ghost-cve-2026-26980

CVE-2026-26980 — Ghost CMS Content API SQL Injection Lab Unauthenticated blind SQL injection in Ghost CMS via the Content API's slug filter ordering mechanism, allowing arbitrary database reads from any Ghost instance without credentials. | ---|--- CVE| CVE-2026-26980 Advisory| GHSA-w52v-v783-gw9...

CVE-2026-128079

envd provides reproducible development environments for humans and agents. In versions starting with 0.3.38 and before 1.3.6, insufficient containment of host-side requirements-file reads in install.pythonpackagesrequirements=... could allow access to files outside the build context. An attacker...

Flowise 1.4.3 - Arbitrary File Read

Flowise 1.4.3 contains a path traversal caused by lack of sanitization of 'fileName' parameter in /api/v1/openai-assistants-file endpoint in index.ts, letting attackers read arbitrary files, exploit requires attacker to send crafted request. id: CVE-2024-36420 info: name: Flowise 1.4.3 - Arbitrar...

openssl: compat-openssl: openssl: Information disclosure via DTLS handshake retransmission

A flaw was found in OpenSSL. The Datagram Transport Layer Security DTLS retransmission mechanism fails to properly handle handshake message writes that are suspended before completion. A remote attacker could exploit this vulnerability during handshake message retransmission, causing OpenSSL to...

CVE-2026-123817

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, the WebSocket reader retains one bytes object for each transport read while reassembling an incomplete frame. A malicious peer can split a frame into many tiny reads so per-object overhead substantial...

SUSE CVE-2026-123817

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, the WebSocket reader retains one bytes object for each transport read while reassembling an incomplete frame. A malicious peer can split a frame into many tiny reads so per-object overhead substantial...

CVE-2026-114469

Out-of-bounds read can crash git-apply1 when binary patch inflates to very large size...

PT-2026-144996

Path traversal in Git allows writing to arbitrary file via cloning and committing to bad repository...

PT-2026-144997

Arbitrary data can be read or written through git-fast-import1 and git-fast-export1 features not marked unsafe...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via SFTPServer.mappath in asyncssh/sftp.py, which applies posixpath.normpath to a client-supplied path and then strips only a single leading slash before passing the result to posixpath.join with the configured chroo...

CVE-2026-102643

AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework. Prior to 2.24.1, SFTPServer.mappath uses posixpath.normpath on a client-supplied path and removes only one leading slash before passing the...

CVE-2026-102643 AsyncSSH: SFTPServer Chroot Escape

AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework. Prior to 2.24.1, SFTPServer.mappath uses posixpath.normpath on a client-supplied path and removes only one leading slash before passing the...

CVE-2026-102643 AsyncSSH: SFTPServer Chroot Escape

AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework. Prior to 2.24.1, SFTPServer.mappath uses posixpath.normpath on a client-supplied path and removes only one leading slash before passing the...

CVE-2026-102643

The AsyncSSH Python package (prior to version 2.24.1 ) contains a vulnerability in SFTPServer.map_path() where it fails to correctly handle client-supplied paths. The function uses posixpath.normpath() and only removes a single leading slash; however, a path starting with exactly two slashes rema...

openssl: compat-openssl: openssl: Information disclosure via DTLS handshake retransmission

A flaw was found in OpenSSL. The Datagram Transport Layer Security DTLS retransmission mechanism fails to properly handle handshake message writes that are suspended before completion. A remote attacker could exploit this vulnerability during handshake message retransmission, causing OpenSSL to...

PT-2026-141143

AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework. Prior to 2.24.1, SFTPServer.map path uses posixpath.normpath on a client-supplied path and removes only one leading slash before passing the...

CVE-2026-102523

MariaDB server is a community developed fork of MySQL server. From 10.11.1 until 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, ALTER TABLE ... CONVERT ... PARTITION does not apply filename encoding to user-specified partition names before using them in filesystem path construction. An...

CVE-2026-17299

IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to perform arbitrary file reads and server-side request forgery due to unrestricted resolution of external references. Externally referenced content in submitted definitions is not...

CVE-2026-17299

IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 are vulnerable to arbitrary file reads and server-side request forgery (SSRF) . The root cause is the unrestricted resolution of external references within submitted definitions, which are not sufficiently restricte...

EUVD-2026-118691

IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to perform arbitrary file reads and server-side request forgery due to unrestricted resolution of external references. Externally referenced content in submitted definitions is not...