68919 matches found
GHSA-73X5-H92W-XC2J Open WebUI: Private channel messages can be disclosed through cross-channel thread parent_id binding
Summary A normal authenticated user can read the content of a message in a private channel they do not belong to. GET /api/v1/channels/id/messages/messageid/thread authorizes the caller against the URL channel, but the underlying thread lookup loads the thread parent by id and returns it without...
GHSA-3WP3-XXJ9-5JQQ Open WebUI: Cross-user model-list exposure via static cache key in get_all_models (aiocache key= vs key_builder= misuse)
Summary The getallmodels handlers in routers/openai.py and routers/ollama.py intended to cache their permission-filtered model lists per user, but the @cached decorator was misconfigured: it passed a key= lambda instead of keybuilder=. In aiocache 0.12.3 the pinned version, key= is a static cache...
Open WebUI: Cross-user model-list exposure via static cache key in get_all_models (aiocache key= vs key_builder= misuse)
Summary The getallmodels handlers in routers/openai.py and routers/ollama.py intended to cache their permission-filtered model lists per user, but the @cached decorator was misconfigured: it passed a key= lambda instead of keybuilder=. In aiocache 0.12.3 the pinned version, key= is a static cache...
GHSA-GCJH-H69Q-9W9G cel-go: JSON Private Fields Exposed via NativeTypes and ParseStructTag
The function ext.NativeTypesParseStructTag"json" does not honour the encoding/json skip directive json:"-". Fields tagged json:"-" are registered in the CEL type system under the literal name "-" and are readable from any user-submitted CEL expression via dynobj"-". Additionally, newNativeTypes...
Security Bulletin: SOAR App Host is using a component with known vulnerabilities (CVE-2026-22016, CVE-2026-22021, CVE-2026-22013, CVE-2026-22018)
Summary SOAR App Host uses an older version of IBM SDK, Java Technology that may be identified and exploited. Updates for supported versions have been released which address the issue. It is recommended to upgrade to version 1.15.9.0 Vulnerability Details CVEID:CVE-2026-22016 DESCRIPTION: Easily...
PyMdown Extensions: Path traversal in the b64 extension lets <img src> read files outside base_path
Summary The b64 extension inlines images referenced by as base64 data URIs. When resolving the src path it joins it onto the configured basepath with os.path.normpath and opens the result directly, with no check that the resolved path stays inside basepath. A src containing ../ sequences, or an...
CVE-2026-49326
creationtimestamp| type| source ---|---|--- 2026-07-24 16:13:40+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrfqnxvawn2r...
Information Exposure
Overview parse-server is a version of the Parse backend that can be deployed to any infrastructure that can run Node.js. Affected versions of this package are vulnerable to Information Exposure via the GraphQL error message handling process. An attacker can obtain the names of required custom inp...
Information Exposure
Overview parse-server is a version of the Parse backend that can be deployed to any infrastructure that can run Node.js. Affected versions of this package are vulnerable to Information Exposure via error messages generated during GraphQL validation and input-coercion. An attacker can obtain...
CVE-2026-57106
creationtimestamp| type| source ---|---|--- 2026-07-24 15:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrfpdryc7w2y 2026-07-24 17:01:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrftcvc72z2j 2026-07-25 06:14:27+00:00| seen|...
AWS CLI: Overly permissive File Permissions
Summary The AWS Command Line Interface AWS CLI is a unified tool for managing AWS services from the command line. Certain CLI subcommands wrote credential and configuration files with world-readable permissions on Unix-like systems with a default umask, allowing other local users on the same host...
EUVD-2026-41116
AWS CLI: Overly permissive File Permissions...
GHSA-WFP6-F47H-HXC3 AWS CLI: Overly permissive File Permissions
Summary The AWS Command Line Interface AWS CLI is a unified tool for managing AWS services from the command line. Certain CLI subcommands wrote credential and configuration files with world-readable permissions on Unix-like systems with a default umask, allowing other local users on the same host...
CVE-2026-65707 Likeshop 3.0.5 Authenticated SQL Injection via adjustAccount Endpoint
Likeshop through 3.0.5 contains an authenticated SQL injection vulnerability that allows admin-level users to extract arbitrary database contents by submitting unsanitized POST parameters to the adjustAccount endpoint. The adjustAccount method in UserLogic.php concatenates the money, integral,...
CVE-2026-55729
Exposure of Sensitive Information CWE-200 in LWEB802 browser localStorage in Loytec LWEB-802 before 5.0.8 on all platforms allows an unauthenticated remote attacker to leak stored management credentials via a crafted link...
CVE-2026-16802
Affected product/versions: Devolutions PowerShell Universal 2026.2.2 and earlier. Vulnerability: Cleartext storage of sensitive information in the variables feature. Impact: Local attacker with file system access can read secret values stored in cleartext on disk when no vault is selected; confid...
OpenAI’s agent escaped its sandbox during a security test
During an internal OpenAI security evaluation, a chain of AI models escaped its sandbox, reached the internet, and then accessed Hugging Face infrastructure to complete the test objective. OpenAI is a leading artificial intelligence AI research and deployment company. Its best-known product is...
CVE-2026-56163 Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability
...
CVE-2026-17048
A flaw was found in the Keycloak Admin REST API, which is used to manage security realms and clients. The issue occurs when the system processes requests for rotated client secrets that are stored in a secure vault. Due to improper boundary enforcement, a delegated administrator with view-only...
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Files or directories accessible to external parties in Microsoft Edge Chromium-based allows an unauthorized attacker to disclose information over a network...