Verified Advisories
Concise advisories for CRITICAL/HIGH vulnerabilities – affected and fixed versions confirmed against the vendor's own advisory before publishing. 263 total.
Argument injection in BuildKit Git source checkout via bundle file (CVE-2026-15793)
BuildKit custom frontends or clients using the raw low-level API can enable `git.checkoutbundle=true` when checking out Git sources. A malicious Git source can exploit this to cause a crafted command invocation on the...
Fixed in v0.31.2+
Denial of service in React Server DOM bundler packages (CVE-2026-44907)
A denial of service vulnerability exists in the React server DOM packages for webpack, Parcel, and Turbopack. Sending specially crafted HTTP requests to server function endpoints can trigger out-of-memory exceptions o...
Fixed in 19.0.8; 19.1.9; 19.2.8
Arbitrary file read in PraisonAI MCP server handlers (CVE-2026-47394)
An incomplete fix for CVE-2026-44336 leaves three path-handling MCP tools (`praisonai.workflow.show`, `praisonai.workflow.validate`, `praisonai.deploy.validate`) in `mcp_server/adapters/cli_tools.py` without path cont...
Fixed in >= 4.6.40
Server-Side Request Forgery in Apache Syncope Connectors and Resources check (CVE-2026-62418)
Apache Syncope contains a Server-Side Request Forgery (SSRF) vulnerability accessible to low-privileged authenticated users via the Connectors and Resources check functionality. An attacker with minimal privileges cou...
Fixed in 4.0.7; 4.1.2
Prototype pollution in nevware21/ts-utils objDeepCopy/objCopyProps (CVE-2026-46681)
The `_copyProps` function in `@nevware21/ts-utils` iterates object properties using `for...in` without an `Object.hasOwnProperty` check and does not filter dangerous keys such as `__proto__`, `constructor`, and `proto...
Fixed in 0.14.0
CPU exhaustion via regex backtracking in Perl HTTP::Date (CVE-2026-14741)
HTTP::Date versions before 6.08 for Perl contain inefficient regular expression complexity (CWE-1333) in the `parse_date()` function, where unbounded quantifiers placed adjacently before a trailing anchor cause polyno...
Fixed in 6.08
Missing authorization on API key generation in Grav API plugin (CVE-2026-65007)
The Grav api plugin (grav-plugin-api) fails to properly authorize API key generation and revocation requests. The plugin intercepts the apiKeyGenerate and apiKeyRevoke admin tasks before Grav's account-management ACL ...
Fixed in 1.0.8
Use-after-free in Apache Fory Rust deserialization (CVE-2026-60080)
A use-after-free vulnerability exists in the Rust deserialization logic of Apache Fory (fory-core). A crafted Fory payload can trigger undefined behavior, a process crash, or potential memory disclosure. Users are rec...
Fixed in 1.4.0
Arbitrary file upload in MapSVG plugin for WordPress (CVE-2026-1771)
The MapSVG plugin for WordPress contains a missing file type validation flaw in the SVGFile constructor, caused by an incorrect conditional check that prevents validation from executing. Authenticated attackers with A...
Fixed in 8.14.1
SPDY zlib header decompression amplification DoS in Netty (CVE-2026-55833)
Netty's SPDY header decoding continues inflating zlib-compressed header blocks after the raw header parser has exceeded `maxHeaderSize` and marked the frame truncated. A remote unauthenticated peer can send a small co...
Fixed in 4.2.16.Final; 4.1.136.Final
Resource exhaustion via unbounded SPDY SETTINGS map in Netty (CVE-2026-55831)
Netty's SPDY SETTINGS decoder accepts a peer-declared entry count up to the 24-bit frame-length limit and materializes every unique setting ID into a TreeMap-backed DefaultSpdySettingsFrame without an implementation-l...
Fixed in 4.2.16.Final; 4.1.136.Final
Cross-agent authorization bypass in AgenticMail API (CVE-2026-57494)
A low-privileged authenticated AgenticMail agent can enumerate another agent's pending and claimed tasks by supplying the target agent name to `GET /api/agenticmail/tasks/pending?assignee=<name>`, disclosing task IDs ...
Fixed in 0.9.64
Missing sender authentication in AgenticMail inbound mail bridge-wake handler (CVE-2026-57495)
In AgenticMail, the bridge-wake inbound mail handler resumes the operator's Claude Code session with `permissionMode: 'bypassPermissions'` without verifying that the sending address belongs to the operator. Any extern...
Fixed in @agenticmail/claudecode 0.2.39; @agenticmail/codex 0.1.33; @agenticmail/core 0.9.43; @agenticmail/openclaw 0.5.71
Input validation and SQL injection flaws in AgenticMail API and Core (CVE-2026-47255)
Multiple improper input validation and SQL injection vulnerabilities affect the AgenticMail API and Core packages, allowing unauthenticated remote attackers to manipulate SQL commands, bypass storage ownership checks,...
Fixed in @agenticmail/api 0.9.32; @agenticmail/core 0.9.10
BOLA/IDOR in NextCRM MCP campaign tools (CVE-2026-55544)
Multiple MCP campaign tool handlers in NextCRM fail to enforce object-level authorization, ignoring the authenticated user's identity when querying or mutating campaigns. A low-privileged authenticated user holding a ...
Fixed in 0.12.2
RBAC bypass in NextCRM MCP product tools (CVE-2026-55550)
In NextCRM version 0.12.1, the MCP product tools exposed via `/api/mcp/mcp` perform write operations on the shared CRM product catalog without enforcing role-based access controls. While normal server actions restrict...
Fixed in 0.12.3
Broken Object Level Authorization in NextCRM CRM contact and target endpoints (CVE-2026-47130)
NextCRM versions prior to 0.12.0 contain a Broken Object Level Authorization (BOLA/IDOR) vulnerability in the CRM contact and target update endpoints. The PATCH handlers verify only that a session exists, but fail to ...
Fixed in 0.12.0
Broken Access Control in NextCRM user activation Server Actions (CVE-2026-47129)
NextCRM versions prior to 0.12.0 contain a Broken Access Control vulnerability in the `activateUser` and `deactivateUser` Next.js Server Actions. The application verifies only that a session exists, without checking w...
Fixed in 0.12.0
Integer overflow in rsync compressed-token decoder enables remote memory disclosure (CVE-2026-44508)
The rsync receiver's compressed-token decoder accumulates a 32-bit signed counter without checking for overflow. A malicious sender can trigger this overflow and, with careful manipulation, extract data stored in memo...
Fixed in 3.4.3
Improper certificate validation in Apache MINA SSHD (CVE-2026-56624)
Apache MINA SSHD's server-side OpenSSH user certificate validation failed to check or validate the force-command and verify-required options that may be embedded in a user certificate. As a result, a user authenticati...
Fixed in 2.19.0; 3.0.0-M5