@chaibuilder/sdk (>=0.1.0, <=1.2.19), @coderrental/csp-categorytree (>=1.1.0, <=1.1.7) +2 more potentially affected by CVE-2026-55091 via flat-to-nested (>=1.1.0, <=1.1.1)

flat-to-nested NPM version =1.1.0, =0.1.0, =1.1.0, =1.0.17, =1.0.18 - flow-dg-category-module 0.0.0 Source cves: CVE-2026-55091 Source advisory: SNYK:JS-FLATTONESTED-17817904...

Prototype Pollution

Overview flat-to-nested is a Convert a hierarchy from flat to nested representation. Affected versions of this package are vulnerable to Prototype Pollution in the convert function when processing input records containing specially crafted parent or id values such as proto. An attacker can inject...

flat-to-nested: Prototype pollution in flat-to-nested convert() via __proto__ parent/id key

Summary convert builds the nested tree by using each flat record's id and parent field values directly as object keys, with no guard against proto / constructor / prototype. A record whose parent is the string "proto" makes tempparent resolve to Object.prototype, and the following initPush...

GHSA-HP36-V28F-W3R4 flat-to-nested: Prototype pollution in flat-to-nested convert() via __proto__ parent/id key

Summary convert builds the nested tree by using each flat record's id and parent field values directly as object keys, with no guard against proto / constructor / prototype. A record whose parent is the string "proto" makes tempparent resolve to Object.prototype, and the following initPush...

NPM: flat-to-nested: Prototype pollution in flat-to-nested convert() via __proto__ parent/id key

NPM: flat-to-nested: Prototype pollution in flat-to-nested convert via proto parent/id key vulnerability discovered by ? in WordPress Npm flat-to-nested versions = 1.1.1...

@ajna-inc/npmvc (>=0.1.0, <=0.3.4), @cra-ready/cli (>=0.1.0, <=0.1.1) +2 more potentially affected by CVE-2026-55849 via @cyclonedx/cyclonedx-npm (>=3.1.0, <=4.2.1)

@cyclonedx/cyclonedx-npm NPM version =3.1.0, =0.1.0, =0.1.0, =1.0.8, =1.1.3 - @raj-dev/guardrail 1.0.0 Source cves: CVE-2026-55849 Source advisory: OSV:GHSA-V75R-VX73-82PJ...

@ajna-inc/npmvc (>=0.1.0, <=0.3.4), @cra-ready/cli (>=0.1.0, <=0.1.1) +2 more potentially affected by CVE-2026-55849 via @cyclonedx/cyclonedx-npm (>=3.1.0, <=4.2.1)

@cyclonedx/cyclonedx-npm NPM version =3.1.0, =0.1.0, =0.1.0, =1.0.8, =1.1.3 - @raj-dev/guardrail 1.0.0 Source cves: CVE-2026-55849 Source advisory: SNYK:JS-CYCLONEDXCYCLONEDXNPM-17817903...

Blocky DNSSEC validation bypass and validation-cache scope pollution

Summary Blocky accepts and caches forged DNS answers while dnssec.validate: true is enabled. The issue has two related exploit paths: 1. Basic DNSSEC validation bypass. If an untrusted upstream returns an unsigned positive answer for a DNSSEC-signed public domain, Blocky classifies the response a...

@kontaa/subgraph (>=1.0.1, <=1.2.3), @kontaa/utils (>=1.2.1, <=1.2.3) +4 more potentially affected by CVE-2026-55778 via parse-server (>=6.5.11, <=7.5.4)

parse-server NPM version =6.5.11, =1.0.1, =1.2.1, =2.4.46, =1.0.1, =1.0.0, =1.0.0, =1.0.1 Source cves: CVE-2026-55778 Source advisory: SNYK:JS-PARSESERVER-17420047...

@m3s/smart-contract (>=1.4.1, <=2.3.8), @openzeppelin/contracts-cli (0.1.0) +2 more potentially affected by CVE-2026-57583 via @openzeppelin/wizard-stellar (>=0.1.1, <=0.5.0)

@openzeppelin/wizard-stellar NPM version =0.1.1, =1.4.1, =0.0.5, =0.0.1, =0.0.4 Source cves: CVE-2026-57583 Source advisory: SNYK:JS-OPENZEPPELINWIZARDSTELLAR-17817909...

@claude-flow/plugin-agent-federation (>=1.0.0-alpha.9, <=1.0.0-alpha.15), @turtlepusher/plugin-agent-federation (>=1.0.0, <=1.0.1) +2 more potentially affected by CVE-2026-58195 via agentic-flow (>=2.0.2-alpha, <=2.0.12-fix.8)

agentic-flow NPM version =2.0.2-alpha, =1.0.0-alpha.9, =1.0.0, =0.5.0, =0.3.0, =0.3.1 Source cves: CVE-2026-58195 Source advisory: SNYK:JS-AGENTICFLOW-17818150...

CVE-2026-44046 Apache APISIX: wolf-rbac plugin Identity Spoofing

Use of Less Trusted Source vulnerability in Apache APISIX. Attacker can take advantage of wolf-rbac plugin under default configuration to potentially pollute logs with spoofed identity information and exploit IP based access control rules. This issue affects Apache APISIX: from 1.2.0 through...

CVE-2026-44046 Apache APISIX: wolf-rbac plugin Identity Spoofing

Use of Less Trusted Source vulnerability in Apache APISIX. Attacker can take advantage of wolf-rbac plugin under default configuration to potentially pollute logs with spoofed identity information and exploit IP based access control rules. This issue affects Apache APISIX: from 1.2.0 through...

CVE-2026-44046

Use of Less Trusted Source vulnerability in Apache APISIX. Attacker can take advantage of wolf-rbac plugin under default configuration to potentially pollute logs with spoofed identity information and exploit IP based access control rules. This issue affects Apache APISIX: from 1.2.0 through...

CVE-2026-44046

Apache APISIX is affected by CVE-2026-44046 due to a Less Trusted Source issue in the wolf-rbac plugin under default configuration. Affected versions: 1.2.0 through 3.16.0. Exploitation can allow spoofed identity information to be logged and potentially bypass or abuse IP-based access controls. T...

Relative Path Traversal

Overview Affected versions of this package are vulnerable to Relative Path Traversal via the remote-import API. An attacker can manipulate files within the /var/snap/microceph confinement by sending crafted requests, potentially causing daemon disruption and polluting the cluster state. This is...

GHSA-XG3J-C7Q4-F9PH Canonical MicroCeph: path traversal issue in the remote-import AP

Canonical MicroCeph versions from the squid and tentacle track are vulnerable to a path traversal issue in the remote-import API. Holders of a trusted cluster mTLS certificate such as enrolled cluster members or join token can manipulate files in an imported remote cluster within the...

Canonical MicroCeph: path traversal issue in the remote-import AP

Canonical MicroCeph versions from the squid and tentacle track are vulnerable to a path traversal issue in the remote-import API. Holders of a trusted cluster mTLS certificate such as enrolled cluster members or join token can manipulate files in an imported remote cluster within the...

EUVD-2026-37990

Canonical MicroCeph versions from the squid and tentacle track are vulnerable to a path traversal issue in the remote-import API. Holders of a trusted cluster mTLS certificate such as enrolled cluster members or join token can manipulate files in an imported remote cluster within the...

CVE-2026-10720 MicroCeph path traversal issue in the remote-import API

Canonical MicroCeph versions from the squid and tentacle track are vulnerable to a path traversal issue in the remote-import API. Holders of a trusted cluster mTLS certificate such as enrolled cluster members or join token can manipulate files in an imported remote cluster within the...