GHSA-38F8-5428-X5CV vulnerabilities

Vulnerabilities for packages: docker-selenium, hono, flyway-fips, kayenta-fips, camunda, wazuh-indexer, spark-kubernetes-operator, tez, akhq, logstash, management-api-for-apache-cassandra-4.1, druid, management-api-for-apache-cassandra-5.0, camunda-zeebe, kafbat-ui, kafka-bridge, opensearch-fips,...

GHSA-F89H-2FJH-2R9Q vulnerabilities

Vulnerabilities for packages: cargo-audit, starship...

CVE-2026-42878

creationtimestamp| type| source ---|---|--- 2026-05-07 19:43:24+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-vrxf-vrc4-22p7...

CVE-2026-44724

creationtimestamp| type| source ---|---|--- 2026-05-07 19:37:55+00:00| published-proof-of-concept| https://github.com/sebhildebrandt/systeminformation/security/advisories/GHSA-hvx9-hwr7-wjj9 2026-05-28 05:01:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmvaizrzqz26...

CVE-2026-44681

creationtimestamp| type| source ---|---|--- 2026-05-07 18:33:35+00:00| published-proof-of-concept| https://github.com/authlib/authlib/security/advisories/GHSA-r95x-qfjj-fjj2...

CVE-2026-45088

creationtimestamp| type| source ---|---|--- 2026-05-07 13:30:22+00:00| published-proof-of-concept| https://github.com/hahwul/dalfox/security/advisories/GHSA-35wr-x7v6-9fv2...

CVE-2026-45090

creationtimestamp| type| source ---|---|--- 2026-05-07 13:30:22+00:00| published-proof-of-concept| https://github.com/hahwul/dalfox/security/advisories/GHSA-2g4x-fq3j-cgq4...

CVE-2026-44346

creationtimestamp| type| source ---|---|--- 2026-05-07 10:39:30+00:00| published-proof-of-concept| https://github.com/bentoml/BentoML/security/advisories/GHSA-w2pm-x38x-jp44...

CVE-2026-42459

creationtimestamp| type| source ---|---|--- 2026-05-07 02:09:58+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-585v-hcgf-jhfr...

GHSA-V2V4-37R5-5V8G vulnerabilities

Vulnerabilities for packages: npm, code-server, renovate, lerna, saf, prism, sqlpad, tileserver-gl, kubeflow-pipelines, opensearch-dashboards, langfuse, pulumi...

CVE-2026-42082

creationtimestamp| type| source ---|---|--- 2026-05-07 01:56:13+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-vrrx-58h3-prmh...

CVE-2026-42081

creationtimestamp| type| source ---|---|--- 2026-05-07 01:53:47+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-77x9-rf64-92gv...

CVE-2026-44318

creationtimestamp| type| source ---|---|--- 2026-05-07 01:13:49+00:00| published-proof-of-concept| https://github.com/free5gc/free5gc/security/advisories/GHSA-27ph-8q4f-h7m7...

Cross-site Request Forgery (CSRF)

Overview misp-modules is a MISP modules are autonomous modules that can be used for expansion and other services in MISP Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF through the home blueprint, which was exempted from CSRF protection. An attacker can perform...

SQL Injection

Overview Affected versions of this package are vulnerable to SQL Injection via the processFuzzySearch function. An attacker can access and extract the entire database contents by supplying crafted input to the column parameter in the HTTP API, which is directly interpolated into raw SQL statement...

CVE-2026-45008

creationtimestamp| type| source ---|---|--- 2026-05-06 20:47:54+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-gh9p-q46p-57g2...

CVE-2026-46359

creationtimestamp| type| source ---|---|--- 2026-05-06 20:44:39+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-pm8c-3qq3-72w7...

CVE-2026-45009

creationtimestamp| type| source ---|---|--- 2026-05-06 20:37:42+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-jrc5-w569-h7h5...

CVE-2026-46360

creationtimestamp| type| source ---|---|--- 2026-05-06 20:18:48+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-whqh-9pq5-c7r3...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in the resetuserpassword and gympermissionsuseredit function when both the attacker and victim have gym=None. An attacker can gain unauthorized access to another user's account, obtain their new plaintext passwor...