# Vulnerabilities published in 2026


- [CVE-2026-59247](https://insights.sbomify.com/CVE-2026-59247/): Insufficient verification of Hex package metadata in Gleam (high 7.6)
- [CVE-2026-59246](https://insights.sbomify.com/CVE-2026-59246/): Zero-length HTTP/2 CONTINUATION frames bypass Mint's header-block byte-size cap and exhaust client memory (medium 6.3)
- [CVE-2026-59245](https://insights.sbomify.com/CVE-2026-59245/): Privilege escalation in Apache Airflow FAB provider (high 8.1)
- [CVE-2026-59244](https://insights.sbomify.com/CVE-2026-59244/): Apache Airflow: Secrets masker: `var.json` Variable values not masked in the Rendered Templates UI (medium 6.5)
- [CVE-2026-59243](https://insights.sbomify.com/CVE-2026-59243/): Auth bypass in Apache Airflow FAB provider (critical 9.8)
- [CVE-2026-59242](https://insights.sbomify.com/CVE-2026-59242/): Apache Airflow: Arbitrary airflow.* class instantiation on the API server via the XCom deserialize endpoint (medium 5.4)
- [CVE-2026-59241](https://insights.sbomify.com/CVE-2026-59241/): Privilege escalation in SIMATIC WinCC V7.5 (high 8.7)
- [CVE-2026-59240](https://insights.sbomify.com/CVE-2026-59240/): IDOR in Prospero Flow CRM allows deletion of other users' notifications (medium 6.9)
- [CVE-2026-5924](https://insights.sbomify.com/CVE-2026-5924/): Getwid <= 2.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Google Maps 'customStyle' (medium 6.4)
- [CVE-2026-59239](https://insights.sbomify.com/CVE-2026-59239/): Stored XSS in Prospero Flow CRM email body allows administrator account takeover (high 8.6)
- [CVE-2026-59238](https://insights.sbomify.com/CVE-2026-59238/): Stored XSS in Pentestify via unsanitized finding images and report client logo (medium 6.9)
- [CVE-2026-59237](https://insights.sbomify.com/CVE-2026-59237/): IDOR in Prospero Flow CRM Order API allows cross-tenant read and modification of orders (medium 6.9)
- [CVE-2026-59236](https://insights.sbomify.com/CVE-2026-59236/): Authorization bypass in Prospero Flow CRM Excel import allows cross-tenant record injection (medium 6.9)
- [CVE-2026-59235](https://insights.sbomify.com/CVE-2026-59235/): Missing authorization in Prospero Flow CRM allows low-privileged users to read all bank accounts (high 8.7)
- [CVE-2026-59234](https://insights.sbomify.com/CVE-2026-59234/): Authorization Bypass Through User-Controlled Key in Prospero Flow CRM calendar event deletion (medium 6.9)
- [CVE-2026-59233](https://insights.sbomify.com/CVE-2026-59233/): Missing Authorization in Prospero Flow CRM permission save endpoint allows privilege escalation (high 8.7)
- [CVE-2026-59232](https://insights.sbomify.com/CVE-2026-59232/): Stored Cross-site Scripting in Prospero Flow CRM lead name field (medium 5.3)
- [CVE-2026-59231](https://insights.sbomify.com/CVE-2026-59231/): Server-Side Request Forgery in Pentestify PDF export via unvalidated image URLs (medium 5.3)
- [CVE-2026-59230](https://insights.sbomify.com/CVE-2026-59230/): Apache Camel-Mail: the MimeMultipart data format copied MIME headers onto the Camel message without a header filter strategy when unmarshalling with headersInline enabled (medium 6.5)
- [CVE-2026-5923](https://insights.sbomify.com/CVE-2026-5923/): Poly Voice – Potential Unauthorized Modification of WebUI using CSRF Attack (medium 6.0)
- [CVE-2026-59229](https://insights.sbomify.com/CVE-2026-59229/): Apache IoTDB: Legacy Pipe Privilege Escalation (not scored)
- [CVE-2026-59227](https://insights.sbomify.com/CVE-2026-59227/): Open WebUI: POST /api/v1/images/edit bypasses the global image-edit switch and the per-user image-generation permission (medium 4.3)
- [CVE-2026-59226](https://insights.sbomify.com/CVE-2026-59226/): Open WebUI: Scheduled automations continue after pending-user deactivation and stored model ACL revocation (low 3.1)
- [CVE-2026-59225](https://insights.sbomify.com/CVE-2026-59225/): Open WebUI: Arena task endpoints can bypass underlying model access controls (medium 5.4)
- [CVE-2026-59224](https://insights.sbomify.com/CVE-2026-59224/): Open WebUI: Terminal proxy forwards a spoofable, integrity-unbound user identity to the upstream (X-User-Id header and ws_terminal session_id query injection) (high 8.0)
- [CVE-2026-59223](https://insights.sbomify.com/CVE-2026-59223/): Open WebUI: `WEB_FETCH_FILTER_LIST` host allow/block filter bypassable via URL path and non-label-boundary matching (medium 4.3)
- [CVE-2026-59222](https://insights.sbomify.com/CVE-2026-59222/): Open WebUI: /api/v1/channels/{id}/members exposes full user model including sensitive credentials (medium 6.0)
- [CVE-2026-59221](https://insights.sbomify.com/CVE-2026-59221/): open-webui terminal proxy path traversal guard bypass via 9x encoded traversal (high 7.7)
- [CVE-2026-59220](https://insights.sbomify.com/CVE-2026-59220/): Open WebUI: ReDoS in skill-mention regexes causes whole-instance DoS on default config (medium 6.5)
- [CVE-2026-5922](https://insights.sbomify.com/CVE-2026-5922/): Poly Voice – Potential Unauthorized Modification of WebUI using XSS Attack (medium 5.9)
- [CVE-2026-59219](https://insights.sbomify.com/CVE-2026-59219/): Open WebUI: Realtime endpoints accept Redis-revoked JWTs after signout/backchannel logout (high 7.1)
- [CVE-2026-59218](https://insights.sbomify.com/CVE-2026-59218/): Open WebUI: Account enumeration via observable login timing discrepancy (medium 5.3)
- [CVE-2026-59217](https://insights.sbomify.com/CVE-2026-59217/): Open WebUI: Upload `metadata.knowledge_id` bypasses the knowledge-base write-access check (read-only users can add files to KB) (medium 4.3)
- [CVE-2026-59216](https://insights.sbomify.com/CVE-2026-59216/): Open WebUI: Cross-user code-interpreter and tool execution via unvalidated Socket.IO event-caller session_id (high 7.7)
- [CVE-2026-59215](https://insights.sbomify.com/CVE-2026-59215/): Open WebUI: Private channel messages can be disclosed through cross-channel thread parent_id binding (low 3.1)
- [CVE-2026-59214](https://insights.sbomify.com/CVE-2026-59214/): Open WebUI: Stored web worker XSS via Pyodide (high 7.3)
- [CVE-2026-59213](https://insights.sbomify.com/CVE-2026-59213/): Open WebUI: Cross-user model-list exposure via static cache key in get_all_models (aiocache key= vs key_builder= misuse) (low 3.5)
- [CVE-2026-59212](https://insights.sbomify.com/CVE-2026-59212/): Open WebUI: Model meta.knowledge read-only file access can be upgraded to file write/delete (medium 5.4)
- [CVE-2026-5921](https://insights.sbomify.com/CVE-2026-5921/): Server-side request forgery in Enterprise Server (high 8.9)
- [CVE-2026-59209](https://insights.sbomify.com/CVE-2026-59209/): n8n: Shared Credential Header Leak via HTTP Request Pagination Expression (high 7.1)
- [CVE-2026-59208](https://insights.sbomify.com/CVE-2026-59208/): n8n: Cross-Issuer Token Exchange Account Binding via Subject-Only Identity Resolution (high 7.6)
- [CVE-2026-59207](https://insights.sbomify.com/CVE-2026-59207/): n8n: "Allowed HTTP Request Domains" Restriction Bypass via AI Agents MCP Connector (high 7.1)
- [CVE-2026-59206](https://insights.sbomify.com/CVE-2026-59206/): n8n: Prototype Pollution via Workflow Credentials Leads to Unauthenticated User and Project Enumeration (high 7.1)
- [CVE-2026-59205](https://insights.sbomify.com/CVE-2026-59205/): Pillow: Controlled heap out-of-bounds write in `ImageCmsTransform.apply()` via output mode mismatch (high 7.5)
- [CVE-2026-59204](https://insights.sbomify.com/CVE-2026-59204/): Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service (high 8.7)
- [CVE-2026-59203](https://insights.sbomify.com/CVE-2026-59203/): Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service (medium 5.3)
- [CVE-2026-59200](https://insights.sbomify.com/CVE-2026-59200/): Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode() (high 7.5)
- [CVE-2026-5920](https://insights.sbomify.com/CVE-2026-5920/): Bold Page Builder <= 5.9.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'shortcode_content' Parameter (medium 6.4)
- [CVE-2026-59199](https://insights.sbomify.com/CVE-2026-59199/): Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coordinate overflow (high 7.5)
- [CVE-2026-59198](https://insights.sbomify.com/CVE-2026-59198/): Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images (medium 6.5)
- [CVE-2026-59197](https://insights.sbomify.com/CVE-2026-59197/): Pillow: Heap out-of-bounds write in Pillow `ImageFilter.RankFilter` via integer overflow in `ImagingExpand` (high 8.2)
- [CVE-2026-59196](https://insights.sbomify.com/CVE-2026-59196/): pnpm: hoisted install imports lockfile alias outside node_modules (high 7.1)
- [CVE-2026-59195](https://insights.sbomify.com/CVE-2026-59195/): pnpm: Path traversal in configDependencies env lockfile allows symlink creation outside node_modules/.pnpm-config (high 8.2)
- [CVE-2026-59194](https://insights.sbomify.com/CVE-2026-59194/): pnpm: patch-remove could delete project-selected files outside the patches directory (high 7.1)
- [CVE-2026-59193](https://insights.sbomify.com/CVE-2026-59193/): Grav CMS — Improper Handling of Highly Compressed Data in Installer::unZip() (medium 6.9)
- [CVE-2026-59190](https://insights.sbomify.com/CVE-2026-59190/): Grav Admin Plugin — IDOR Privilege Escalation via saveUser() (high 8.7)
- [CVE-2026-5919](https://insights.sbomify.com/CVE-2026-5919/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-59189](https://insights.sbomify.com/CVE-2026-59189/): OpenEXR: Out-of-bounds read in DeepImageChannel::row() for non-zero dataWindow origin (high 7.1)
- [CVE-2026-59188](https://insights.sbomify.com/CVE-2026-59188/): Part-DB: SVG Sanitization Bypass via Extension Spoofing Leads to Stored XSS in Attachment Viewer (medium 5.4)
- [CVE-2026-59187](https://insights.sbomify.com/CVE-2026-59187/): OpenEXR: exrmetrics deep pixelmode heap buffer overflow (high 7.1)
- [CVE-2026-59186](https://insights.sbomify.com/CVE-2026-59186/): OpenEXR: Heap out-of-bounds write in TiledRgbaInputFile via integer overflow on 32-bit (ILP32) builds (high 7.1)
- [CVE-2026-59185](https://insights.sbomify.com/CVE-2026-59185/): identrail: Cross-tenant GitHub installation binding without ownership verification (high 8.5)
- [CVE-2026-59184](https://insights.sbomify.com/CVE-2026-59184/): OpenEXR: OpenEXRUtil FlatImageChannel row nonzero dataWindow heap OOB write (high 7.1)
- [CVE-2026-59183](https://insights.sbomify.com/CVE-2026-59183/): OpenEXR: Signed Integer Overflow Leading to Out-of-Bounds Memory Access in Deep Tile Decoding (medium 5.5)
- [CVE-2026-59181](https://insights.sbomify.com/CVE-2026-59181/): OpenImageIO: Stack buffer overflow in OpenImageIO Cineon reader via unchecked numberOfElements (medium 6.1)
- [CVE-2026-59180](https://insights.sbomify.com/CVE-2026-59180/): Apprise forwards configured auth headers across cross-origin HTTP redirects (low 3.1)
- [CVE-2026-5918](https://insights.sbomify.com/CVE-2026-5918/): Information disclosure in Chrome (medium 4.3)
- [CVE-2026-59179](https://insights.sbomify.com/CVE-2026-59179/): OpenHop: Path Traversal in Flow ID File Operations (high 8.3)
- [CVE-2026-59178](https://insights.sbomify.com/CVE-2026-59178/): ESPHome Device Builder: Renamed auth env vars silently disable dashboard authentication on upgrade (critical 9.8)
- [CVE-2026-59177](https://insights.sbomify.com/CVE-2026-59177/): ESPHome Device Builder allows unauthenticated dashboard access via the HA add-on ingress site bound to all interfaces (high 8.8)
- [CVE-2026-59176](https://insights.sbomify.com/CVE-2026-59176/): Functype: MCP set_functype_version Package Alias RCE via Unsanitized pnpm install + Dynamic Import (high 7.8)
- [CVE-2026-59173](https://insights.sbomify.com/CVE-2026-59173/): Apache Traffic Server: DoS vulnerability in HTTP/2 via stalled flow-control conditions (high 7.5)
- [CVE-2026-59172](https://insights.sbomify.com/CVE-2026-59172/): Joker linter executed project-local .jokerd/linter.* files during linting (high 7.8)
- [CVE-2026-5917](https://insights.sbomify.com/CVE-2026-5917/): libgit2 Shell Command Injection via ssh_libssh2 Backend (high 8.6)
- [CVE-2026-59168](https://insights.sbomify.com/CVE-2026-59168/): Dasel: Unbounded recursion in JSON and XML readers causes unrecoverable stack-overflow DoS (medium 6.2)
- [CVE-2026-59167](https://insights.sbomify.com/CVE-2026-59167/): SunEditor: Critical XSS vulnerability - sanitizer bypass (critical 10.0)
- [CVE-2026-59164](https://insights.sbomify.com/CVE-2026-59164/): NORA missing cross-user token-management authorization (high 7.1)
- [CVE-2026-59163](https://insights.sbomify.com/CVE-2026-59163/): Mnemosyne has JWT signature verification bypass sync server that allows authentication bypass (critical 9.1)
- [CVE-2026-59162](https://insights.sbomify.com/CVE-2026-59162/): Excelize: Negative shared-string index causes panic in GetCellValue and GetRows (medium 6.9)
- [CVE-2026-59161](https://insights.sbomify.com/CVE-2026-59161/): Excelize: Streaming GetRows row-bound bypass causes attacker-controlled allocation (high 8.7)
- [CVE-2026-59160](https://insights.sbomify.com/CVE-2026-59160/): Yeger: Unauthenticated Network-Exposed Turborepo Task Execution via /api/run (high 8.8)
- [CVE-2026-59158](https://insights.sbomify.com/CVE-2026-59158/): Nuxt Ollama: public runtime configuration discloses the configured cloud API key (high 7.5)
- [CVE-2026-59157](https://insights.sbomify.com/CVE-2026-59157/): webhookd: Unrestricted HTTP Header to Shell Variable Injection (medium 6.5)
- [CVE-2026-59156](https://insights.sbomify.com/CVE-2026-59156/): OpenImageIO: Unbounded recursion in FITS header parser leads to stack overflow (medium 6.5)
- [CVE-2026-59155](https://insights.sbomify.com/CVE-2026-59155/): Nezha Monitoring: DDNS and Notification credential exposure via unredacted list API (medium 6.9)
- [CVE-2026-59154](https://insights.sbomify.com/CVE-2026-59154/): Wekan: Checklist direct DDP updates can write checklist data into private boards (medium 4.3)
- [CVE-2026-59153](https://insights.sbomify.com/CVE-2026-59153/): Anki's local HTTP server does not sufficiently validate requests (low 2.1)
- [CVE-2026-59152](https://insights.sbomify.com/CVE-2026-59152/): Arbitrary server-side file read in LangSmith SDK TracingMiddleware (medium 5.0)
- [CVE-2026-59151](https://insights.sbomify.com/CVE-2026-59151/): Prowler: SAML Domain Claiming Enables Cross-Tenant Account Takeover (critical 9.6)
- [CVE-2026-5915](https://insights.sbomify.com/CVE-2026-5915/): Memory corruption in Chrome (high 8.1)
- [CVE-2026-59149](https://insights.sbomify.com/CVE-2026-59149/): Mockoon: Path traversal in templated `filePath` lets a request escape the served directory (prefix-only base check) (medium 6.5)
- [CVE-2026-59148](https://insights.sbomify.com/CVE-2026-59148/): Mockoon: Unauthenticated admin API + wildcard CORS allows mock-state hijack and secret theft (high 8.8)
- [CVE-2026-59147](https://insights.sbomify.com/CVE-2026-59147/): Memory corruption in Data::DisjointSet::Shared (critical 9.8)
- [CVE-2026-59146](https://insights.sbomify.com/CVE-2026-59146/): Memory corruption in Data::SpatialHash::Shared (high 7.8)
- [CVE-2026-59145](https://insights.sbomify.com/CVE-2026-59145/): Memory corruption in Data::Intern::Shared (critical 9.1)
- [CVE-2026-59144](https://insights.sbomify.com/CVE-2026-59144/): Memory corruption in Data::RingBuffer::Shared (critical 9.8)
- [CVE-2026-59143](https://insights.sbomify.com/CVE-2026-59143/): Memory corruption in Data::RoaringBitmap::Shared (medium 6.3)
- [CVE-2026-59142](https://insights.sbomify.com/CVE-2026-59142/): Memory corruption in Data::HashMap::Shared (critical 9.1)
- [CVE-2026-59141](https://insights.sbomify.com/CVE-2026-59141/): Memory corruption in Data::RadixTree::Shared (critical 9.1)
- [CVE-2026-59140](https://insights.sbomify.com/CVE-2026-59140/): Memory corruption in Data::SortedSet::Shared (critical 9.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/514/