EUVD-2026-66194

Doorkeeper OpenID Connect implements an OpenID Connect authentication provider for Rails applications on top of Doorkeeper. Prior to 1.10.4, the Dynamic Client Registration DCR endpoint persists client-supplied scopes without validating them against the server's configured scope set. Under certai...

CVE-2026-70665

Doorkeeper OpenID Connect implements an OpenID Connect authentication provider for Rails applications on top of Doorkeeper. Prior to 1.10.4, the Dynamic Client Registration DCR endpoint persists client-supplied scopes without validating them against the server's configured scope set. Under certai...

EUVD-2026-65698

Coroot's unauthenticated MCP OAuth dynamic client registration endpoint accepts any syntactically valid redirect URI without validation, allowing attackers to register clients pointing to attacker-controlled hosts. Attackers can send authorization URLs to signed-in users, capture their...

CVE-2026-79786 Coroot 1.20.2 through 1.24.5 Unvalidated Redirect URI in MCP OAuth Client Registration

Coroot's unauthenticated MCP OAuth dynamic client registration endpoint accepts any syntactically valid redirect URI without validation, allowing attackers to register clients pointing to attacker-controlled hosts. Attackers can send authorization URLs to signed-in users, capture their...

CVE-2026-79786

Coroot's unauthenticated MCP OAuth dynamic client registration endpoint accepts any syntactically valid redirect URI without validation, allowing attackers to register clients pointing to attacker-controlled hosts. Attackers can send authorization URLs to signed-in users, capture their...

BIT-KEYCLOAK-2026-16102 Keycloak-services: keycloak-services: default dcr policy allows role forgery via user property mappers

A flaw was found in the Dynamic Client Registration DCR component of Keycloak, an identity and access management solution. The default DCR policy fails to properly validate the claim path for User Property mappers, allowing them to write values to sensitive internal claim locations. An attacker...

BIT-KEYCLOAK-2026-15572 Keycloak-services: keycloak-services: dcr protocol mapper type-swap policy bypass allows privilege escalation

A flaw was found in Keycloak's Dynamic Client Registration DCR security policy management. The "Allowed Protocol Mapper Types" policy, which restricts which types of data mappers a client can use, fails to re-validate the mapper type during a client update if the mapper's configuration remains...

Privilege Escalation

Keycloak is vulnerable to Improper Authorization. The vulnerability is due to the Dynamic Client Registration policy failing to re-validate protocol mapper types during client updates, allowing an attacker with client registration privileges to replace an allowed mapper with a restricted...

SUSE CVE-2026-74426

In the Linux kernel, the following vulnerability has been resolved: afs: fix NULL pointer dereference in afsgettree afsallocsbi uses kzalloc for memory allocation. And, if ctx-dynroot is not null, as-cell and as-volume are null. In traceafsgettree they are dereferenced. KASAN error message: KASAN...

The vulnerability of the UMTS FP protocol analyzer, a traffic analysis tool for computer networks by Wireshark, allows a hacker to cause a service failure.

The vulnerability of the UMTS FP protocol analyzer, a traffic analysis tool for computer networks developed by Wireshark, is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow attackers to cause service interruptions...

The vulnerability of the function batadv_tt_prepare_tvlv_global_data() in the module net/batman-adv/translation-table.c, which is part of the network functions of the Linux operating system’s kernel, allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the function batadvttpreparetvlvglobaldata in the module net/batman-adv/translation-table.c, which is part of the networking functions of the Linux kernel, is related to buffer overflows in dynamic memory. Exploiting this vulnerability could allow an attacker to compromise th...

The vulnerability of the SSH protocol analyzer, a traffic analysis tool for computer networks developed by Wireshark, allows a hacker to cause a service failure.

The vulnerability of the SSH protocol analyzer and the network traffic analyzer in Wireshark is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a attacker to cause a service failure...

The vulnerability of the btusb_work() function in the drivers/bluetooth/btusb.c module of the Linux Bluetooth device driver allows a attacker to cause a service failure.

The vulnerability of the btusbwork function in the drivers/bluetooth/btusb.c module of the Linux Bluetooth device driver lies in a buffer overflow in the dynamic memory. Exploiting this vulnerability could allow an attacker to cause a system failure...

ROS-20260825-73-0012

The vulnerability in the kernel-lt is related to insufficient control of resources with dynamic management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Catapult DCT2000 file parser, a network traffic analyzer from Wireshark, allows a hacker to trigger a service failure.

The vulnerability of the Catapult DCT2000 file parser and the Wireshark network traffic analyzer is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow attackers to cause service failures...

CVE-2026-70665: Improper Authorization

Doorkeeper OpenID Connect implements an OpenID Connect authentication provider for Rails applications on top of Doorkeeper. Prior to 1.10.4, the Dynamic Client Registration DCR endpoint persists client-supplied scopes without validating them against the server's configured scope set. Under certai...

CVE-2026-44476: Improper Authentication

Doorkeeper is an OAuth 2 provider for Ruby on Rails. In version 1.9.0, an attacker who knows only a dynamically registered client's clientid, which is public information, can authenticate as that client at the token endpoint and obtain an access token without providing its clientsecret. This occu...

PT-2026-81890

Name of the Vulnerable Software and Affected Versions Doorkeeper OpenID Connect versions prior to 1.10.4 Description The Dynamic Client Registration DCR endpoint persists client-supplied scopes without validating them against the server's configured scope set. In the...

Malicious code in react-dynamic-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 42a28d8e2db013cbd481bb7864f1ff983b95554d94bd4a3d7199d37899f46550 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-14415 Malicious code in react-dynamic-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 42a28d8e2db013cbd481bb7864f1ff983b95554d94bd4a3d7199d37899f46550 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...