Verified Advisories
Concise advisories for CRITICAL/HIGH vulnerabilities – affected and fixed versions confirmed against the vendor's own advisory before publishing. 108 total.
OS command injection in IBM Langflow OSS Python Interpreter (CVE-2026-14499)
CVE-2026-14499 affects IBM Langflow OSS, where improper validation of user-supplied input in the Python Interpreter component allows an authenticated user to execute arbitrary OS commands with elevated privileges on t...
Fixed in 1.10.2
Parameter smuggling in the @hapi/content npm package (CVE-2026-44974)
CVE-2026-44974 is a parameter smuggling vulnerability in the @hapi/content npm package, where the `Content.disposition()` and `Content.type()` parsers resolve duplicate header parameters inconsistently: the former ret...
Fixed in 6.0.2
Authorization bypass in Pimcore's CustomReports bundle (CVE-2026-45704)
CVE-2026-45704 is an authorization bypass vulnerability in Pimcore's CustomReports bundle where inconsistent access control between the report listing endpoint and the report detail endpoint allows a low-privileged au...
Fixed in 11.5.17 (LTS); 12.3.6
Authentication bypass in the joserfc Python library (CVE-2026-49852)
CVE-2026-49852 is an authentication bypass vulnerability in the joserfc Python library where `joserfc.jwt.decode` accepts attacker-forged HMAC-signed tokens when the caller-supplied verification key is the empty strin...
Fixed in 1.6.8
Request body extraction bypass in Zalando Skipper OPA authorization filter (CVE-2026-50197)
In github.com/zalando/skipper, the `opaAuthorizeRequestWithBody` filter fails to read the request body for HTTP/1.1 `Transfer-Encoding: chunked` requests and HTTP/2 requests lacking a `content-length` pseudo-header. T...
Fixed in >= v0.26.10
OS command injection in the `systeminformation` npm package (CVE-2026-50289)
CVE-2026-50289 is an OS command injection vulnerability in the `systeminformation` npm package affecting the `networkInterfaces()` function on Linux. The `checkLinuxDCHPInterfaces()` function reads `/etc/network/inter...
Fixed in 5.31.7
Information disclosure in IBM Engineering AI Hub in (CVE-2026-15322)
CVE-2026-15322 is an information disclosure vulnerability in IBM Engineering AI Hub in which session tokens are exposed in URLs (CWE-598: Use of HTTP Request With Sensitive Query String). A remote, unauthenticated att...
Fixed in 1.3.0
Path traversal in the API Request component of IBM Langflow OSS (CVE-2026-7667)
CVE-2026-7667 is a path traversal vulnerability in the API Request component of IBM Langflow OSS affecting the Content-Disposition header processing logic. An authenticated attacker can create a malicious flow pointin...
Fixed in 1.10.1
Path traversal in Langflow OSS File component tar extraction (CVE-2026-7872)
A path traversal vulnerability in the Langflow OSS File component's tar archive extraction functionality allows an authenticated attacker to upload a specially crafted tar archive containing symbolic links to read arb...
Fixed in 1.10.1
Remote code execution in IBM Langflow OSS (CVE-2026-7755)
CVE-2026-7755 is a remote code execution vulnerability in IBM Langflow OSS affecting the MCP server configuration file handling. The file upload endpoint accepted MCP configuration files without invoking the MCPServer...
Fixed in 1.10.1
Code injection in Langflow OSS API Graph Execution Engine (CVE-2026-8056)
CVE-2026-8056 is a code injection vulnerability in the parameter filtering mechanism of Langflow OSS's API Graph Execution Engine, specifically within the `apply_tweaks()` function. Authenticated attackers can craft A...
Fixed in 1.10.1
Path traversal in AsyncSSH AuthorizedKeysFile username expansion (CVE-2026-45309)
CVE-2026-45309 is a path traversal vulnerability (CWE-22) in AsyncSSH 2.22.0 in which the `AuthorizedKeysFile` `%u` token is expanded using the raw SSH username without sanitizing path separators or `..` segments. On ...
Fixed in 2.23.0
Channel-binding downgrade in `com (CVE-2026-53712)
CVE-2026-53712 is a channel-binding downgrade vulnerability in `com.ongres.scram:scram-client` that allows a TLS man-in-the-middle attacker to silently downgrade authentication from `SCRAM-SHA-256-PLUS` (with channel ...
Fixed in 3.3
Authentication bypass in meta-ads-mcp AuthInjectionMiddleware (CVE-2026-54547)
An authentication bypass vulnerability in `AuthInjectionMiddleware` within the `meta-ads-mcp` package allows an unauthenticated network attacker to send an HTTP request bearing only the `X-Pipeboard-Token` header with...
Fixed in 1.0.115
OS command injection in Agentic-Flow MCP server (CVE-2026-58195)
Agentic-Flow, an AI agent orchestration platform, contains an OS command injection vulnerability in its MCP server tools where attacker-influenceable tool parameters (such as agent, task, name, language, and agentdb) ...
Fixed in 2.0.14
Server-Side Request Forgery in meta-ads-mcp (CVE-2026-54549)
CVE-2026-54549 is a Server-Side Request Forgery (SSRF) vulnerability in the `upload_ad_image` MCP tool of the `meta-ads-mcp` package, in which an attacker-controlled `image_url` parameter is passed directly to `httpx....
Fixed in 1.0.115
Incomplete privilege drop in the Python `sh` package (CVE-2026-54552)
CVE-2026-54552 is an incomplete privilege drop vulnerability in the Python `sh` package affecting Linux/Unix-like systems. When the `_uid` option is used to launch a subprocess as a less-privileged user from an elevat...
Fixed in 2.2.4
Authorization bypass in Cilium Gateway API HTTPRoute traffic mirroring (CVE-2026-56742)
In Cilium clusters with Gateway API enabled, users with permissions to create or update namespaced HTTPRoutes can mirror HTTP traffic to any Service in any namespace, bypassing the ReferenceGrant authorization mechani...
Fixed in 1.17.17; 1.18.11; 1.19.5
Insecure direct object reference in Chat2DB (CVE-2026-63307)
Chat2DB contains an insecure direct object reference (IDOR) vulnerability (CWE-639) in the GET /api/connection/datasource/{id} endpoint. The handler calls dataSourceService.queryExistent(id, ...) without an ownership ...
Fixed in 5.3.0
Heap use-after-free in YAML::Syck for Perl (CVE-2026-57076)
CVE-2026-57076 is a heap use-after-free vulnerability in YAML::Syck for Perl, located in the bundled libsyck library's syck_hdlr_add_anchor function. An anchor name is stored as both a node field and a key in the pars...
Fixed in 1.47