# Vulnerabilities published in 2026


- [GHSA-cvpc-hccg-wmw4](https://insights.sbomify.com/GHSA-cvpc-hccg-wmw4/): Formie: Missing authorization in administrative settings allows low-privileged CP users to modify plugin configuration (not scored)
- [GHSA-crmm-hgp2-wgrp](https://insights.sbomify.com/GHSA-crmm-hgp2-wgrp/): Laravel Framework: Temporary Signed URL Path Confusion (not scored)
- [GHSA-cr3w-cw5w-h3fj](https://insights.sbomify.com/GHSA-cr3w-cw5w-h3fj/): Saltcorn's Reflected XSS and Command Injection vulnerabilities can be chained for 1-click-RCE (not scored)
- [GHSA-cqmh-pcgr-q42f](https://insights.sbomify.com/GHSA-cqmh-pcgr-q42f/): @axonflow/openclaw fix introduces plugin cache and credential-file permission hardening (not scored)
- [GHSA-cq8v-f236-94qc](https://insights.sbomify.com/GHSA-cq8v-f236-94qc/): Rand is unsound with a custom logger using `rand::rng()` (not scored)
- [GHSA-cp6q-959q-f8rh](https://insights.sbomify.com/GHSA-cp6q-959q-f8rh/): Tiptap: mergeAttributes() turns an own __proto__ key into inherited executable DOM attributes (not scored)
- [GHSA-cp57-fq8g-qh6v](https://insights.sbomify.com/GHSA-cp57-fq8g-qh6v/): Incorrect Check of Signer Response Norm During Verification (not scored)
- [GHSA-cmwh-g2h8-c222](https://insights.sbomify.com/GHSA-cmwh-g2h8-c222/): Poweradmin: OIDC `sub` collation bypass in Poweradmin leading to account takeover (not scored)
- [GHSA-cjv3-m589-v3rx](https://insights.sbomify.com/GHSA-cjv3-m589-v3rx/): OpenClaw has Canvas route hardening for mixed-trust deployments (not scored)
- [GHSA-cjcg-cxmh-9wcr](https://insights.sbomify.com/GHSA-cjcg-cxmh-9wcr/): Praxis affected by HTTP/2 Bomb (not scored)
- [GHSA-chm2-m3w2-wcxm](https://insights.sbomify.com/GHSA-chm2-m3w2-wcxm/): OpenClaw Google Chat spoofing access with allowlist authorized mutable email principal despite sender-ID mismatch (not scored)
- [GHSA-chgr-c6px-7xpp](https://insights.sbomify.com/GHSA-chgr-c6px-7xpp/): Missing `Sync` bound on `PyCFunction::new_closure` closures (not scored)
- [GHSA-cfcj-hqpf-hccf](https://insights.sbomify.com/GHSA-cfcj-hqpf-hccf/): The `evolver fetch` subcommand in `index.js` writes Hub-supplied `bundled_files[]` into a directory derived from a Hub-supplied `skill_id`. (not scored)
- [GHSA-cc8f-fcx3-gpjr](https://insights.sbomify.com/GHSA-cc8f-fcx3-gpjr/): SurrealDB: Arbitrary file read via DEFINE ANALYZER mapper() filter (not scored)
- [GHSA-cc2g-gq8c-r332](https://insights.sbomify.com/GHSA-cc2g-gq8c-r332/): grok-faf-mcp has an arbitrary local file read via unconfined `path` argument in FAF tools (not scored)
- [GHSA-c9xm-49cp-xcr9](https://insights.sbomify.com/GHSA-c9xm-49cp-xcr9/): rmcp OAuth client fetches server-controlled resource_metadata URLs (not scored)
- [GHSA-c8m5-c952-6cm4](https://insights.sbomify.com/GHSA-c8m5-c952-6cm4/): Rustls: Session Debug formatting exposes TLS master secrets and resumption PSKs (not scored)
- [GHSA-c8jx-96c9-8xrp](https://insights.sbomify.com/GHSA-c8jx-96c9-8xrp/): SurrealDB: Field-level SELECT permissions bypassed via indexed COUNT fast paths (not scored)
- [GHSA-c7ph-f7jm-xv4w](https://insights.sbomify.com/GHSA-c7ph-f7jm-xv4w/): rPGP's integrity protection of encrypted data was not always checked (not scored)
- [GHSA-c7hr-448w-65px](https://insights.sbomify.com/GHSA-c7hr-448w-65px/): MeshCentral has unsanitized data fields (not scored)
- [GHSA-c55g-rp4x-fx84](https://insights.sbomify.com/GHSA-c55g-rp4x-fx84/): Microsoft DirectX: .spritefont multiply overflow only in 32-bit builds (not scored)
- [GHSA-c534-2w9c-x7fm](https://insights.sbomify.com/GHSA-c534-2w9c-x7fm/): Kite Kubernetes proxy path traversal allows authenticated users to bypass RBAC and read cluster-wide resources (not scored)
- [GHSA-c33x-vcv4-vg3g](https://insights.sbomify.com/GHSA-c33x-vcv4-vg3g/): Cedar: JSON template is in scope missing slot-id validation allows link panic and decision divergence (not scored)
- [GHSA-c32p-wcqj-j677](https://insights.sbomify.com/GHSA-c32p-wcqj-j677/): CometBFT has inconsistencies between how commit signatures are verified and how block time is derived (not scored)
- [GHSA-c2xx-cjmh-9q8f](https://insights.sbomify.com/GHSA-c2xx-cjmh-9q8f/): Wagtail: Improper restriction handling on descendant collections in Documents and Images API (not scored)
- [GHSA-c279-989m-238f](https://insights.sbomify.com/GHSA-c279-989m-238f/): Sliver: Nil Pointer Dereference in tunnelCloseHandler causes panic when a reverse tunnel (rportfwd) close is attempted (not scored)
- [GHSA-9wcp-79g5-5c3c](https://insights.sbomify.com/GHSA-9wcp-79g5-5c3c/): Appsmith Super User Creation Race Condition Allows Multiple Instance Administrators (not scored)
- [GHSA-9v4j-7g44-qcqw](https://insights.sbomify.com/GHSA-9v4j-7g44-qcqw/): When auto-refresh is enabled, Algernon spins up an SSE handler that streams a `data:` line for every filesystem event under the watched directory. (not scored)
- [GHSA-9r75-g2cr-3h76](https://insights.sbomify.com/GHSA-9r75-g2cr-3h76/): Vercel Workflow Allows Webhook Creation with Predictable User-Specified Tokens (not scored)
- [GHSA-9qhg-99ww-9mqc](https://insights.sbomify.com/GHSA-9qhg-99ww-9mqc/): utcp-http SSRF: HTTP tool invocation follows redirects without re-validating the target (not scored)
- [GHSA-9q82-xgwf-vj6h](https://insights.sbomify.com/GHSA-9q82-xgwf-vj6h/): Apollo Server: Browser bug allows for bypass of XS-Search (read-only Cross-Site Request Forgery) prevention (not scored)
- [GHSA-9q47-3cm2-2rp8](https://insights.sbomify.com/GHSA-9q47-3cm2-2rp8/): pyLoad: Rate-Limit Bypass and Audit-Log Spoofing via Trusted Client-Controlled `X-Forwarded-For` Header (not scored)
- [GHSA-9q2p-vc84-2rwm](https://insights.sbomify.com/GHSA-9q2p-vc84-2rwm/): OpenClaw: system.run allow-always persistence included shell-commented payload tails (not scored)
- [GHSA-9pm8-vwc5-w2hm](https://insights.sbomify.com/GHSA-9pm8-vwc5-w2hm/): Fat Free CRM has BOLA in DELETE /emails/:id - Any authenticated user can hit this endpoint and delete emails by ID (not scored)
- [GHSA-9mqm-qcwf-5qhg](https://insights.sbomify.com/GHSA-9mqm-qcwf-5qhg/): CredSweeper: Recursive archive size-limit bypass in deep scanner allows crafted compressed inputs to exhaust resources (not scored)
- [GHSA-9mph-4f7v-fmvh](https://insights.sbomify.com/GHSA-9mph-4f7v-fmvh/): OpenClaw has agent avatar symlink traversal in gateway session metadata (not scored)
- [GHSA-9m6v-8fxc-4r44](https://insights.sbomify.com/GHSA-9m6v-8fxc-4r44/): Sulu: Used API Keys may be available via Admin API (not scored)
- [GHSA-9m65-766c-r333](https://insights.sbomify.com/GHSA-9m65-766c-r333/): A type-confusion bug in seroval ≤ 1.5.2 ([upstream advisory](https://github.com/lxsmnsyc/seroval/security/advisories)) allowed a (not scored)
- [GHSA-9j7f-3r4p-pwh6](https://insights.sbomify.com/GHSA-9j7f-3r4p-pwh6/): nono-py vulnerable to authorization bypass / policy confusion (not scored)
- [GHSA-9h64-2846-7x7f](https://insights.sbomify.com/GHSA-9h64-2846-7x7f/): Axonflow fixed bugs by implementing multi-tenant isolation and access-control hardening (not scored)
- [GHSA-9gjv-jvm7-vv2v](https://insights.sbomify.com/GHSA-9gjv-jvm7-vv2v/): Gramps Web API: Private Sub-Object Data in Non-Private Objects Exposed to Guest Users (not scored)
- [GHSA-9ggv-8w38-r7pm](https://insights.sbomify.com/GHSA-9ggv-8w38-r7pm/): TypeORM: SQL Injection in UpdateQueryBuilder/SoftDeleteQueryBuilder orderBy (MySQL/MariaDB) (not scored)
- [GHSA-9fw6-xgg2-mq9q](https://insights.sbomify.com/GHSA-9fw6-xgg2-mq9q/): Hysteria: A specially constructed quic package can crash the server OOM when the sniff is enabled (not scored)
- [GHSA-9f72-qcpw-2hxc](https://insights.sbomify.com/GHSA-9f72-qcpw-2hxc/): OpenClaw: Native prompt image auto-load did not honor tools.fs.workspaceOnly in sandboxed runs (not scored)
- [GHSA-9cqf-hhrq-7v45](https://insights.sbomify.com/GHSA-9cqf-hhrq-7v45/): Scope note This endpoint does not exist in v3.7.3 or on master. (not scored)
- [GHSA-9cp7-j3f8-p5jx](https://insights.sbomify.com/GHSA-9cp7-j3f8-p5jx/): Daptin has Unauthenticated Path Traversal and Zip Slip (not scored)
- [GHSA-9c5c-9qcx-q35q](https://insights.sbomify.com/GHSA-9c5c-9qcx-q35q/): @nestjs/platform-fastify: Path-scoped middleware bypass via absolute-form request targets (not scored)
- [GHSA-99j7-fhr2-xfj4](https://insights.sbomify.com/GHSA-99j7-fhr2-xfj4/): `exploration` was removed from crates.io for malicious code (not scored)
- [GHSA-98x5-vq43-vc5p](https://insights.sbomify.com/GHSA-98x5-vq43-vc5p/): semantic-router exposed to compromised litellm wheel (CVE-2026-42208) via unbounded transitive pin (not scored)
- [GHSA-98cp-rj9f-6v5g](https://insights.sbomify.com/GHSA-98cp-rj9f-6v5g/): ImageMagick has has a stack-buffer-overflow in MNG encoder with oversized pallete (not scored)
- [GHSA-97r8-rf7q-wmjw](https://insights.sbomify.com/GHSA-97r8-rf7q-wmjw/): Sveltia CMS: Stored XSS in entry summary rendering via entity-decoded HTML (not scored)
- [GHSA-96qw-h329-v5rg](https://insights.sbomify.com/GHSA-96qw-h329-v5rg/): Shakapacker has environment variable leak via EnvironmentPlugin that exposes secrets to client-side bundles (not scored)
- [GHSA-96h4-vgxj-gvm2](https://insights.sbomify.com/GHSA-96h4-vgxj-gvm2/): Nest: Unbounded memory growth in the NestJS TCP microservice transport (not scored)
- [GHSA-95q8-x6r6-672m](https://insights.sbomify.com/GHSA-95q8-x6r6-672m/): Lemmy may expose private community data through community, saved, liked, and modlog API views (not scored)
- [GHSA-955r-262c-33jc](https://insights.sbomify.com/GHSA-955r-262c-33jc/): Telnyx has malicious code in PyPI versions 4.87.1 and 4.87.2 (not scored)
- [GHSA-953h-535j-jg2v](https://insights.sbomify.com/GHSA-953h-535j-jg2v/): The MCP proxy's client-facing session ID embeds the authenticated caller's subject (JWT `sub` claim) specifically as an anti-hija (not scored)
- [GHSA-943q-mwmv-hhvh](https://insights.sbomify.com/GHSA-943q-mwmv-hhvh/): OpenClaw: Gateway /tools/invoke tool escalation + ACP permission auto-approval (not scored)
- [GHSA-93qj-5q5v-3c2h](https://insights.sbomify.com/GHSA-93qj-5q5v-3c2h/): Trojanized pantheon-agents 0.6.1 and 0.6.2 on PyPI ship a credential stealer (supply-chain account compromise) (not scored)
- [GHSA-9395-2g46-rj3f](https://insights.sbomify.com/GHSA-9395-2g46-rj3f/): djust: Six template-layer defects emit attacker-controlled markup unescaped (XSS) (not scored)
- [GHSA-92vj-hp7m-gwcj](https://insights.sbomify.com/GHSA-92vj-hp7m-gwcj/): Nerdbank.MessagePack has Inefficient CPU Computation (not scored)
- [GHSA-92hv-j533-69wc](https://insights.sbomify.com/GHSA-92hv-j533-69wc/): Wagtail: Identification of documents by SHA1 hash (not scored)
- [GHSA-92hr-gmr6-h8cp](https://insights.sbomify.com/GHSA-92hr-gmr6-h8cp/): Etherpad addressed weak token RNG, login timing, plugin path handling, API request handling (not scored)
- [GHSA-9237-rg5p-rhfw](https://insights.sbomify.com/GHSA-9237-rg5p-rhfw/): @saltcorn/data: Tenant user role is used for tenant creation role check (not scored)
- [GHSA-8x4m-qw58-3pcx](https://insights.sbomify.com/GHSA-8x4m-qw58-3pcx/): mppx has multiple payment bypass and griefing vulnerabilities (not scored)
- [GHSA-8x3w-qj7j-gqhf](https://insights.sbomify.com/GHSA-8x3w-qj7j-gqhf/): openmls has improper tag validation (not scored)
- [GHSA-8wvg-r2j4-3737](https://insights.sbomify.com/GHSA-8wvg-r2j4-3737/): Vikunja: Assignee email addresses disclosed to read-only project members via the task assignees endpoint (not scored)
- [GHSA-8rqh-vxpr-x77p](https://insights.sbomify.com/GHSA-8rqh-vxpr-x77p/): plone.restapi: Stored XSS by spoofing mime type (not scored)
- [GHSA-8rfp-98v4-mmr6](https://insights.sbomify.com/GHSA-8rfp-98v4-mmr6/): Bleach: URI sanitization allows disallowed URI schemes with Unicode > U+00A0 in output (not scored)
- [GHSA-8qx3-8gm5-9cj2](https://insights.sbomify.com/GHSA-8qx3-8gm5-9cj2/): pickem vulnerable to terminal escape-sequence injection via unsanitized item text (not scored)
- [GHSA-8qm3-746x-r74r](https://insights.sbomify.com/GHSA-8qm3-746x-r74r/): devalue `uneval`ed code can create objects with polluted prototypes when `eval`ed (not scored)
- [GHSA-8q6q-m837-fv64](https://insights.sbomify.com/GHSA-8q6q-m837-fv64/): Koel has SSRF through Authenticated Subsonic podcast feed URLs (not scored)
- [GHSA-8q49-2h5h-434x](https://insights.sbomify.com/GHSA-8q49-2h5h-434x/): FrontMCP: Server-Side Request Forgery (SSRF) in the OpenAPI adapter spec-change poller (not scored)
- [GHSA-8pqq-224h-x875](https://insights.sbomify.com/GHSA-8pqq-224h-x875/): ogham-mcp had credentials embedded in published PyPI sdists -- Neon postgres URLs and Voyage API key (not scored)
- [GHSA-8pcw-h6w9-h46g](https://insights.sbomify.com/GHSA-8pcw-h6w9-h46g/): plone.app.contenttypes has a Denial of Service in File Upload due to excessive filename length (not scored)
- [GHSA-8mf7-vv8w-hjr2](https://insights.sbomify.com/GHSA-8mf7-vv8w-hjr2/): OpenClaw's tools.exec.safeBins generic fallback allowed interpreter-style inline payload execution in allowlist mode (not scored)
- [GHSA-8m9v-xpgf-g99m](https://insights.sbomify.com/GHSA-8m9v-xpgf-g99m/): OpenClaw has an unauthorized sender bypass in its stop triggers and /models command authorization (not scored)
- [GHSA-8h8q-6873-q5fj](https://insights.sbomify.com/GHSA-8h8q-6873-q5fj/): Next.js Vulnerable to Denial of Service with Server Components (not scored)
- [GHSA-8h58-w33p-wq3g](https://insights.sbomify.com/GHSA-8h58-w33p-wq3g/): rPGP affected by crash in message handling for deeply nested messages (not scored)
- [GHSA-8grv-jq2g-cfhw](https://insights.sbomify.com/GHSA-8grv-jq2g-cfhw/): amphp/http-server affected by HTTP/2 DDoS vulnerability (not scored)
- [GHSA-8g7g-hmwm-6rv2](https://insights.sbomify.com/GHSA-8g7g-hmwm-6rv2/): n8n-mcp affected by path traversal, redirect-following SSRF, and telemetry payload exposure (not scored)
- [GHSA-8g29-8xwr-qmhr](https://insights.sbomify.com/GHSA-8g29-8xwr-qmhr/): @grackle-ai/server JSON.parse lacks try-catch logic in its gRPC Service AdapterConfig Handling (not scored)
- [GHSA-8fh9-c4jq-94h4](https://insights.sbomify.com/GHSA-8fh9-c4jq-94h4/): idunno.Bluesky, idunno.AtProto and idunno.AtProto.OAuthCallback Denial of Service Vulnerability (not scored)
- [GHSA-8f6j-263m-g72x](https://insights.sbomify.com/GHSA-8f6j-263m-g72x/): `SignedDataVerifier` attempts to perform online revocation checking when `enable_online_checks=True`, but its OCSP validation lo (not scored)
- [GHSA-8cp7-rp8r-mg77](https://insights.sbomify.com/GHSA-8cp7-rp8r-mg77/): OpenClaw has SSRF guard bypass via IPv6 transition over ISATAP (not scored)
- [GHSA-8cp3-qxj6-px34](https://insights.sbomify.com/GHSA-8cp3-qxj6-px34/): utcp-http has an OAuth2 `tokenUrl` Trust Boundary Bypass in OpenAPI Conversion (not scored)
- [GHSA-8c8m-p3m8-cjg8](https://insights.sbomify.com/GHSA-8c8m-p3m8-cjg8/): Nodemailer: A nested comment ends early in addressparser, releasing the rest of the comment as a recipient (not scored)
- [GHSA-89v5-38xr-9m4j](https://insights.sbomify.com/GHSA-89v5-38xr-9m4j/): Postiz has Multiple SSRF Vectors - Webhooks, RSS Feed, URL Loader (not scored)
- [GHSA-8986-v76q-8vr2](https://insights.sbomify.com/GHSA-8986-v76q-8vr2/): @keep-network/tbtc-v2 revealing P2PKH deposit with a wrapped P2SH script (not scored)
- [GHSA-88q9-cmp2-c2vq](https://insights.sbomify.com/GHSA-88q9-cmp2-c2vq/): oxidize-pdf: NaN/inf bypass in colour content-stream emission causes PDF rejection (DoS) (not scored)
- [GHSA-88q6-jcjg-hvmw](https://insights.sbomify.com/GHSA-88q6-jcjg-hvmw/): jose-swift has JWT Signature Verification Bypass via None Algorithm (not scored)
- [GHSA-88pr-878c-24wf](https://insights.sbomify.com/GHSA-88pr-878c-24wf/): Flowise on current `main` allows an authenticated user with `documentStores:preview-process` permission to trigger the `S3 Direct (not scored)
- [GHSA-889w-m37p-88m5](https://insights.sbomify.com/GHSA-889w-m37p-88m5/): pyLoad: Api.set_user_permission never invalidates the target's session (not scored)
- [GHSA-8823-qg2x-pv9f](https://insights.sbomify.com/GHSA-8823-qg2x-pv9f/): Ultimate Sitemap Parser (USP): Gzip Decompression Bomb Bypasses Sitemap Size Limit (not scored)
- [GHSA-86xp-94pg-8r6r](https://insights.sbomify.com/GHSA-86xp-94pg-8r6r/): Microsoft Security Advisory CVE-2026-92707 - ASP.NET Core Denial of Service Vulnerability (not scored)
- [GHSA-85x2-q946-cp5h](https://insights.sbomify.com/GHSA-85x2-q946-cp5h/): Vulnerability summary addressparser ends an angle-addr at the first `>` it sees, including one inside a quoted local part, a comment or a domain literal. (not scored)
- [GHSA-84jc-3hj2-hwc7](https://insights.sbomify.com/GHSA-84jc-3hj2-hwc7/): kanidmd_lib: Image upload validators run before authorization; PNG validator panics on malformed input (not scored)
- [GHSA-84g5-x8j3-7235](https://insights.sbomify.com/GHSA-84g5-x8j3-7235/): Netfoil has incorrect allowlist enforcement (not scored)
- [GHSA-846p-hgpv-vphc](https://insights.sbomify.com/GHSA-846p-hgpv-vphc/): OpenClaw: QQ Bot structured payloads could read arbitrary local files (not scored)
- [GHSA-83x9-vc3c-hghc](https://insights.sbomify.com/GHSA-83x9-vc3c-hghc/): OpenSearch has a bypass of REST Layer Authorization Using Malformed Paths (not scored)
- [GHSA-83pf-v6qq-pwmr](https://insights.sbomify.com/GHSA-83pf-v6qq-pwmr/): Fickling has a detection bypass via stdlib network-protocol constructors (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/196/