CVE-2026-89148 AVideo Open Redirect via playlistSort.php Referer Header

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains an open redirect in objects/playlistSort.php. Because the endpoint is not a .json.php script, AVideo's automatic CSRF guard autoCSRFGuard/forbidIfIsUntrustedRequest does not run, and when the request includes the sort paramet...

CVE-2026-49837

A flaw was found in GoBGP, an open-source Border Gateway Protocol BGP implementation. A remote attacker could send a specially crafted BGP OPEN message, causing the BGP OPEN capability parser to misinterpret data. This issue arises because the parser may read capability values beyond their declar...

GHSA-23W6-3W8W-8484 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-JP53-MHQP-8XCG vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-763M-79HH-57F2 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-84311 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-84310 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-84309 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-23W6-3W8W-8484 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-763M-79HH-57F2 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-JP53-MHQP-8XCG vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-84311 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-84310 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-84309 vulnerabilities

Vulnerabilities for packages: open-webui...

appsandbox v0.1.5

App Sandbox App Sandbox is a virtual machine app for Windows and macOS that's focused on performance and ease of use. Windows features: Works on Windows 11 Home or Pro, without Hyper-V Windows 11 or Ubuntu 26.04 LTS VM Support Zero touch install Copy and Paste 2 Channel Audio GPU Acceleration via...

BIT-TOMCAT-2026-68569 Apache Tomcat: Principal lookup can fail open in some cases

Improper Authentication vulnerability in Apache Tomcat meant that in some circumstances e.g. CLIENT-CERT, SPNEGO that a user would be authenticated even if the user did not exist in the DataSourceRealm. This issue affects Apache Tomcat: from 11.0.0 through 11.0.24, from 10.1.0 through 10.1.57, fr...

BIT-TOMCAT-2026-25854 Apache Tomcat: Occasionally open redirect

Occasional URL redirection to untrusted Site 'Open Redirect' vulnerability in Apache Tomcat via the LoadBalancerDrainingValve. This issue affects Apache Tomcat: from 11.0.0 through 11.0.18, from 10.1.0 through 10.1.52, from 9.0.0 through 9.0.115, from 8.5.30 through 8.5.100. Other, unsupported...

Security Bulletin: IBM Cloud Pak for Data is vulnerable to denial of service and open redirect due to urllib3 (CVE-2025-50181, CVE-2025-66418, CVE-2025-66471)

Summary Potential vulnerabilities in urllib3 package CVE-2025-50181, CVE-2025-66418, CVE-2025-66471 has been identified that may affect IBM Cloud Pak for Data. Vulnerability Details CVEID:CVE-2025-50181 DESCRIPTION: urllib3 is a user-friendly HTTP client library for Python. Prior to 2.5.0, it is...

authentik version/2026.8.2

What is authentik? authentik is an open-source Identity Provider IdP for modern SSO. It supports SAML, OAuth2/OIDC, LDAP, RADIUS, and more, designed for self-hosting from small labs to large production clusters. Our enterprise offering is available for organizations to securely replace existing...

CVE-2026-87013

creationtimestamp| type| source ---|---|--- 2026-09-11 00:35:38+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-8r35-5x5r-hv74 2026-09-11 15:31:47+00:00| seen| https://gist.github.com/alon710/b936d0e8b1b08a24ad813407363272e8...