Verified Advisories
Concise advisories for CRITICAL/HIGH vulnerabilities – affected and fixed versions confirmed against the vendor's own advisory before publishing. 397 total.
Missing authorization on MCP endpoint in SiYuan (CVE-2026-66012)
The POST /mcp endpoint in the SiYuan kernel exposes 31 MCP tools - including file list, read, write, delete, rename, and copy operations across the entire workspace - gated only by a general authentication check (mode...
Fixed in v3.7.2
Authorization bypass in Eclipse BaSyx Go Components via trailing slash (CVE-2026-15704)
Eclipse BaSyx Go Components contains an authorization bypass in ABAC-enabled deployments caused by inconsistent trailing-slash handling between the ABAC middleware and the HTTP router. The ABAC middleware evaluates th...
Fixed in v1.0.1
Promise resolver type confusion in seroval fromJSON() deserialization (CVE-2026-59940)
A type confusion vulnerability in `seroval.fromJSON()` allows attacker-controlled JSON input to cause Promise control nodes to operate on values from the general deserialization reference table without verifying those...
Fixed in 1.5.3
VAU server authentication bypass in epa4all (CVE-2026-48021)
The VAU protocol client in epa4all does not verify the server's ES256 signature, certificate chain to the TI PKI root, OCSP revocation status, or role OID during the VAU handshake, despite deserializing the relevant f...
Fixed in 2026-05-20
Unauthenticated remote code execution in OpenAM /authservice endpoint (CVE-2026-62379)
OpenAM's remote authentication endpoint (`/authservice`, PLL) accepts an XML element naming an arbitrary Java class, which the server loads and instantiates without validation. This flaw is reachable without authentic...
Fixed in 16.1.2
Java deserialization RCE via ObjectInputFilter bypass in OpenAM WebAuthn (CVE-2026-62263)
A prior fix for WebAuthn authenticator deserialization in OpenAM wrapped the process in an `ObjectInputFilter` allowlisting only `AuthenticatorImpl`, but the filter short-circuits to `ALLOWED` for any object at stream...
Fixed in 16.1.2
Authentication bypass in OpenRemote console registration API (CVE-2026-66013)
The OpenRemote console registration API accepts a client-supplied asset identifier and, when that identifier matches an existing console asset, updates the asset's push notification token and metadata without requirin...
Fixed in 1.26.2
Stack overflow via SCRAM nonce handling in PgBouncer (CVE-2026-6665)
The SCRAM authentication code in PgBouncer before 1.25.2 fails to correctly check the return value of strlcat() when building the SCRAM client-final-message. A malicious backend server can exploit this flaw by sending...
Fixed in 1.25.2
OS command injection in CGM CLININET (CVE-2025-30044)
CGM CLININET contains an OS command injection vulnerability in four CGI endpoints (usrlogstat_simple.pl, usrlogstat.pl, userlogstat2.pl, and dblogstat.pl) where input parameters are not sufficiently normalized. This f...
Fixed in 2025.MS2
Header injection in Apache APISIX forward-auth plugin (CVE-2026-31908)
A header injection vulnerability exists in Apache APISIX's forward-auth plugin. An attacker can exploit certain plugin configurations to inject malicious headers, potentially enabling request forgery or privilege esca...
Fixed in 3.16.0
Authentication bypass in @fastify/middie and @fastify/express (CVE-2026-6270)
@fastify/middie versions 9.3.1 and earlier do not register inherited middleware directly on child plugin engine instances, allowing unauthenticated requests to reach routes defined in child plugin scopes and bypass au...
Fixed in @fastify/express 4.0.5
Stack overflow via deeply nested documents in Hot Chocolate Utf8GraphQLParser (CVE-2026-40324)
Hot Chocolate's `Utf8GraphQLParser` is a recursive descent parser with no recursion depth limit. A crafted GraphQL document with deeply nested selection sets, object values, list values, or list types triggers an unca...
Fixed in 12.22.7; 13.9.16; 14.3.1; 15.1.14
Incorrect CSR dependency between henvcfg and menvcfg in NEMU (CVE-2026-29649)
NEMU contains an implementation flaw in its RISC-V Hypervisor CSR handling where the CBIE, CBCFE, and CBZE fields of henvcfg (bits 7:4) are incorrectly made dependent on the corresponding fields of menvcfg. A machine-...
Fixed in Release v2025.12.r1
Heap corruption in Noir Brillig compiler for nested tuple array foreign calls (CVE-2026-41197)
A bug in the Noir compiler's Brillig bytecode backend causes under-allocation of heap memory when pre-allocating results for foreign calls that return nested arrays of composite types such as tuples. The compiler disc...
Fixed in 1.0.0-beta.19
Prompt injection remote code execution in FlowiseAI Flowise CSV Agent (CVE-2026-41264)
A missing sandbox boundary in the `run` method of the `CSV_Agents` class allows the LLM-generated Python script to be evaluated without proper isolation. An unauthenticated remote attacker can use prompt injection to ...
Fixed in 3.1.0
Stored XSS in Jenkins GitHub Plugin via job URL processing (CVE-2026-42523)
Jenkins GitHub Plugin 1.46.0 and earlier improperly processes the current job URL as part of JavaScript implementing validation of the "GitHub hook trigger for GITScm polling" feature, resulting in a stored cross-site...
Fixed in GitHub Plugin 1.46.0.1
OIDC token audience validation bypass in Oxia (CVE-2026-40946)
The OIDC authentication provider in Oxia unconditionally sets `SkipClientIDCheck: true` in the go-oidc verifier configuration, disabling standard audience (`aud`) claim validation at the library level. As a result, an...
Fixed in 0.16.2
Incorrect buffer length calculation in Linux kernel ksmbd SMB server (CVE-2026-31478)
The Linux kernel's ksmbd SMB server daemon contains an incorrect buffer length calculation in `smb2_calc_max_out_buf_len()`, where hardcoded magic numbers are used in place of the correct `offsetof()` value for the re...
Fixed in linux-image-6.17.0-1018-oracle 6.17.0-1018.18; linux-image-6.17.0-1018-oracle-64k 6.17.0-1018.18; linux-image-6.17.0-1019-aws 6.17.0-1019.19; linux-image-6.17.0-1019-aws-64k 6.17.0-1019.19; linux-image-6.17.0-1020-gcp 6.17.0-1020.22; linux-image-6.17.0-1020-gcp-64k 6.17.0-1020.22; linux-image-6.17.0-40-generic 6.17.0-40.40; linux-image-6.17.0-40-generic-64k 6.17.0-40.40
SQL injection in SocialEngine get-memberall endpoint (CVE-2026-41460)
SocialEngine versions 7.8.0 and prior contain a SQL injection vulnerability in the `/activity/index/get-memberall` endpoint. User-supplied input passed via the `text` parameter is not sanitized before being incorporat...
Fixed in 8.0.0
Stored XSS in hackage-server via unsanitized .cabal metadata (CVE-2026-40472)
User-controlled metadata from .cabal files is rendered into HTML href attributes without proper sanitization in hackage-server, enabling stored Cross-Site Scripting (XSS) attacks. The affected fields include homepage,...
Fixed in commit 2de3ae45082f8f3f29a41f6aff620d09d0e74058 or later