# Vulnerabilities published in 2026


- [GHSA-5c6j-r48x-rmvq](https://insights.sbomify.com/GHSA-5c6j-r48x-rmvq/): Serialize JavaScript is Vulnerable to RCE via RegExp.flags and Date.prototype.toISOString() (not scored)
- [GHSA-59xv-588h-2vmm](https://insights.sbomify.com/GHSA-59xv-588h-2vmm/): @saltcorn/data vulnerable to SQL Injection via jsexprToSQL Literal Handler (not scored)
- [GHSA-59qp-cfj3-rp64](https://insights.sbomify.com/GHSA-59qp-cfj3-rp64/): netfoil has a domain name filter bypass via multiple questions (not scored)
- [GHSA-595p-g7xc-c333](https://insights.sbomify.com/GHSA-595p-g7xc-c333/): Algolia Search & Discovery for Magento 2 Has Untrusted Data Handling (not scored)
- [GHSA-594f-3595-c47v](https://insights.sbomify.com/GHSA-594f-3595-c47v/): Terraform Provider for ArgoCD has possible exposure to GO-2026-4337 / CVE-2025-68121 (not scored)
- [GHSA-58q2-9x27-h2jm](https://insights.sbomify.com/GHSA-58q2-9x27-h2jm/): solspace/craft-freeform Has a DoS Vulnerability (not scored)
- [GHSA-5847-rm3g-23mw](https://insights.sbomify.com/GHSA-5847-rm3g-23mw/): OpenClaw has hook auth rate limiter bypass via IPv4-mapped IPv6 client key variants (not scored)
- [GHSA-57v5-wqx3-cgj4](https://insights.sbomify.com/GHSA-57v5-wqx3-cgj4/): Scope note (please read first) This endpoint does not exist in v3.7.3 or on master. (not scored)
- [GHSA-5739-39v2-5754](https://insights.sbomify.com/GHSA-5739-39v2-5754/): Impact `RSACrypt::decryptWithRSA15()` (used by the `RSA1_5` key-encryption algorithm) implements RSAES-PKCS1-v1_5 decryption by inspecti (not scored)
- [GHSA-56m6-8q75-f2rw](https://insights.sbomify.com/GHSA-56m6-8q75-f2rw/): ImageMagick: Policy Bypass due to an incomplete fix of CVE-2026-49219 (not scored)
- [GHSA-56f2-hvwg-5743](https://insights.sbomify.com/GHSA-56f2-hvwg-5743/): OpenClaw affected by SSRF in Image Tool Remote Fetch (not scored)
- [GHSA-5648-rgj9-v224](https://insights.sbomify.com/GHSA-5648-rgj9-v224/): @zereight/mcp-gitlab exposes GitLab to an LLM agent while relying on read-only mode, a project allow-list, and transport auth as its safety controls. (not scored)
- [GHSA-55v6-g8pm-pw4c](https://insights.sbomify.com/GHSA-55v6-g8pm-pw4c/): rembg server is vulnerable to Server-Side Request Forgery (SSRF) and a weak default CORS configuration (not scored)
- [GHSA-55f6-4pr5-c7m5](https://insights.sbomify.com/GHSA-55f6-4pr5-c7m5/): Kahi has privilege-drop and socket/log permission issues (not scored)
- [GHSA-54pg-9963-v8vg](https://insights.sbomify.com/GHSA-54pg-9963-v8vg/): Compromised version of intercom-client published to npm (not scored)
- [GHSA-54p8-x2m9-c593](https://insights.sbomify.com/GHSA-54p8-x2m9-c593/): malcontent: Error-path cleanup gap can leak scanners and fds and degrade availability (not scored)
- [GHSA-54gx-3cgr-7mfm](https://insights.sbomify.com/GHSA-54gx-3cgr-7mfm/): Cosmos EVM: incorrect state handling during nested EVM execution paths (not scored)
- [GHSA-5478-66c3-rhxr](https://insights.sbomify.com/GHSA-5478-66c3-rhxr/): Pretext: Algorithmic Complexity (DoS) in the text analysis phase (not scored)
- [GHSA-53hj-r94p-8c8f](https://insights.sbomify.com/GHSA-53hj-r94p-8c8f/): Kanidm has non-constant-time comparison of OAuth2 client_secret (not scored)
- [GHSA-537c-gmf6-5ccf](https://insights.sbomify.com/GHSA-537c-gmf6-5ccf/): Vulnerable OpenSSL included in cryptography wheels (not scored)
- [GHSA-534w-2vm4-89xr](https://insights.sbomify.com/GHSA-534w-2vm4-89xr/): OpenClaw's Zalo group sender allowlist bypass permits unauthorized GROUP dispatch (not scored)
- [GHSA-52vm-mxx8-f227](https://insights.sbomify.com/GHSA-52vm-mxx8-f227/): Phantom: Arbitrary file write and decode-bomb DoS via unconfined MCP tool paths (not scored)
- [GHSA-52cq-7v8r-62c6](https://insights.sbomify.com/GHSA-52cq-7v8r-62c6/): gmaps-mcp's unauthenticated HTTP transport allows unlimited Google Maps API calls at operator expense (not scored)
- [GHSA-4x48-cgf9-q33f](https://insights.sbomify.com/GHSA-4x48-cgf9-q33f/): Novu has SSRF via conditions filter webhook bypasses validateUrlSsrf() protection (not scored)
- [GHSA-4vgr-h27g-cf9p](https://insights.sbomify.com/GHSA-4vgr-h27g-cf9p/): SurrealDB: HTTP RPC Session Race Condition Allows Privilege Escalation (not scored)
- [GHSA-4v76-cw68-4vc9](https://insights.sbomify.com/GHSA-4v76-cw68-4vc9/): A `LIVE` query whose `WHERE` clause evaluates to an error caused the source data modifier (the user creating, updating, or deleting a record (not scored)
- [GHSA-4q55-j62x-fr9h](https://insights.sbomify.com/GHSA-4q55-j62x-fr9h/): devalue: Malformed null-prototype object keys bypass __proto__ rejection via property-key coercion (not scored)
- [GHSA-4ph6-mjv7-3fq6](https://insights.sbomify.com/GHSA-4ph6-mjv7-3fq6/): netfoil vulnerable to improper handling of untrusted DoH response data (not scored)
- [GHSA-4mfg-r38w-w8fg](https://insights.sbomify.com/GHSA-4mfg-r38w-w8fg/): mcp-sanitizer: URL sanitizer allows localhost/IPv6 loopback SSRF bypass via explicit port or bracketed IPv6 (not scored)
- [GHSA-4m82-p8cx-f94j](https://insights.sbomify.com/GHSA-4m82-p8cx-f94j/): SurrealDB: LIVE query subscriptions survive session state changes, bypassing access controls (not scored)
- [GHSA-4hjq-9h5c-252j](https://insights.sbomify.com/GHSA-4hjq-9h5c-252j/): Traefik: HTTP/2 frames can cause a running server to panic (not scored)
- [GHSA-4gph-2hhr-5mwg](https://insights.sbomify.com/GHSA-4gph-2hhr-5mwg/): Envoy AI Proxy - MCP Message Smuggling Vulnerability (not scored)
- [GHSA-4f84-67cv-qrv3](https://insights.sbomify.com/GHSA-4f84-67cv-qrv3/): A single post-release of dydx-v4-client contained obfuscated multi-stage loader (not scored)
- [GHSA-4cqv-h74h-93j4](https://insights.sbomify.com/GHSA-4cqv-h74h-93j4/): OpenClaw has a Discord `allowFrom` slug-collision authorization bypass (not scored)
- [GHSA-4cm8-xpfv-jv6f](https://insights.sbomify.com/GHSA-4cm8-xpfv-jv6f/): ZeptoClaw: Email Sender Spoofing to bypass Header-Only From Allowlist Validation (not scored)
- [GHSA-4c5f-9mj4-m247](https://insights.sbomify.com/GHSA-4c5f-9mj4-m247/): flagd: Multiple Go Runtime CVEs Impact Security and Availability (not scored)
- [GHSA-4c35-wcg5-mm9h](https://insights.sbomify.com/GHSA-4c35-wcg5-mm9h/): `setNestedProperty` in `packages/next-intl/src/extractor/utils.tsx` walks a dotted key path and assigns the final value without b (not scored)
- [GHSA-47wq-cj9q-wpmp](https://insights.sbomify.com/GHSA-47wq-cj9q-wpmp/): Paperclip: Cross-tenant agent API token minting via missing assertCompanyAccess on /api/agents/:id/keys (not scored)
- [GHSA-47qc-857f-7w7f](https://insights.sbomify.com/GHSA-47qc-857f-7w7f/): PyO3 0.28.1 added support for `#[pyclass(extends=PyList)] struct NativeSub` (and other native types) when targeting Python 3.12 and up with the `abi3` feature. (not scored)
- [GHSA-474h-prjg-mmw3](https://insights.sbomify.com/GHSA-474h-prjg-mmw3/): OpenClaw: Sandboxed sessions_spawn(runtime="acp") bypassed sandbox inheritance and allowed host ACP initialization (not scored)
- [GHSA-473q-m89c-ghf8](https://insights.sbomify.com/GHSA-473q-m89c-ghf8/): With `SslMode` set to `VerifyCA` or `VerifyFull` with no configured CA certificate, an unvalidated TLS connection is treated as s (not scored)
- [GHSA-46wh-3698-f2cx](https://insights.sbomify.com/GHSA-46wh-3698-f2cx/): Traefik: Deny Rule Bypass via Unauthenticated Malicious gRPC Requests in gRPC-Go Dependency (CVE-2026-33186) (not scored)
- [GHSA-46fp-8f5p-pf2m](https://insights.sbomify.com/GHSA-46fp-8f5p-pf2m/): Improper detection of disallowed URIs by Loofah `allowed_uri?` (not scored)
- [GHSA-464c-974j-9xm6](https://insights.sbomify.com/GHSA-464c-974j-9xm6/): AWS CDK CodeBuild S3 Log Encryption Boolean Inversion (not scored)
- [GHSA-456v-xq2p-r4cj](https://insights.sbomify.com/GHSA-456v-xq2p-r4cj/): code-ollama: `grep_search` Command Injection via Unescaped `$()` Shell Substitution (CWE-78) (not scored)
- [GHSA-44jg-mv3h-wj6g](https://insights.sbomify.com/GHSA-44jg-mv3h-wj6g/): solspace/craft-freeform Vulnerable to XSS in `PhpSpreadsheet` HTML Writer Due to Unsanitized Styling Data (not scored)
- [GHSA-443w-3rq3-5m5h](https://insights.sbomify.com/GHSA-443w-3rq3-5m5h/): AWS SDK for Java 2.0: Improper Handling of Special Characters in CloudFront Signing Utilities (not scored)
- [GHSA-442j-39wm-28r2](https://insights.sbomify.com/GHSA-442j-39wm-28r2/): Handlebars.js has a Property Access Validation Bypass in container.lookup (not scored)
- [GHSA-434v-x5qv-pmh6](https://insights.sbomify.com/GHSA-434v-x5qv-pmh6/): All-Zero Key Generation on Catastrophic RNG Failure (not scored)
- [GHSA-429q-fhh4-r6hj](https://insights.sbomify.com/GHSA-429q-fhh4-r6hj/): `InterfaceAccount` allows account substitution between unexpected types (not scored)
- [GHSA-3xx2-mqjm-hg9x](https://insights.sbomify.com/GHSA-3xx2-mqjm-hg9x/): Paperclip: Cross-tenant agent API key IDOR in `/agents/:id/keys` routes allows full victim-company compromise (not scored)
- [GHSA-3whf-vgf2-9w6g](https://insights.sbomify.com/GHSA-3whf-vgf2-9w6g/): zaino-state has a Non-Finalized State Reorg — No Cycle Detection or Depth Limit (not scored)
- [GHSA-3w55-933p-8pv5](https://insights.sbomify.com/GHSA-3w55-933p-8pv5/): Strands Agents: Local Privilege Escalation via Symlink Attack in Default Session File Storage (not scored)
- [GHSA-3v94-mw7p-v465](https://insights.sbomify.com/GHSA-3v94-mw7p-v465/): hickory-proto: NSEC3 closest-encloser proof validation enters unbounded loop on cross-zone responses (not scored)
- [GHSA-3pw3-v88x-xj24](https://insights.sbomify.com/GHSA-3pw3-v88x-xj24/): Paperclip: Arbitrary File Read via Agent-Controlled adapterConfig.instructionsFilePath (not scored)
- [GHSA-3pv8-6f4r-ffg2](https://insights.sbomify.com/GHSA-3pv8-6f4r-ffg2/): tar has a PAX header desynchronization issue (not scored)
- [GHSA-3prj-6hqw-cm82](https://insights.sbomify.com/GHSA-3prj-6hqw-cm82/): Impact When a JWE uses a password-based key-encryption algorithm (`PBES2-HS256+A128KW`, `PBES2-HS384+A192KW`, `PBES2-HS512+A256KW`), `PB (not scored)
- [GHSA-3p34-w4f6-5xh2](https://insights.sbomify.com/GHSA-3p34-w4f6-5xh2/): better-helperjs Vulnerable to Directory Traversal via String Prefix Bypass in Static Server (not scored)
- [GHSA-3mjm-x6gw-2x42](https://insights.sbomify.com/GHSA-3mjm-x6gw-2x42/): @grackle-ai/server has Missing Content-Security-Policy and X-Frame-Options Headers (not scored)
- [GHSA-3m6q-h5gj-7mrw](https://insights.sbomify.com/GHSA-3m6q-h5gj-7mrw/): Gitea has insecure default SSH settings (not scored)
- [GHSA-3jx4-q2m7-r496](https://insights.sbomify.com/GHSA-3jx4-q2m7-r496/): OpenClaw: Hardlink alias checks could bypass workspace-only file boundaries in specific configurations (not scored)
- [GHSA-3hfp-gqgh-xc5g](https://insights.sbomify.com/GHSA-3hfp-gqgh-xc5g/): Axios supply chain attack - dependency in @lightdash/cli may resolve to compromised axios versions (not scored)
- [GHSA-3hc7-r24j-rpwc](https://insights.sbomify.com/GHSA-3hc7-r24j-rpwc/): Vikunja: Cross-project task disclosure through subtask expansion (not scored)
- [GHSA-3h96-34p3-xm76](https://insights.sbomify.com/GHSA-3h96-34p3-xm76/): GraphQL-Ruby's Ruby lexer does not count comment tokens for the purposes of max_query_string_tokens (not scored)
- [GHSA-3h6j-9x8m-rg3g](https://insights.sbomify.com/GHSA-3h6j-9x8m-rg3g/): Graby has stored XSS via iframe srcdoc Attribute in htmLawed Sanitization Config (not scored)
- [GHSA-3h2q-j2v4-6w5r](https://insights.sbomify.com/GHSA-3h2q-j2v4-6w5r/): OpenClaw's system.run allowlist approval parsing missed PowerShell encoded-command wrappers (not scored)
- [GHSA-3gjw-f78c-vvpw](https://insights.sbomify.com/GHSA-3gjw-f78c-vvpw/): Panic on a `DataRow` with fewer fields than columns allows denial of service (not scored)
- [GHSA-3g92-f9ch-qjcm](https://insights.sbomify.com/GHSA-3g92-f9ch-qjcm/): Vulnerability Currently, when hashing, if the number of elements to hash is not a multiple of the rate, `hash_iter` pads by elements of the current state. (not scored)
- [GHSA-3g4q-2f67-2gvh](https://insights.sbomify.com/GHSA-3g4q-2f67-2gvh/): netfoil has a resource leak in LRU cache (not scored)
- [GHSA-3f6p-5ww8-9rcr](https://insights.sbomify.com/GHSA-3f6p-5ww8-9rcr/): MySQL2: Auth Plugin Downgrade to mysql_clear_password Leaks Plaintext Credentials (not scored)
- [GHSA-3cv2-h65g-fgmm](https://insights.sbomify.com/GHSA-3cv2-h65g-fgmm/): astral-tokio-tar has a PAX Header Desynchronization issue (not scored)
- [GHSA-39wr-7q6h-cf68](https://insights.sbomify.com/GHSA-39wr-7q6h-cf68/): LMDeploy has an SSRF bypass (not scored)
- [GHSA-39h7-pwv7-rc3x](https://insights.sbomify.com/GHSA-39h7-pwv7-rc3x/): Excalidraw vulnerable to XSS via Mermaid sequence diagram labels (KaTeX rendering) (not scored)
- [GHSA-39g5-644c-qwcg](https://insights.sbomify.com/GHSA-39g5-644c-qwcg/): container: pf Rule Injection via Domain Name Argument in `container system dns create --localhost` Command (not scored)
- [GHSA-394x-vwmw-crm3](https://insights.sbomify.com/GHSA-394x-vwmw-crm3/): AWS-LC X.509 Name Constraints Bypass via Wildcard/Unicode CN (not scored)
- [GHSA-392f-ggf5-fp3c](https://insights.sbomify.com/GHSA-392f-ggf5-fp3c/): OpenClaw: Unicode canonicalization drift in node metadata policy classification could broaden node allowlists (not scored)
- [GHSA-38cw-85xc-xr9x](https://insights.sbomify.com/GHSA-38cw-85xc-xr9x/): Veramo is Vulnerable to SQL Injection in Veramo Data Store ORM (not scored)
- [GHSA-387m-935m-c4vw](https://insights.sbomify.com/GHSA-387m-935m-c4vw/): Micronaut doesn't set a maximum redirect count for its HTTP Client, enabling infinite loop DoS (not scored)
- [GHSA-382q-fpqh-29f7](https://insights.sbomify.com/GHSA-382q-fpqh-29f7/): `polymarket-clients-sdk` was removed from crates.io for malicious code (not scored)
- [GHSA-382c-vx95-w3p5](https://insights.sbomify.com/GHSA-382c-vx95-w3p5/): Gittensory: Missing contributor-scoped access control on profile endpoint and MCP tool leaks miner financial data (not scored)
- [GHSA-36hh-v3qg-5jq4](https://insights.sbomify.com/GHSA-36hh-v3qg-5jq4/): Out-of-bounds read in `nth` / `nth_back` for `PyList` and `PyTuple` iterators (not scored)
- [GHSA-33hq-fvwr-56pm](https://insights.sbomify.com/GHSA-33hq-fvwr-56pm/): devalue affected by CPU and memory amplification from sparse arrays (not scored)
- [GHSA-32wq-ppwg-3w4m](https://insights.sbomify.com/GHSA-32wq-ppwg-3w4m/): EnhancedLinq.Async is Vulnerable to Denial of Service via Transitive Dependency Microsoft.Bcl.Memory (not scored)
- [GHSA-3288-p39f-rqpv](https://insights.sbomify.com/GHSA-3288-p39f-rqpv/): Unsoundness in opt-in ARMv8 assembly backend for `keccak` (not scored)
- [GHSA-3278-c88v-xrh4](https://insights.sbomify.com/GHSA-3278-c88v-xrh4/): A vulnerability in the Kong Ingress Controller (KIC) allows for the unauthorized exposure of sensitive plugin credentials through (not scored)
- [GHSA-322x-v876-g883](https://insights.sbomify.com/GHSA-322x-v876-g883/): @asymmetric-effort/nogginlessdom's Path Traversal in matchFileSnapshot allows arbitrary file write (not scored)
- [GHSA-2xp9-vwfh-vxw4](https://insights.sbomify.com/GHSA-2xp9-vwfh-vxw4/): Next.js: Unauthenticated Remote Code Execution in Image Optimization API when AVIF files are used (not scored)
- [GHSA-2wwr-9x6f-88gp](https://insights.sbomify.com/GHSA-2wwr-9x6f-88gp/): EasyAdminBundle has path traversal and reflected XSS in Flag and Icon Twig components (not scored)
- [GHSA-2v8p-fqpx-2q3w](https://insights.sbomify.com/GHSA-2v8p-fqpx-2q3w/): jxl-oxide: integer subtraction overflow panic in cluster_from_table via crafted JXL input (DoS) (not scored)
- [GHSA-2rx9-3g3h-c2jv](https://insights.sbomify.com/GHSA-2rx9-3g3h-c2jv/): pnpm: pacquet trust-lockfile install can create dependency symlinks outside the project (not scored)
- [GHSA-2rqm-h6hv-g79v](https://insights.sbomify.com/GHSA-2rqm-h6hv-g79v/): odf-kit has HTML injection leading to XSS in odsToHtml() via unescaped style attribute values (not scored)
- [GHSA-2r2p-4cgf-hv7h](https://insights.sbomify.com/GHSA-2r2p-4cgf-hv7h/): The local HTTP server started by `engram server` (binding `127.0.0.1:7337` by default) was exposed to any browser origin with no (not scored)
- [GHSA-2q42-4q24-7rgv](https://insights.sbomify.com/GHSA-2q42-4q24-7rgv/): OpenAPI3 version value escapes `emitterOutputDir` and overwrites YAML/JSON outside the output tree (not scored)
- [GHSA-2phg-qgmm-r638](https://insights.sbomify.com/GHSA-2phg-qgmm-r638/): Sliver has Potential Zip Bomb Denial of Service in GzipEncoder (not scored)
- [GHSA-2p6r-x3vv-xqm2](https://insights.sbomify.com/GHSA-2p6r-x3vv-xqm2/): rpassword affected by partial password reveal when input is interrupted (not scored)
- [GHSA-2mjx-qc3c-rqvc](https://insights.sbomify.com/GHSA-2mjx-qc3c-rqvc/): Rustls: TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries (not scored)
- [GHSA-2mhw-8qcg-gr96](https://insights.sbomify.com/GHSA-2mhw-8qcg-gr96/): skia-python vendors vulnerable libfreetype because of pinned cibuildwheel version (not scored)
- [GHSA-2mf3-mr2r-r4vf](https://insights.sbomify.com/GHSA-2mf3-mr2r-r4vf/): @rhinostone/swig: arbitrary local file read via include/extends path traversal (not scored)
- [GHSA-2mc2-g238-722j](https://insights.sbomify.com/GHSA-2mc2-g238-722j/): OpenClaw affected by iMessage remote attachment SCP hardening (strict host-key checks and remoteHost validation) (not scored)
- [GHSA-2m67-wjpj-xhg9](https://insights.sbomify.com/GHSA-2m67-wjpj-xhg9/): Jackson Core: Document length constraint bypass in blocking, async, and DataInput parsers (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/198/