# Vulnerabilities published in 2026


- [GHSA-7xw9-549r-8jrc](https://insights.sbomify.com/GHSA-7xw9-549r-8jrc/): DIRAC: SQL injection and lack of access control in PilotManager service (not scored)
- [GHSA-7xp7-m392-h92c](https://insights.sbomify.com/GHSA-7xp7-m392-h92c/): @evomap/evolver has an unbounded request body in proxy /asset/submit that causes persistent disk-exhaustion DoS (not scored)
- [GHSA-7xmq-g46g-f8pv](https://insights.sbomify.com/GHSA-7xmq-g46g-f8pv/): OpenClaw: Sandbox media TOCTOU could read files outside sandbox root (not scored)
- [GHSA-7xgj-8392-5q4r](https://insights.sbomify.com/GHSA-7xgj-8392-5q4r/): FastMCP: Post-transform component authorization is skipped on direct calls (not scored)
- [GHSA-7ww3-xvf5-cxwm](https://insights.sbomify.com/GHSA-7ww3-xvf5-cxwm/): ciguard: Web UI is missing HTTP defence-in-depth headers (not scored)
- [GHSA-7w82-6f9j-v9jp](https://insights.sbomify.com/GHSA-7w82-6f9j-v9jp/): mcp-sanitizer: File Path Sanitizer Permits Arbitrary User-Home Absolute Paths (not scored)
- [GHSA-7vfx-4246-jcfh](https://insights.sbomify.com/GHSA-7vfx-4246-jcfh/): Four authorization bypass vulnerabilities in Symfony LiveComponent actions allow any authenticated user within a company to acces (not scored)
- [GHSA-7rx4-c5vx-g8w3](https://insights.sbomify.com/GHSA-7rx4-c5vx-g8w3/): Karakeep SDK has SSRF via metascraper-logo-favicon that bypasses validateUrl protections (not scored)
- [GHSA-7rx3-28cr-v5wh](https://insights.sbomify.com/GHSA-7rx3-28cr-v5wh/): Handlebars.js has a Prototype Method Access Control Gap via Missing __lookupSetter__ Blocklist Entry (not scored)
- [GHSA-7rhv-h82h-vpjh](https://insights.sbomify.com/GHSA-7rhv-h82h-vpjh/): EC-CUBE has a Vulnerability that Allows MFA Bypass in the Administrative Interface (not scored)
- [GHSA-7qx6-f23w-3w7f](https://insights.sbomify.com/GHSA-7qx6-f23w-3w7f/): The `GET /?redirect` endpoint in `goshs` v2.0.0-beta.6 performs an HTTP redirect to any attacker-supplied `url=` value and write (not scored)
- [GHSA-7qjx-gp9h-65qj](https://insights.sbomify.com/GHSA-7qjx-gp9h-65qj/): Dex: Token-exchange endpoint is missing AllowedConnectors enforcement (not scored)
- [GHSA-7qf6-h84j-8fq4](https://insights.sbomify.com/GHSA-7qf6-h84j-8fq4/): OpenClaw: Microsoft Teams media fetch paths bypass shared SSRF guard model (not scored)
- [GHSA-7q9x-8g6p-3x75](https://insights.sbomify.com/GHSA-7q9x-8g6p-3x75/): @grackle-ai/server: Unescaped Error String in renderPairingPage() HTML Template (not scored)
- [GHSA-7q9c-hpx7-9cwm](https://insights.sbomify.com/GHSA-7q9c-hpx7-9cwm/): TypeSpec: Unauthenticated Remote Shutdown of Spector Mock Server via POST /.admin/stop (not scored)
- [GHSA-7mw3-79jq-xc7f](https://insights.sbomify.com/GHSA-7mw3-79jq-xc7f/): aiograpi has dependency on vulnerable orjson 3.11.4 (CVE-2025-67221) (not scored)
- [GHSA-7mpf-4465-7fc2](https://insights.sbomify.com/GHSA-7mpf-4465-7fc2/): Winter: Stored XSS through Backend List widget image columns (not scored)
- [GHSA-7m8x-qg2j-4m3v](https://insights.sbomify.com/GHSA-7m8x-qg2j-4m3v/): The Fission MessageQueueTrigger (MQT) scaler controller exposed two privilege-escalation primitives to any subject able to creat (not scored)
- [GHSA-7jxj-rpx7-ph2c](https://insights.sbomify.com/GHSA-7jxj-rpx7-ph2c/): Umbraco.Forms CDN may cache sensitive form uploads when processed by ImageSharp (not scored)
- [GHSA-7hgr-xvrr-xpw3](https://insights.sbomify.com/GHSA-7hgr-xvrr-xpw3/): nhost has Session Persistence After Password Change (not scored)
- [GHSA-7hgr-7h44-33w2](https://insights.sbomify.com/GHSA-7hgr-7h44-33w2/): CamoFox MCP: Unauthenticated HTTP MCP browser-control surface (not scored)
- [GHSA-7gcf-g7xr-8hxj](https://insights.sbomify.com/GHSA-7gcf-g7xr-8hxj/): serde_with: KeyValueMap serialization panics on empty sequence or map entries (not scored)
- [GHSA-7fqq-q52p-2jjg](https://insights.sbomify.com/GHSA-7fqq-q52p-2jjg/): OpenCC has an Out-of-bounds read when processing truncated UTF-8 input (not scored)
- [GHSA-7ff8-xjh3-mgh6](https://insights.sbomify.com/GHSA-7ff8-xjh3-mgh6/): OpenClaw's non-default autoAllowSkills setting could bypass on-miss exec prompt (not scored)
- [GHSA-7f4h-6264-89fr](https://insights.sbomify.com/GHSA-7f4h-6264-89fr/): axonflow-sdk-python: Webhook signing-key (HMAC-SHA256) not exposed by SDK type, preventing signature verification (not scored)
- [GHSA-7cwm-fpfh-rrch](https://insights.sbomify.com/GHSA-7cwm-fpfh-rrch/): Ironic Standalone Operator's prometheus metrics exporter bound to all interfaces (not scored)
- [GHSA-796m-2973-wc5q](https://insights.sbomify.com/GHSA-796m-2973-wc5q/): OpenClaw has exec allowlist/safeBins policy-runtime mismatch via env -S wrapper interpretation (not scored)
- [GHSA-78vr-q6cf-c7p6](https://insights.sbomify.com/GHSA-78vr-q6cf-c7p6/): Craft Commerce: Partial Payment Amount Without Lower Bound Validation (not scored)
- [GHSA-78g4-xqwv-q3g8](https://insights.sbomify.com/GHSA-78g4-xqwv-q3g8/): Every Pillow wheel from 11.1.0 onward bundles a libopenjp2 containing a heap-buffer-overflow **write** that is fixed upstream on (not scored)
- [GHSA-7856-g3gv-9wq8](https://insights.sbomify.com/GHSA-7856-g3gv-9wq8/): netfoil: Attacker controlled data written to logs (not scored)
- [GHSA-77xj-rrh3-wx3v](https://insights.sbomify.com/GHSA-77xj-rrh3-wx3v/): `time_calibrator` was removed from crates.io due to malicious code (not scored)
- [GHSA-763v-5pjm-fx36](https://insights.sbomify.com/GHSA-763v-5pjm-fx36/): Strands Agents: Default FileSessionManager storage is world-readable on shared systems (not scored)
- [GHSA-763j-3p5v-jfc6](https://insights.sbomify.com/GHSA-763j-3p5v-jfc6/): androidqf: APK download Path Traversal in device APK paths (not scored)
- [GHSA-75mw-h36v-2jv7](https://insights.sbomify.com/GHSA-75mw-h36v-2jv7/): Dosage Vulnerable to Stored Cross-Site Scripting (XSS) in HTML/RSS Output Handlers (not scored)
- [GHSA-75hx-xj24-mqrw](https://insights.sbomify.com/GHSA-75hx-xj24-mqrw/): n8n-mcp has unauthenticated session termination and information disclosure in HTTP transport (not scored)
- [GHSA-7587-4wv6-m68m](https://insights.sbomify.com/GHSA-7587-4wv6-m68m/): rPGP vulnerable to parser crash on crafted RSA secret key packets through CVE-2026-21895 (not scored)
- [GHSA-74r7-3mjm-jc5v](https://insights.sbomify.com/GHSA-74r7-3mjm-jc5v/): eduMFA: Unauthenticated Failcounter Increment on Resolver Tokens via /validate/check (not scored)
- [GHSA-74p7-6h78-gw8p](https://insights.sbomify.com/GHSA-74p7-6h78-gw8p/): Impact Following the path-safety patches in [GHSA-wx3m-whqv-xv47](https://github.com/umanio-agency/skillctl/security/advisories/GHSA-wx3m (not scored)
- [GHSA-74m6-4hjp-7226](https://insights.sbomify.com/GHSA-74m6-4hjp-7226/): Klever-Go P2P MultiDataInterceptor leaks global throttler slots on malformed compressed batches (DoS) (not scored)
- [GHSA-747p-wmpv-9c78](https://insights.sbomify.com/GHSA-747p-wmpv-9c78/): AWS CLI: cli_history database does not restrict file permissions on Unix systems (not scored)
- [GHSA-73p9-6hrp-8qhr](https://insights.sbomify.com/GHSA-73p9-6hrp-8qhr/): AIIR verification and policy gates could report success without enforcing the control (fail-open) (not scored)
- [GHSA-72w7-mf9g-733p](https://insights.sbomify.com/GHSA-72w7-mf9g-733p/): nono-py has proxy-only network fallback bypass on older Linux kernels (not scored)
- [GHSA-725g-w329-g7qr](https://insights.sbomify.com/GHSA-725g-w329-g7qr/): kora-lib: Token-2022 Transfer Fee Not Deducted During Payment Verification (not scored)
- [GHSA-6xx4-9wp6-65p7](https://insights.sbomify.com/GHSA-6xx4-9wp6-65p7/): skilo add follows symbolic links, allowing arbitrary local file disclosure from a malicious skill source (not scored)
- [GHSA-6x2m-hqfw-hvpj](https://insights.sbomify.com/GHSA-6x2m-hqfw-hvpj/): OpenClaw: Node exec approvals could be replayed across nodes (not scored)
- [GHSA-6wqw-vhfr-9999](https://insights.sbomify.com/GHSA-6wqw-vhfr-9999/): SurrealDB: Authenticated subscribers can read records hidden by SELECT permissions via LIVE subscriptions (not scored)
- [GHSA-6w86-wgwq-rgq8](https://insights.sbomify.com/GHSA-6w86-wgwq-rgq8/): neqo-qpack has iInteger overflow in qpack dynamic table indexing (not scored)
- [GHSA-6w6g-hm98-mhgm](https://insights.sbomify.com/GHSA-6w6g-hm98-mhgm/): hickory-resolver: Unbounded TC-retry loop in `NameServerPool::try_send` (resource-exhaustion DoS) (not scored)
- [GHSA-6vxv-wg6j-5qwp](https://insights.sbomify.com/GHSA-6vxv-wg6j-5qwp/): Gogs: XSS in .ipynb files renderer due to outdated notebookjs (not scored)
- [GHSA-6vvh-pxr4-25r7](https://insights.sbomify.com/GHSA-6vvh-pxr4-25r7/): Impact The experimental `Chacha20Poly1305` key-encryption algorithm generates the 16-byte Poly1305 authentication tag during `encryptKey (not scored)
- [GHSA-6vgg-xhvh-38ff](https://insights.sbomify.com/GHSA-6vgg-xhvh-38ff/): nebula-mesh: POST /api/v1/hosts/{id}/mobile-bundle response lacks Cache-Control: no-store (not scored)
- [GHSA-6vg3-hgrw-p5gf](https://insights.sbomify.com/GHSA-6vg3-hgrw-p5gf/): SurrealDB has an Authorization Bypass via Composite Record-id Paths (not scored)
- [GHSA-6v7q-wjvx-w8wg](https://insights.sbomify.com/GHSA-6v7q-wjvx-w8wg/): basic-ftp: Incomplete CRLF Injection Protection Allows Arbitrary FTP Command Execution via Credentials and MKD Commands (not scored)
- [GHSA-6rmx-gvvg-vh6j](https://insights.sbomify.com/GHSA-6rmx-gvvg-vh6j/): OpenClaw's hooks count non-POST requests toward auth lockout (not scored)
- [GHSA-6qr9-g2xw-cw92](https://insights.sbomify.com/GHSA-6qr9-g2xw-cw92/): Dagu affected by unauthenticated RCE via inline DAG spec in default configuration (not scored)
- [GHSA-6q48-6c7w-9gw2](https://insights.sbomify.com/GHSA-6q48-6c7w-9gw2/): certifi bundles emSign root CAs with compromised intermediate CA keys (not scored)
- [GHSA-6q22-g298-grjh](https://insights.sbomify.com/GHSA-6q22-g298-grjh/): Directus: Unauthenticated Denial of Service via GraphQL Alias Amplification of Expensive Health Check Resolver (not scored)
- [GHSA-6p2j-742g-835f](https://insights.sbomify.com/GHSA-6p2j-742g-835f/): actions-mkdocs: Command Injection via issue title in internal GitHub Actions workflow (not scored)
- [GHSA-6jq6-x4cx-qvcm](https://insights.sbomify.com/GHSA-6jq6-x4cx-qvcm/): Firefly II has Stored XSS in Audit Log Entry view via piggy bank name (ale.twig) (not scored)
- [GHSA-6hxq-p678-4hr2](https://insights.sbomify.com/GHSA-6hxq-p678-4hr2/): `validateCertificatePath()` does not verify that an attestation's certificate chain actually terminates at a configured trust anchor. (not scored)
- [GHSA-6g2r-675j-hx59](https://insights.sbomify.com/GHSA-6g2r-675j-hx59/): xxhash-rust: Safe xxh3 custom-secret API accepts too-short secret in release (not scored)
- [GHSA-6fj4-rcr3-r7rr](https://insights.sbomify.com/GHSA-6fj4-rcr3-r7rr/): lopdf has a stack overflow via deeply nested PDF objects (not scored)
- [GHSA-6f2x-v7q7-m7m5](https://insights.sbomify.com/GHSA-6f2x-v7q7-m7m5/): hickory-resolver follows irrelevant CNAME records (not scored)
- [GHSA-69x8-hrgq-fjj8](https://insights.sbomify.com/GHSA-69x8-hrgq-fjj8/): LiteLLM: Password hash exposure and pass-the-hash authentication bypass (not scored)
- [GHSA-69qj-pvh9-c5wg](https://insights.sbomify.com/GHSA-69qj-pvh9-c5wg/): yt-dlp: Arbitrary command injection possible if --exec option used with yt-dlp (not scored)
- [GHSA-68w4-83fh-f2w8](https://insights.sbomify.com/GHSA-68w4-83fh-f2w8/): `Api.getUserData` (legacy) and `Api.get_userdata` are declared with `@permission(Perms.ANY)` and are reachable at `/api/getUserDa (not scored)
- [GHSA-68r5-9hpg-7qw9](https://insights.sbomify.com/GHSA-68r5-9hpg-7qw9/): OpenDJ unauthenticated SSRF, local file read and unbounded-read DoS in the DSMLv2 gateway (not scored)
- [GHSA-673q-mjm6-r5xr](https://insights.sbomify.com/GHSA-673q-mjm6-r5xr/): Next.js: Unauthenticated Remote Code Execution in `use cache` functions returning typed arrays (not scored)
- [GHSA-66m8-c62j-h6v5](https://insights.sbomify.com/GHSA-66m8-c62j-h6v5/): jxl-oxide: `FrameBuffer::new` creates out-of-bounds slices on overflow (not scored)
- [GHSA-65rj-r9fh-jp2v](https://insights.sbomify.com/GHSA-65rj-r9fh-jp2v/): SurrealDB vulnerable to pre-auth memory amplification via unbounded `/sql` WebSocket frames (not scored)
- [GHSA-659f-22xc-98f2](https://insights.sbomify.com/GHSA-659f-22xc-98f2/): OpenClaw hook transform path containment missed symlink-resolved escapes (not scored)
- [GHSA-647h-p824-99w7](https://insights.sbomify.com/GHSA-647h-p824-99w7/): @grackle-ai/mcp has a workspace authorization bypass in its knowledge_search MCP tool (not scored)
- [GHSA-6475-r3vj-m8vf](https://insights.sbomify.com/GHSA-6475-r3vj-m8vf/): AWS SDK for JavaScript v3 adopted defense in depth enhancement for region parameter value (not scored)
- [GHSA-6447-269v-g68m](https://insights.sbomify.com/GHSA-6447-269v-g68m/): Mezo: ERC-20 bridgeOut burn can be erased by a stale StateDB overwrite leading to full L1 bridge drain (not scored)
- [GHSA-62mm-xwmv-crhg](https://insights.sbomify.com/GHSA-62mm-xwmv-crhg/): khoj has an unauthenticated path traversal in /home/ endpoint that allows file read from server filesystem (not scored)
- [GHSA-62gx-5q78-wrvx](https://insights.sbomify.com/GHSA-62gx-5q78-wrvx/): The Local REST API's `/vault/{path}` endpoints (GET/PUT/PATCH/POST/DELETE) percent-decode the request path *inside the handler — (not scored)
- [GHSA-5x78-73v4-xg6w](https://insights.sbomify.com/GHSA-5x78-73v4-xg6w/): Unbounded SCRAM iteration count allows a malicious server to cause CPU-exhaustion denial of service (not scored)
- [GHSA-5wxr-w449-57cm](https://insights.sbomify.com/GHSA-5wxr-w449-57cm/): Setup PHP: GitHub tokens configured by setup-php may be exposed through pinned affected Composer versions (not scored)
- [GHSA-5wp8-q9mx-8jx8](https://insights.sbomify.com/GHSA-5wp8-q9mx-8jx8/): zeptoclaw has Shell allowlist-blocklist bypass via command/argument injection and file name wildcards (not scored)
- [GHSA-5whh-4q9j-7v28](https://insights.sbomify.com/GHSA-5whh-4q9j-7v28/): aws-kms-tls-auth vulnerable to memory overallocation (not scored)
- [GHSA-5wf9-h793-w73c](https://insights.sbomify.com/GHSA-5wf9-h793-w73c/): Xray-core: Pinning a CA certificate via pinnedPeerCertSha256 can lead to the success of MITM attacks (not scored)
- [GHSA-5vwr-qchf-q4pf](https://insights.sbomify.com/GHSA-5vwr-qchf-q4pf/): @cyclonedx/cdxgen: Maven project scanning may allow shell command injection through repository-controlled module paths (not scored)
- [GHSA-5rpf-x9jg-8j5p](https://insights.sbomify.com/GHSA-5rpf-x9jg-8j5p/): Scriban Affected by Memory Exhaustion (OOM) via Unbounded String Generation (Denial of Service) (not scored)
- [GHSA-5r97-79vw-qvm4](https://insights.sbomify.com/GHSA-5r97-79vw-qvm4/): Microsoft DirectX12: .spritefont multiply overflow only in 32-bit builds (not scored)
- [GHSA-5r2p-pjr8-7fh7](https://insights.sbomify.com/GHSA-5r2p-pjr8-7fh7/): SageMaker Python SDK replaced eval() with safe parser in JumpStart search functionality (not scored)
- [GHSA-5qw5-wf2q-f538](https://insights.sbomify.com/GHSA-5qw5-wf2q-f538/): ActiveRecord-JDBC-Adapter (AR-JDBC) lib/arjdbc/jdbc/adapter.rb sql.gsub() Function SQL Injection (not scored)
- [GHSA-5qvp-pr9f-2g2v](https://insights.sbomify.com/GHSA-5qvp-pr9f-2g2v/): poetry-plugin-tweak-dependencies-version affected by CVE-2026-25645 (not scored)
- [GHSA-5qv7-j6w5-fr4m](https://insights.sbomify.com/GHSA-5qv7-j6w5-fr4m/): Fragile bounds check when sampling from image (not scored)
- [GHSA-5qfp-32cf-69jh](https://insights.sbomify.com/GHSA-5qfp-32cf-69jh/): SurrealDB: HTTP /rpc `sessions` method leaks attached session UUIDs, enabling full session hijack by anonymous callers (not scored)
- [GHSA-5q8v-j673-m5v4](https://insights.sbomify.com/GHSA-5q8v-j673-m5v4/): Firefly III user API endpoints expose all users' information to any authenticated user (IDOR) (not scored)
- [GHSA-5pmp-jpcf-pwx6](https://insights.sbomify.com/GHSA-5pmp-jpcf-pwx6/): `tracing-check` was removed from crates.io for malicious code (not scored)
- [GHSA-5p4m-2wfm-xmqj](https://insights.sbomify.com/GHSA-5p4m-2wfm-xmqj/): JS-YAML: Quadratic CPU consumption in !!omap resolution (3.x and 4.x) — CVE-2026-59870 fix not backported (not scored)
- [GHSA-5mg7-485q-xm76](https://insights.sbomify.com/GHSA-5mg7-485q-xm76/): Two LiteLLM versions published containing credential harvesting malware (not scored)
- [GHSA-5j35-xr4g-vwf4](https://insights.sbomify.com/GHSA-5j35-xr4g-vwf4/): @grackle-ai/server has a Missing Secure Flag on Session Cookie (not scored)
- [GHSA-5hwf-rc88-82xm](https://insights.sbomify.com/GHSA-5hwf-rc88-82xm/): Fickling missing RCE-capable modules in UNSAFE_IMPORTS (not scored)
- [GHSA-5h2c-8v84-qpvr](https://insights.sbomify.com/GHSA-5h2c-8v84-qpvr/): OpenClaw shell-env fallback trusted startup env and could execute attacker-influenced login-shell paths (not scored)
- [GHSA-5g3j-89fr-r2vp](https://insights.sbomify.com/GHSA-5g3j-89fr-r2vp/): skilleton has improper input handling in repository/path processing (not scored)
- [GHSA-5cxw-w2xg-2m8h](https://insights.sbomify.com/GHSA-5cxw-w2xg-2m8h/): fickling's `platform` module subprocess invocation evades `check_safety()` with `LIKELY_SAFE` (not scored)
- [GHSA-5cwr-5jxg-pcf6](https://insights.sbomify.com/GHSA-5cwr-5jxg-pcf6/): Winter: Stored XSS through cached Brand Settings and Editor Settings custom styles (not scored)
- [GHSA-5c7w-4wm3-85vw](https://insights.sbomify.com/GHSA-5c7w-4wm3-85vw/): @asymmetric-effort/specifyjs: GraphQL gql tag allows metacharacter injection (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/197/