Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 198 of 1013.
- GHSA-5c6j-r48x-rmvq Serialize JavaScript is Vulnerable to RCE via RegExp.flags and Date.prototype.toISOString()
- GHSA-59xv-588h-2vmm @saltcorn/data vulnerable to SQL Injection via jsexprToSQL Literal Handler
- GHSA-59qp-cfj3-rp64 netfoil has a domain name filter bypass via multiple questions
- GHSA-595p-g7xc-c333 Algolia Search & Discovery for Magento 2 Has Untrusted Data Handling
- GHSA-594f-3595-c47v Terraform Provider for ArgoCD has possible exposure to GO-2026-4337 / CVE-2025-68121
- GHSA-58q2-9x27-h2jm solspace/craft-freeform Has a DoS Vulnerability
- GHSA-5847-rm3g-23mw OpenClaw has hook auth rate limiter bypass via IPv4-mapped IPv6 client key variants
- GHSA-57v5-wqx3-cgj4 Scope note (please read first) This endpoint does not exist in v3.7.3 or on master.
- GHSA-5739-39v2-5754 Impact `RSACrypt::decryptWithRSA15()` (used by the `RSA1_5` key-encryption algorithm) implements RSAES-PKCS1-v1_5 decryption by inspecti
- GHSA-56m6-8q75-f2rw ImageMagick: Policy Bypass due to an incomplete fix of CVE-2026-49219
- GHSA-56f2-hvwg-5743 OpenClaw affected by SSRF in Image Tool Remote Fetch
- GHSA-5648-rgj9-v224 @zereight/mcp-gitlab exposes GitLab to an LLM agent while relying on read-only mode, a project allow-list, and transport auth as its safety controls.
- GHSA-55v6-g8pm-pw4c rembg server is vulnerable to Server-Side Request Forgery (SSRF) and a weak default CORS configuration
- GHSA-55f6-4pr5-c7m5 Kahi has privilege-drop and socket/log permission issues
- GHSA-54pg-9963-v8vg Compromised version of intercom-client published to npm
- GHSA-54p8-x2m9-c593 malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability
- GHSA-54gx-3cgr-7mfm Cosmos EVM: incorrect state handling during nested EVM execution paths
- GHSA-5478-66c3-rhxr Pretext: Algorithmic Complexity (DoS) in the text analysis phase
- GHSA-53hj-r94p-8c8f Kanidm has non-constant-time comparison of OAuth2 client_secret
- GHSA-537c-gmf6-5ccf Vulnerable OpenSSL included in cryptography wheels
- GHSA-534w-2vm4-89xr OpenClaw's Zalo group sender allowlist bypass permits unauthorized GROUP dispatch
- GHSA-52vm-mxx8-f227 Phantom: Arbitrary file write and decode-bomb DoS via unconfined MCP tool paths
- GHSA-52cq-7v8r-62c6 gmaps-mcp's unauthenticated HTTP transport allows unlimited Google Maps API calls at operator expense
- GHSA-4x48-cgf9-q33f Novu has SSRF via conditions filter webhook bypasses validateUrlSsrf() protection
- GHSA-4vgr-h27g-cf9p SurrealDB: HTTP RPC Session Race Condition Allows Privilege Escalation
- GHSA-4v76-cw68-4vc9 A `LIVE` query whose `WHERE` clause evaluates to an error caused the source data modifier (the user creating, updating, or deleting a record
- GHSA-4q55-j62x-fr9h devalue: Malformed null-prototype object keys bypass __proto__ rejection via property-key coercion
- GHSA-4ph6-mjv7-3fq6 netfoil vulnerable to improper handling of untrusted DoH response data
- GHSA-4mfg-r38w-w8fg mcp-sanitizer: URL sanitizer allows localhost/IPv6 loopback SSRF bypass via explicit port or bracketed IPv6
- GHSA-4m82-p8cx-f94j SurrealDB: LIVE query subscriptions survive session state changes, bypassing access controls
- GHSA-4hjq-9h5c-252j Traefik: HTTP/2 frames can cause a running server to panic
- GHSA-4gph-2hhr-5mwg Envoy AI Proxy - MCP Message Smuggling Vulnerability
- GHSA-4f84-67cv-qrv3 A single post-release of dydx-v4-client contained obfuscated multi-stage loader
- GHSA-4cqv-h74h-93j4 OpenClaw has a Discord `allowFrom` slug-collision authorization bypass
- GHSA-4cm8-xpfv-jv6f ZeptoClaw: Email Sender Spoofing to bypass Header-Only From Allowlist Validation
- GHSA-4c5f-9mj4-m247 flagd: Multiple Go Runtime CVEs Impact Security and Availability
- GHSA-4c35-wcg5-mm9h `setNestedProperty` in `packages/next-intl/src/extractor/utils.tsx` walks a dotted key path and assigns the final value without b
- GHSA-47wq-cj9q-wpmp Paperclip: Cross-tenant agent API token minting via missing assertCompanyAccess on /api/agents/:id/keys
- GHSA-47qc-857f-7w7f PyO3 0.28.1 added support for `#[pyclass(extends=PyList)] struct NativeSub` (and other native types) when targeting Python 3.12 and up with the `abi3` feature.
- GHSA-474h-prjg-mmw3 OpenClaw: Sandboxed sessions_spawn(runtime="acp") bypassed sandbox inheritance and allowed host ACP initialization
- GHSA-473q-m89c-ghf8 With `SslMode` set to `VerifyCA` or `VerifyFull` with no configured CA certificate, an unvalidated TLS connection is treated as s
- GHSA-46wh-3698-f2cx Traefik: Deny Rule Bypass via Unauthenticated Malicious gRPC Requests in gRPC-Go Dependency (CVE-2026-33186)
- GHSA-46fp-8f5p-pf2m Improper detection of disallowed URIs by Loofah `allowed_uri?`
- GHSA-464c-974j-9xm6 AWS CDK CodeBuild S3 Log Encryption Boolean Inversion
- GHSA-456v-xq2p-r4cj code-ollama: `grep_search` Command Injection via Unescaped `$()` Shell Substitution (CWE-78)
- GHSA-44jg-mv3h-wj6g solspace/craft-freeform Vulnerable to XSS in `PhpSpreadsheet` HTML Writer Due to Unsanitized Styling Data
- GHSA-443w-3rq3-5m5h AWS SDK for Java 2.0: Improper Handling of Special Characters in CloudFront Signing Utilities
- GHSA-442j-39wm-28r2 Handlebars.js has a Property Access Validation Bypass in container.lookup
- GHSA-434v-x5qv-pmh6 All-Zero Key Generation on Catastrophic RNG Failure
- GHSA-429q-fhh4-r6hj `InterfaceAccount` allows account substitution between unexpected types
- GHSA-3xx2-mqjm-hg9x Paperclip: Cross-tenant agent API key IDOR in `/agents/:id/keys` routes allows full victim-company compromise
- GHSA-3whf-vgf2-9w6g zaino-state has a Non-Finalized State Reorg — No Cycle Detection or Depth Limit
- GHSA-3w55-933p-8pv5 Strands Agents: Local Privilege Escalation via Symlink Attack in Default Session File Storage
- GHSA-3v94-mw7p-v465 hickory-proto: NSEC3 closest-encloser proof validation enters unbounded loop on cross-zone responses
- GHSA-3pw3-v88x-xj24 Paperclip: Arbitrary File Read via Agent-Controlled adapterConfig.instructionsFilePath
- GHSA-3pv8-6f4r-ffg2 tar has a PAX header desynchronization issue
- GHSA-3prj-6hqw-cm82 Impact When a JWE uses a password-based key-encryption algorithm (`PBES2-HS256+A128KW`, `PBES2-HS384+A192KW`, `PBES2-HS512+A256KW`), `PB
- GHSA-3p34-w4f6-5xh2 better-helperjs Vulnerable to Directory Traversal via String Prefix Bypass in Static Server
- GHSA-3mjm-x6gw-2x42 @grackle-ai/server has Missing Content-Security-Policy and X-Frame-Options Headers
- GHSA-3m6q-h5gj-7mrw Gitea has insecure default SSH settings
- GHSA-3jx4-q2m7-r496 OpenClaw: Hardlink alias checks could bypass workspace-only file boundaries in specific configurations
- GHSA-3hfp-gqgh-xc5g Axios supply chain attack - dependency in @lightdash/cli may resolve to compromised axios versions
- GHSA-3hc7-r24j-rpwc Vikunja: Cross-project task disclosure through subtask expansion
- GHSA-3h96-34p3-xm76 GraphQL-Ruby's Ruby lexer does not count comment tokens for the purposes of max_query_string_tokens
- GHSA-3h6j-9x8m-rg3g Graby has stored XSS via iframe srcdoc Attribute in htmLawed Sanitization Config
- GHSA-3h2q-j2v4-6w5r OpenClaw's system.run allowlist approval parsing missed PowerShell encoded-command wrappers
- GHSA-3gjw-f78c-vvpw Panic on a `DataRow` with fewer fields than columns allows denial of service
- GHSA-3g92-f9ch-qjcm Vulnerability Currently, when hashing, if the number of elements to hash is not a multiple of the rate, `hash_iter` pads by elements of the current state.
- GHSA-3g4q-2f67-2gvh netfoil has a resource leak in LRU cache
- GHSA-3f6p-5ww8-9rcr MySQL2: Auth Plugin Downgrade to mysql_clear_password Leaks Plaintext Credentials
- GHSA-3cv2-h65g-fgmm astral-tokio-tar has a PAX Header Desynchronization issue
- GHSA-39wr-7q6h-cf68 LMDeploy has an SSRF bypass
- GHSA-39h7-pwv7-rc3x Excalidraw vulnerable to XSS via Mermaid sequence diagram labels (KaTeX rendering)
- GHSA-39g5-644c-qwcg container: pf Rule Injection via Domain Name Argument in `container system dns create --localhost` Command
- GHSA-394x-vwmw-crm3 AWS-LC X.509 Name Constraints Bypass via Wildcard/Unicode CN
- GHSA-392f-ggf5-fp3c OpenClaw: Unicode canonicalization drift in node metadata policy classification could broaden node allowlists
- GHSA-38cw-85xc-xr9x Veramo is Vulnerable to SQL Injection in Veramo Data Store ORM
- GHSA-387m-935m-c4vw Micronaut doesn't set a maximum redirect count for its HTTP Client, enabling infinite loop DoS
- GHSA-382q-fpqh-29f7 `polymarket-clients-sdk` was removed from crates.io for malicious code
- GHSA-382c-vx95-w3p5 Gittensory: Missing contributor-scoped access control on profile endpoint and MCP tool leaks miner financial data
- GHSA-36hh-v3qg-5jq4 Out-of-bounds read in `nth` / `nth_back` for `PyList` and `PyTuple` iterators
- GHSA-33hq-fvwr-56pm devalue affected by CPU and memory amplification from sparse arrays
- GHSA-32wq-ppwg-3w4m EnhancedLinq.Async is Vulnerable to Denial of Service via Transitive Dependency Microsoft.Bcl.Memory
- GHSA-3288-p39f-rqpv Unsoundness in opt-in ARMv8 assembly backend for `keccak`
- GHSA-3278-c88v-xrh4 A vulnerability in the Kong Ingress Controller (KIC) allows for the unauthorized exposure of sensitive plugin credentials through
- GHSA-322x-v876-g883 @asymmetric-effort/nogginlessdom's Path Traversal in matchFileSnapshot allows arbitrary file write
- GHSA-2xp9-vwfh-vxw4 Next.js: Unauthenticated Remote Code Execution in Image Optimization API when AVIF files are used
- GHSA-2wwr-9x6f-88gp EasyAdminBundle has path traversal and reflected XSS in Flag and Icon Twig components
- GHSA-2v8p-fqpx-2q3w jxl-oxide: integer subtraction overflow panic in cluster_from_table via crafted JXL input (DoS)
- GHSA-2rx9-3g3h-c2jv pnpm: pacquet trust-lockfile install can create dependency symlinks outside the project
- GHSA-2rqm-h6hv-g79v odf-kit has HTML injection leading to XSS in odsToHtml() via unescaped style attribute values
- GHSA-2r2p-4cgf-hv7h The local HTTP server started by `engram server` (binding `127.0.0.1:7337` by default) was exposed to any browser origin with no
- GHSA-2q42-4q24-7rgv OpenAPI3 version value escapes `emitterOutputDir` and overwrites YAML/JSON outside the output tree
- GHSA-2phg-qgmm-r638 Sliver has Potential Zip Bomb Denial of Service in GzipEncoder
- GHSA-2p6r-x3vv-xqm2 rpassword affected by partial password reveal when input is interrupted
- GHSA-2mjx-qc3c-rqvc Rustls: TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries
- GHSA-2mhw-8qcg-gr96 skia-python vendors vulnerable libfreetype because of pinned cibuildwheel version
- GHSA-2mf3-mr2r-r4vf @rhinostone/swig: arbitrary local file read via include/extends path traversal
- GHSA-2mc2-g238-722j OpenClaw affected by iMessage remote attachment SCP hardening (strict host-key checks and remoteHost validation)
- GHSA-2m67-wjpj-xhg9 Jackson Core: Document length constraint bypass in blocking, async, and DataInput parsers