GitHub Security Advisories

There exists an arbitrary file download in vCast APK delivery mechanism in ViewSonic ViewBoard...

There is an input injection in vCast exposed network services in ViewSonic ViewBoard that allows...

A security flaw has been discovered in girishsaraf Online-Appointment-Booking-System up to...

A vulnerability was determined in girishsaraf Online-Appointment-Booking-System up to...

h3. Summary This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira...

A vulnerability was identified in girishsaraf Online-Appointment-Booking-System up to...

openSIS Classic 9.3 allows an authenticated user with the built-in teacher role can select an...

A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to...

In MongoDB Controllers for Kubernetes, insufficient validation of Ops Manager backup...

Docling simplifies document processing by parsing diverse formats and providing integrations with...

In AMD Versal™ Adaptive SoC devices, insufficient boundary checks in USB boot mode—when enabled...

Insufficient boundary validation in the USB boot mode implementation of AMD Zynq™ UltraScale+...

Docling: `enable_local_fetch` is not enforced in HTML browser-rendering mode

vLLM: Mirrored multimodal IPC caches desync after a rejected request — a later request reusing the same media hash trips a receiver assertion in the engine core

vLLM: Harmony tool continuations drop `cache_salt` — restoring a cross-tenant prefix-cache membership oracle

Werkzeug safe_join() allows Windows special device names

simple-git: `VISUAL` editor environment variable is omitted from unsafe editor detection

simple-git unsafe-operation guard does not block trailer command configuration

simple-git allows command execution through unblocked Git configuration includes

simple-git: unsafe-operations plugin bypass via git long-option abbreviation (--receive-p/--exe) -> command execution (residual of CVE-2026-28291)

PyMongo: PYTHON-5996 Heap out-of-bounds write via signed size overflow in BSON document encoding

PyMongo: PYTHON-5986 Host injection in PyMongo connection string parsing via percent-encoded delimiters

PyMongo: PYTHON-5990 Forced Unix domain socket connection via a .sock KMS endpoint in client-side field level encryption

Socket.IO: Prototype Pollution via Unsafe Client Session Lookup

Filament: Multi-factor authentication (app) management actions do not require password reauthentication

PyJWT accepts inconsistent OKP x/d JWKs, causing public/private key identity confusion

DOMPurify: IN_PLACE returns a force-removed rawtext root whose text carries attacker markup — pure HTML reparse executes

vLLM: Qwen2-VL / Qwen3-VL video samplers bound on request-controlled max_frames, which the num_frames ceiling does not reach

vLLM: GLMGA video sampling permits request-driven CPU and memory exhaustion

vLLM: Scale-out disaggregated multimodal transport trusts caller-supplied features

vLLM: Structured-output request errors escape the request boundary and terminate the shared EngineCore — engine-fatal denial of service (3 sites)

vLLM: Flash late-interaction scoring caches query embeddings under a caller-controlled request id — cross-request integrity break and induced errors on `/score` and `/rerank`

vLLM: Loose `cache_salt` validation lets a single request kill EngineCore on LMCache-MP deployments — uncaught downstream `ValueError` denial of service

uv: Path traversal on Windows through wheel extraction

Mako: Path traversal via drive-letter URI on Windows in TemplateLookup

smol-toml: Quadratic-time parse() from parseKey rescanning to end of document on each key line

KaTeX: Existing prototype pollution can bypass trust restrictions

Multidict: Reference leak in CIMultiDict/MultiDict items-view union and subtraction

Seroval: `fromJSON()` Promise thenable assimilation invokes plugin-produced callables (bypass of GHSA-mv8w-475r-vwqw)

Seroval: Memory exhaustion via unchecked TypedArray length in JSON deserialization

proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet

Rustls: TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries

@nx/docker: OS command injection in the @nx/docker release pipeline

Nx: OS command injection via git revisions and remote refs

Nx daemon and plugin worker sockets are accessible to other local users

Nx: Path traversal in nx migrate package-migrations extraction

compression vulnerable to Denial of Service via memory leak on premature response close

OpenClaw: Channel read actions could skip target allowlists

pymongo: PYTHON-5994 Use exact match for file ID in GridFS delete methods

MongoDB: GridFS data disclosure and deletion via query-operator injection in file IDs

vm2: NodeVM custom resolution bypasses external path boundaries

vm2: Host Promise rejection from an exposed constructor can terminate the vm2 host process

vm2: NodeVM zlib Buffers expose pooled host memory across the VM boundary

GraphQL Tools: TLS Certificate Validation Disabled in Legacy GraphQL WebSocket Executor

GraphQL Tools has prototype pollution in well-established utility function `mergeDeep`

Snowflake drivers writes sensitive information to logs

hickory-resolver follows irrelevant CNAME records

hickory-resolver: Unbounded TC-retry loop in `NameServerPool::try_send` (resource-exhaustion DoS)

hickory-resolver: Resolver::lookup() and Resolver::lookup_ip() APIs obscure DNSSEC validation failures

PostCSS: Quadratic complexity in flat selector parsing allows CPU exhaustion

Angular SSR: Path Traversal to Sibling Directories in CommonEngine on Windows

fsspec: Server-Side Template Injection in ReferenceFileSystem leads to Remote Code Execution

Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path

Multiple @opentelemetry/instrumentation-* packages expose database username via unconditional db.user span attribute

fast-copy: Stack exhaustion in fast-copy when copying deeply-nested values

@vue/server-renderer: XSS via missing CR in attribute-name blacklist

Tinypool: Prototype Pollution gadget in worker options leads to Remote Code Execution

Tinypool: Prototype Pollution Gadget to RCE in run() options

Quart leaks raw request body (incl. plaintext passwords) to stdout via stray debug print in Body.__await__

LangGraph SDK custom auth silently ignores actions= on resource decorators

stream-json: JSONC parser and verifier re-scan the whole accumulated comment on every input chunk

stream-json has a prototype pollution issue: Assembler writes this.current[this.key] on plain objects

vm2: `allowAsync: false` can be bypassed through Promise thenable assimilation in VM and NodeVM

vm2: Sandbox Escape (NodeVM)

vm2: Host-returned Promise rejection can bypass vm2's unhandled-rejection hardening and terminate the host process

vm2: Default VM can mutate host TypedArray and ArrayBuffer intrinsics after the host-prototype pollution fix

vm2 sandbox escape to host RCE via revisited host-wrapped AggregateError bypassing Error sanitization cycle short-circuit

vm2: util.getCallSites() bypasses GHSA-v27g-jcqj-v8rw host-frame redaction, leaks host call stack

ProseMirror has a XSS vulnerability in prosemirror-view's paste handling

vm2 leaks absolute host filesystem paths to sandbox code via error stack formatting

vm2: timeout Option Bypass via FinalizationRegistry Cleanup Callback (Unbounded Host Event-Loop Block)

vm2: NodeVM `require.external` without an explicit `require.root` grants unrestricted host filesystem access and full RCE

vm2: Sandboxed code can read and write host-realm memory via Node's shared Buffer pool

vm2 sandbox escape via WebAssembly.compileStreaming Promise species bypass

Docling: Arbitrary local file read via draw:image xlink:href in the OpenDocument backend

@fastify/busboy vulnerable to CRLF injection via multipart Content-Disposition filename and name

Langflow: Weak Fernet Key via random.seed()

Langflow: Unauthenticated Flow Execution via Webhook Authentication Bypass

Langflow: Title Authenticated Remote Code Execution in validate_code via Malicious Decorators Description

Langflow: Prompt injection in Langflow Smart Transform can lead to code execution

Camunda 7.24.0 before 7.24.15 contains an incorrect authorization vulnerability in the Admin web...

Canimaan Software ClamXAV versions 3.3 - 3.11 contains a local privilege escalation vulnerability...

A flaw was found in Quay. When handling build trigger requests, the application incorrectly...

Previous versions of HP ThinPro (prior to HP ThinPro 8.1 SP10) could potentially contain security...

Use of the backend-facing $scheme variable in the trailing-slash directory redirect in nginx.conf...

A flaw was found in the maestro gRPC broker. This vulnerability allows a remote attacker, with a...

An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via the storage of...

Feehi CMS 2.1.1 contains a Server-Side Request Forgery (SSRF) vulnerability in the UEditor...

An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via the UART...

An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via a hardcoded...