Verified Advisories
Concise advisories for CRITICAL/HIGH vulnerabilities – affected and fixed versions confirmed against the vendor's own advisory before publishing. 397 total.
IP address spoofing in rsync daemon PROXY protocol handling (CVE-2026-53791)
When `proxy protocol = true` is configured, the rsync daemon (before 3.5.0) accepts PROXY protocol headers from clients connecting directly rather than through a trusted proxy. This allows unauthenticated remote attac...
Fixed in 3.5.0
Chroot inner-module escape via parent-component symlink in rsync (CVE-2026-53793)
rsync before 3.5.0 fails to properly confine paths when `use chroot = yes` is combined with a `/./ ` inner-module root: the kernel chroot constrains only the outer path, allowing a symlinked parent component inside th...
Fixed in 3.5.0
hosts deny access control bypass in rsync on DNS lookup failure (CVE-2026-70452)
rsync's `match_hostname()` function performs a forward DNS lookup of hostname tokens configured in `hosts deny` rules. When the lookup fails, the function returns "no match" - indistinguishable from a genuine non-matc...
Fixed in 3.5.0
Module-root escape via symlink in rsync daemon (CVE-2026-70460)
The rsync daemon resolves operator-supplied --partial-dir and --backup-dir option values by following symlinks that are owned by uid 0 or the daemon euid, without verifying that the resolved path remains within the mo...
Fixed in 3.5.0
Code injection remote code execution in Flowise Airtable Agent node (CVE-2026-73485)
Flowise contains a code injection vulnerability in the run method of the Airtable_Agents class, where user-supplied prompts can cause the application to execute attacker-controlled Python code in an unsandboxed pyodid...
Fixed in 3.1.3
Code injection in Flowise CSV Agent customReadCSV parameter (CVE-2026-73486)
Flowise contains a code injection vulnerability in the CSV Agent node's `customReadCSV` parameter, where user-supplied input is substituted directly into a Python script prior to execution in an unsandboxed pyodide en...
Fixed in 3.1.3
Prompt injection to RCE and SSRF via Python validator bypass in Flowise (CVE-2026-73487)
Flowise CSV Agent and Airtable Agent nodes use a regex-based blocklist to validate LLM-generated Python code before execution in Pyodide. The blocklist has multiple structural bypasses - most critically, pandas URL-fe...
Fixed in 3.1.3
vm2 JavaScript sandbox escape to RCE in Flowise (CVE-2026-73602)
Flowise contains a sandbox escape vulnerability in its vm2-based JavaScript execution environment, affecting the Custom Function and Custom Tool nodes. An authenticated attacker can craft a fake String object whose `m...
Fixed in 3.1.3
Remote code execution in Flowise Custom MCP Config Node (CVE-2026-73601)
Flowise deployments with CUSTOM_MCP_PROTOCOL set to stdio (the default setting) are vulnerable to remote code execution through the Custom MCP node, which uses the StdioClientTransport MCP client. Authenticated users ...
Fixed in 3.1.3
Missing authorization in SiYuan getAttributeViewSearchTarget endpoint (CVE-2026-73608)
The `/api/av/getAttributeViewSearchTarget` endpoint in SiYuan's development branch is registered with `CheckAuth` only and performs no authorization checks of any kind - no `CheckReadonly`, no publish-access gate, and...
Fixed in v3.7.4
Unauthenticated superuser registration and RCE in UpSnap (CVE-2026-49819)
UpSnap's `POST /api/upsnap/init-superuser` endpoint (`backend/pb/handlers.go:249`) lacks authentication, a setup token, an IP allow-list, and rate limiting. On any fresh installation, an unauthenticated network-adjace...
Fixed in >= 5.4.0
OS command injection in UpSnap device management (wake_cmd/shutdown_cmd) (CVE-2026-49481)
An OS command injection vulnerability exists in UpSnap's device management functionality due to unsafe shell command template interpolation of the `ip` and `mac` fields. User-controlled values are inserted into `wake_...
Fixed in >= 5.4.0
Cross-tenant DNS zone overlap in OpenStack Designate (CVE-2026-71193)
OpenStack Designate fails to enforce cross-pool zone ownership checks when scheduling a zone to a non-default pool via the attribute filter. An authenticated tenant can create a sub-zone, super-zone, or duplicate of a...
Fixed in 20.0.2
Fail-open authentication bypass in getkin/kin-openapi ValidationHandler (CVE-2026-73501)
ValidationHandler.Load() in the kin-openapi Go library unconditionally replaces a nil AuthenticationFunc with NoopAuthenticationFunc, which always returns nil without performing any credential check. This causes every...
Fixed in v0.144.0
Hard-coded authentication secret in WolfStack allows unauthenticated remote code execution (CVE-2026-73519)
WolfStack compiled a single hard-coded cluster-authentication secret into every build, published as a constant in src/auth/mod.rs. Any remote unauthenticated attacker able to reach an affected node's management port c...
Fixed in 25.9.2
Path traversal in LXD backup tarball restore enabling root file write / RCE (CVE-2026-66898)
LXD's backup import endpoint (POST /1.0/instances with Content-Type: application/octet-stream) reads the instance name from the tarball's backup/index.yaml verbatim, with no path validation, and uses it as an on-disk ...
Fixed in 6.1; 5.21.2; 5.0.4; 4.0.12
Symlink following vulnerability enabling root RCE in LXD (CVE-2026-63294)
LXD fails to validate backup.yaml when it exists as a symbolic link during image or backup archive unpacking. An unprivileged, project-confined user with image and instance creation rights can supply a crafted archive...
Fixed in 4.0.12; 5.0.8; 5.21.6; 6.10
Symlink following arbitrary file read/write in LXD (CVE-2026-63293)
LXD fails to validate whether the metadata.yaml file within an image archive is a symbolic link during image import or unpacking. An authenticated user can supply a crafted image archive containing a symlinked metadat...
Fixed in 4.0.12; 5.0.8; 5.21.6; 6.10
Authorization bypass of project disk limits in LXD storage volumes (CVE-2026-63299)
LXD contains two code paths that allow an authenticated user to bypass project-level disk and volume quotas. The `storagePoolVolumeTypePostMove` function performs a cross-project volume move without invoking the `Allo...
Fixed in 5.0.8; 5.21.6; 6.10
Authorization bypass via instance migration config override in LXD (CVE-2026-63296)
An authorization bypass vulnerability in LXD allows an authenticated user in a restricted project to supply arbitrary configuration overrides during instance migration without any project restriction enforcement. The ...
Fixed in 5.0.8; 5.21.6; 6.10