Verified Advisories
Concise advisories for CRITICAL/HIGH vulnerabilities – affected and fixed versions confirmed against the vendor's own advisory before publishing. 138 total.
Code injection in Langflow OSS API Graph Execution Engine (CVE-2026-8056)
CVE-2026-8056 is a code injection vulnerability in the parameter filtering mechanism of Langflow OSS's API Graph Execution Engine, specifically within the `apply_tweaks()` function. Authenticated attackers can craft A...
Fixed in 1.10.1
Path traversal in AsyncSSH AuthorizedKeysFile username expansion (CVE-2026-45309)
CVE-2026-45309 is a path traversal vulnerability (CWE-22) in AsyncSSH 2.22.0 in which the `AuthorizedKeysFile` `%u` token is expanded using the raw SSH username without sanitizing path separators or `..` segments. On ...
Fixed in 2.23.0
Channel-binding downgrade in `com (CVE-2026-53712)
CVE-2026-53712 is a channel-binding downgrade vulnerability in `com.ongres.scram:scram-client` that allows a TLS man-in-the-middle attacker to silently downgrade authentication from `SCRAM-SHA-256-PLUS` (with channel ...
Fixed in 3.3
Authentication bypass in meta-ads-mcp AuthInjectionMiddleware (CVE-2026-54547)
An authentication bypass vulnerability in `AuthInjectionMiddleware` within the `meta-ads-mcp` package allows an unauthenticated network attacker to send an HTTP request bearing only the `X-Pipeboard-Token` header with...
Fixed in 1.0.115
OS command injection in Agentic-Flow MCP server (CVE-2026-58195)
Agentic-Flow, an AI agent orchestration platform, contains an OS command injection vulnerability in its MCP server tools where attacker-influenceable tool parameters (such as agent, task, name, language, and agentdb) ...
Fixed in 2.0.14
Server-Side Request Forgery in meta-ads-mcp (CVE-2026-54549)
CVE-2026-54549 is a Server-Side Request Forgery (SSRF) vulnerability in the `upload_ad_image` MCP tool of the `meta-ads-mcp` package, in which an attacker-controlled `image_url` parameter is passed directly to `httpx....
Fixed in 1.0.115
Incomplete privilege drop in the Python `sh` package (CVE-2026-54552)
CVE-2026-54552 is an incomplete privilege drop vulnerability in the Python `sh` package affecting Linux/Unix-like systems. When the `_uid` option is used to launch a subprocess as a less-privileged user from an elevat...
Fixed in 2.2.4
Authorization bypass in Cilium Gateway API HTTPRoute traffic mirroring (CVE-2026-56742)
In Cilium clusters with Gateway API enabled, users with permissions to create or update namespaced HTTPRoutes can mirror HTTP traffic to any Service in any namespace, bypassing the ReferenceGrant authorization mechani...
Fixed in 1.17.17; 1.18.11; 1.19.5
Insecure direct object reference in Chat2DB (CVE-2026-63307)
Chat2DB contains an insecure direct object reference (IDOR) vulnerability (CWE-639) in the GET /api/connection/datasource/{id} endpoint. The handler calls dataSourceService.queryExistent(id, ...) without an ownership ...
Fixed in 5.3.0
Heap use-after-free in YAML::Syck for Perl (CVE-2026-57076)
CVE-2026-57076 is a heap use-after-free vulnerability in YAML::Syck for Perl, located in the bundled libsyck library's syck_hdlr_add_anchor function. An anchor name is stored as both a node field and a key in the pars...
Fixed in 1.47
Improper input validation in the ZenHive mpp Elixir library (CVE-2026-59252)
CVE-2026-59252 is an improper input validation vulnerability in the ZenHive mpp Elixir library affecting deployments configured as a fee payer. When acting as fee payer, mpp co-signs and broadcasts client-supplied EVM...
Fixed in 0.6.0
Improper input validation in ZenHive mpp (CVE-2026-59694)
CVE-2026-59694 is an improper input validation vulnerability in ZenHive mpp (Elixir) affecting the fee-payer co-signing flow. When configured as fee payer, `MPP.Tempo.Transaction.cosign_fee_payer/3` re-signs the clien...
Fixed in 0.6.0
Improper input validation in the ZenHive mpp Elixir library (CVE-2026-59695)
CVE-2026-59695 is an improper input validation vulnerability in the ZenHive mpp Elixir library whereby `cosign_fee_payer/3` in transaction.ex co-signs client-supplied `max_fee_per_gas` and `max_priority_fee_per_gas` f...
Fixed in 0.6.0
Arbitrary file upload in the ProfilePress WordPress plugin (CVE-2026-13352)
CVE-2026-13352 is an arbitrary file upload vulnerability in the ProfilePress WordPress plugin affecting all versions up to and including 4.16.18. The plugin unconditionally registers an upload_mimes filter that adds e...
Fixed in 4.16.19
Missing Authorization in the LearnPress WordPress LMS plugin (CVE-2026-13765)
CVE-2026-13765 is a Missing Authorization vulnerability in the LearnPress WordPress LMS plugin that allows unauthenticated attackers to access sensitive quiz data via the /lp/v1/users/check-answer and /start-quiz REST...
Fixed in 4.4.2
Stored XSS in Kali Forms WordPress plugin (CVE-2026-15395)
CVE-2026-15395 is a Stored Cross-Site Scripting vulnerability in the Kali Forms - Contact Form & Drag-and-Drop Builder plugin for WordPress, arising from insufficient input sanitization and output escaping of the 'dig...
Fixed in 2.4.19
Out-of-bounds read in YAML::Syck for Perl (CVE-2025-11683)
CVE-2026-57077 is a one-byte out-of-bounds read (CWE-125) in YAML::Syck for Perl, caused by the bundled libsyck functions newline_len and is_newline dereferencing a scan pointer and the following byte for a "\r\n" pai...
Fixed in 1.47
Privilege escalation in OpenClaw cron jobs (CVE-2026-62202)
OpenClaw contains a privilege escalation vulnerability in isolated cron jobs whereby a lower-trust caller or misconfigured input path can execute or persist actions beyond the caller's intended authorization. The vuln...
Fixed in 2026.6.9
Environment variable injection in OpenClaw host exec (CVE-2026-62203)
OpenClaw contains an environment variable filtering vulnerability in host exec that fails to properly sanitize rustup startup variables. A lower-trust caller or configured input path can exploit this to execute or per...
Fixed in 2026.6.6
Authentication bypass in OpenClaw (CVE-2026-62207)
CVE-2026-62207 is an authentication bypass vulnerability in OpenClaw that allows lower-trust, identity-bearing HTTP callers to reach admin-scoped tools without sufficient authorization or policy checks on configured i...
Fixed in 2026.6.5