GHSA-V3Q9-HJ7J-63HQ vulnerabilities

Vulnerabilities for packages: airflow, airflow-core...

GHSA-FXQJ-RQCC-2CMP vulnerabilities

Vulnerabilities for packages: saf, renovate, langfuse, nextcloud-server, vitess, kubeflow-pipelines...

CVE-2026-6336 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

GHSA-M8RV-5G2X-5CG5 vulnerabilities

Vulnerabilities for packages: pulumi, npm, saf, renovate, prism, langfuse, vitess, code-server...

CVE-2026-18656

An uncontrolled search path element in Kiro IDE before version 1.0.228 on Windows might allow a remote unauthenticated actor to execute arbitrary code via a maliciously crafted project directory containing an executable that bypasses workspace trust protections when a local user opens the...

CVE-2026-70482 Open WebUI: Account takeover via OAuth token exchange accepting tokens issued to any client

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.0 until 0.11.0, when ENABLEOAUTHTOKENEXCHANGE=True, /oauth/provider/token/exchange accepts a raw provider access token and validates it by calling the provider userinfo endpoint without confirming which...

CVE-2026-70476

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, several organization billing endpoints in packages/server/src/enterprise/routes/organization.route.ts and packages/server/src/enterprise/controllers/organization.controller.ts accept...

CVE-2026-13229

Zammad 7.1.0 contains an authenticated improper authorization vulnerability in the ticket article attachment cloning endpoint...

CVE-2017-20242

CVE-2017-20242 affects Keysight IxChariot Endpoint prior to 9.5.102. The vulnerability is a stack-based buffer overflow in the endpoint, exploitable by an unauthenticated remote attacker over the network via a specially crafted packet, potentially crashing the endpoint or allowing arbitrary code ...

CVE-2026-66277

creationtimestamp| type| source ---|---|--- 2026-08-04 18:45:41+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/2yf3fvwedeq55...

CVE-2026-47781 pdm: Project-Controlled `.pdm-plugins` Content Executes Before CLI Parsing

PDM is a Python package and dependency manager. In versions up to and including 2.26.9, PDM automatically loads project-local plugins from a .pdm-plugins directory during initialization, allowing an attacker-controlled file in an untrusted repository checkout to execute arbitrary Python code befo...

CVE-2026-47781

CVE-2026-47781 affects PDM up to v2.26.9, where Core.init() calls load_plugins() and adds the project-local .pdm-plugins via site.addsitedir(). This causes .pth files to be processed, allowing attacker-controlled content in an untrusted repository checkout to execute arbitrary Python code before ...

CVE-2026-66275

creationtimestamp| type| source ---|---|--- 2026-08-04 18:33:40+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/ff4uaoe56so2a...

CVE-2026-58072

creationtimestamp| type| source ---|---|--- 2026-08-04 18:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msbmu54swv2u 2026-08-05 12:45:09+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-per-prodotti-veeam-1 2026-08-05 13:05:27+00:00| seen|...

Uncontrolled Recursion

Overview Django is a high-level Python Web framework that encourages rapid development and clean, pragmatic design. Affected versions of this package are vulnerable to Uncontrolled Recursion via GEOSGeometry when parsing deeply nested GEOMETRYCOLLECTION objects provided as well-known text WKT,...

CVE-2026-47623

creationtimestamp| type| source ---|---|--- 2026-08-04 18:12:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2bly5qs5x5ynn 2026-08-08 13:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msl6vsra472o...

CVE-2026-69255

creationtimestamp| type| source ---|---|--- 2026-08-04 18:12:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msbmftr7f42o 2026-08-06 20:45:21+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-per-flowise 2026-09-16 20:00:44+00:00| exploited|...

CVE-2026-70474

Flowise is a drag-and-drop user interface for building customized large language model LLM flows. Prior to 3.1.3, Flowise has three OAuth2 credential endpoints that look up credentials by id alone with no workspaceId filter. The authorize, callback, and refresh handlers query the Credential table...

GHSA-8R8H-6VCC-XHRV Flowise: RBAC Bypass Leading to Unauthorized Workspace Variables Disclosure

Finding — Unauthorized Workspace Variables disclosure via $vars injection bypasses variables:view What’s wrong code locations - Variables for the active workspace are fetched without checking “variables:view” at this call site: flowise-src/ packages/components/src/utils.ts:932 - Runtime variables...

CVE-2026-70471 Flowise: RBAC Bypass Leading to Unauthorized Workspace Variables Disclosure

Flowise is a drag-and-drop user interface for building customized large language model LLM flows. Prior to 3.1.3, Flowise injects $vars into the code execution sandbox without requiring variables:view, bypassing the permission-protected Variables API. Variables for the active workspace are fetche...