EUVD-2026-17903

ByteDance Deer-Flow versions prior to commit 92c7a20 contain a sandbox escape vulnerability in bash tool handling that allows attackers to execute arbitrary commands on the host system by bypassing regex-based validation using shell features such as directory changes and relative paths. Attackers...

CVE-2026-4829

Devolutions Server versions 2026.1.11 and earlier are vulnerable to an improper authentication flaw in the external OAuth authentication flow. The root cause is the reuse of a session code from an external authentication flow, which allows an authenticated user to bypass security controls and aut...

CVE-2026-4829

Improper authentication in the external OAuth authentication flow in Devolutions Server 2026.1.11 and earlier allows an authenticated user to authenticate as other users, including administrators, via reuse of a session code from an external authentication flow...

CVE-2026-34430

ByteDance DeerFlow versions prior to commit 92c7a20 contain a sandbox escape vulnerability in bash tool handling that allows attackers to execute arbitrary commands on the host system by bypassing regex-based validation using shell features such as directory changes and relative paths. Attackers...

CVE-2026-0522

A local file inclusion vulnerability in the upload/download flow of the VertiGIS FM application allows authenticated attackers to read arbitrary files from the server by manipulating a file's path during its upload. When the file is subsequently downloaded, the file in the attacker controlled pat...

CVE-2025-71278

XenForo before 2.3.5 allows OAuth2 client applications to request unauthorized scopes. This affects any customer using OAuth2 clients on any version of XenForo 2.3 prior to 2.3.5, potentially allowing client applications to gain access beyond their intended authorization level...

PT-2026-29537

Improper authentication in the external OAuth authentication flow in Devolutions Server 2026.1.11 and earlier allows an authenticated user to authenticate as other users, including administrators, via reuse of a session code from an external authentication flow...

PT-2026-29568

Notesnook is a note-taking app focused on user privacy & ease of use. Prior to version 3.3.17, a stored XSS vulnerability exists in the mobile share / web clip flow because attacker-controlled clip metadata is concatenated into HTML without escaping and then rendered with innerHTML inside the...

CVE-2026-34749: Cross-Site Request Forgery (CSRF)

Payload is a free and open source headless content management system. Prior to version 3.79.1, a Cross-Site Request Forgery CSRF vulnerability exists in the authentication flow. Under certain conditions, the configured CSRF protection could be bypassed, allowing cross-site requests to be made. Th...

PT-2026-29832

Name of the Vulnerable Software and Affected Versions: Nhost versions prior to 0.48.0 Description: Nhost's auth service OAuth provider callback flow includes the refresh token directly in the redirect URL as a query parameter. This can lead to exposure of the refresh token in browser history,...

PT-2026-29597

Name of the Vulnerable Software and Affected Versions Payload versions prior to 3.79.1 Description A Cross-Site Request Forgery CSRF issue existed in the authentication process. In certain scenarios, the configured CSRF protection could be bypassed, enabling unauthorized cross-site requests. The...

CVE-2026-34456: Improper Access Control

Reviactyl is an open-source game server management panel built using Laravel, React, FilamentPHP, Vite, and Go. From version 26.2.0-beta.1 to before version 26.2.0-beta.5, a vulnerability in the OAuth authentication flow allowed automatic linking of social accounts based solely on matching email...

CVE-2026-31946

OpenOlat is an open source web-based e-learning platform for teaching, learning, assessment and communication. From version 10.5.4 to before version 20.2.5, OpenOLAT's OpenID Connect implicit flow implementation does not verify JWT signatures. The JSONWebToken.parse method silently discards the...

agent-mcp-server (0.0.4.0), beads-mcp (>=0.30.1, <=0.47.1) +10 more potentially affected by CVE-2026-32871 via fastmcp (2.14.1)

fastmcp PYPI version 2.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - agent-mcp-server 0.0.4.0 - beads-mcp =0.30.1, =1.36.5, =0.2.0, =0.0.3, =0.11.0, =0.1.14, =8.5.0, =0.3.1, =0.2.0, =0.2.6 Source cves: CVE-2026-328...

cratedb-mcp (0.0.3), figma-to-compose-mcp (>=0.1.0, <=1.1.1) +7 more potentially affected by CVE-2026-27124 via fastmcp (2.6.1)

fastmcp PYPI version 2.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - cratedb-mcp 0.0.3 - figma-to-compose-mcp =0.1.0, =0.1.0, =0.1.0, =0.0.2, =1.0.0, =3.0.0, =3.0.2 Source cves: CVE-2026-27124 Source advisory:...

FastMCP: Missing Consent Verification in OAuth Proxy Callback Facilitates Confused Deputy Vulnerabilities

Summary While testing the GitHubProvider OAuth integration, which allows authentication to a FastMCP MCP server via a FastMCP OAuthProxy using GitHub OAuth, it was discovered that the FastMCP OAuthProxy does not properly validate the user's consent upon receiving the authorization code from GitHu...

agent-mcp-server (0.0.4.0), beads-mcp (>=0.30.1, <=0.47.1) +10 more potentially affected by CVE-2026-27124 via fastmcp (2.14.1)

fastmcp PYPI version 2.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - agent-mcp-server 0.0.4.0 - beads-mcp =0.30.1, =1.36.5, =0.2.0, =0.0.3, =0.11.0, =0.1.14, =8.5.0, =0.3.1, =0.2.0, =0.2.6 Source cves: CVE-2026-271...

agent-mcp-server (0.0.4.0), beads-mcp (>=0.30.1, <=0.47.1) +10 more potentially affected by CVE-2025-64340 via fastmcp (2.14.1)

fastmcp PYPI version 2.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - agent-mcp-server 0.0.4.0 - beads-mcp =0.30.1, =1.36.5, =0.2.0, =0.0.3, =0.11.0, =0.1.14, =8.5.0, =0.3.1, =0.2.0, =0.2.6 Source cves: CVE-2025-643...

cratedb-mcp (0.0.3), figma-to-compose-mcp (>=0.1.0, <=1.1.1) +7 more potentially affected by CVE-2025-64340 via fastmcp (2.6.1)

fastmcp PYPI version 2.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - cratedb-mcp 0.0.3 - figma-to-compose-mcp =0.1.0, =0.1.0, =0.1.0, =0.0.2, =1.0.0, =3.0.0, =3.0.2 Source cves: CVE-2025-64340 Source advisory:...

layer-client (0.3.6), odahu-flow-mlflow-runner (1.4.0rc1) potentially affected by CVE-2026-0596 via mlflow (1.12.0)

mlflow PYPI version 1.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - layer-client 0.3.6 - odahu-flow-mlflow-runner 1.4.0rc1 Source cves: CVE-2026-0596 Source advisory: OSV:GHSA-RVHJ-8CHJ-8V3C...