CVE-2021-1732

CVE-2021-1732 CVE-­2021­-1732 Microsoft Windows 10 local privilege escalation vulnerability research and PoC/Exploit development Affected systems and application versions Windows Server, version 20H2 Server Core Installation Windows 10 Version 20H2 for ARM64­based Systems Windows 10 Version 20H2...

GHSA-RJH2-4XGW-P2HJ Atlantis: OS command injection through PR-controlled Terraform workspace enables RCE during plan

Summary Atlantis passes the Terraform workspace value from a pull request's atlantis.yaml into a shell command without quoting or escaping it. A contributor whose pull request is eligible for an Atlantis plan can include shell metacharacters in the workspace name and execute arbitrary commands as...

@apimatic/cli (>=2.0.0-beta.1, <=2.0.0-beta.6), @bgub/fig-tanstack-start (>=0.1.0-alpha.1, <=1.0.0) +44 more potentially affected by CVE-2026-102989 via @tanstack/start-server-core (>=1.143.12, <=1.169.38)

@tanstack/start-server-core NPM version =1.143.12, =2.0.0-beta.1, =0.1.0-alpha.1, =1.0.0-rc.11, =2.0.0, =2.0.0, =0.1.1, =1.168.32-depup.0, =0.1.31-depup.0, =1.167.23-depup.0, =0.2.0, =0.1.77, =0.1.50, =0.1.43, =0.1.8, =0.2.0 and more Source cves: CVE-2026-102989 Source advisory:...

@apimatic/cli (>=2.0.0-beta.1, <=2.0.0-beta.6), @bgub/fig-tanstack-start (>=0.1.0-alpha.1, <=1.0.0) +44 more potentially affected by CVE-2026-102989 via @tanstack/start-server-core (>=1.143.12, <=1.169.38)

@tanstack/start-server-core NPM version =1.143.12, =2.0.0-beta.1, =0.1.0-alpha.1, =1.0.0-rc.11, =2.0.0, =2.0.0, =0.1.1, =1.168.32-depup.0, =0.1.31-depup.0, =1.167.23-depup.0, =0.2.0, =0.1.77, =0.1.50, =0.1.43, =0.1.8, =0.2.0 and more Source cves: CVE-2026-102989 Source advisory: GHSA-QX66-FV34-FJ...

@apimatic/cli (>=2.0.0-beta.1, <=2.0.0-beta.6), @bgub/fig-tanstack-start (>=0.1.0-alpha.1, <=1.0.0) +44 more potentially affected by CVE-2026-102989 via @tanstack/start-server-core (>=1.143.12, <=1.169.38)

@tanstack/start-server-core NPM version =1.143.12, =2.0.0-beta.1, =0.1.0-alpha.1, =1.0.0-rc.11, =2.0.0, =2.0.0, =0.1.1, =1.168.32-depup.0, =0.1.31-depup.0, =1.167.23-depup.0, =0.2.0, =0.1.77, =0.1.50, =0.1.43, =0.1.8, =0.2.0 and more Source cves: CVE-2026-102989 Source advisory:...

EUVD-2026-98849

TanStack Router: Unauthenticated reflected XSS in TanStack Start server-function responses...

CVE-2026-102989

TanStack Router is a client-first, server-capable, fully type-safe router and full-stack framework for the web. From 1.143.12 until 1.169.39 for @tanstack/start-server-core, 1.168.60 for @tanstack/react-start, 1.168.57 for @tanstack/solid-start, and 1.168.56 for @tanstack/vue-start, an...

@apimatic/cli (>=2.0.0-beta.1, <=2.0.0-beta.6), @bgub/fig-tanstack-start (>=0.1.0-alpha.1, <=1.0.0) +37 more potentially affected by CVE-2026-102989 via @tanstack/start-server-core (>=1.169.0, <=1.169.38)

@tanstack/start-server-core NPM version =1.169.0, =2.0.0-beta.1, =0.1.0-alpha.1, =1.0.0-rc.11, =2.0.0, =2.0.0, =1.168.32-depup.0, =0.1.31-depup.0, =1.167.23-depup.0, =0.2.2, =0.1.77, =0.1.50, =0.1.43, =0.1.8, =0.5.0, =0.11.0 and more Source cves: CVE-2026-102989 Source advisory: MEND:CVE-2026-102...

CVE-2026-102989 TanStack Router: Unauthenticated reflected XSS in TanStack Start server-function responses

TanStack Router is a client-first, server-capable, fully type-safe router and full-stack framework for the web. From 1.143.12 until 1.169.39 for @tanstack/start-server-core, 1.168.60 for @tanstack/react-start, 1.168.57 for @tanstack/solid-start, and 1.168.56 for @tanstack/vue-start, an...

CVE-2026-102989

TanStack Router is a client-first, server-capable, fully type-safe router and full-stack framework for the web. From 1.143.12 until 1.169.39 for @tanstack/start-server-core, 1.168.60 for @tanstack/react-start, 1.168.57 for @tanstack/solid-start, and 1.168.56 for @tanstack/vue-start, an...

CVE-2026-102989

TanStack Router is vulnerable to an unauthenticated reflected XSS in its server-function responses. The root cause involves an attacker placing non-public fields in a server-function request payload, causing attacker-controlled middleware state to reach the error path. This allows a crafted URL t...

EUVD-2026-98092

A vulnerability has been found in EricLBuehler mistral.rs up to 0.9.3. Impacted is the function isglobalip of the file mistralrs-server-core/src/mediasource.rs. Such manipulation of the argument ip leads to server-side request forgery. The attack can be launched remotely. The exploit has been...

CVE-2026-108939

A vulnerability has been found in EricLBuehler mistral.rs up to 0.9.3. Impacted is the function isglobalip of the file mistralrs-server-core/src/mediasource.rs. Such manipulation of the argument ip leads to server-side request forgery. The attack can be launched remotely. The exploit has been...

CVE-2026-108940

A vulnerability was found in EricLBuehler Mistral.rs up to 0.9.3. The affected element is the function calibrationapply of the file mistralrs-server-core/src/handlers.rs. Performing a manipulation of the argument savecimatrix results in path traversal. The attack may be initiated remotely. The...

CVE-2026-108939 EricLBuehler mistral.rs media_source.rs is_global_ip server-side request forgery

A vulnerability has been found in EricLBuehler mistral.rs up to 0.9.3. Impacted is the function isglobalip of the file mistralrs-server-core/src/mediasource.rs. Such manipulation of the argument ip leads to server-side request forgery. The attack can be launched remotely. The exploit has been...

CVE-2026-108939

A vulnerability has been found in EricLBuehler mistral.rs up to 0.9.3. Impacted is the function isglobalip of the file mistralrs-server-core/src/mediasource.rs. Such manipulation of the argument ip leads to server-side request forgery. The attack can be launched remotely. The exploit has been...

CVE-2026-108939 EricLBuehler mistral.rs media_source.rs is_global_ip server-side request forgery

A vulnerability has been found in EricLBuehler mistral.rs up to 0.9.3. Impacted is the function isglobalip of the file mistralrs-server-core/src/mediasource.rs. Such manipulation of the argument ip leads to server-side request forgery. The attack can be launched remotely. The exploit has been...

undertow-core: Undertow HTTP Server Fails to Reject Malformed Host Headers Leading to Potential Cache Poisoning and SSRF

A flaw was found in the Undertow HTTP server core, which is used in WildFly, JBoss EAP, and other Java applications. The Undertow library fails to properly validate the Host header in incoming HTTP requests.As a result, requests containing malformed or malicious Host headers are processed without...

PT-2026-104663

A vulnerability has been found in Gerapy up to 0.9.13. This vulnerability affects the function project create of the file gerapy/server/core/views.py of the component Project Management. The manipulation of the argument project name leads to path traversal. Remote exploitation of the attack is...

PT-2026-96032

Summary mistral.rs fetches any request-supplied image/audio URL with no host or IP validation, and opens arbitrary local files a file:// URL, or any existing relative/absolute path. A remote, unauthenticated client of any vision/audio deployment can cause the server to issue requests to internal ...