Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 196 of 1013.
- GHSA-cvpc-hccg-wmw4 Formie: Missing authorization in administrative settings allows low-privileged CP users to modify plugin configuration
- GHSA-crmm-hgp2-wgrp Laravel Framework: Temporary Signed URL Path Confusion
- GHSA-cr3w-cw5w-h3fj Saltcorn's Reflected XSS and Command Injection vulnerabilities can be chained for 1-click-RCE
- GHSA-cqmh-pcgr-q42f @axonflow/openclaw fix introduces plugin cache and credential-file permission hardening
- GHSA-cq8v-f236-94qc Rand is unsound with a custom logger using `rand::rng()`
- GHSA-cp6q-959q-f8rh Tiptap: mergeAttributes() turns an own __proto__ key into inherited executable DOM attributes
- GHSA-cp57-fq8g-qh6v Incorrect Check of Signer Response Norm During Verification
- GHSA-cmwh-g2h8-c222 Poweradmin: OIDC `sub` collation bypass in Poweradmin leading to account takeover
- GHSA-cjv3-m589-v3rx OpenClaw has Canvas route hardening for mixed-trust deployments
- GHSA-cjcg-cxmh-9wcr Praxis affected by HTTP/2 Bomb
- GHSA-chm2-m3w2-wcxm OpenClaw Google Chat spoofing access with allowlist authorized mutable email principal despite sender-ID mismatch
- GHSA-chgr-c6px-7xpp Missing `Sync` bound on `PyCFunction::new_closure` closures
- GHSA-cfcj-hqpf-hccf The `evolver fetch` subcommand in `index.js` writes Hub-supplied `bundled_files[]` into a directory derived from a Hub-supplied `skill_id`.
- GHSA-cc8f-fcx3-gpjr SurrealDB: Arbitrary file read via DEFINE ANALYZER mapper() filter
- GHSA-cc2g-gq8c-r332 grok-faf-mcp has an arbitrary local file read via unconfined `path` argument in FAF tools
- GHSA-c9xm-49cp-xcr9 rmcp OAuth client fetches server-controlled resource_metadata URLs
- GHSA-c8m5-c952-6cm4 Rustls: Session Debug formatting exposes TLS master secrets and resumption PSKs
- GHSA-c8jx-96c9-8xrp SurrealDB: Field-level SELECT permissions bypassed via indexed COUNT fast paths
- GHSA-c7ph-f7jm-xv4w rPGP's integrity protection of encrypted data was not always checked
- GHSA-c7hr-448w-65px MeshCentral has unsanitized data fields
- GHSA-c55g-rp4x-fx84 Microsoft DirectX: .spritefont multiply overflow only in 32-bit builds
- GHSA-c534-2w9c-x7fm Kite Kubernetes proxy path traversal allows authenticated users to bypass RBAC and read cluster-wide resources
- GHSA-c33x-vcv4-vg3g Cedar: JSON template is in scope missing slot-id validation allows link panic and decision divergence
- GHSA-c32p-wcqj-j677 CometBFT has inconsistencies between how commit signatures are verified and how block time is derived
- GHSA-c2xx-cjmh-9q8f Wagtail: Improper restriction handling on descendant collections in Documents and Images API
- GHSA-c279-989m-238f Sliver: Nil Pointer Dereference in tunnelCloseHandler causes panic when a reverse tunnel (rportfwd) close is attempted
- GHSA-9wcp-79g5-5c3c Appsmith Super User Creation Race Condition Allows Multiple Instance Administrators
- GHSA-9v4j-7g44-qcqw When auto-refresh is enabled, Algernon spins up an SSE handler that streams a `data:` line for every filesystem event under the watched directory.
- GHSA-9r75-g2cr-3h76 Vercel Workflow Allows Webhook Creation with Predictable User-Specified Tokens
- GHSA-9qhg-99ww-9mqc utcp-http SSRF: HTTP tool invocation follows redirects without re-validating the target
- GHSA-9q82-xgwf-vj6h Apollo Server: Browser bug allows for bypass of XS-Search (read-only Cross-Site Request Forgery) prevention
- GHSA-9q47-3cm2-2rp8 pyLoad: Rate-Limit Bypass and Audit-Log Spoofing via Trusted Client-Controlled `X-Forwarded-For` Header
- GHSA-9q2p-vc84-2rwm OpenClaw: system.run allow-always persistence included shell-commented payload tails
- GHSA-9pm8-vwc5-w2hm Fat Free CRM has BOLA in DELETE /emails/:id - Any authenticated user can hit this endpoint and delete emails by ID
- GHSA-9mqm-qcwf-5qhg CredSweeper: Recursive archive size-limit bypass in deep scanner allows crafted compressed inputs to exhaust resources
- GHSA-9mph-4f7v-fmvh OpenClaw has agent avatar symlink traversal in gateway session metadata
- GHSA-9m6v-8fxc-4r44 Sulu: Used API Keys may be available via Admin API
- GHSA-9m65-766c-r333 A type-confusion bug in seroval ≤ 1.5.2 ([upstream advisory](https://github.com/lxsmnsyc/seroval/security/advisories)) allowed a
- GHSA-9j7f-3r4p-pwh6 nono-py vulnerable to authorization bypass / policy confusion
- GHSA-9h64-2846-7x7f Axonflow fixed bugs by implementing multi-tenant isolation and access-control hardening
- GHSA-9gjv-jvm7-vv2v Gramps Web API: Private Sub-Object Data in Non-Private Objects Exposed to Guest Users
- GHSA-9ggv-8w38-r7pm TypeORM: SQL Injection in UpdateQueryBuilder/SoftDeleteQueryBuilder orderBy (MySQL/MariaDB)
- GHSA-9fw6-xgg2-mq9q Hysteria: A specially constructed quic package can crash the server OOM when the sniff is enabled
- GHSA-9f72-qcpw-2hxc OpenClaw: Native prompt image auto-load did not honor tools.fs.workspaceOnly in sandboxed runs
- GHSA-9cqf-hhrq-7v45 Scope note This endpoint does not exist in v3.7.3 or on master.
- GHSA-9cp7-j3f8-p5jx Daptin has Unauthenticated Path Traversal and Zip Slip
- GHSA-9c5c-9qcx-q35q @nestjs/platform-fastify: Path-scoped middleware bypass via absolute-form request targets
- GHSA-99j7-fhr2-xfj4 `exploration` was removed from crates.io for malicious code
- GHSA-98x5-vq43-vc5p semantic-router exposed to compromised litellm wheel (CVE-2026-42208) via unbounded transitive pin
- GHSA-98cp-rj9f-6v5g ImageMagick has has a stack-buffer-overflow in MNG encoder with oversized pallete
- GHSA-97r8-rf7q-wmjw Sveltia CMS: Stored XSS in entry summary rendering via entity-decoded HTML
- GHSA-96qw-h329-v5rg Shakapacker has environment variable leak via EnvironmentPlugin that exposes secrets to client-side bundles
- GHSA-96h4-vgxj-gvm2 Nest: Unbounded memory growth in the NestJS TCP microservice transport
- GHSA-95q8-x6r6-672m Lemmy may expose private community data through community, saved, liked, and modlog API views
- GHSA-955r-262c-33jc Telnyx has malicious code in PyPI versions 4.87.1 and 4.87.2
- GHSA-953h-535j-jg2v The MCP proxy's client-facing session ID embeds the authenticated caller's subject (JWT `sub` claim) specifically as an anti-hija
- GHSA-943q-mwmv-hhvh OpenClaw: Gateway /tools/invoke tool escalation + ACP permission auto-approval
- GHSA-93qj-5q5v-3c2h Trojanized pantheon-agents 0.6.1 and 0.6.2 on PyPI ship a credential stealer (supply-chain account compromise)
- GHSA-9395-2g46-rj3f djust: Six template-layer defects emit attacker-controlled markup unescaped (XSS)
- GHSA-92vj-hp7m-gwcj Nerdbank.MessagePack has Inefficient CPU Computation
- GHSA-92hv-j533-69wc Wagtail: Identification of documents by SHA1 hash
- GHSA-92hr-gmr6-h8cp Etherpad addressed weak token RNG, login timing, plugin path handling, API request handling
- GHSA-9237-rg5p-rhfw @saltcorn/data: Tenant user role is used for tenant creation role check
- GHSA-8x4m-qw58-3pcx mppx has multiple payment bypass and griefing vulnerabilities
- GHSA-8x3w-qj7j-gqhf openmls has improper tag validation
- GHSA-8wvg-r2j4-3737 Vikunja: Assignee email addresses disclosed to read-only project members via the task assignees endpoint
- GHSA-8rqh-vxpr-x77p plone.restapi: Stored XSS by spoofing mime type
- GHSA-8rfp-98v4-mmr6 Bleach: URI sanitization allows disallowed URI schemes with Unicode > U+00A0 in output
- GHSA-8qx3-8gm5-9cj2 pickem vulnerable to terminal escape-sequence injection via unsanitized item text
- GHSA-8qm3-746x-r74r devalue `uneval`ed code can create objects with polluted prototypes when `eval`ed
- GHSA-8q6q-m837-fv64 Koel has SSRF through Authenticated Subsonic podcast feed URLs
- GHSA-8q49-2h5h-434x FrontMCP: Server-Side Request Forgery (SSRF) in the OpenAPI adapter spec-change poller
- GHSA-8pqq-224h-x875 ogham-mcp had credentials embedded in published PyPI sdists -- Neon postgres URLs and Voyage API key
- GHSA-8pcw-h6w9-h46g plone.app.contenttypes has a Denial of Service in File Upload due to excessive filename length
- GHSA-8mf7-vv8w-hjr2 OpenClaw's tools.exec.safeBins generic fallback allowed interpreter-style inline payload execution in allowlist mode
- GHSA-8m9v-xpgf-g99m OpenClaw has an unauthorized sender bypass in its stop triggers and /models command authorization
- GHSA-8h8q-6873-q5fj Next.js Vulnerable to Denial of Service with Server Components
- GHSA-8h58-w33p-wq3g rPGP affected by crash in message handling for deeply nested messages
- GHSA-8grv-jq2g-cfhw amphp/http-server affected by HTTP/2 DDoS vulnerability
- GHSA-8g7g-hmwm-6rv2 n8n-mcp affected by path traversal, redirect-following SSRF, and telemetry payload exposure
- GHSA-8g29-8xwr-qmhr @grackle-ai/server JSON.parse lacks try-catch logic in its gRPC Service AdapterConfig Handling
- GHSA-8fh9-c4jq-94h4 idunno.Bluesky, idunno.AtProto and idunno.AtProto.OAuthCallback Denial of Service Vulnerability
- GHSA-8f6j-263m-g72x `SignedDataVerifier` attempts to perform online revocation checking when `enable_online_checks=True`, but its OCSP validation lo
- GHSA-8cp7-rp8r-mg77 OpenClaw has SSRF guard bypass via IPv6 transition over ISATAP
- GHSA-8cp3-qxj6-px34 utcp-http has an OAuth2 `tokenUrl` Trust Boundary Bypass in OpenAPI Conversion
- GHSA-8c8m-p3m8-cjg8 Nodemailer: A nested comment ends early in addressparser, releasing the rest of the comment as a recipient
- GHSA-89v5-38xr-9m4j Postiz has Multiple SSRF Vectors - Webhooks, RSS Feed, URL Loader
- GHSA-8986-v76q-8vr2 @keep-network/tbtc-v2 revealing P2PKH deposit with a wrapped P2SH script
- GHSA-88q9-cmp2-c2vq oxidize-pdf: NaN/inf bypass in colour content-stream emission causes PDF rejection (DoS)
- GHSA-88q6-jcjg-hvmw jose-swift has JWT Signature Verification Bypass via None Algorithm
- GHSA-88pr-878c-24wf Flowise on current `main` allows an authenticated user with `documentStores:preview-process` permission to trigger the `S3 Direct
- GHSA-889w-m37p-88m5 pyLoad: Api.set_user_permission never invalidates the target's session
- GHSA-8823-qg2x-pv9f Ultimate Sitemap Parser (USP): Gzip Decompression Bomb Bypasses Sitemap Size Limit
- GHSA-86xp-94pg-8r6r Microsoft Security Advisory CVE-2026-92707 - ASP.NET Core Denial of Service Vulnerability
- GHSA-85x2-q946-cp5h Vulnerability summary addressparser ends an angle-addr at the first `>` it sees, including one inside a quoted local part, a comment or a domain literal.
- GHSA-84jc-3hj2-hwc7 kanidmd_lib: Image upload validators run before authorization; PNG validator panics on malformed input
- GHSA-84g5-x8j3-7235 Netfoil has incorrect allowlist enforcement
- GHSA-846p-hgpv-vphc OpenClaw: QQ Bot structured payloads could read arbitrary local files
- GHSA-83x9-vc3c-hghc OpenSearch has a bypass of REST Layer Authorization Using Malformed Paths
- GHSA-83pf-v6qq-pwmr Fickling has a detection bypass via stdlib network-protocol constructors