CVE-2026-16756

Missing connection and header-read timeouts and the absence of a concurrent-connection cap in the default serve path of Amazon aws-smithy-http-server might allow remote attackers to cause a denial of service by opening many connections and sending partial requests that are never completed,...

CVE-2026-16584 AWS API MCP Server Security Policy Bypass via Startup Failure

Improper handling of an initialization failure in AWS API MCP Server from 0.2.13 through 1.3.46 might allow an actor to bypass the user-configured security policy and execute AWS API operations that the policy was set to deny or gate. When initialization of the security policy enforcement data...

Not Failing Securely ('Failing Open')

Overview next-auth is an Authentication for Next.js Affected versions of this package are vulnerable to Not Failing Securely 'Failing Open' in the auth process. An attacker can gain unauthorized access to protected resources by triggering a server-side configuration error that causes the auth...

Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')

Overview getgrav/grav is a Modern, Crazy Fast, Ridiculously Easy and Amazingly Powerful Flat-File CMS. Affected versions of this package are vulnerable to Use of Externally-Controlled Input to Select Classes or Code 'Unsafe Reflection' via the dynamicDataField function in the FlexDirectory...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through the render process. An attacker can exhaust system resources and cause the PHP process to crash by submitting a specially crafted HTML document containing a high-entropy,...

GHSA-H44J-F5R5-PH73 n8n: "Allowed HTTP Request Domains" Restriction Bypass via AI Agents MCP Connector

Impact The AI Agents feature did not enforce the "Allowed HTTP Request Domains" restriction configured on credentials. As a result, a member-level user who had been granted use-only access to a shared credential could cause its secret to be sent to an external server they control, by pointing an...

CVE-2026-16629

A vulnerability exists in danger-js CLI up to 13.0.7 affecting the function danger.git.diffForFile in source/platforms/git/localGetFileAtSHA.ts. The issue arises from manipulating the File argument, enabling local OS command injection. Exploitation is described as local access, with partial impac...

CVE-2026-16492 umijs umi GIT File Helper getFileGitIno.ts git.getFileCreateInfo os command injection

A weakness has been identified in umijs umi up to 4.6.63. The affected element is the function git.getFileCreateInfo of the file packages/utils/src/getFileGitIno.ts of the component GIT File Helper. This manipulation causes os command injection. The exploit has been made available to the public a...

EUVD-2026-47592

A vulnerability was determined in QUSETIONS MiniCode-Python 0.1.0. This vulnerability affects the function subprocess.Popen of the file minicode/config.py of the component Project File Handler. Executing a manipulation can lead to os command injection. The attack may be launched remotely. A high...

Improper Restriction of Security Token Assignment

Overview Affected versions of this package are vulnerable to Improper Restriction of Security Token Assignment in the organization and permission endpoints when a personal access token is restricted to public-only scope. An attacker can access private organization membership and authorization...

Improper Restriction of Security Token Assignment

Overview Affected versions of this package are vulnerable to Improper Restriction of Security Token Assignment in the organization and permission endpoints when a personal access token is restricted to public-only scope. An attacker can access private organization membership and authorization...

CVE-2026-16317 Silent Drop of TLS 1.3 Encrypted Records in s2n-tls

Missing validation of the outer contenttype byte on TLS 1.3 encrypted records in s2n-tls allows an active man-in-the-middle to silently discard individual application data records without either endpoint detecting the modification. RFC 8446 Section 5.2 requires that the outer contenttype of all...

Incomplete List of Disallowed Inputs

Overview GitPython is a python library used to interact with Git repositories Affected versions of this package are vulnerable to Incomplete List of Disallowed Inputs through Git.checkunsafeoptions in git/cmd.py. An attacker can execute arbitrary commands by supplying abbreviated unsafe option...

K000162352: Lodash vulnerability CVE-2026-4800

Security Advisory Description Impact: The fix for CVE-2021-23337 https://github.com/advisories/GHSA-35jh-r3h4-6jhm added validation for the variable option in .template but did not apply the same validation to options.imports key names. Both paths flow into the same Function constructor sink. Whe...

PT-2026-62071

Name of the Vulnerable Software and Affected Versions s2n-tls versions prior to v1.7.6 Description Missing validation of the outer content type byte on TLS 1.3 encrypted records allows an active man-in-the-middle to silently discard individual application data records without detection by either...

PT-2026-61855

Name of the Vulnerable Software and Affected Versions Apache Fory versions prior to 1.4.0 Description An issue exists involving the deserialization of untrusted data, which may allow class-registration checks to be bypassed during Java lambda deserialization. This specifically affects the lambda...

Permissive List of Allowed Inputs

Overview axios is a promise-based HTTP client for the browser and Node.js. Affected versions of this package are vulnerable to Permissive List of Allowed Inputs in the isLoopback and isIPv4Loopback functions of lib/helpers/shouldBypassProxy.js, which require the first IPv4 octet to be 127 and...

CVE-2026-47144

Shamefile is a linter for undocumented linter warnings. Prior to version 0.1.7, a path traversal vulnerability in shame next allows an attacker-controlled shamefile.yaml to disclose contents of files outside the repository, one line at a time, to the terminal of a user who runs the command. See...

CVE-2026-46671 Rust OneNote File Parser: Path traversal in `Parser::parse_notebook` allows reading files outside the notebook directory

Rust OneNote File Parser is a parser for Microsoft OneNote files implemented in Rust. Prior to version 1.1.1, a maliciously crafted .onetoc2 table-of-contents file can cause Parser::parsenotebook to open arbitrary files on the host filesystem outside the notebook's directory. The parser reads ent...

CVE-2026-12283

CVE-2026-12283 affects Amazon Athena Query Federation's Synapse connector (aws-athena-query-federation) v2022.20.1–v2026.19.1. The issue is improper neutralization of elements in an SQL command within the Synapse connector, which could let an authenticated remote user execute injected read-only S...