Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 195 of 1013.
- GHSA-h9mw-h4qc-f5jf **CVSS 6.5 Medium** — The GraphQL API served by kubernetes-graphql-gateway is vulnerable to Denial-of-Service (DoS) attacks due to a complet
- GHSA-h97f-6pqj-q452 OpenClaw has a IPv6 multicast SSRF classifier bypass
- GHSA-h8w2-rv57-vc6f splunk-otel-javaagent: Unsafe deserialization in RMI instrumentation may lead to Remote Code Execution
- GHSA-h8cj-hpmg-636v appsmith has SQL Injection in FilterDataService via Unsafe DROP TABLE Execution
- GHSA-h829-5cg7-6hff gitverify has improper tag signature verification
- GHSA-h72h-ppcx-998p Zebra has pre-handshake buffer capacity reservation based on attacker-claimed body length
- GHSA-h656-5vcf-cm23 OpenClaw: Unauthorized Telegram Senders Trigger Media Download and Disk Write Before Access Check
- GHSA-h5x4-m2qf-r4f2 Possible UTF-8 corruption in Diesels SQLite backend
- GHSA-h5rg-8p7f-47g2 SurrealDB: SSRF via JWKS URL — Redirect Following in JWT Key Fetch
- GHSA-h5jc-78hr-3pc9 Sveltia CMS: Stored XSS in Markdown/RichText preview via unsandboxed same-origin iframe
- GHSA-h5fq-653g-gxrm ots has a negative expire override that can bypass its secret retention policy
- GHSA-h4hf-v6w5-897x Poweradmin: API user-update endpoint leads to a non-admin reset any user's password and take over the superuser account
- GHSA-h4h3-3rfj-x6fq SurrealDB: Indexed ORDER BY leaks the value ordering of a SELECT-restricted field
- GHSA-h4g2-xfmw-q2c9 Clauster: Non-loopback deployments can serve the dashboard unauthenticated when auth.enabled is unset
- GHSA-h4fw-6r7f-w494 Webauthn has a User Verification Downgrade via Default-Open ClientOverridePolicy
- GHSA-h4fr-cmh5-qr62 Fallow: A `.*` glob segment let an analyzed repository make Fallow test paths in the parent of the project root
- GHSA-h3hw-29fv-2x75 @envelop/graphql-modules has a Race Condition vulnerability
- GHSA-h39g-6x3c-7fq9 Zio has SubFileSystem Path Confinement Bypass via Unresolved `..` Segment
- GHSA-h37v-hp6w-2pp8 ml-dsa's UseHint function has off by two error when r0 equals zero
- GHSA-h2v8-394m-p7vv The built-in (but disabled by default) Brotli certificate decoder bounds the output buffer but accepts an input-selected history window.
- GHSA-h29g-c9cx-c73q torrentpier has PHP Serialize Injections
- GHSA-h25m-26qc-wcjf Next.js HTTP request deserialization can lead to DoS when using insecure React Server Components
- GHSA-gxxh-8vcj-w2mh livewire-markdown-editor has arbitrary file upload that allows stored XSS via attachment handler
- GHSA-gxhx-2686-5h9g slack-go `SecretsVerifier` accepts empty signing secret without precondition
- GHSA-gx7w-56w6-g48x Caddy: Remote Admin Authorization Bypass on PKI Endpoints via Prefix-Based Path Matching
- GHSA-gw32-9rmw-qwww svelte is vulnerable to XSS with textarea bind:value
- GHSA-gv8r-9rw9-9697 Traefik affected by TLS ClientAuth Bypass on HTTP/3
- GHSA-grh9-37g7-53mj WireGuard Portal v2 has Open Redirect Vulnerability in OAuth Authentication Flow
- GHSA-gr3r-crp5-qrrm Compromised tag of intercom-php published via GitHub
- GHSA-gqvg-gmmx-x4hm MLflow introduced `MLFLOW_ALLOW_PICKLE_DESERIALIZATION` as a security control to prevent unsafe `pickle.load` execution during mo
- GHSA-gqqj-85qm-8qhf Paperclip: codex_local inherited ChatGPT/OpenAI-connected Gmail and was able to send real email
- GHSA-gq4g-fpc9-vjfq Impact `Webauthn\SimpleFakeCredentialGenerator` is the library-provided default implementation of the `FakeCredentialGenerator` interface.
- GHSA-gpxg-fx2g-qxj2 The kanidmd web UI renders the WebAuthn passkey-registration challenge as raw JSON inside an inline `<script id="data">` element
- GHSA-gpx9-96j6-pp87 TaskWeaver has Protection Mechanism Failure and Server-Side Request Forgery (SSRF)
- GHSA-gp3q-wpq4-5c5h OpenClaw: LINE group allowlist scope mismatch with DM pairing-store entries
- GHSA-gj6x-q8rh-wj6x Curio exposes database credentials to users with network access through verbose HTTP error responses
- GHSA-gj48-438w-jh9v Bleach clean() / Cleaner() fails to sanitize dangerous URI schemes in allowed formaction attributes
- GHSA-gj2h-2fpw-fhv9 @nuxt/ui: UAuthForm / UForm SSR markup omits `method`, leaking credentials via GET if submitted before hydration
- GHSA-ghvf-qf6h-g8x5 NocoBase: Arbitrary File Write chained with Local file Inclusion leads to Remote code execution
- GHSA-ghmh-jhmj-wcmf nebula-mesh's stores enrollment tokens unhashed in SQLite
- GHSA-ghc5-95c2-vwcv Auth0 Symfony SDK has Insufficient Entropy in Cookie Encryption
- GHSA-ggxf-9f6j-w742 Diesel allows loading a SQLite database from a byte buffer, represented as `&[u8]`, at runtime via the `SqliteConnection::deserialize_readon
- GHSA-ggxf-37hm-9wqf instagrapi: Unsafe signup challenge path handling in instagrapi
- GHSA-gfmx-pph7-g46x Impact Lower-trust background runtime output is injected into trusted `System:` events, and local async exec completion misses the intend
- GHSA-gcjh-h69q-9w9g cel-go: JSON Private Fields Exposed via NativeTypes and ParseStructTag
- GHSA-gcj7-r3hg-m7w6 OpenClaw's voice-call Twilio replay dedupe now bound to authenticated webhook identity
- GHSA-g936-7jqj-mwv8 TSDProxy: Internal proxy auth token forwarded to backend services enables management API escalation
- GHSA-g7r4-m6w7-qqqr esbuild allows arbitrary file read when running the development server on Windows
- GHSA-g7m4-839x-ch6v The `digits` parameter parsed from a provisioning URI is validated only with a lower bound (`$value > 0`) and has no upper bound
- GHSA-g75f-g53v-794x Bleach linkify(parse_email=True) CPU exhaustion via unbounded email regex scanning
- GHSA-g5ff-637f-6q2m LiteLLM: internal_user_viewer arbitrary local file read via `vertex_ai_credentials`
- GHSA-g59m-gf8j-gjf5 AWS SDK for Rust v1 adopted defense in depth enhancement for region parameter value
- GHSA-g588-cjg3-6g78 Steamworks game clients/servers using P2P authentication vulnerable to denial of service
- GHSA-g53w-w6mj-hrpp The MCP router (ext_proc) exposes an `initialize`-method code path that, when a request carries an `mcp-init-host` header, bypass
- GHSA-g4vj-cjjj-v7hg Defense in Depth update for NuGet Client
- GHSA-g485-8j3v-p6x8 Anonymous GitHub fetches repository content (e.g., markdown files) from GitHub's API and renders it without sanitization.
- GHSA-g433-pq76-6cmf Bug fixes in hpke-rs, hpke-rs-rust-crypto
- GHSA-g3qj-j598-cxmq fido2-lib is vulnerable to DoS via cbor-extract heap buffer over-read in CBOR attestation parsing
- GHSA-g3hq-hphg-8fhh pheditor's terminal feature restricts callers to an allowlist of commands (`TERMINAL_COMMANDS`) and rejects shell metacharacters.
- GHSA-g39v-cvjh-8fpf Home Assistant MCP Server: YAML config backups written under www/ are served unauthenticated at /local/
- GHSA-g38r-8gmr-ghrf `mysten-metrics` was removed from crates.io for malicious code
- GHSA-g38j-7v97-x298 Creating a task relation over CalDAV does not run the `TaskRelation.CanCreate` permission check that the REST API enforces.
- GHSA-g2v6-rqmx-r4w6 @vue/server-renderer: XSS via missing CR in attribute-name blacklist
- GHSA-g2gp-3wwq-f4ph league/commonmark: Denial of service via adjacent inline attribute blocks
- GHSA-g28h-2cmm-rj9x langchain-nvidia-ai-endpoints has local file disclosure through VLM image inputs
- GHSA-g27r-r6ph-vf5r sequoia-git has broken hard revocation handling
- GHSA-g27f-9qjv-22pm OpenClaw log poisoning (indirect prompt injection) via WebSocket headers
- GHSA-fxc9-7j2w-vx54 mpp has multiple payment bypass and griefing vulnerabilities
- GHSA-fx4f-mhw4-qm7j vibeio-http has a DoS vulnerability in HTTP/1.x chunked encoding parser triggered by maliciously crafted chunk lengths
- GHSA-fwhj-785h-43hh OliveTin has crash on NPE by calling APIs with invalid bindings or log references
- GHSA-frvp-7c67-39w9 Node.js Adapter for Hono: Path traversal in `serve-static` on Windows via encoded backslash (`%5C`)
- GHSA-fr26-jjhm-638c pyLoad: Tar extraction creates device nodes and FIFOs (member types not filtered; tarfile extractall without filter=)
- GHSA-fqf6-gxhh-2xhw uutils coreutils: cp/install/mv/ln --suffix alone does not enable backup mode (silent data loss vs GNU)
- GHSA-fq3w-p4fg-mw73 fixurjavainstall: Previous Fuji versions can accidentally wipe `/usr/share/man/man8`
- GHSA-fpw4-p57j-hqmq Paperclip: Stored XSS via javascript: URLs in MarkdownBody — urlTransform override disables react-markdown sanitization
- GHSA-fpf5-4jw8-67x8 rust-zserio has Unbounded Memory Allocation
- GHSA-fp55-jw48-c537 astral-tokio-tar is Vulnerable to PAX Header Desynchronization
- GHSA-fmg6-246m-9g2v Auth0 laravel-auth0 SDK has Insufficient Entropy in Cookie Encryption
- GHSA-fm29-4mq3-phg6 Winter: ImportExportController AJAX handlers bypass granular import/export permission gate
- GHSA-fj52-5g4h-gmq8 pyLoad's Session Not Invalidated After Permission Changes
- GHSA-fhvh-vw7h-9xf3 libcrux-ml-dsa: Signature Verification on AVX2 Platforms Mishandles Edge Case
- GHSA-fhp4-pr5j-46m5 Muhammara has a NULL pointer dereference in LZWDecode filter when DecodeParms omits EarlyChange key
- GHSA-fhgh-wq4q-r37x uniget CLI: Metadata signature verification only runs when UNIGET_IGNORE_METADATA_SIGNATURE is set
- GHSA-ff9q-rm55-q7qr diesel-async may expose uninitialized padding bytes for MySQL temporal columns
- GHSA-ff98-w8hj-qrxf OpenClaw plugin runtime command execution is part of trusted plugin boundary
- GHSA-fcpv-w245-r2q7 DotNetNuke.Core security code analysis rules triggered
- GHSA-fcmh-qfxc-w685 kube-router: BGP Peer Passwords Exposed in Logs at Verbose Logging Level
- GHSA-fc86-6rv6-2jpm webonyx/graphql-php has quadratic validation cost in OverlappingFieldsCanBeMerged via inline fragments
- GHSA-f9ff-5x35-7gfw Authorization for scoped (agent) MCP callers is enforced **inline, per tool**, and is applied inconsistently — several mutating t
- GHSA-f897-62hf-6gxq MCP TypeScript SDK: HTTP server transports and handlers did not limit request body size or JSON-RPC batch length
- GHSA-f82j-v89j-mf86 SurrealDB: `RELATE` overwrites existing edge records without `UPDATE` permission
- GHSA-f6h3-846h-2r8w OpenClaw's elevated allowFrom accepted broader identity signals than specified within sender-scoped authorization
- GHSA-f67f-hcr6-94mf Zen-AI-Pentest has Shell Injection via untrusted issue title in ZenClaw Discord Integration workflow
- GHSA-f66q-9rf6-8795 Flask-Security-Too: WebAuthn reauthentication freshness bypass via cross-user assertion
- GHSA-f5v8-v6q3-q4h6 Meridian: Multiple defense-in-depth gaps (collection/depth caps, telemetry, retry, fan-out)
- GHSA-f45q-w629-wr25 Hubuum client library (Rust): Authenticated requests may escape the configured base path through redirects
- GHSA-f3cj-j4f6-wq85 Svelte: SSR XSS via Insecure Promise Serialization in hydratable
- GHSA-f2hq-32vh-53cc postal-mime: Quadratic CPU consumption when decoding a header of many joinable RFC 2047 base64 encoded words
- GHSA-f25v-x6vr-962g Pheditor: Authentication Bypass in Forced Password-Change Flow via Unverified Current Password
- GHSA-cwv4-h3j5-w3cf rama has Stored XSS in ServeDir HTML directory listing via unescaped file names and URI path