PYSEC-2026-4065 lightrag-hku: Stored Cross-Site Scripting (XSS) in the LightRAG WebUI chat/answer renderer via ingested content

Summary The LightRAG WebUI renders assistant/answer chat content as raw HTML — react-markdown is configured with rehypePlugins=rehypeRaw and skipHtml=false and no HTML sanitizer rehype-sanitize, element allow-list, or custom urlTransform. Because answer content is derived from user-ingested...

Nautobot: Authorization bypass in approval workflow REST API allows self-approval and unauthorized activation of scheduled jobs

ImpactThis is an authorization bypass that escalates into unauthorized server-side job execution.1. Primary impact - self-approval: The approver checks approver-group membership, change permission on the object under review, one-response-per-user are enforced only in the approve/deny actions on...

PYSEC-2026-4111 Nautobot: Authorization bypass in approval workflow REST API allows self-approval and unauthorized activation of scheduled jobs

Impact This is an authorization bypass that escalates into unauthorized server-side job execution. 1. Primary impact - self-approval: The approver checks approver-group membership, change permission on the object under review, one-response-per-user are enforced only in the approve/deny actions on...

PYSEC-2026-4063 lightrag-hku: Sensitive Information Exposure Through Raw Exception Messages in API Error Responses

Summary The LightRAG API server passes raw Python exception messages directly into HTTP error responses across 30+ error handlers in every router. When combined with the default unauthenticated configuration see companion report on CWE-306, any network-reachable client can trigger exceptions whos...

PYSEC-2026-4180 wlc may disclose API tokens to project-configured URLs

Impact wlc could send an unscoped API token to an unintended server when run inside a directory tree containing attacker-controlled project configuration. If .weblate, .weblate.ini, or weblate.ini defines an API url, and the user supplies a token with WLCKEY or --key without also pinning the URL,...

wlc may disclose API tokens to project-configured URLs

Impactwlc could send an unscoped API token to an unintended server when run inside a directory tree containing attacker-controlled project configuration.If .weblate, .weblate.ini, or weblate.ini defines an API url, and the user supplies a token with WLCKEY or --key without also pinning the URL, w...

geometron (>=0.0.1.dev7, <=0.0.3), metaplex-python-api (>=1.0.0, <=1.3.0) +1 more potentially affected by CVE-2026-64847 via anyio (3.3.4)

anyio PYPI version 3.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - geometron =0.0.1.dev7, =1.0.0, =1.4.46, =3.0.3 Source cves: CVE-2026-64847 Source advisory: OSV:PYSEC-2026-4024...

geometron (>=0.0.1.dev7, <=0.0.3), metaplex-python-api (>=1.0.0, <=1.3.0) +1 more potentially affected by CVE-2026-63374 via anyio (3.3.4)

anyio PYPI version 3.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - geometron =0.0.1.dev7, =1.0.0, =1.4.46, =3.0.3 Source cves: CVE-2026-63374 Source advisory: OSV:PYSEC-2026-4025...

quant1x-trader (>=0.7.3, <=0.8.6), secsend-api (>=1.1.0, <=1.1.2) potentially affected by CVE-2026-85078 via sanic (23.12.1)

sanic PYPI version 23.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - quant1x-trader =0.7.3, =1.1.0, =1.1.2 Source cves: CVE-2026-85078 Source advisory: OSV:PYSEC-2026-4162...

fpx (>=0.4.0, <=0.4.9), hcaptcha-challenger (>=0.4.2, <=0.4.2.1) +4 more potentially affected by CVE-2026-85078 via sanic (22.6.2)

sanic PYPI version 22.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - fpx =0.4.0, =0.4.2, =0.4.0, =2.2.0, =3.4.5.dev8, =3.4.10.dev2 Source cves: CVE-2026-85078 Source advisory: OSV:PYSEC-2026-4162...

python-signal-cli-rest-api (>=22.9.1, <=22.10.6) potentially affected by CVE-2026-85078 via sanic (22.9.0)

sanic PYPI version 22.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - python-signal-cli-rest-api =22.9.1, =22.10.6 Source cves: CVE-2026-85078 Source advisory: OSV:PYSEC-2026-4162...

autoreduce-db (22.0.0.dev37), autoreduce-frontend (22.0.0.dev24) +6 more potentially affected by CVE-2026-15307 via django (4.0.6)

django PYPI version 4.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - autoreduce-db 22.0.0.dev37 - autoreduce-frontend 22.0.0.dev24 - autoreduce-qp 22.0.0.dev38 - autoreduce-rest-api 22.0.0.dev23 - autoreduce-scripts...

autogenerated-api (1.1.9), django-oscar-moysklad (>=0.2.4, <=0.2.5) +2 more potentially affected by CVE-2026-15307 via django (1.11.18)

django PYPI version 1.11.18 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - autogenerated-api 1.1.9 - django-oscar-moysklad =0.2.4, =1.0.0b0, =1.0.0b1 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

directory-api-client (9.15.2), simpl-modelservice (>=0.7.7, <=0.7.9) potentially affected by CVE-2026-15307 via django (1.11.11)

django PYPI version 1.11.11 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - directory-api-client 9.15.2 - simpl-modelservice =0.7.7, =0.7.9 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

autoreduce-db (22.0.0.dev21), autoreduce-qp (>=22.0.0.dev21, <=22.0.0.dev23) +5 more potentially affected by CVE-2026-15307 via django (3.2.10)

django PYPI version 3.2.10 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - autoreduce-db 22.0.0.dev21 - autoreduce-qp =22.0.0.dev21, =22.0.0.dev13, =22.0.0.dev29, =0.2.0, =1.0.1, =0.0.0.dev8, =0.0.0.dev13 Source cves:...

directory-api-client (>=9.14.0, <=9.15.0), directory-api-external (>=4.1.1, <=4.2.0) +9 more potentially affected by CVE-2026-15307 via django (1.11.5)

django PYPI version 1.11.5 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - directory-api-client =9.14.0, =4.1.1, =0.0.1, =0.0.1, =1.0.5, =6.4.1, =0.3.0, =2.4.1, =2.0.1, =0.0.6, =0.0.11 Source cves: CVE-2026-15307 Source...

autogenerated-api (>=1.0.2, <=1.1.15) potentially affected by CVE-2026-15307 via django (1.8.14)

django PYPI version 1.8.14 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - autogenerated-api =1.0.2, =1.1.15 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

PYSEC-2026-4050 foreman-mcp-server Inserts Sensitive Information into Log File

A flaw was found in foreman-mcp-server. This component utilizes two distinct logging mechanisms that can expose sensitive session and authentication data. One mechanism logs session identifiers, which are treated as authentication credentials, at an informational level. The other, when debug...

LiteLLM: PROXY_ADMIN database API Key Generator Has Insufficient Session Expiration

A security flaw has been discovered in BerriAI litellm up to 1.82.2. This impacts the function authenticateuser of the file litellm/proxy/auth/loginutils.py of the component PROXYADMIN database API Key Generator. Performing a manipulation results in session expiration. The attack may be initiated...

PYSEC-2026-4073 LiteLLM: PROXY_ADMIN database API Key Generator Has Insufficient Session Expiration

A security flaw has been discovered in BerriAI litellm up to 1.82.2. This impacts the function authenticateuser of the file litellm/proxy/auth/loginutils.py of the component PROXYADMIN database API Key Generator. Performing a manipulation results in session expiration. The attack may be initiated...