EEF-CVE-2026-77454 exists/2 predicate silently dropped on limited relationships with a parent() filter in AshSql

Summary Incorrect Authorization vulnerability in ash-project ashsql allows a caller to bypass a scoping or authorization filter expressed as exists/2 over a relationship that declares both a limit or frommany? and a parent...-referencing filter or sort. AshSql.Join.relatedquery/3 skips the...

CVE-2026-77454

CVE-2026-77454 is an Incorrect Authorization vulnerability in the ash-project ash_sql Elixir package, affecting versions 0.4.1 through 0.7.0 . The root cause lies in AshSql.Join.related_query/3: when a relationship declares both a limit (or from_many?) and a parent(...)-referencing filter or sort...

CVE-2026-77454 exists/2 predicate silently dropped on limited relationships with a parent() filter in AshSql

Incorrect Authorization vulnerability in ash-project ashsql allows a caller to bypass a scoping or authorization filter expressed as exists/2 over a relationship that declares both a limit or frommany? and a parent...-referencing filter or sort. AshSql.Join.relatedquery/3 skips the caller-supplie...

CVE-2026-77454 exists/2 predicate silently dropped on limited relationships with a parent() filter in AshSql

Incorrect Authorization vulnerability in ash-project ashsql allows a caller to bypass a scoping or authorization filter expressed as exists/2 over a relationship that declares both a limit or frommany? and a parent...-referencing filter or sort. AshSql.Join.relatedquery/3 skips the caller-supplie...

PT-2026-83544

Name of the Vulnerable Software and Affected Versions ash sql versions 0.4.1 through 0.7.0 Description An incorrect authorization issue allows a caller to bypass scoping or authorization filters expressed as exists/2 over a relationship that declares both a limit or from many? and a filter or sor...

EUVD-2026-42990

Snipe-IT's API Location Creation Bypasses FMCS Parent-Child Company Boundary Validation...

CVE-2026-55064 Vikunja incomplete fix for CVE-2026-35595: Write-only user can detach shared project from parent hierarchy via parent_project_id=0

Vikunja is an open-source self-hosted task management platform. From 2.3.0 until 2.4.0, a user with Write but not Admin permission on a shared child project can detach it from its parent hierarchy by submitting parentprojectid equal to 0 to POST /api/v1/projects/project. The Project.CanUpdate...

EUVD-2026-67831

Vikunja is an open-source self-hosted task management platform. From 2.3.0 until 2.4.0, a user with Write but not Admin permission on a shared child project can detach it from its parent hierarchy by submitting parentprojectid equal to 0 to POST /api/v1/projects/project. The Project.CanUpdate...

CVE-2026-54766

Vikunja , an open-source self-hosted task management platform, has an authorization bypass in its project duplication endpoint (PUT /api/v1/projects/{project}/duplicate). The flaw in ProjectDuplicate.CanCreate (pkg/models/project_duplicate.go) calls parent.CanCreate on an unhydrated Project struc...

CVE-2026-80597

In the Linux kernel, the following vulnerability has been resolved: mtd: maps: vmu-flash: fix NULL pointer dereference in initialization The mtdinfo contains a struct device, which must be linked to its parent. Without this, the initialization of the MTD fails with a NULL pointer dereference...

CVE-2026-80630

CVE-2026-80630 is a vulnerability in the Linux kernel's fq_codel traffic control qdisc (net/sched/sch_fq_codel). During the peek operation, the code calls qdisc_tree_reduce_backlog before reincrementing qlen. If qlen momentarily drops to zero while peek still returns a packet, the parent qdisc's ...

CVE-2026-80597

CVE-2026-80597 affects the Linux kernel 's mtd: maps: vmu-flash driver. During MTD initialization, the mtd_info structure's embedded struct device was not linked to its parent, causing a NULL pointer dereference that failed the MTD initialization process. The fix ensures the device is properly li...

PT-2026-83229

Name of the Vulnerable Software and Affected Versions Vikunja versions 0.21.0 through 2.3.0 Description An authorization bypass exists in the project duplication process. An authenticated user with read access to a source project can duplicate it and place the copy under any arbitrary target pare...

PT-2026-83231

Name of the Vulnerable Software and Affected Versions Vikunja versions 2.3.0 through 2.3.0-246-9852aff4 Description A user with Write but not Admin permissions on a shared child project can detach that project from its parent hierarchy. This is possible by submitting a parent project id value of ...

CVE-2026-81668

Katello (also tracked as rubygem-katello ) contains an authorization flaw in the Content View Filter Rules API . The API does not properly enforce authorization on the parent Content View Filter , allowing an authenticated, low-privileged user with Content View permissions in one organization to ...

CVE-2026-81668 Rubygem-katello: cross-tenant content view filter rule access and modification via unauthorized parent filter lookup

A flaw was found in Katello where the Content View Filter Rules API does not properly enforce authorization on the parent Content View Filter. An authenticated, low-privileged user with Content View permissions in one organization may be able to access and modify filter rules belonging to a Conte...

EUVD-2026-42399

asyncssh has SCP Path Traversal to Arbitrary File Write...

net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...

PT-2026-82113

Name of the Vulnerable Software and Affected Versions IzPack versions 5.2.6 and earlier Description IzPack is a tool for packaging Java applications as cross-platform installers. The unpack function within the UnpackerBase class fails to properly validate the targetPath of pack-file entries...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: file-roller (UTSA-2026-030639)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-030639 advisory. fr-archive-libarchive.c in GNOME file-roller through 3.36.1 allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a...