Malware in @rclaude/win32-x64

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

compose-lint: File paths embedded in pull requests can inject CI workflow commands through command-line error messages 

Impact 0.31.0 fixed GHSA-6f4g-xm8v-pgv6, where text from a Compose file became GitHub Actions workflow commands in compose-lint's output. The fix escapes the command openers in compose-lint's own output, but not in the argument parser's error messages. When a repository path reaches compose-lint'...

 compose-lint: Workflow command injection through SARIF-directory errors triggered by pull request symlinks 

Impact In Action tags v0.30.0 and v0.31.0, when sarif-file: names a file in a subdirectory that can't be created, the Action prints the directory's resolved path in an error message. In v0.31.0 that message is outside the window in which the Action turns command processing off, and v0.30.0 has no...

compose-lint: Text in a pull request can issue CI workflow commands through JSON and SARIF output on stdout

Impact 0.31.0 fixed GHSA-6f4g-xm8v-pgv6, where text from a Compose file became GitHub Actions workflow commands in compose-lint's output. --format json and --format sarif output never passed through that fix, so inside a service name or other value reaches the log intact when the output is printe...

Active Storage: Possible arbitrary file read and remote code execution in video previews, analysis and image processing

Impact ActiveStorage::Blobopen writes a blob to a tempfile whose name carries the extension of the uploaded filename, and hands that path to ffprobe VideoAnalyzer, AudioAnalyzer, ffmpeg VideoPreviewer and ImageMagick ImageAnalyzer, the :minimagick variant processor. These tools select a decoder...

Active Storage: Possible circumvention of file size limits in Active Storage direct uploads to Google Cloud Storage

Impact ActiveStorage::Service::GCSServiceurlfordirectupload does not bind the declared content length into the signed direct-upload URL, and headersfordirectupload returns no length constraint, so the URL authorizes an upload body of any size. A direct-upload client could store a file larger than...

Active Support: Possible DoS vulnerability in Active Support safe_constantize

Impact When constant lookup raises LoadError, ActiveSupport::Inflectorsafeconstantize and Stringsafeconstantize builds a regular expression from the requested constant name without escaping it, so a caller that passes untrusted input lets the attacker choose the source of a pattern that the...

Duplicate Advisory: Microsoft Security Advisory CVE-2026-120792 - Aspire Information Disclosure Vulnerability

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-q6jf-24jf-m3cg. This link is maintained to preserve external references. Original Description Insertion of sensitive information into log file in .NET Aspire allows an authorized attacker to disclose information...

Duplicate Advisory: Microsoft Security Advisory CVE-2026-120778 - Aspire Elevation of Privilege Vulnerability

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-m63f-xhvm-6mv5. This link is maintained to preserve external references. Original Description Creation of temporary file in directory with insecure permissions in .NET Aspire allows an authorized attacker to...

Active Storage: Possible DoS vulnerability in Active Storage filename handling

Impact ActiveStorage::Filenamebase and extensionwithdelimiter, and therefore extension, pass the stored filename unmodified to File.basename and File.extname, which raise ArgumentError when the name contains a NUL byte. Active Storage stores the client-supplied filename verbatim, so a user who is...

Duplicate Advisory: Microsoft Security Advisory CVE-2026-118745 - Visual Studio Remote Code Execution Vulnerability

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-x8x8-p968-x646. This link is maintained to preserve external references. Original Description Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network...

Duplicate Advisory: Microsoft Security Advisory CVE-2026-114158 - Visual Studio Remote Code Execution Vulnerability

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-r8h3-p8p6-ggp7. This link is maintained to preserve external references. Original Description Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network...

Duplicate Advisory: Microsoft Security Advisory CVE-2026-114157 - ASP.NET Core Security Feature Bypass Vulnerability

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-7phj-vgxq-r67h. This link is maintained to preserve external references. Original Description Concurrent execution using shared resource with improper synchronization 'race condition' in ASP.NET Core allows an...

Duplicate Advisory: Microsoft Security Advisory CVE-2026-114154 - ASP.NET Core Denial of Service Vulnerability

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-3893-7fxc-qvff. This link is maintained to preserve external references. Original Description Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network...

Duplicate Advisory: Microsoft Security Advisory CVE-2026-114152 - Visual Studio Remote Code Execution Vulnerability

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-xf35-v9jh-g65w. This link is maintained to preserve external references. Original Description Stack-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network...

Duplicate Advisory: Microsoft Security Advisory CVE-2026-114156 - ASP.NET Core Security Feature Bypass Vulnerability

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-8w29-6cjc-h6w4. This link is maintained to preserve external references. Original Description Improper input validation in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network...

Duplicate Advisory: Microsoft Security Advisory CVE-2026-114159 - Visual Studio Remote Code Execution Vulnerability

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-3cgx-w6gm-fqrx. This link is maintained to preserve external references. Original Description Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network...

Duplicate Advisory: Microsoft Security Advisory CVE-2026-114151 - Visual Studio Remote Code Execution Vulnerability

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-fpxj-5c99-g7vj. This link is maintained to preserve external references. Original Description Deserialization of untrusted data in Visual Studio allows an unauthorized attacker to execute code over a network...

Duplicate Advisory: Microsoft Security Advisory CVE-2026-114147 - ASP.NET Core Denial of Service Vulnerability

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-wr8v-9x5q-ggcm. This link is maintained to preserve external references. Original Description Missing release of memory after effective lifetime in ASP.NET Core allows an unauthorized attacker to deny service ov...

Duplicate Advisory: Microsoft Security Advisory CVE-2026-109478 - ASP.NET Core Denial of Service Vulnerability

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-r3qf-p3jm-8h4p. This link is maintained to preserve external references. Original Description Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network...

Duplicate Advisory: Microsoft Security Advisory CVE-2026-105544 - .NET Elevation of Privilege Vulnerability

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-6856-87hx-p5x7. This link is maintained to preserve external references. Original Description Improper access control in .NET allows an authorized attacker to elevate privileges locally...

Action Mailbox: Possible signature replay in Action Mailbox Mailgun ingress

Impact The Action Mailbox Mailgun ingress authenticates a request with an HMAC of the timestamp and token parameters concatenated without a separator, and ActionMailbox::Ingresses::Mailgun::InboundEmailsController::Authenticatorrecent? rejects only timestamps more than 2 minutes in the past...

Active Support: Possible XSS vulnerability in Active Support MessagePack serializer

Impact ActiveSupport::MessagePack serializes an ActiveSupport::SafeBuffer as its bytes alone and deserializes it as a new SafeBuffer, so a buffer that is no longer htmlsafe? for example, one mutated in place with gsub! is restored as htmlsafe. If such a buffer holds untrusted input and is stored...

Action Pack: Possible cache poisoning in Action Pack content negotiation

Impact Action Pack negotiates the format of a rendered response from the Accept, X-Requested-With and, for XHR requests without Accept, Content-Type request headers, but ActionController::Renderingsetvaryheader adds Vary: Accept only when the request carries a usable Accept header and the respons...

Action Pack: Missing SameSite attribute on session cookies from Action Pack session stores

Impact Action Pack session stores other than ActionDispatch::Session::CookieStore CacheStore, MemCacheStore, and third-party stores built on AbstractStore, AbstractSecureStore or the session mixins write the session cookie without a SameSite attribute, regardless of...

Active Storage: Possible DoS vulnerability in Active Storage proxy mode via storage errors during streaming

Impact When Active Storage serves a file through its proxy controllers, ActiveStorage::Streamingsendblobstream handles an error from the storage service by calling head to send a 404 or 500 response. If the error occurs after the first chunk has been written, the response is already committed, an...

Action Pack: Possible IP spoofing in Action Dispatch RemoteIp

Impact Since Rails 8.1.0, ActionDispatch::RemoteIp derives request.remoteip from Rack::Requestforwardedfor, which under Rack 3 reads the RFC 7239 Forwarded header in preference to X-Forwarded-For. When a reverse proxy appends the client address to X-Forwarded-For but passes a client-supplied...

Malware in react-svg-chunk

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Action Pack: Possible restoration of destroyed sessions in Action Dispatch CacheStore

Impact ActionDispatch::Session::CacheStore writes a session back to the cache at the end of each request that loaded it, without checking that the session's cache entry still exists. When a concurrent request destroys the session, through resetsession on logout or by deleting its cache entry on t...

Forge: Ed25519 signature verification accepts small-order public keys

Summary ed25519.verify does not reject public keys of small order, such as the identity point. Under such a key, a signature with S = 0 and a small-order R verifies for many messages, or for every message with the identity key, without any private key. Fixed in node-forge 1.4.3. Details...

Forge: TLS client crash on an unsupported ServerHello compression method

Summary A forge.tls client accepts any compression method in the ServerHello, although it only offers no compression. An unknown method makes connection.process throw an uncaught Error when the client handles ServerHelloDone, before the server is authenticated. A malicious server or an on-path...

Forge: ReDoS in forge.http response header and cookie trimming

forge.http trims response header and Set-Cookie values with the regular expression /\s$/, which takes quadratic time on a long run of whitespace followed by another character. A server or on-path attacker can block a forge.http client for minutes with one large response header. Fixed in node-forg...

Forge: TLS client crash on a handshake record received without a session

Summary A forge.tls client throws an uncaught TypeError from connection.process when it receives a ServerHello while it has no session: after a closenotify alert or a call to close, or before handshake is called. A malicious server or an on-path attacker can use this to terminate a Node.js proces...

fast-xml-parser: Quadratic CPU consumption scanning unterminated stop-node tags

Summary With the non-default stopNodes option, a stop node's body with many "" anywhere after makes readStopNodeData rescan the entire remaining input from every " exists - OrderedObjParser.js:812-818 — on failure, i isn't advanced, so the next lookahead is neither cached nor bounded — n copies o...

Mongoose: Discriminator key values matching inherited properties (e.g. __t: 'constructor') bypass schema casting and can poison collections

Summary Mongoose chooses which discriminator model or schema to use by looking up the discriminator key value t by default in a plain object of registered discriminators, for example Model.discriminatorsdoc.t. That value comes from user documents and query filters. Because the lookup did not chec...

Mongoose walks into inherited properties when hydrating, setting, and merging, allowing overwrites of built-in functions (denial of service) and shared schema state

Summary Three Mongoose code paths copy data into objects by property name without checking whether the property is the object's own or inherited from its prototype: 1. Loading a document from the database init, also used by Model.hydrate 2. Setting a dotted path on a document $set, used by new...

JRuby: NONET is bypassed for external DTDs and entities when the systemId uses a short-form IPv4 host

Summary On JRuby, the NONET parse option did not block an external DTD or entity whose system identifier used a short-form IPv4 host, such as http://127.1/ or http://169.254.43518/, or was an absolute path such as /x.dtd in a document parsed from a network URL. An application that parses untruste...

Nokogiri: Use-After-Free in Nokogiri when replacing an attribute value

Summary Nokogiri's CRuby native extension could leave a Ruby wrapper pointing to freed memory when replacing the value of an existing XML attribute via Nokogiri::XML::Node= or Nokogiri::XML::Nodelang=. If Ruby code had already accessed the attribute's child nodes, replacing the value could free...

Malware in health-relay-client

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Nokogiri: Mutation XSS through `noscript` content in Nokogiri's HTML5 serializer

Summary Nokogiri's HTML5 serializer did not escape text inside noscript elements, or inside attribute values. When a document parsed with the default options is serialized, a browser with scripting enabled can parse the output into markup that Nokogiri's parser never produced. This is a mutation...

Mongoose: Prototype pollution via Schema.prototype.virtual()

Summary Prototype pollution via Schema.prototype.virtual — the 2022 fix for CVE-2022-2564 / CVE-2022-24304 protected Schema.path/add but never virtual, so the same class of bug is still exploitable in all maintained release lines. Details In lib/schema.js, Schema.prototype.virtual defined at line...

Malware in commerce-utils

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @2oolkit/hyperliquid-cli

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in trgrip

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in typo-crypto

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Mongoose: Connection-level sanitizeFilter not applied

Summary sanitizeFilter exists to stop query selector injection: it wraps operator objects such as $ne: null in filter values in $eq, so they are matched literally. Set on a connection with mongoose.connect or createConnectionuri, sanitizeFilter: true , the connection reports it as enabled but...

Malware in text-regexer

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Mongoose: sanitizeFilter not applied on countDocuments

Impact sanitizeFilter is Mongoose's mechanism for protecting against query selector injection attacks. In older versions of Mongoose, sanitizeFilter was not applied for countDocuments queries. Patches Patches have been released for all supported Mongoose major release lines. Please upgrade to the...

Rack: Multipart parsing allows DoS via unbounded scan buffer growth

Summary Rack::Multipart::Parser reads the request body in chunks of rack.multipart.buffersize 1 MiB by default into an internal scan buffer. Parsed bytes are only discarded from that buffer when a chunk ends inside a part body. A request whose parts are sized so that every chunk ends inside, or...

Rack: Multipart boundary ambiguity guard in Rack::Multipart::Parser can be bypassed with a quoted boundary value, allowing WAF bypass

Summary The guard added for CVE-2026-26961 GHSA-vgpv-f759-9wx3, which rejects multipart requests with more than one boundary parameter, only inspects the part of the Content-Type header after the boundary it extracts. A Content-Type whose first boundary parameter is empty or begins with a quote,...