Tagged “ghsa”
CVEs tagged ghsa, newest first.
5758 CVEsRSS
CVE-2026-27962Critical· 9.1PoCAuthlib is a Python library which builds OAuth and OpenID Connect servers
Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.9, a JWK Header Injection vulnerability in authlib's JWS implementation allows an unauthenticated attacker to forge arbitrary JWT tokens that…
CVE-2026-32704Medium· 6.5SiYuan's renderSprig has a missing admin check that allows any user to read full workspace DB
SiYuan's renderSprig has a missing admin check that allows any user to read full workspace DB
CVE-2026-32594MediumParse Server's GraphQL WebSocket endpoint bypasses security middleware
Parse Server's GraphQL WebSocket endpoint bypasses security middleware
CVE-2026-32110High· 8.3SiYuan has a Full-Read SSRF via /api/network/forwardProxy
SiYuan has a Full-Read SSRF via /api/network/forwardProxy
CVE-2026-31862Critical· 9.1@siteboon/claude-code-ui is Vulnerable to Command Injection via Multiple Parameters
@siteboon/claude-code-ui is Vulnerable to Command Injection via Multiple Parameters
CVE-2026-31887HighShopware: Unauthenticated data extraction possible through store-api.order endpoint
Shopware: Unauthenticated data extraction possible through store-api.order endpoint
CVE-2026-30869Critical· 9.3SiYuan Vulnerable to Path Traversal in /export Endpoint Allows Arbitrary File Read and Secret Leakage
SiYuan Vulnerable to Path Traversal in /export Endpoint Allows Arbitrary File Read and Secret Leakage
GHSA-5r2p-pjr8-7fh7HighSageMaker Python SDK replaced eval() with safe parser in JumpStart search functionality
SageMaker Python SDK replaced eval() with safe parser in JumpStart search functionality
CVE-2026-0847High· 8.6PoCNLTK has a Path Traversal issue
NLTK has a Path Traversal issue
CVE-2026-28399MediumNocoDB Vulnerable to SQL Injection via DATEADD Formula
NocoDB Vulnerable to SQL Injection via DATEADD Formula
CVE-2026-56315Critical· 9.8PickleScan has multiple stdlib modules with direct RCE not in blocklist
PickleScan has multiple stdlib modules with direct RCE not in blocklist
CVE-2026-28361MediumNocoDB Missing Ownership Validation in MCP Token Operations
NocoDB Missing Ownership Validation in MCP Token Operations
CVE-2026-28396MediumNocoDB's Refresh Tokens Not Revoked on Password Reset
NocoDB's Refresh Tokens Not Revoked on Password Reset
CVE-2026-28360LowNocoDB has Plaintext Storage of Shared View Passwords
NocoDB has Plaintext Storage of Shared View Passwords
CVE-2026-27966Critical· 9.8PoCLangflow has Remote Code Execution in CSV Agent
Langflow has Remote Code Execution in CSV Agent
CVE-2025-13327Medium· 6.3uv has ZIP payload obfuscation through parsing differentials
uv has ZIP payload obfuscation through parsing differentials
CVE-2026-27641Critical· 9.8PoCFlask-Reuploaded vulnerable to Remote Code Execution via Server-Side Template Injection
Flask-Reuploaded vulnerable to Remote Code Execution via Server-Side Template Injection
CVE-2026-27614Critical· 9.3Bugsink is vulnerable to Stored XSS via Pygments fallback in stacktrace rendering
Bugsink is vulnerable to Stored XSS via Pygments fallback in stacktrace rendering
CVE-2026-27483High· 8.8PoCMindsDB: Path Traversal in /api/files Leading to Remote Code Execution
MindsDB: Path Traversal in /api/files Leading to Remote Code Execution
CVE-2026-26318High· 8.8Command Injection via Unsanitized `locate` Output in `versions()` — systeminformation
Command Injection via Unsanitized `locate` Output in `versions()` — systeminformation
CVE-2026-24734High· 7.5Improper Input Validation vulnerability in Apache Tomcat Native, Apache Tomcat. When using an OCSP responder, Tomcat Native (and Tomcat's FFM port of the Tomcat Native code) did not complete verification or freshness checks on the OCSP …
Improper Input Validation vulnerability in Apache Tomcat Native, Apache Tomcat. When using an OCSP responder, Tomcat Native (and Tomcat's FFM port of the Tomcat Native code) did not complete verification or freshness checks on the OCSP …
CVE-2026-26190Critical· 9.8PoCMilvus: Unauthenticated Access to Restful API on Metrics Port (9091) Leads to Critical System Compromise
Milvus: Unauthenticated Access to Restful API on Metrics Port (9091) Leads to Critical System Compromise
CVE-2025-11537Medium· 5.0Keycloak logs sensitive headers
Keycloak logs sensitive headers
CVE-2026-21531Critical· 9.8PoCAzure AI Language Authoring Elevation of Privilege Vulnerability can Lead to RCE
Azure AI Language Authoring Elevation of Privilege Vulnerability can Lead to RCE
CVE-2026-25632Critical· 10.0PoCEPyT-Flow vulnerable to unsafe JSON deserialization (__type__)
EPyT-Flow vulnerable to unsafe JSON deserialization (__type__)
CVE-2026-25161High· 8.8Alist vulnerable to Path Traversal in multiple file operation handlers
Alist vulnerable to Path Traversal in multiple file operation handlers
CVE-2026-25160Critical· 9.1Alist has Insecure TLS Config
Alist has Insecure TLS Config
CVE-2026-25521High· 8.8Locutus brings stdlibs of other programming languages to JavaScript for educational purposes
Locutus brings stdlibs of other programming languages to JavaScript for educational purposes. In versions from 2.0.12 to before 2.0.39, a prototype pollution vulnerability exists in locutus. Despite a previous fix that attempted to mitig…
CVE-2024-5986Critical· 9.1H2O has an External Control of File Name or Path vulnerability
H2O has an External Control of File Name or Path vulnerability
CVE-2026-25130Critical· 9.6PoCCAI find_file Agent Tool has Command Injection Vulnerability Through Argument Injection
CAI find_file Agent Tool has Command Injection Vulnerability Through Argument Injection