definitions
- GHSA-jf56-mccx-5f3f OpenClaw: Authenticated `/hooks/wake` and mapped `wake` payloads are promoted into the trusted `System:` prompt channel
- GHSA-jf2q-463c-6f52 androidqf: Zip entry Name Injection in APK bundle (Zip Slip for zip consumers)
- GHSA-jc38-x7x8-2xc8 PHP JWT Framework: JWSVerifier uses algorithm from unprotected header, enabling algorithm confusion attacks
- GHSA-j9wf-6r2x-hqmx Centrifugo v6.6.0 dependency vulnerabilities
- GHSA-j9gf-vw2f-9hrw Appsmith: Configuration-dependent origin validation bypass in password reset and email verification link generation
- GHSA-j965-2qgj-vjmq JavaScript SDK v2 users should add validation to the region parameter value in or migrate to v3
- GHSA-j95f-988m-3j2f Tiptap: Quadratic ReDoS in block and inline Markdown attribute parsing
- GHSA-j8f7-x8jm-wmm4 Before **Langflow 1.10.3**, several built-in components sent server-side HTTP requests to URLs the flow author controls, with no SSRF enforcement.
- GHSA-j8cj-hw74-64jv Hive has Double-free and Use After Free Vulnerabilities
- GHSA-j7h9-2jh7-g967 mcp-ssh-tool has file transfer path policy bypass and bearer token comparison hardening
- GHSA-j7f5-gfqm-pcx3 Pterodactyl Panel: Client email change endpoint allows enumeration of accounts in system
- GHSA-j6hm-v3x2-qv6j `ArchiveUtils.untar(InputStream, Path)` and `ArchiveUtils.unzip(InputStream, Path)` in `land.oras:oras-java-sdk` create symbolic
- GHSA-j5rm-v3vh-vx94 eduMFA Passkeys: missing expiration flag may allow replay attacks and reuse of old challenges
- GHSA-j5qp-p44g-2m49 @asymmetric-effort/specifyjs: No redirect target validation in secureFetch
- GHSA-j4r7-8ph4-43g3 faf-mcp has an arbitrary local file read/write via unconfined `path` argument in FAF tools
- GHSA-j443-wcqq-xprh Terraform Provider for SendGrid: TLS Session Resumption Bypasses Certificate Authority Trust Store Modifications in Go
- GHSA-j425-whc4-4jgc OpenClaw's `system.run` env override filtering allowed dangerous helper-command pivots
- GHSA-j3w3-p6mr-3hrh `DynFuture` drop can construct a dangling reference
- GHSA-j39j-6gw9-jw6h git2 has potential undefined behavior when dereferencing Buf struct
- GHSA-j26j-7qc4-3mrf In `openclaw` MS Teams file-consent flow, pending uploads were authorized by `uploadId` alone.
- GHSA-hxjg-93wc-h8p8 Komari: Management Interface CSRF
- GHSA-hx4r-w6wj-j8fg devalue: Residual sparse-array CPU amplification in uneval
- GHSA-hwqm-qvj9-4jr2 gosaml2 CBC Padding Panic — Unauthenticated Process Crash
- GHSA-hwmc-r6mf-jh83 Schema.org has cross-site scripting (XSS) via script break-out in toScript() output
- GHSA-hwm2-4ph6-w6m5 Rancher's restricted PodSecurityPolicy does not prevent containers from running as a privileged user
- GHSA-hw5x-4r37-72w7 Impact Unauthenticated denial of service.
- GHSA-hvqh-jw65-wcpq The default `formatGroup` and `formatResult` functions in `devbridge-autocomplete` concatenate values into HTML without escaping
- GHSA-hv93-r4j3-q65f OpenClaw Hook Session Key Override Enables Targeted Cross-Session Routing
- GHSA-hv85-774v-26fg auth-fetch-mcp: SSRF and disk exfiltration via unvalidated auth_fetch and download_media URLs
- GHSA-hrxh-6v49-42gf gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities
- GHSA-hr7j-63v7-vj7g Pterodactyl Panel's SFTP sessions remain active after user account deletion or password change
- GHSA-hq85-5cpj-mr62 uv's bundled CA store trusts an emSign root whose intermediate CA keys are compromised
- GHSA-hq84-x37p-j6q5 Winter: Reflected XSS through the search query parameter in the backend Table widget
- GHSA-hp74-gm6m-2qm5 Reauthentication Bypass via One-Time Access Token Login ## Summary A weaker authentication method (OTA token or signup token) is accepted
- GHSA-hjwh-xvfw-qrwj SearXNG Basic Authentication Credentials Exposed Through MCP Logs and JSON-RPC Error Responses
- GHSA-hjr9-wj7v-7hv8 Sliver Vulnerable to Pre-Auth Memory Exhaustion via NoEncoder Bypass
- GHSA-hhww-mrg2-969h LiteLLM vulnerable to reflected XSS in /sso/debug/callback
- GHSA-hhjv-jq77-cmvx zeptoclaw has Android device shell blocklist bypass via argument permutation
- GHSA-hgjx-r89m-m7v4 `FacturaScripts\Core\UploadedFile::move($destiny, $destinyName)` concatenates `$destiny` and `$destinyName` without normalizing the resulting path.
- GHSA-hfpr-jhpq-x4rm OpenClaw: `operator.write` chat.send could reach admin-only config writes
- GHSA-hff2-gcpx-8f4p Apollo Router Core: Browser Bug Enables Bypass of XS-Search Prevention via Read-Only Cross-Site Request Forgery
- GHSA-hfc8-w5f4-3x6m Ironic Standalone Operator's controller modifies user-owned resources without consent
- GHSA-hc76-7mpc-qjqh ImageMagick: Code injection in HTML encoder due to incomplete fix of CVE-2026-25797
- GHSA-hc4m-q9jh-xw4j nono-cli'scregistry pack verification can fail open when provenance metadata is absent
- GHSA-hc3c-63hc-2r9f Potential Panic on Overlong Ciphertext Buffer