CVE-2026-7232

The FormCraft plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'parameter name' parameter in all versions up to, and including, 3.9.14 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

CVE-2026-7120

@fastify/static evaluates the allowedPath callback before normalizing dot segments and duplicate path separators in the pathname used for file resolution. Versions up to and including 10.1.1 are affected. An unauthenticated attacker can bypass allowedPath restrictions by requesting equivalent...

EUVD-2026-42350

LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks...

EUVD-2026-42359

LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback...

EUVD-2026-42361

LiteLLM: Local file read via request-supplied OIDC file references...

EUVD-2026-42357

LiteLLM: Arbitrary file write via path traversal in Skills archive extraction...

GHSA-2XGM-WC4G-5JVG n8n: Improper Authorization Allows Authenticated Users to Assign Workflows to Folders in Other Projects

Impact An authenticated user with permission to create workflows in one project could bypass project/folder authorization boundaries during workflow creation. By supplying a crafted request payload, the user could associate a newly created workflow with a folder belonging to a different project...

GHSA-2434-3X6Q-8R99 n8n: External Secrets Accessible via Workflow Expressions Outside Credentials

Impact External secrets were incorrectly resolved in workflow node expressions, where they are not intended to be available. An authenticated user with project editor access could read the plaintext value of external secrets by referencing them in a node expression, without needing explicit secre...

GHSA-4MP9-239F-G9HG Netty: WebSockets V07/V08 handshaker missing Connection/Upgrade validation

Summary An attacker can force WebSocket upgrade via the lax V07 or V08 handshaker by sending Sec-WebSocket-Version: 7 and omitting Connection: Upgrade / Upgrade: websocket headers, completing a protocol switch that a proxy would not recognize as an Upgrade request and enabling HTTP request...

EUVD-2026-47582

Netty: Missing CertificateID Validation in OCSP Response Allows Replay Attacks...

EUVD-2026-47579

Netty XML: Injection / Risky Sink — unconfigured XML factory with active DTD and entity handling...

EUVD-2026-47564

Netty: Memory Exhaustion via HTTP/3 Reserved Frame Types...

EUVD-2026-46133

Netty SPDY zlib header block continues decoded expansion after maxHeaderSize truncation...

CVE-2026-16629

A vulnerability exists in danger-js CLI up to 13.0.7 affecting the function danger.git.diffForFile in source/platforms/git/localGetFileAtSHA.ts. The issue arises from manipulating the File argument, enabling local OS command injection. Exploitation is described as local access, with partial impac...

CVE-2026-13089

OIDC::Lite (Perl) up to version 0.12.1 is vulnerable to a signature verification bypass in ID Token validation. When the algorithm is not pinned, verify() derives the alg from the token header and passes an accepted-algorithm allowlist to decode_jwt, enabling forged tokens with attacker-controlle...

Security Bulletin: IBM WebSphere Application Server Liberty is affected by a denial of service vulnerability with HTTP/2 (CVE-2026-11897)

Summary IBM WebSphere Application Server Liberty is affected by a denial of service vulnerability with HTTP/2 when servlet-3.1, servlet-4.0, servlet-5.0, servlet-6.0, or servlet-6.1 is enabled. Vulnerability Details CVEID:CVE-2026-11897 DESCRIPTION: IBM WebSphere Application Server Liberty is...

EUVD-2026-47773

The code to parse MIME headers for display when forwarding a message if the setting to view all headers was enabled had an off-by-one error, allowing a single byte to be read from the memory after the buffer for the headers, and potentially crashing Thunderbird. This vulnerability was fixed in...

CVE-2026-14899

CVE-2026-14899 describes an off-by-one read in Thunderbird’s MIME header parser when forwarding with the “view all headers” option enabled, allowing reading a byte beyond the header buffer and potentially crashing Thunderbird. The issue is fixed in Thunderbird 153 and Thunderbird 140.13. This ana...

CVE-2026-64834

FFmpeg versions 0.6.3 through 8.1.2 contain an infinite loop vulnerability in the RTP/ASF demuxer within libavformat/rtpdecasf.c that allows remote attackers to cause denial of service by sending a crafted RTP/ASF stream. The rtpasffixheader function fails to validate a minimum chunksize when...

CVE-2026-7328

CVE-2026-7328 concerns Caliptra Core Runtime Firmware (2.1.0) and reports missing authorization in subsystem mode for INVOKE_DPE_MLDSA87, CM_AES_GCM_DECRYPT_DMA, and EXTERNAL_MAILBOX_CMD commands. This allows a privileged local attacker to trigger a denial-of-service via mailbox commands that con...