VulnSea

Tagged “ghsa”

CVEs tagged ghsa, newest first.

5692 CVEsRSS

CVE-2026-52808High· 7.1
4mo ago

Gogs's write-level collaborators can mutate admin-only repository settings via API

Gogs's write-level collaborators can mutate admin-only repository settings via API

▾ Twilightgogs · gogs.io/gogsEPSS 0.48%via GHSA
CVE-2026-52810HighPoC
4mo ago

Gogs allows users to write to readonly repositories using receive-pack + service=git-upload-pack confusion

Gogs allows users to write to readonly repositories using receive-pack + service=git-upload-pack confusion

▾ Midnightgogs · gogs.io/gogsEPSS 0.43%via GHSA
CVE-2026-52812High
4mo ago

Gogs: LFS dedupe path leaks private repo content across tenants

Gogs: LFS dedupe path leaks private repo content across tenants

▾ Twilightgogs · gogs.io/gogsEPSS 0.24%via GHSA
CVE-2026-52813Critical· 10.0PoC
4mo ago

Gogs has Path Traversal in organization name that results in RCE through Git hooks

Gogs has Path Traversal in organization name that results in RCE through Git hooks

▾ Abyssalgogs · gogs.io/gogsEPSS 1.1%via GHSA
CVE-2026-52814Medium
4mo ago

Gogs has Unauthenticated Asymmetric Denial of Service (DoS) via SSH Handshake Stall (File Descriptor Exhaustion)

Gogs has Unauthenticated Asymmetric Denial of Service (DoS) via SSH Handshake Stall (File Descriptor Exhaustion)

▾ Sunlitgogs · gogs.io/gogsEPSS 0.55%via GHSA
CVE-2026-52815MediumPoC
4mo ago

Gogs Vulnerable to Unauthenticated Organization Teams Information Disclosure via API

Gogs Vulnerable to Unauthenticated Organization Teams Information Disclosure via API

▾ Twilightgogs · gogs.io/gogsEPSS 1.5%via GHSA
CVE-2026-52816Medium
4mo ago

Gogs's Unauthenticated Jupyter Notebook (ipynb) Sanitizer allows arbitrary data: URIs leading to XSS

Gogs's Unauthenticated Jupyter Notebook (ipynb) Sanitizer allows arbitrary data: URIs leading to XSS

▾ Sunlitgogs · gogs.io/gogsEPSS 0.68%via GHSA
CVE-2026-55173High· 8.1
4mo ago

AVideo has an incomplete fix of CVE-2026-33482: sanitizeFFmpegCommand still allows a single '&' (background operator), giving OS command execution at the same execAsync sh -c sink

AVideo has an incomplete fix of CVE-2026-33482: sanitizeFFmpegCommand still allows a single '&' (background operator), giving OS command execution at the same execAsync sh -c sink

▾ Twilightwwbn · wwbn/avideoEPSS 2.7%via GHSA
CVE-2026-54350Critical· 10.0PoC
4mo ago

Budibase has nonymous NoSQL operator injection via published-app query templates

Budibase has nonymous NoSQL operator injection via published-app query templates

▾ Abyssalbudibase · @budibase/serverEPSS 0.54%via GHSA
CVE-2026-53925High· 7.8
4mo ago

Glances has arbitrary file write and command execution via `secure_popen` redirection and chaining operators in AMP command configuration

Glances has arbitrary file write and command execution via `secure_popen` redirection and chaining operators in AMP command configuration

▾ Twilightglances · glancesEPSS 0.18%via GHSA
CVE-2026-54557Medium· 5.5
4mo ago

mise HTTP backend uses raw version path for install symlink destination

mise HTTP backend uses raw version path for install symlink destination

▾ Sunlitmise · miseEPSS 0.18%via GHSA
CVE-2026-55441High· 8.6
4mo ago

Mise vulnerable to arbitrary command execution via task-include files in an untrusted, config-less repository

Mise vulnerable to arbitrary command execution via task-include files in an untrusted, config-less repository

▾ Twilightmise · miseEPSS 0.18%via GHSA
CVE-2026-55448Medium· 6.3
4mo ago

Mise's local credential_command executes untrusted config

Mise's local credential_command executes untrusted config

▾ Sunlitmise · miseEPSS 0.20%via OSV
CVE-2026-55488High
4mo ago

motionEye's Absolute Path Traversal in Media File Handlers Allows Arbitrary File Read

motionEye's Absolute Path Traversal in Media File Handlers Allows Arbitrary File Read

▾ Twilightmotioneye · motioneyeEPSS 0.60%via GHSA
GHSA-qxvg-h7q2-hcxhCritical· 9.8
4mo ago

motionEye: LFI → pass‑the‑hash admin → unsafe restore → unauth action exec (RCE)

motionEye: LFI → pass‑the‑hash admin → unsafe restore → unauth action exec (RCE)

▾ Midnightmotioneye · motioneyevia GHSA
GHSA-phv5-334h-mxcwCritical
4mo ago

motionEye Partial Authentication Bypass: Unauthenticated Admin Credential Theft via Path Traversal

motionEye Partial Authentication Bypass: Unauthenticated Admin Credential Theft via Path Traversal

▾ Midnightmotioneye · motioneyevia GHSA
GHSA-7cqp-7cfv-6c3qMedium
4mo ago

AVideo Meet plugin: anonymous-to-admin stored XSS via unescaped participant User-Agent in getMeetInfo.json.php Participants panel

AVideo Meet plugin: anonymous-to-admin stored XSS via unescaped participant User-Agent in getMeetInfo.json.php Participants panel

▾ Sunlitwwbn · wwbn/avideovia GHSA
CVE-2026-54518Medium· 6.5
4mo ago

jackson-databind: jackson-databind: Information disclosure and data manipulation via view-based access control bypass (CVE-2026-54518)

A flaw was found in jackson-databind. This vulnerability allows a remote attacker to bypass security view restrictions by sending specially crafted JSON (JavaScript Object Notation) data. The UnwrappedPropertyHandler component, which proce…

▾ SunlitRed Hat · Red Hat OpenShift AI (RHOAI)EPSS 0.35%via CSAF
CVE-2026-50193High· 7.5
4mo ago

jackson-databind: Jackson-databind: Denial of Service via deeply nested JSON processing (CVE-2026-50193)

A flaw was found in jackson-databind, a general-purpose data-binding library for Jackson Data Processor. A remote attacker can exploit this vulnerability by sending deeply nested JSON (JavaScript Object Notation) data to a service that rea…

▾ TwilightRed Hat · Red Hat JBoss EAP 7.4 ELS for RHEL 8EPSS 0.62%via CSAF
CVE-2026-54512High· 8.1PoC
4mo ago

jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass (CVE-2026-54512)

A flaw was found in jackson-databind. This vulnerability allows a remote attacker to bypass the PolymorphicTypeValidator (PTV) when polymorphic typing is enabled and a type identifier contains generic parameters. By crafting a malicious ty…

▾ MidnightRed Hat · Red Hat JBoss EAP 8.1 for RHEL 8EPSS 1.1%via CSAF
CVE-2026-54513High· 8.1
4mo ago

jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution (CVE-2026-54513)

A flaw was found in jackson-databind, a library used for processing data. This vulnerability allows an attacker to bypass security controls designed to validate data types. By sending specially crafted input, an attacker can force the syst…

▾ TwilightRed Hat · Red Hat JBoss EAP 8.1 for RHEL 8EPSS 1.2%via CSAF
CVE-2026-54514Medium· 5.3
4mo ago

jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution (CVE-2026-54514)

A flaw was found in jackson-databind, a library used for processing JSON data. This vulnerability allows a remote attacker to force the application to perform an attacker-chosen DNS (Domain Name System) query. This occurs when untrusted JS…

▾ SunlitRed Hat · Red Hat OpenShift AI (RHOAI)EPSS 0.37%via CSAF
CVE-2026-54515Medium· 5.3PoC
4mo ago

jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified (CVE-2026-54515)

A flaw was found in jackson-databind. This vulnerability occurs in the data-binding functionality where properties intended to be ignored are incorrectly restored and become writable again. An attacker could potentially exploit this by pro…

▾ TwilightRed Hat · Red Hat JBoss EAP 8.1 for RHEL 8EPSS 0.44%via CSAF
CVE-2026-54516Medium· 5.3
4mo ago

jackson-databind: jackson-databind: Security bypass due to improper handling of renamed properties (CVE-2026-54516)

A flaw was found in jackson-databind. This vulnerability allows a remote attacker to bypass security controls by exploiting an issue in how properties are handled when both @JsonProperty (for renaming) and @JsonIgnore (for ignoring) annota…

▾ SunlitRed Hat · Red Hat Satellite 6EPSS 0.45%via CSAF
CVE-2026-54517Medium· 5.3
4mo ago

jackson-databind: jackson-databind: Information disclosure via improper JsonView filter application (CVE-2026-54517)

A flaw was found in jackson-databind. A remote attacker can exploit this vulnerability due to an issue in how active-view (@JsonView) filters are applied. Specifically, setterless collections annotated with a restricted @JsonView can be po…

▾ SunlitRed Hat · Red Hat OpenShift AI (RHOAI)EPSS 0.38%via CSAF
CVE-2026-48126High· 8.2
4mo ago

Algernon: Host header path traversal in --domain mode reads files and runs Lua from parent dir

Algernon: Host header path traversal in --domain mode reads files and runs Lua from parent dir

▾ Twilightxyproto · github.com/xyproto/algernonEPSS 0.34%via GHSA
CVE-2026-48157Medium· 6.1
4mo ago

Slim has Reflected XSS in the HtmlErrorRenderer

Slim has Reflected XSS in the HtmlErrorRenderer

▾ Sunlitslim · slim/slimEPSS 0.17%via GHSA
CVE-2026-48166Medium· 5.3
4mo ago

Filament: Timing-based user enumeration on login page

Filament: Timing-based user enumeration on login page

▾ Sunlitfilament · filament/filamentEPSS 0.34%via GHSA
CVE-2026-48167Medium· 6.4
4mo ago

Filament: Unvalidated ImageColumn and ImageEntry values can be used for XSS

Filament: Unvalidated ImageColumn and ImageEntry values can be used for XSS

▾ Sunlitfilament · filament/infolistsEPSS 0.25%via GHSA
CVE-2026-48480Medium
4mo ago

OHttpVersionChunkDraft: Missing Final-Chunk Enforcement Leads to Undetected Stream Truncation

OHttpVersionChunkDraft: Missing Final-Chunk Enforcement Leads to Undetected Stream Truncation

▾ Sunlitnetty · io.netty.incubator:netty-incubator-codec-ohttpEPSS 0.17%via GHSA
CVEs tagged “ghsa” — page 152 · VulnSea