K000162352: Lodash vulnerability CVE-2026-4800

Security Advisory Description Impact: The fix for CVE-2021-23337 https://github.com/advisories/GHSA-35jh-r3h4-6jhm added validation for the variable option in .template but did not apply the same validation to options.imports key names. Both paths flow into the same Function constructor sink. Whe...

PT-2026-62071

Name of the Vulnerable Software and Affected Versions s2n-tls versions prior to v1.7.6 Description Missing validation of the outer content type byte on TLS 1.3 encrypted records allows an active man-in-the-middle to silently discard individual application data records without detection by either...

PT-2026-61855

Name of the Vulnerable Software and Affected Versions Apache Fory versions prior to 1.4.0 Description An issue exists involving the deserialization of untrusted data, which may allow class-registration checks to be bypassed during Java lambda deserialization. This specifically affects the lambda...

Permissive List of Allowed Inputs

Overview axios is a promise-based HTTP client for the browser and Node.js. Affected versions of this package are vulnerable to Permissive List of Allowed Inputs in the isLoopback and isIPv4Loopback functions of lib/helpers/shouldBypassProxy.js, which require the first IPv4 octet to be 127 and...

CVE-2026-47144

Shamefile is a linter for undocumented linter warnings. Prior to version 0.1.7, a path traversal vulnerability in shame next allows an attacker-controlled shamefile.yaml to disclose contents of files outside the repository, one line at a time, to the terminal of a user who runs the command. See...

CVE-2026-46671 Rust OneNote File Parser: Path traversal in `Parser::parse_notebook` allows reading files outside the notebook directory

Rust OneNote File Parser is a parser for Microsoft OneNote files implemented in Rust. Prior to version 1.1.1, a maliciously crafted .onetoc2 table-of-contents file can cause Parser::parsenotebook to open arbitrary files on the host filesystem outside the notebook's directory. The parser reads ent...

Heap-based Buffer Overflow

Overview pocketsphinx is an Official Python bindings for PocketSphinx Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the model loading process. An attacker can execute arbitrary code or cause a crash by supplying a crafted or malicious language or acoustic mode...

CVE-2026-12283

CVE-2026-12283 affects Amazon Athena Query Federation's Synapse connector (aws-athena-query-federation) v2022.20.1–v2026.19.1. The issue is improper neutralization of elements in an SQL command within the Synapse connector, which could let an authenticated remote user execute injected read-only S...

Missing Authorization

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Missing Authorization in the message actions. An attacker can perform unauthorized actions by sending requests as a lower-trust user or through a configured input path when the feature is...

Incorrect Authorization

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Incorrect Authorization via the cron. An attacker can gain unauthorized access to restricted execution tools and perform actions with elevated privileges by leveraging misconfigured input...

Brute Force

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Brute Force via the WebSocket authentication. An attacker can exhaust gateway resources and reduce service availability by sending repeated authentication attempts that bypass rate...

Unsafe Dependency Resolution

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Unsafe Dependency Resolution via the setup-mode. An attacker can execute unauthorized code or persist actions beyond their intended authorization level by supplying or controlling untrust...

Server-side Request Forgery (SSRF)

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the browser act route due to improper validation of the current-tab URL checks. An attacker can gain unauthorized access to actions requiring higher...

Missing Origin Validation in WebSockets

Overview mcp is a Model Context Protocol SDK Affected versions of this package are vulnerable to Missing Origin Validation in WebSockets in the deprecated websocketserver transport function, which builds a Starlette WebSocket and calls acceptsubprotocol='mcp' without inspecting the connection's...

Use of Hard-coded Credentials

Overview Affected versions of this package are vulnerable to Use of Hard-coded Credentials via the PASSWORD authentication process. An attacker can gain full administrative access, execute arbitrary commands, and read or modify files by authenticating with the hardcoded default credentials. This ...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection via the shellexec process. An attacker can execute arbitrary shell commands as the web server user by bypassing the intended command allowlist through shell command substitution in the command parameter. Remediation...

CVE-2026-61868

A flaw was found in ImageMagick. A remote attacker could exploit a memory leak in the YUV decoder when processing a specially crafted image file. Repeatedly triggering this flaw can lead to resource exhaustion, resulting in a denial of service for the application. Mitigation Do not process...

[SECURITY] [DLA 4687-1] chromium security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4687-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort July 16, 2026 https://wiki.debian.org/LTS -...

dd-trace-rb: Improper parsing of W3C baggage headers may lead to DoS

Impact Datadog tracing libraries that implement W3C baggage propagation parse incoming baggage HTTP headers without enforcing item-count or byte-size limits on the extract path. The DDTRACEBAGGAGEMAXITEMS default 64 and DDTRACEBAGGAGEMAXBYTES default 8192 limits were applied only to baggage...

Security Bulletin: Vulnerability in libxml2 affects IBM Cloud Pak System[CVE-2025-6021]

Summary A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. Vulnerability was addressed in IBM Cloud Pak System version 2.3.6.1, and IBM Cloud Pak System version 2.3.5.1. Vulnerability Details...