Tagged “ghsa”
CVEs tagged ghsa, newest first.
5631 CVEsRSS
CVE-2026-119209Highpypdf has possible large memory usage when parsing cross-reference streams
pypdf has possible large memory usage when parsing cross-reference streams
CVE-2026-119208Highpypdf has possible long runtimes/large memory usage for encrypted PDF files
pypdf has possible long runtimes/large memory usage for encrypted PDF files
CVE-2026-119207Highpypdf has possible large memory usage for exceptions in strict mode
pypdf has possible large memory usage for exceptions in strict mode
CVE-2026-119206Highpypdf has possible long runtimes when retrieving page labels
pypdf has possible long runtimes when retrieving page labels
CVE-2026-118773MediumGlob: AbortSignal cancellation bypass allows post-timeout filesystem traversal
Glob: AbortSignal cancellation bypass allows post-timeout filesystem traversal
CVE-2026-118764Mediumminimatch has potential denial of service via globparts amplification
minimatch has potential denial of service via globparts amplification
CVE-2026-119202High· 7.5@hapi/content: quadratic-time parsing of Content-Disposition parameters allows denial of service
@hapi/content: quadratic-time parsing of Content-Disposition parameters allows denial of service
CVE-2026-118772High· 7.5joi: quadratic-time split in `string().email({ multiple: true })` allows denial of service
joi: quadratic-time split in `string().email({ multiple: true })` allows denial of service
CVE-2026-118669High· 8.4OAuthLib: Token grants can use attacker-supplied client_id for authorization after authenticating a different client
OAuthLib: Token grants can use attacker-supplied client_id for authorization after authenticating a different client
GHSA-5xjx-3w67-w9x9Criticalpypi-publish action revocation of CA in the chain that Sigstore uses in Trusted Publishing and Digital Attestations for PyPI
pypi-publish action revocation of CA in the chain that Sigstore uses in Trusted Publishing and Digital Attestations for PyPI
CVE-2026-59978High· 7.5AdminNeo: version-cache array injection causes persistent denial of service
AdminNeo: version-cache array injection causes persistent denial of service
GHSA-fgxm-5hvv-x4vhMedium· 5.3charmbracelet/soft-serve HTTP responses disclose the existence and names of private repositories
charmbracelet/soft-serve HTTP responses disclose the existence and names of private repositories
CVE-2026-119282High@nx/maven and @nx/gradle have OS command injection via nx.json plugin options
@nx/maven and @nx/gradle have OS command injection via nx.json plugin options
GHSA-f3fj-9625-rv3mMedium· 5.9charmbracelet/soft-serve: Race in `SetPrivate` leaves a private repository readable by unauthenticated users
charmbracelet/soft-serve: Race in `SetPrivate` leaves a private repository readable by unauthenticated users
CVE-2026-119283High· 7.5joserfc: Unbounded JWE General JSON `recipients` Array Leads to CPU Exhaustion (DoS) via Repeated RSA Private-Key Decryption
joserfc: Unbounded JWE General JSON `recipients` Array Leads to CPU Exhaustion (DoS) via Repeated RSA Private-Key Decryption
CVE-2026-119284Mediumjoserfc: Compact JWS size guard allocates attacker-controlled segments before rejection
joserfc: Compact JWS size guard allocates attacker-controlled segments before rejection
CVE-2026-116794High· 8.3russh: Agent server never calls `Agent::confirm`, so keys added with the confirm constraint (`ssh-add -c`) sign without confirmation
russh: Agent server never calls `Agent::confirm`, so keys added with the confirm constraint (`ssh-add -c`) sign without confirmation
CVE-2026-116773Medium· 4.3russh's SSH client is susceptible to unbounded allocations via EXT_INFO packets
russh's SSH client is susceptible to unbounded allocations via EXT_INFO packets
CVE-2026-116696Low· 3.3russh's SSH agent server is susceptible to unbound allocations via repeated SSH_AGENT_CONSTRAIN_CONFIRM messages
russh's SSH agent server is susceptible to unbound allocations via repeated SSH_AGENT_CONSTRAIN_CONFIRM messages
CVE-2026-116775Low· 2.3pageant: unbounded frame buffering on peer-controlled 4-byte length prefix (memory-exhaustion DoS)
pageant: unbounded frame buffering on peer-controlled 4-byte length prefix (memory-exhaustion DoS)
CVE-2026-116774Medium· 4.3russh: peer-declared zero maximum packet size permanently stalls channel writes (silent AsyncWrite hang)
russh: peer-declared zero maximum packet size permanently stalls channel writes (silent AsyncWrite hang)
CVE-2026-116689High· 5.9follow-redirects: Cross-realm sensitiveHeaders arrays are discarded and custom credentials can follow redirects
follow-redirects: Cross-realm sensitiveHeaders arrays are discarded and custom credentials can follow redirects
CVE-2026-116672High· 8.8Authlib RFC 7592 examples omit registration-access-token client binding
Authlib RFC 7592 examples omit registration-access-token client binding
CVE-2026-116677Medium· 5.3OpenWISP Controller CA CRL REST API does not scope requests to managed organizations
OpenWISP Controller CA CRL REST API does not scope requests to managed organizations
CVE-2026-9799Medium· 4.6Keycloak allows unauthorized access to resources via uma permission ticket bypass
Keycloak allows unauthorized access to resources via uma permission ticket bypass
CVE-2026-9083Medium· 4.9Keycloak vulnerable to information disclosure through arbitrary filesystem path probing
Keycloak vulnerable to information disclosure through arbitrary filesystem path probing
CVE-2026-9086High· 7.3PoCKeycloak vulnerable to cross-site scripting (xss) via case-insensitive uri validation bypass
Keycloak vulnerable to cross-site scripting (xss) via case-insensitive uri validation bypass
CVE-2026-63414HighShopify App: Token exchange shop context confusion may allow cross-shop authorization bypass in affected apps
Shopify App: Token exchange shop context confusion may allow cross-shop authorization bypass in affected apps
CVE-2026-118662MediumVite: `server.fs.deny` bypassed with queries
Vite: `server.fs.deny` bypassed with queries
GHSA-vpp8-g58w-m8mpHigh· 7.5Twisted: Unauthenticated Remote Denial of Service in the Twisted HTTP/2 Server via Rapid Stream Reset
Twisted: Unauthenticated Remote Denial of Service in the Twisted HTTP/2 Server via Rapid Stream Reset