# Vulnerabilities published in 2026 - [GHSA-p498-v437-472g](https://insights.sbomify.com/GHSA-p498-v437-472g/): humanfs: Recursive copy follows symlinked files and copies data from outside the source tree (not scored) - [GHSA-p3pr-8f3m-4qp8](https://insights.sbomify.com/GHSA-p3pr-8f3m-4qp8/): pyLoad WindowsPhoneNotify addon: non-admin SETTINGS user triggers SSRF via unguarded http.client notification host (not scored) - [GHSA-p2ch-c2c3-4xm5](https://insights.sbomify.com/GHSA-p2ch-c2c3-4xm5/): Winter: CSRF through AJAX handler names reachable as backend page actions (not scored) - [GHSA-mxwc-wh95-pw4g](https://insights.sbomify.com/GHSA-mxwc-wh95-pw4g/): Trapster Community: Unauthenticated malformed DNS compression pointers crash per-packet honeypot handler (not scored) - [GHSA-mxhj-88fx-4pcv](https://insights.sbomify.com/GHSA-mxhj-88fx-4pcv/): Fickling: OBJ opcode call invisibility bypasses all safety checks (not scored) - [GHSA-mxg3-432p-mr72](https://insights.sbomify.com/GHSA-mxg3-432p-mr72/): goshs: SSH host key verification disabled, allowing transparent MITM of every tunnelled HTTP request (not scored) - [GHSA-mx64-mj3q-7prj](https://insights.sbomify.com/GHSA-mx64-mj3q-7prj/): iskorotkov/avro: Denial-of-Service Vulnerability in Decoder (not scored) - [GHSA-mwv9-gp5h-frr4](https://insights.sbomify.com/GHSA-mwv9-gp5h-frr4/): Sveltejs devalue's `devalue.parse` and `devalue.unflatten` emit objects with `__proto__` own properties (not scored) - [GHSA-mwm8-39rw-8826](https://insights.sbomify.com/GHSA-mwm8-39rw-8826/): sqlite3-ruby: Use-After-Free in SQLite Aggregate Arguments in Heap-Allocated Argument Array (not scored) - [GHSA-mw8f-w6p8-xrf4](https://insights.sbomify.com/GHSA-mw8f-w6p8-xrf4/): wger: cross-tenant account deletion / deactivation / activation by gym.manage_gym + gym=None (not scored) - [GHSA-mvm6-f9r3-fgfx](https://insights.sbomify.com/GHSA-mvm6-f9r3-fgfx/): AWS SDK for .NET: Improper escaping of special characters in CloudFront policy document construction (not scored) - [GHSA-mqxv-9rm6-w8qc](https://insights.sbomify.com/GHSA-mqxv-9rm6-w8qc/): Ech0's i18n middleware runs on every HTTP request and constructs a fresh `*goi18n.Localizer` from the raw `Accept-Language` head (not scored) - [GHSA-mqq7-wxx5-mp8h](https://insights.sbomify.com/GHSA-mqq7-wxx5-mp8h/): ps_checkout allows unauthorized method invocation through unvalidated parameter (not scored) - [GHSA-mpwr-8vm7-h73f](https://insights.sbomify.com/GHSA-mpwr-8vm7-h73f/): package pkcs12: Authentication bypass in Decode functions (not scored) - [GHSA-mpwp-4h2m-765c](https://insights.sbomify.com/GHSA-mpwp-4h2m-765c/): Active Job - Object injection security vulnerability (not scored) - [GHSA-mpmw-f6h6-3g26](https://insights.sbomify.com/GHSA-mpmw-f6h6-3g26/): Winter: My Account preview exposes another backend user's profile by record ID (not scored) - [GHSA-mph8-9v29-pm42](https://insights.sbomify.com/GHSA-mph8-9v29-pm42/): axonflow-sdk-typescript: Webhook signing-key (HMAC-SHA256) not exposed by SDK type, preventing signature verification (not scored) - [GHSA-mmpx-jh39-wrv6](https://insights.sbomify.com/GHSA-mmpx-jh39-wrv6/): FileBrowser Vulnerable to Stored XSS via SVG File in Public Share (Missing CSP Header) (not scored) - [GHSA-mm2q-qcmx-gw4w](https://insights.sbomify.com/GHSA-mm2q-qcmx-gw4w/): `ListServiceAccount` (`GET /rustfs/admin/v3/list-service-accounts?user=`) authorizes cross-user requests against `UpdateSe (not scored) - [GHSA-mj63-m3rc-8ppr](https://insights.sbomify.com/GHSA-mj63-m3rc-8ppr/): league/commonmark: Denial of service via deeply nested XML output (not scored) - [GHSA-mhwj-73qx-jqxm](https://insights.sbomify.com/GHSA-mhwj-73qx-jqxm/): @theecryptochad/merge-guard has Prototype Pollution in its deepMerge() function (not scored) - [GHSA-mhm7-754m-9p8w](https://insights.sbomify.com/GHSA-mhm7-754m-9p8w/): jackson-databind: `@JsonView` bypass for creator properties with `@JsonTypeInfo(include=As.EXTERNAL_PROPERTY)` (not scored) - [GHSA-mhf7-xp6r-6qrc](https://insights.sbomify.com/GHSA-mhf7-xp6r-6qrc/): Livewire: Authorization bypass in #[Authorize] via reordered parameter keys and #[Json] execution order (not scored) - [GHSA-mhc9-48gj-9gp3](https://insights.sbomify.com/GHSA-mhc9-48gj-9gp3/): Fickling has safety check bypass via REDUCE+BUILD opcode sequence (not scored) - [GHSA-mhc4-qq83-fmrr](https://insights.sbomify.com/GHSA-mhc4-qq83-fmrr/): axonflow-sdk-go: Webhook signing-key (HMAC-SHA256) not exposed by SDK type, preventing signature verification (not scored) - [GHSA-mh6w-vxff-9wqp](https://insights.sbomify.com/GHSA-mh6w-vxff-9wqp/): PHPUnit: Argument injection via newline in PHP INI values forwarded to child processes (not scored) - [GHSA-mh23-rw7f-v5pq](https://insights.sbomify.com/GHSA-mh23-rw7f-v5pq/): `time-sync` was removed from crates.io due to malicious code (not scored) - [GHSA-mggx-p7jf-jgw4](https://insights.sbomify.com/GHSA-mggx-p7jf-jgw4/): jdbi3-freemarker Vulnerable to Improper Neutralization of Special Elements Used in FreeMarker Template Engine (not scored) - [GHSA-mfr4-mq8w-vmg6](https://insights.sbomify.com/GHSA-mfr4-mq8w-vmg6/):

Path Traversal in `proot-distro copy` — Arbitrary Read, Write, and Persistent Code Execution Outside (not scored) - [GHSA-mcm9-63f2-9j32](https://insights.sbomify.com/GHSA-mcm9-63f2-9j32/): devalue: Repeated primitive strings cause quadratic expansion in uneval (not scored) - [GHSA-mc9m-6fm9-pghc](https://insights.sbomify.com/GHSA-mc9m-6fm9-pghc/): Zoo Design Studio: Memory-corruption in memory handling of lib-kcl (not scored) - [GHSA-m9p2-fxp5-v3fp](https://insights.sbomify.com/GHSA-m9p2-fxp5-v3fp/): Diesel: Command injection in Diesel's implementation of `COPY FROM`/`COPY TO` (not scored) - [GHSA-m943-m63m-w62w](https://insights.sbomify.com/GHSA-m943-m63m-w62w/): Vulnerability summary addressparser ends an RFC 5322 group at the first `;`, including one inside a quoted display name or a comment. (not scored) - [GHSA-m8j6-rc5x-wv36](https://insights.sbomify.com/GHSA-m8j6-rc5x-wv36/): nono-py's policy JSON accepts unknown security fields (not scored) - [GHSA-m4w9-hjfw-vwj4](https://insights.sbomify.com/GHSA-m4w9-hjfw-vwj4/): Impact The `HmacSha256` class contained two functions: - `hash(payload)` — a plain unkeyed SHA-256 digest. (not scored) - [GHSA-m3wp-48jr-vr4g](https://insights.sbomify.com/GHSA-m3wp-48jr-vr4g/): mistral.rs: Unbounded Remote Media Fetch and Video Frame Expansion DoS (not scored) - [GHSA-m38g-vww2-mvgx](https://insights.sbomify.com/GHSA-m38g-vww2-mvgx/): Talos Linux has a local privilege escalation from untrusted workloads (not scored) - [GHSA-m23h-6mwm-39m8](https://insights.sbomify.com/GHSA-m23h-6mwm-39m8/): A vulnerability in the Kong Ingress Controller (KIC) allows for the unauthorized exfiltration of TLS certificates and private key (not scored) - [GHSA-jxrq-8fm4-9p58](https://insights.sbomify.com/GHSA-jxrq-8fm4-9p58/): OpenClaw: Zip extraction symlink traversal could write outside destination (not scored) - [GHSA-jxh8-jh77-xh6g](https://insights.sbomify.com/GHSA-jxh8-jh77-xh6g/): The validator-mode sandbox executor (`src/gep/validator/sandboxExecutor.js`) places `npm` and `npx` in its hard executable allowlist. (not scored) - [GHSA-jwjp-4649-v8jp](https://insights.sbomify.com/GHSA-jwjp-4649-v8jp/): SIPSorcery vulnerable to Denial of Service via out-of-bounds read in SCTP SACK chunk parsing (not scored) - [GHSA-jv2j-mqmw-xvv5](https://insights.sbomify.com/GHSA-jv2j-mqmw-xvv5/): SurrealDB: Denial of Service via deep operator chains (not scored) - [GHSA-jqq5-8px3-9m6m](https://insights.sbomify.com/GHSA-jqq5-8px3-9m6m/): ImageMagick: Heap Buffer Over-Write in json and yaml encoder of a single byte due to incorrect fix (not scored) - [GHSA-jqc5-2p7q-fqfc](https://insights.sbomify.com/GHSA-jqc5-2p7q-fqfc/): Hysteria: http large header with sniff cause server DoS (not scored) - [GHSA-jq7h-wrvp-3rgx](https://insights.sbomify.com/GHSA-jq7h-wrvp-3rgx/): pyLoad: Privilege revocation and password change through the REST API do not invalidate the user's session (not scored) - [GHSA-jpvj-wpmj-h7rv](https://insights.sbomify.com/GHSA-jpvj-wpmj-h7rv/): Supply chain compromise via malicious @cap-js/openapi (not scored) - [GHSA-jmxc-hhwx-gvv3](https://insights.sbomify.com/GHSA-jmxc-hhwx-gvv3/): Private Lemmy instances expose multi-community metadata without authentication (not scored) - [GHSA-jm5p-837g-rv8g](https://insights.sbomify.com/GHSA-jm5p-837g-rv8g/): Wagtail: Improper restriction handling on Page translation API endpoint (not scored) - [GHSA-jjgj-cpp9-cvpv](https://insights.sbomify.com/GHSA-jjgj-cpp9-cvpv/): OpenClaw Vulnerable to Local File Exfiltration via MCP Tool Result MEDIA: Directive Injection (not scored) - [GHSA-jhjp-4c2q-xmx4](https://insights.sbomify.com/GHSA-jhjp-4c2q-xmx4/): k8saudit shipped rules do not detect privileged/sensitive settings on init or ephemeral containers (not scored) - [GHSA-jgvr-6x5w-hx5w](https://insights.sbomify.com/GHSA-jgvr-6x5w-hx5w/): Zoo Design Studio: Recursive KCL parsing is vulnerable to denial-of-service (not scored) - [GHSA-jggr-w7fw-pc2j](https://insights.sbomify.com/GHSA-jggr-w7fw-pc2j/): fast-copy: Stack exhaustion in fast-copy when copying deeply-nested values (not scored) - [GHSA-jgg6-4rpr-wfh7](https://insights.sbomify.com/GHSA-jgg6-4rpr-wfh7/): Broken dropper in @mistralai/mistralai, @mistralai/mistralai-azure, @mistralai/mistralai-gcp (not scored) - [GHSA-jfwg-rxf3-p7r9](https://insights.sbomify.com/GHSA-jfwg-rxf3-p7r9/): Authorizer: CQL/N1QL Injection in Cassandra and Couchbase Backends via fmt.Sprintf String Interpolation (not scored) - [GHSA-jfm3-95jq-q3rf](https://insights.sbomify.com/GHSA-jfm3-95jq-q3rf/): league/commonmark: Denial of service via duplicate footnote definitions (not scored) - [GHSA-jf56-mccx-5f3f](https://insights.sbomify.com/GHSA-jf56-mccx-5f3f/): OpenClaw: Authenticated `/hooks/wake` and mapped `wake` payloads are promoted into the trusted `System:` prompt channel (not scored) - [GHSA-jf2q-463c-6f52](https://insights.sbomify.com/GHSA-jf2q-463c-6f52/): androidqf: Zip entry Name Injection in APK bundle (Zip Slip for zip consumers) (not scored) - [GHSA-jc38-x7x8-2xc8](https://insights.sbomify.com/GHSA-jc38-x7x8-2xc8/): PHP JWT Framework: JWSVerifier uses algorithm from unprotected header, enabling algorithm confusion attacks (not scored) - [GHSA-j9wf-6r2x-hqmx](https://insights.sbomify.com/GHSA-j9wf-6r2x-hqmx/): Centrifugo v6.6.0 dependency vulnerabilities (not scored) - [GHSA-j9gf-vw2f-9hrw](https://insights.sbomify.com/GHSA-j9gf-vw2f-9hrw/): Appsmith: Configuration-dependent origin validation bypass in password reset and email verification link generation (not scored) - [GHSA-j965-2qgj-vjmq](https://insights.sbomify.com/GHSA-j965-2qgj-vjmq/): JavaScript SDK v2 users should add validation to the region parameter value in or migrate to v3 (not scored) - [GHSA-j95f-988m-3j2f](https://insights.sbomify.com/GHSA-j95f-988m-3j2f/): Tiptap: Quadratic ReDoS in block and inline Markdown attribute parsing (not scored) - [GHSA-j8f7-x8jm-wmm4](https://insights.sbomify.com/GHSA-j8f7-x8jm-wmm4/): Before Langflow 1.10.3, several built-in components sent server-side HTTP requests to URLs the flow author controls, with no SSRF enforcement. (not scored) - [GHSA-j8cj-hw74-64jv](https://insights.sbomify.com/GHSA-j8cj-hw74-64jv/): Hive has Double-free and Use After Free Vulnerabilities (not scored) - [GHSA-j7h9-2jh7-g967](https://insights.sbomify.com/GHSA-j7h9-2jh7-g967/): mcp-ssh-tool has file transfer path policy bypass and bearer token comparison hardening (not scored) - [GHSA-j7f5-gfqm-pcx3](https://insights.sbomify.com/GHSA-j7f5-gfqm-pcx3/): Pterodactyl Panel: Client email change endpoint allows enumeration of accounts in system (not scored) - [GHSA-j6hm-v3x2-qv6j](https://insights.sbomify.com/GHSA-j6hm-v3x2-qv6j/): `ArchiveUtils.untar(InputStream, Path)` and `ArchiveUtils.unzip(InputStream, Path)` in `land.oras:oras-java-sdk` create symbolic (not scored) - [GHSA-j5rm-v3vh-vx94](https://insights.sbomify.com/GHSA-j5rm-v3vh-vx94/): eduMFA Passkeys: missing expiration flag may allow replay attacks and reuse of old challenges (not scored) - [GHSA-j5qp-p44g-2m49](https://insights.sbomify.com/GHSA-j5qp-p44g-2m49/): @asymmetric-effort/specifyjs: No redirect target validation in secureFetch (not scored) - [GHSA-j4r7-8ph4-43g3](https://insights.sbomify.com/GHSA-j4r7-8ph4-43g3/): faf-mcp has an arbitrary local file read/write via unconfined `path` argument in FAF tools (not scored) - [GHSA-j443-wcqq-xprh](https://insights.sbomify.com/GHSA-j443-wcqq-xprh/): Terraform Provider for SendGrid: TLS Session Resumption Bypasses Certificate Authority Trust Store Modifications in Go (not scored) - [GHSA-j425-whc4-4jgc](https://insights.sbomify.com/GHSA-j425-whc4-4jgc/): OpenClaw's `system.run` env override filtering allowed dangerous helper-command pivots (not scored) - [GHSA-j3w3-p6mr-3hrh](https://insights.sbomify.com/GHSA-j3w3-p6mr-3hrh/): `DynFuture` drop can construct a dangling reference (not scored) - [GHSA-j39j-6gw9-jw6h](https://insights.sbomify.com/GHSA-j39j-6gw9-jw6h/): git2 has potential undefined behavior when dereferencing Buf struct (not scored) - [GHSA-j26j-7qc4-3mrf](https://insights.sbomify.com/GHSA-j26j-7qc4-3mrf/): In `openclaw` MS Teams file-consent flow, pending uploads were authorized by `uploadId` alone. (not scored) - [GHSA-hxjg-93wc-h8p8](https://insights.sbomify.com/GHSA-hxjg-93wc-h8p8/): Komari: Management Interface CSRF (not scored) - [GHSA-hx4r-w6wj-j8fg](https://insights.sbomify.com/GHSA-hx4r-w6wj-j8fg/): devalue: Residual sparse-array CPU amplification in uneval (not scored) - [GHSA-hwqm-qvj9-4jr2](https://insights.sbomify.com/GHSA-hwqm-qvj9-4jr2/): gosaml2 CBC Padding Panic — Unauthenticated Process Crash (not scored) - [GHSA-hwmc-r6mf-jh83](https://insights.sbomify.com/GHSA-hwmc-r6mf-jh83/): Schema.org has cross-site scripting (XSS) via script break-out in toScript() output (not scored) - [GHSA-hwm2-4ph6-w6m5](https://insights.sbomify.com/GHSA-hwm2-4ph6-w6m5/): Rancher's restricted PodSecurityPolicy does not prevent containers from running as a privileged user (not scored) - [GHSA-hw5x-4r37-72w7](https://insights.sbomify.com/GHSA-hw5x-4r37-72w7/): Impact Unauthenticated denial of service. (not scored) - [GHSA-hvqh-jw65-wcpq](https://insights.sbomify.com/GHSA-hvqh-jw65-wcpq/): The default `formatGroup` and `formatResult` functions in `devbridge-autocomplete` concatenate values into HTML without escaping (not scored) - [GHSA-hv93-r4j3-q65f](https://insights.sbomify.com/GHSA-hv93-r4j3-q65f/): OpenClaw Hook Session Key Override Enables Targeted Cross-Session Routing (not scored) - [GHSA-hv85-774v-26fg](https://insights.sbomify.com/GHSA-hv85-774v-26fg/): auth-fetch-mcp: SSRF and disk exfiltration via unvalidated auth_fetch and download_media URLs (not scored) - [GHSA-hrxh-6v49-42gf](https://insights.sbomify.com/GHSA-hrxh-6v49-42gf/): gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities (not scored) - [GHSA-hr7j-63v7-vj7g](https://insights.sbomify.com/GHSA-hr7j-63v7-vj7g/): Pterodactyl Panel's SFTP sessions remain active after user account deletion or password change (not scored) - [GHSA-hq85-5cpj-mr62](https://insights.sbomify.com/GHSA-hq85-5cpj-mr62/): uv's bundled CA store trusts an emSign root whose intermediate CA keys are compromised (not scored) - [GHSA-hq84-x37p-j6q5](https://insights.sbomify.com/GHSA-hq84-x37p-j6q5/): Winter: Reflected XSS through the search query parameter in the backend Table widget (not scored) - [GHSA-hp74-gm6m-2qm5](https://insights.sbomify.com/GHSA-hp74-gm6m-2qm5/): Reauthentication Bypass via One-Time Access Token Login ## Summary A weaker authentication method (OTA token or signup token) is accepted (not scored) - [GHSA-hjwh-xvfw-qrwj](https://insights.sbomify.com/GHSA-hjwh-xvfw-qrwj/): SearXNG Basic Authentication Credentials Exposed Through MCP Logs and JSON-RPC Error Responses (not scored) - [GHSA-hjr9-wj7v-7hv8](https://insights.sbomify.com/GHSA-hjr9-wj7v-7hv8/): Sliver Vulnerable to Pre-Auth Memory Exhaustion via NoEncoder Bypass (not scored) - [GHSA-hhww-mrg2-969h](https://insights.sbomify.com/GHSA-hhww-mrg2-969h/): LiteLLM vulnerable to reflected XSS in /sso/debug/callback (not scored) - [GHSA-hhjv-jq77-cmvx](https://insights.sbomify.com/GHSA-hhjv-jq77-cmvx/): zeptoclaw has Android device shell blocklist bypass via argument permutation (not scored) - [GHSA-hgjx-r89m-m7v4](https://insights.sbomify.com/GHSA-hgjx-r89m-m7v4/): `FacturaScripts\Core\UploadedFile::move($destiny, $destinyName)` concatenates `$destiny` and `$destinyName` without normalizing the resulting path. (not scored) - [GHSA-hfpr-jhpq-x4rm](https://insights.sbomify.com/GHSA-hfpr-jhpq-x4rm/): OpenClaw: `operator.write` chat.send could reach admin-only config writes (not scored) - [GHSA-hff2-gcpx-8f4p](https://insights.sbomify.com/GHSA-hff2-gcpx-8f4p/): Apollo Router Core: Browser Bug Enables Bypass of XS-Search Prevention via Read-Only Cross-Site Request Forgery (not scored) - [GHSA-hfc8-w5f4-3x6m](https://insights.sbomify.com/GHSA-hfc8-w5f4-3x6m/): Ironic Standalone Operator's controller modifies user-owned resources without consent (not scored) - [GHSA-hc76-7mpc-qjqh](https://insights.sbomify.com/GHSA-hc76-7mpc-qjqh/): ImageMagick: Code injection in HTML encoder due to incomplete fix of CVE-2026-25797 (not scored) - [GHSA-hc4m-q9jh-xw4j](https://insights.sbomify.com/GHSA-hc4m-q9jh-xw4j/): nono-cli'scregistry pack verification can fail open when provenance metadata is absent (not scored) - [GHSA-hc3c-63hc-2r9f](https://insights.sbomify.com/GHSA-hc3c-63hc-2r9f/): Potential Panic on Overlong Ciphertext Buffer (not scored) --- From sbomify Insights: https://insights.sbomify.com/years/2026/page/194/