GHSA-W2Q5-6Q6X-X959 vulnerabilities

Vulnerabilities for packages: etcd, grafana-alloy-fips, hcloud, yunikorn-web-fips, nri-rabbitmq-fips, cosign, aws-lambda-runtime-interface-emulator-fips, crossplane-provider-aws-route53resolver-fips, vendir-fips, crossplane-provider-gcp-beta-compute, helm-operator-fips, wave-fips, pluto, teleport...

GHSA-H3RR-9WQJ-V3C6 AstrBot has Incomplete Filtering of Special Elements

A security flaw has been discovered in AstrBotDevs AstrBot up to 4.22.1. This affects the function createtemplate of the file astrbot/dashboard/routes/t2i.py of the component Dashboard API. The manipulation results in improper neutralization of special elements used in a template engine. The atta...

CVE-2026-6984

AstrBotDevs AstrBot up to version 4.22.1 contains a vulnerability in the Dashboard API, specifically in the create_template function (astrbot/dashboard/routes/t2i.py). The issue is improper neutralization of special elements used in the template engine, enabling remote execution. Public exploit i...

EUVD-2026-25660

A security flaw has been discovered in AstrBotDevs AstrBot up to 4.22.1. This affects the function createtemplate of the file astrbot/dashboard/routes/t2i.py of the component Dashboard API. The manipulation results in improper neutralization of special elements used in a template engine. The atta...

CVE-2026-6984: Improper Neutralization of Special Elements Used in a Template Engine

A security flaw has been discovered in AstrBotDevs AstrBot up to 4.22.1. This affects the function createtemplate of the file astrbot/dashboard/routes/t2i.py of the component Dashboard API. The manipulation results in improper neutralization of special elements used in a template engine. The atta...

CVE-2026-40089

Sonicverse is a Self-hosted Docker Compose stack for live radio streaming. The Sonicverse Radio Audio Streaming Stack dashboard contains a Server-Side Request Forgery SSRF vulnerability in its API client apps/dashboard/lib/api.ts. Installations created using the provided install.sh script includi...

CVE-2026-32289 vulnerabilities

Vulnerabilities for packages: cluster-autoscaler, boring-registry, caddy, tetragon, juicefs-csi-driver, splunk-otel-collector, contour, docker-cli-buildx, temporal, vault-env, x509-certificate-exporter, aactl, kyverno-policy-reporter-ui, lvm-driver, newrelic-infrastructure-agent, tkn, otel-cli, g...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: cluster-autoscaler, boring-registry, caddy, tetragon, juicefs-csi-driver, splunk-otel-collector, contour, docker-cli-buildx, temporal, vault-env, x509-certificate-exporter, aactl, kyverno-policy-reporter-ui, lvm-driver, newrelic-infrastructure-agent, tkn, otel-cli, g...

CVE-2026-40089 Sonicverse has Server-Side Request Forgery via user-controlled URLs in dashboard API client

Sonicverse is a Self-hosted Docker Compose stack for live radio streaming. The Sonicverse Radio Audio Streaming Stack dashboard contains a Server-Side Request Forgery SSRF vulnerability in its API client apps/dashboard/lib/api.ts. Installations created using the provided install.sh script includi...

PT-2026-31718

Name of the Vulnerable Software and Affected Versions Sonicverse versions prior to commit cb1ddbacafcb441549fe87d3eeabdb6a085325e4 Description The Sonicverse Radio Audio Streaming Stack dashboard contains a Server-Side Request Forgery SSRF vulnerability in its API client apps/dashboard/lib/api.ts...

EUVD-2026-19517

Directus is a real-time API and App dashboard for managing SQL database content. Prior to 11.16.0, a Server-Side Request Forgery SSRF protection bypass has been identified and fixed in Directus. The IP address validation mechanism used to block requests to local and private networks could be...

Unspecified Vulnerability in StudioCMS (CNVD-2026-18154)

StudioCMS is StudioCMS open source a content management system . A denial of service vulnerability exists in StudioCMS. The vulnerability stems from insufficient DELETE /studiocmsapi/dashboard/api-tokens endpoint validation, which can be exploited by an attacker to cause a denial of service...

Unspecified Vulnerability in StudioCMS (CNVD-2026-18153)

StudioCMS is StudioCMS open source a content management system . StudioCMS has an authorization issue vulnerability that originates from improper authorization of the /studiocmsapi/dashboard/api-tokens endpoint, which can be exploited by an attacker to cause elevation of privilege...

GHSA-WJ56-G96R-673Q StudioCMS: REST API Missing Rank Check Allows Admin to Create Peer Admin Accounts

Summary The REST API createUser endpoint uses string-based rank checks that only block creating owner accounts, while the Dashboard API uses indexOf-based rank comparison that prevents creating users at or above your own rank. This inconsistency allows an admin to create additional admin accounts...

CVE-2026-32106: Improper Privilege Management

StudioCMS is a server-side-rendered, Astro native, headless content management system. Prior to 0.4.3, the REST API createUser endpoint uses string-based rank checks that only block creating owner accounts, while the Dashboard API uses indexOf-based rank comparison that prevents creating users at...

CVE-2026-30945

CVE-2026-30945 : StudioCMS prior to 0.4.0 exposes an authorization flaw in DELETE /studiocms_api/dashboard/api-tokens. Any authenticated user with editor privileges or above can revoke API tokens for any user (including admin/owner) because tokenID and userID are taken directly from the request w...

CVE-2026-30945: Authorization Bypass Through User-Controlled Key

StudioCMS is a server-side-rendered, Astro native, headless content management system. Prior to 0.4.0, the DELETE /studiocmsapi/dashboard/api-tokens endpoint allows any authenticated user with editor privileges or above to revoke API tokens belonging to any other user, including admin and owner...

CVE-2026-30233

OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.11.1, an authorization flaw in OliveTin allows authenticated users with view: false permission to enumerate action bindings and metadata via dashboard and API endpoints. Although execution exec may be...

CVE-2025-61728 vulnerabilities

Vulnerabilities for packages: thanos-operator-fips, etcd, azure-aad-pod-identity-mic, localstack, prometheus-mongodb-exporter, rancher-agent, kubernetes-dashboard-api, syncthing, opensearch-k8s-operator-fips, external-dns, cosign, tigera-operator, runc, elastic-agent, eksctl, falco-no-driver,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, splunk-otel-collector, temporal, nri-mssql, aactl, newrelic-infrastructure-agent, otel-cli, helm-push, metrics-agent, gitness, dask-gateway, promxy, nri-redis, terraform, newrelic-infra-operator, fuse-overlayfs-snapshotter, multus-cni,...