Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 197 of 1013.
- GHSA-7xw9-549r-8jrc DIRAC: SQL injection and lack of access control in PilotManager service
- GHSA-7xp7-m392-h92c @evomap/evolver has an unbounded request body in proxy /asset/submit that causes persistent disk-exhaustion DoS
- GHSA-7xmq-g46g-f8pv OpenClaw: Sandbox media TOCTOU could read files outside sandbox root
- GHSA-7xgj-8392-5q4r FastMCP: Post-transform component authorization is skipped on direct calls
- GHSA-7ww3-xvf5-cxwm ciguard: Web UI is missing HTTP defence-in-depth headers
- GHSA-7w82-6f9j-v9jp mcp-sanitizer: File Path Sanitizer Permits Arbitrary User-Home Absolute Paths
- GHSA-7vfx-4246-jcfh Four authorization bypass vulnerabilities in Symfony LiveComponent actions allow any authenticated user within a company to acces
- GHSA-7rx4-c5vx-g8w3 Karakeep SDK has SSRF via metascraper-logo-favicon that bypasses validateUrl protections
- GHSA-7rx3-28cr-v5wh Handlebars.js has a Prototype Method Access Control Gap via Missing __lookupSetter__ Blocklist Entry
- GHSA-7rhv-h82h-vpjh EC-CUBE has a Vulnerability that Allows MFA Bypass in the Administrative Interface
- GHSA-7qx6-f23w-3w7f The `GET /?redirect` endpoint in `goshs` v2.0.0-beta.6 performs an HTTP redirect to any attacker-supplied `url=` value and write
- GHSA-7qjx-gp9h-65qj Dex: Token-exchange endpoint is missing AllowedConnectors enforcement
- GHSA-7qf6-h84j-8fq4 OpenClaw: Microsoft Teams media fetch paths bypass shared SSRF guard model
- GHSA-7q9x-8g6p-3x75 @grackle-ai/server: Unescaped Error String in renderPairingPage() HTML Template
- GHSA-7q9c-hpx7-9cwm TypeSpec: Unauthenticated Remote Shutdown of Spector Mock Server via POST /.admin/stop
- GHSA-7mw3-79jq-xc7f aiograpi has dependency on vulnerable orjson 3.11.4 (CVE-2025-67221)
- GHSA-7mpf-4465-7fc2 Winter: Stored XSS through Backend List widget image columns
- GHSA-7m8x-qg2j-4m3v The Fission MessageQueueTrigger (MQT) scaler controller exposed two privilege-escalation primitives to any subject able to creat
- GHSA-7jxj-rpx7-ph2c Umbraco.Forms CDN may cache sensitive form uploads when processed by ImageSharp
- GHSA-7hgr-xvrr-xpw3 nhost has Session Persistence After Password Change
- GHSA-7hgr-7h44-33w2 CamoFox MCP: Unauthenticated HTTP MCP browser-control surface
- GHSA-7gcf-g7xr-8hxj serde_with: KeyValueMap serialization panics on empty sequence or map entries
- GHSA-7fqq-q52p-2jjg OpenCC has an Out-of-bounds read when processing truncated UTF-8 input
- GHSA-7ff8-xjh3-mgh6 OpenClaw's non-default autoAllowSkills setting could bypass on-miss exec prompt
- GHSA-7f4h-6264-89fr axonflow-sdk-python: Webhook signing-key (HMAC-SHA256) not exposed by SDK type, preventing signature verification
- GHSA-7cwm-fpfh-rrch Ironic Standalone Operator's prometheus metrics exporter bound to all interfaces
- GHSA-796m-2973-wc5q OpenClaw has exec allowlist/safeBins policy-runtime mismatch via env -S wrapper interpretation
- GHSA-78vr-q6cf-c7p6 Craft Commerce: Partial Payment Amount Without Lower Bound Validation
- GHSA-78g4-xqwv-q3g8 Every Pillow wheel from 11.1.0 onward bundles a libopenjp2 containing a heap-buffer-overflow **write** that is fixed upstream on
- GHSA-7856-g3gv-9wq8 netfoil: Attacker controlled data written to logs
- GHSA-77xj-rrh3-wx3v `time_calibrator` was removed from crates.io due to malicious code
- GHSA-763v-5pjm-fx36 Strands Agents: Default FileSessionManager storage is world-readable on shared systems
- GHSA-763j-3p5v-jfc6 androidqf: APK download Path Traversal in device APK paths
- GHSA-75mw-h36v-2jv7 Dosage Vulnerable to Stored Cross-Site Scripting (XSS) in HTML/RSS Output Handlers
- GHSA-75hx-xj24-mqrw n8n-mcp has unauthenticated session termination and information disclosure in HTTP transport
- GHSA-7587-4wv6-m68m rPGP vulnerable to parser crash on crafted RSA secret key packets through CVE-2026-21895
- GHSA-74r7-3mjm-jc5v eduMFA: Unauthenticated Failcounter Increment on Resolver Tokens via /validate/check
- GHSA-74p7-6h78-gw8p Impact Following the path-safety patches in [GHSA-wx3m-whqv-xv47](https://github.com/umanio-agency/skillctl/security/advisories/GHSA-wx3m
- GHSA-74m6-4hjp-7226 Klever-Go P2P MultiDataInterceptor leaks global throttler slots on malformed compressed batches (DoS)
- GHSA-747p-wmpv-9c78 AWS CLI: cli_history database does not restrict file permissions on Unix systems
- GHSA-73p9-6hrp-8qhr AIIR verification and policy gates could report success without enforcing the control (fail-open)
- GHSA-72w7-mf9g-733p nono-py has proxy-only network fallback bypass on older Linux kernels
- GHSA-725g-w329-g7qr kora-lib: Token-2022 Transfer Fee Not Deducted During Payment Verification
- GHSA-6xx4-9wp6-65p7 skilo add follows symbolic links, allowing arbitrary local file disclosure from a malicious skill source
- GHSA-6x2m-hqfw-hvpj OpenClaw: Node exec approvals could be replayed across nodes
- GHSA-6wqw-vhfr-9999 SurrealDB: Authenticated subscribers can read records hidden by SELECT permissions via LIVE subscriptions
- GHSA-6w86-wgwq-rgq8 neqo-qpack has iInteger overflow in qpack dynamic table indexing
- GHSA-6w6g-hm98-mhgm hickory-resolver: Unbounded TC-retry loop in `NameServerPool::try_send` (resource-exhaustion DoS)
- GHSA-6vxv-wg6j-5qwp Gogs: XSS in .ipynb files renderer due to outdated notebookjs
- GHSA-6vvh-pxr4-25r7 Impact The experimental `Chacha20Poly1305` key-encryption algorithm generates the 16-byte Poly1305 authentication tag during `encryptKey
- GHSA-6vgg-xhvh-38ff nebula-mesh: POST /api/v1/hosts/{id}/mobile-bundle response lacks Cache-Control: no-store
- GHSA-6vg3-hgrw-p5gf SurrealDB has an Authorization Bypass via Composite Record-id Paths
- GHSA-6v7q-wjvx-w8wg basic-ftp: Incomplete CRLF Injection Protection Allows Arbitrary FTP Command Execution via Credentials and MKD Commands
- GHSA-6rmx-gvvg-vh6j OpenClaw's hooks count non-POST requests toward auth lockout
- GHSA-6qr9-g2xw-cw92 Dagu affected by unauthenticated RCE via inline DAG spec in default configuration
- GHSA-6q48-6c7w-9gw2 certifi bundles emSign root CAs with compromised intermediate CA keys
- GHSA-6q22-g298-grjh Directus: Unauthenticated Denial of Service via GraphQL Alias Amplification of Expensive Health Check Resolver
- GHSA-6p2j-742g-835f actions-mkdocs: Command Injection via issue title in internal GitHub Actions workflow
- GHSA-6jq6-x4cx-qvcm Firefly II has Stored XSS in Audit Log Entry view via piggy bank name (ale.twig)
- GHSA-6hxq-p678-4hr2 `validateCertificatePath()` does not verify that an attestation's certificate chain actually terminates at a configured trust anchor.
- GHSA-6g2r-675j-hx59 xxhash-rust: Safe xxh3 custom-secret API accepts too-short secret in release
- GHSA-6fj4-rcr3-r7rr lopdf has a stack overflow via deeply nested PDF objects
- GHSA-6f2x-v7q7-m7m5 hickory-resolver follows irrelevant CNAME records
- GHSA-69x8-hrgq-fjj8 LiteLLM: Password hash exposure and pass-the-hash authentication bypass
- GHSA-69qj-pvh9-c5wg yt-dlp: Arbitrary command injection possible if --exec option used with yt-dlp
- GHSA-68w4-83fh-f2w8 `Api.getUserData` (legacy) and `Api.get_userdata` are declared with `@permission(Perms.ANY)` and are reachable at `/api/getUserDa
- GHSA-68r5-9hpg-7qw9 OpenDJ unauthenticated SSRF, local file read and unbounded-read DoS in the DSMLv2 gateway
- GHSA-673q-mjm6-r5xr Next.js: Unauthenticated Remote Code Execution in `use cache` functions returning typed arrays
- GHSA-66m8-c62j-h6v5 jxl-oxide: `FrameBuffer::new` creates out-of-bounds slices on overflow
- GHSA-65rj-r9fh-jp2v SurrealDB vulnerable to pre-auth memory amplification via unbounded `/sql` WebSocket frames
- GHSA-659f-22xc-98f2 OpenClaw hook transform path containment missed symlink-resolved escapes
- GHSA-647h-p824-99w7 @grackle-ai/mcp has a workspace authorization bypass in its knowledge_search MCP tool
- GHSA-6475-r3vj-m8vf AWS SDK for JavaScript v3 adopted defense in depth enhancement for region parameter value
- GHSA-6447-269v-g68m Mezo: ERC-20 bridgeOut burn can be erased by a stale StateDB overwrite leading to full L1 bridge drain
- GHSA-62mm-xwmv-crhg khoj has an unauthenticated path traversal in /home/ endpoint that allows file read from server filesystem
- GHSA-62gx-5q78-wrvx The Local REST API's `/vault/{path}` endpoints (GET/PUT/PATCH/POST/DELETE) percent-decode the request path *inside the handler —
- GHSA-5x78-73v4-xg6w Unbounded SCRAM iteration count allows a malicious server to cause CPU-exhaustion denial of service
- GHSA-5wxr-w449-57cm Setup PHP: GitHub tokens configured by setup-php may be exposed through pinned affected Composer versions
- GHSA-5wp8-q9mx-8jx8 zeptoclaw has Shell allowlist-blocklist bypass via command/argument injection and file name wildcards
- GHSA-5whh-4q9j-7v28 aws-kms-tls-auth vulnerable to memory overallocation
- GHSA-5wf9-h793-w73c Xray-core: Pinning a CA certificate via pinnedPeerCertSha256 can lead to the success of MITM attacks
- GHSA-5vwr-qchf-q4pf @cyclonedx/cdxgen: Maven project scanning may allow shell command injection through repository-controlled module paths
- GHSA-5rpf-x9jg-8j5p Scriban Affected by Memory Exhaustion (OOM) via Unbounded String Generation (Denial of Service)
- GHSA-5r97-79vw-qvm4 Microsoft DirectX12: .spritefont multiply overflow only in 32-bit builds
- GHSA-5r2p-pjr8-7fh7 SageMaker Python SDK replaced eval() with safe parser in JumpStart search functionality
- GHSA-5qw5-wf2q-f538 ActiveRecord-JDBC-Adapter (AR-JDBC) lib/arjdbc/jdbc/adapter.rb sql.gsub() Function SQL Injection
- GHSA-5qvp-pr9f-2g2v poetry-plugin-tweak-dependencies-version affected by CVE-2026-25645
- GHSA-5qv7-j6w5-fr4m Fragile bounds check when sampling from image
- GHSA-5qfp-32cf-69jh SurrealDB: HTTP /rpc `sessions` method leaks attached session UUIDs, enabling full session hijack by anonymous callers
- GHSA-5q8v-j673-m5v4 Firefly III user API endpoints expose all users' information to any authenticated user (IDOR)
- GHSA-5pmp-jpcf-pwx6 `tracing-check` was removed from crates.io for malicious code
- GHSA-5p4m-2wfm-xmqj JS-YAML: Quadratic CPU consumption in !!omap resolution (3.x and 4.x) — CVE-2026-59870 fix not backported
- GHSA-5mg7-485q-xm76 Two LiteLLM versions published containing credential harvesting malware
- GHSA-5j35-xr4g-vwf4 @grackle-ai/server has a Missing Secure Flag on Session Cookie
- GHSA-5hwf-rc88-82xm Fickling missing RCE-capable modules in UNSAFE_IMPORTS
- GHSA-5h2c-8v84-qpvr OpenClaw shell-env fallback trusted startup env and could execute attacker-influenced login-shell paths
- GHSA-5g3j-89fr-r2vp skilleton has improper input handling in repository/path processing
- GHSA-5cxw-w2xg-2m8h fickling's `platform` module subprocess invocation evades `check_safety()` with `LIKELY_SAFE`
- GHSA-5cwr-5jxg-pcf6 Winter: Stored XSS through cached Brand Settings and Editor Settings custom styles
- GHSA-5c7w-4wm3-85vw @asymmetric-effort/specifyjs: GraphQL gql tag allows metacharacter injection