CVE-2026-67548

The self-hosted AI agent OS taOS (tinyagentos) is vulnerable to Missing Authorization (CWE-862) in versions prior to 1.0.0-beta.25 . The software incorrectly registers all system settings routes under an APIRouter() instance that lacks an admin authorization dependency. This allows any authentica...

Insecure Redirect

github.com/gitpod-io/gitpod has Insecure Redirect. The vulnerability exists due to an unsafe return to function apiRouter without proper sanitization...