Verified Advisories
Concise advisories for CRITICAL/HIGH vulnerabilities – affected and fixed versions confirmed against the vendor's own advisory before publishing. 397 total.
Newline injection in LXD NVIDIA instance configuration handling (CVE-2026-63298)
LXD's `nvidia.driver.capabilities` instance configuration key uses the `validate.IsAny` validator, which accepts any input without filtering, allowing newline characters to pass through unsanitized into the generated ...
Fixed in 4.0.12; 5.0.8; 5.21.6
Authorization bypass via TOCTOU in LXD cross-project instance copy (CVE-2026-63297)
When copying an instance across projects in LXD, the target project restriction check runs before source instance configuration is merged into the request. This allows an authenticated attacker with view access to a s...
Fixed in 5.0.8; 5.21.6
Shell injection via unescaped parentheses in Shescape on Windows CMD (CVE-2026-73414)
Shescape, a JavaScript shell escape library, fails to escape parentheses (`(` and `)`) when using the `escape` or `escapeAll` APIs on Windows with the shell set to `cmd.exe` or `true` when CMD is the default. An attac...
Fixed in >=2.1.14 <3.0.0; >=3.0.1
Authenticated remote code execution in ScadaLTS (CVE-2026-19656)
ScadaLTS 2.7.8.1 exposes a server-side method without authorization checks, allowing any authenticated user, including those with only low-privilege read-only permissions, to execute arbitrary operating system command...
Fixed in 2.8.1; 2.8.2
Authorization bypass in LXD cross-project cluster instance migration (CVE-2026-62420)
An authorization bypass vulnerability in LXD allows an authenticated attacker with project-level access to move an instance cross-project to a different cluster member via POST /1.0/instances/{name}, causing the desti...
Fixed in 5.0.8; 5.21.6; 6.10
Security restriction bypass in LXD cross-project instance migration (CVE-2026-63300)
The `instancePostMigration` function in LXD fails to validate an instance's configuration against the target project's enforced restrictions when moving an instance between projects. An authenticated attacker with `ca...
Fixed in 5.0.8; 5.21.6; 6.10
Missing publish-password check in SiYuan graph API endpoints (CVE-2026-72804)
The `getGraph` and `getLocalGraph` endpoints in SiYuan filter document access by visibility tier only and never evaluate the publish password. Because password-protected documents are marked Visible = true, their node...
Fixed in v3.7.4
Publish-access bypass in SiYuan embedded block endpoints (CVE-2026-72795)
The `/api/block/getBlockDOMWithEmbed` and `/api/block/getBlockDOMsWithEmbed` endpoints in SiYuan apply publish-access checks only to the directly requested block, not to any blocks inlined by that block's embed (trans...
Fixed in v3.7.4
Session cookie signing key disclosure in siyuan via getConf endpoint (CVE-2026-72794)
The POST /api/system/getConf endpoint in siyuan returns the server's session cookie signing key (Conf.CookieKey) in its response body to unauthenticated users when publish mode is enabled with authentication disabled,...
Fixed in v3.7.4
Information disclosure in SiYuan publish-mode attribute view filter (CVE-2026-72798)
Two defects in SiYuan's `renderAttributeView` publish-access filter allow anonymous readers to retrieve restricted content in publish mode. First, Relation and Rollup cells carry mirrored content from related database...
Fixed in v3.7.4
Sensitive configuration disclosure in SiYuan via /api/system/getConf (CVE-2026-72793)
The `/api/system/getConf` endpoint in SiYuan is reachable by anonymous users and publish-reader tokens, and its non-administrator masking chain fails to suppress three fields that the configuration-export path explici...
Fixed in v3.7.4
Authorization bypass in SiYuan encrypted notebook publish access gate (CVE-2026-72789)
SiYuan's publish-access gate uses an opt-out list (`publishAccess.json`) that is never populated with encrypted notebooks, causing the gate to treat all encrypted notebooks as publicly accessible by default. While an ...
Fixed in v3.7.4
SQL injection in Budibase MySQL integration (CVE-2026-73300)
The MySQL integration in Budibase is configured with `multipleStatements: true`, allowing execution of multiple SQL statements in a single query. Attackers can inject malicious SQL commands through user input fields, ...
Fixed in 3.40.0
OS command injection in IBM Db2 Mirror for i (CVE-2026-16956)
IBM Db2 Mirror for i contains an OS command injection vulnerability (CWE-78) caused by improper neutralization of special elements in OS commands. A remote, unauthenticated attacker can exploit this flaw to execute ar...
Fixed in 7.4 PTF SJ10957; 7.5 PTF SJ10954
Server-side template injection in @prompty/core Nunjucks renderer (CVE-2026-73299)
The TypeScript Nunjucks renderer in @prompty/core evaluated untrusted .prompty template bodies with unrestricted JavaScript member access. An attacker-controlled template could traverse constructor and prototype prope...
Fixed in @prompty/core >= 0.1.5; @prompty/core >= 2.0.0-beta.5
Authenticated RCE via extension script sandbox escape in alf.io (CVE-2026-35482)
A sandbox escape vulnerability in the alf.io extension script engine allows an authenticated administrator to execute arbitrary operating system commands on the server. The extension system runs restricted JavaScript ...
Fixed in 2.0-M5-2606
OS command injection in Semaphore UI git repository handling (CVE-2026-73294)
An OS command injection (CWE-88/CWE-78) vulnerability in Semaphore UI's repository git_url handling allows any user holding the Manager or Owner role on any project to achieve remote code execution on the Semaphore se...
Fixed in 2.18.20
Remote code execution in Prowler via kubeconfig auth-provider cmd-path (CVE-2026-73263)
The Prowler Kubernetes provider connection test accepts kubeconfig credentials that use a legacy `gcp` auth-provider with `config.cmd-path` and `config.cmd-args` fields, because the input validator (`kubeconfig_contai...
Fixed in 5.36.0
JWT authentication bypass via cross-instance token reuse in Yuxi (CVE-2026-50561)
Yuxi's authentication mechanism fails to sufficiently validate the identity token in the Authorization header, performing only a validity check without binding tokens to a specific deployment instance. This allows an ...
Fixed in 0.6.2
Unauthenticated remote code execution in Fabrik Joomla extension (CVE-2026-67282)
An unauthenticated attacker can execute arbitrary code on systems running the Fabrik Joomla extension by exploiting the frontend listfilter model. This vulnerability requires no authentication, allowing any remote att...
Fixed in 4.6.8