GHSA-4642-5MCJ-2RQW Forge: ASN.1 OID first arc truncation in asn1.oidToDer

Summary asn1.oidToDer did not range-check the first two arcs of an OID string, so an OID such as 0.42.840.113549.1.1.1 or 4294977127.18.840.113549.1.1.1 was encoded as the DER of a different OID here rsaEncryption, 1.2.840.113549.1.1.1. This is an incomplete fix of CVE-2025-66030. Fixed in...

GHSA-6WVX-3R32-XMCG Forge: Prototype Pollution in forge.http cookie handling via a malicious Set-Cookie

Summary The forge.http client stored cookies from Set-Cookie response headers in a plain object keyed by cookie name and path. A malicious server could use the cookie name proto to add properties to Object.prototype, use inherited names such as constructor to add properties to Object, and send an...

GHSA-525V-9GP9-W22H Forge: TLS client crash when the server sends no certificate

Summary The forge TLS client's check for a missing server certificate read the wrong property and never ran. A malicious TLS server, or an on-path attacker who removes the server's Certificate message, can make connection.process throw a TypeError, which crashes applications that use the forge TL...

GHSA-7WCH-P9PX-956X Forge: Regular expression denial of service in PEM decoding (pem.decode)

Summary pem.decode, which every node-forge API that parses PEM input uses, split messages with a regular expression that takes polynomial time on input without a matching END line, and parsed encapsulated headers with regular expressions that take quadratic time on long header lines. A remote...

GHSA-H6CR-WJV9-3CPP Forge: Denial of Service via infinite loop in BigInteger.modInverse() with negative input (incomplete fix of CVE-2026-33891)

Summary BigInteger.prototype.modInverse in node-forge's bundled jsbn library enters an infinite loop when the value or the modulus is negative, for example when a negative public exponent is passed to forge.pki.rsa.generateKeyPair. This is an incomplete fix of CVE-2026-33891 GHSA-5m6q-g25r-mvwx,...

GHSA-4487-J8R4-4G2F Forge: verifyCertificateChain() removes trusted CA certificates with the same subject from the CA store

Summary When a CA store created by pki.createCaStore holds two or more certificates with the same subject name, pki.verifyCertificateChain permanently removes those certificates from the store while trying each one as the issuer. A peer can send any certificate that names that subject as its issu...

GHSA-5CWG-6VW7-RJ6P Forge: AES-GCM authentication bypass via unvalidated tagLength option

Summary The AES-GCM mode in forge.cipher does not validate the tagLength option passed to start. With a tagLength of 0 or a value that converts to 0 such as null, false, '' or '0', the authentication tag is empty, and decipher.finish returns true for any ciphertext and additional data when the...

GHSA-JC66-7Q78-782G Forge: PKCS#12 MAC forgery and constant-key PBE via zero iteration count

Summary forge.pkcs12.pkcs12FromAsn1 accepts a PKCS12 MAC iteration count of zero or less from the input, and the PKCS12 key derivation function then returns a constant key that does not depend on the password or salt. An attacker who does not know the password can modify a PKCS12/PFX file and...

GHSA-8HRF-8G6F-7XWP Forge: Denial of service in TLS record processing via a record interleaved with a fragmented handshake message

Summary A connection created with forge.tls.createConnection throws an uncaught TypeError from process when it receives a record of another content type while waiting for the rest of a handshake message that was split across records. A peer can trigger this with 18 bytes before the handshake,...

GHSA-HQQ3-7JHF-C5JX Forge: Denial of service in TLS record processing via call stack exhaustion

Summary Connections created with forge.tls.createConnection processed received TLS records recursively, one stack level per record. A peer can send one chunk of thousands of small records, such as heartbeat records, which are accepted before the handshake, and process throws RangeError: Maximum...

GHSA-5X38-2VFF-X55P Forge: X.509 basicConstraints bypass in verifyCertificateChain() via deprecated extension OIDs 2.5.29.10 and 2.5.29.13

Summary node-forge parses certificate extensions with the deprecated OIDs 2.5.29.10 and 2.5.29.13 as basicConstraints, and forge.pki.verifyCertificateChain used the first extension with that name. A certificate with a forged deprecated-OID extension cA TRUE before its genuine basicConstraints...

GHSA-9VW2-F4VP-X7GF PHPUnit vulnerable to code execution by other local users via shared temporary directory in PHPT code coverage handling

Summary When PHPT tests are run with code coverage, PHPUnit 13.4.0 to 13.4.3 writes the code of each PHPT test to a directory with a fixed name below the operating system's path used for temporary files, for instance /tmp/phpunit-phpt on Linux, and executes it from there. PHPUnit uses this...

GHSA-3XF4-9G3C-4H4W Nuxt dev server exposes generated appSecret through Vite file serving

Impact When no appSecret is configured via NUXTAPPSECRET, NITROAPPSECRET or runtimeConfig.appSecret, nuxt dev generates a development secret and stores it in /app-secret by default .nuxt/app-secret. The build directory is inside the directories that Nuxt passes to Vite's server.fs.allow, so the...

GHSA-9V7C-Q64Q-VV33 Nuxt: Dot segments in the request path bypass `server/middleware` path checks and server route rules on page routes

Summary Since 4.6.0, Nuxt resolves . and .. segments in the request path, including percent-encoded forms such as %2e, before rendering a page. Nitro's routing, Nitro's route rules and server/middleware see the path with those segments still in place. A request for /%2e/admin therefore renders th...

GHSA-X287-WCFC-Q46C Nuxt dev server arbitrary file read through client error reports

Summary A client that can connect to the dev server's HMR socket can send a nuxt:dev:client-error event whose message ends in an absolute file path. The dev server reads that file while building the error report, and its contents are returned in the error overlay, on the dev error channel, and in...

GHSA-648H-GW55-M2G7 Nuxt dev server exposes private runtime config through the Nitro dev bundle

Summary With Nitro 2 the default server engine in Nuxt 3 and Nuxt 4, the Nitro development server bundle written by nuxt dev can be fetched through the Vite dev server. Nitro inlines the resolved runtimeConfig into that bundle, so private runtime config values that were resolved at build time can...

GHSA-J63V-MWHM-56JX @sigstore/oci sends the registry Authorization header to a cross-host blob-upload Location

Summary @sigstore/oci sends the registry Authorization header to a cross-host blob-upload Location Affected versions and vulnerable location - Confirmed on sigstore-js at 3a83271 current HEAD. - File: packages/oci/src/registry.ts. - signIn installs the credential as a DEFAULT header on the shared...

GHSA-H599-M3W5-9M7X MariaDB Connector/J: Rogue server can drive large heap allocations from server-declared lengths in OK packets

Summary MariaDB Connector/J sized heap allocations from lengths declared by the server in OK packets before checking that those lengths fit in the packet. A rogue or MitM server can make the client allocate megabytes from a packet of a few bytes. Details When CLIENTSESSIONTRACK is negotiated the...

GHSA-797X-P4MC-JWPM MariaDB Connector/J: Length-encoded integers larger than Integer.MAX_VALUE were truncated before being used as lengths

Summary MariaDB Connector/J narrowed 8-byte length-encoded integers received from the server to int without validation. A rogue or MitM server can send a value above Integer.MAXVALUE whose truncation becomes a negative or arbitrary length. Details The protocol encodes lengths as length-encoded...

GHSA-4JQ2-8V3C-97W8 MariaDB Connector/J: XA recover() trusted server-supplied gtrid and bqual lengths

Summary XAResource.recover in MariaDB Connector/J trusted the gtridlength and bquallength columns returned by XA RECOVER to allocate and split each Xid. Details MariaDbPoolConnection and MariaDbPoolPinnedConnection built each Xid of the recovery list by allocating new bytegtridlength and new...

GHSA-FHX5-2XQW-2CGM MariaDB Connector/J: LOAD DATA LOCAL INFILE file check could be satisfied by text inside quoted identifiers, letting a malicious server read client files

Summary MariaDB Connector/J checked a server's LOAD DATA LOCAL INFILE file request by searching the text of the command it had sent for LOAD DATA LOCAL INFILE ''. The search also matched inside quoted identifiers, string literals and comments, so text returned by the server and re-used in a later...

GHSA-GRFQ-R75J-RW9X MariaDB Connector/J: Server could switch character_set_results away from UTF-8 without the client noticing

Summary MariaDB Connector/J decodes every result as UTF-8 and guards charactersetclient against a change to another charset, but did not guard charactersetresults, and relied on the server's global sessiontracksystemvariables list to be told about charset changes at all. Details The connector...

GHSA-MRWP-F3Q8-3G9P follow-redirects: Cross-realm sensitiveHeaders arrays are discarded and custom credentials can follow redirects

Summary follow-redirects 1.16.0 and 1.16.1 validate the documented sensitiveHeaders option with instanceof Array. An array created in another JavaScript realm is silently replaced with an empty list, so a caller-declared custom credential header can be forwarded to an attacker-controlled...

GHSA-VP5Q-FF62-JWQV russh: Agent server never calls `Agent::confirm`, so keys added with the confirm constraint (`ssh-add -c`) sign without confirmation

Summary The agent server in russh::keys::agent::server never calls Agent::confirm before signing with a key that was added with the confirm constraint. That constraint is SSHAGENTCONSTRAINCONFIRM RFC 9987 §5.2.7.2, which is what ssh-add -c sends. The call was replaced by a hard-coded true in...

GHSA-662X-8WVJ-2276 pageant: unbounded frame buffering on peer-controlled 4-byte length prefix (memory-exhaustion DoS)

Summary pageant::PageantStream reads a 4-byte big-endian length prefix from its input stream and buffers until len + 4 bytes are available, without ever validating len. The underlying WMCOPYDATA transport physically cannot carry frames larger than 8 KiB AGENTMAXMSGLEN, the fixed-size shared memor...

GHSA-FW5C-8223-6H42 russh: peer-declared zero maximum packet size permanently stalls channel writes (silent AsyncWrite hang)

Summary A peer can advertise maximum packet size = 0 in its channel-open message CHANNELOPEN when attacking a server, CHANNELOPENCONFIRMATION when attacking a client. russh accepts the value without validation and copies it into the channel write state, where it caps the size of every outgoing da...

GHSA-9WFM-JCJ8-JFV9 russh's SSH agent server is susceptible to unbound allocations via repeated SSH_AGENT_CONSTRAIN_CONFIRM messages

Summary All evidence, reproduction steps, and scripts in the report were verified against a real running instance. Nothing is fabricated or synthetic; every verdict is backed by captured output from an actual deployment. The SSH agent server that ships with russh russh::keys::agent::server::serve...

GHSA-4P9F-7P9M-5VFG russh's SSH client is susceptible to unbounded allocations via EXT_INFO packets

Summary All evidence, reproduction steps, and scripts in the report were verified against a real running instance. Nothing is fabricated or synthetic; every verdict is backed by captured output from an actual deployment. Concretely, the evidence comes from executing the real russh v0.64.1 client...

GHSA-MPQX-Q82W-9X46 GraphQL-core has denial of service via memory leak in aborted validations

Summary When a validation was aborted because the document contained more errors than allowed by maxerrors 100 by default, validate raised a single module-level ValidationAbortedError instance. Python appends the frames of every raise to the existing traceback of an exception that is raised again...

GHSA-7984-QGVG-3J9C OAuthLib: Token grants can use attacker-supplied client_id for authorization after authenticating a different client

Summary OAuthlib's token grant handlers can authenticate one client while authorizing the grant type and requested scopes using a different, attacker-supplied clientid from the request body. In affected token grant flows, authenticateclientrequest sets request.client to the authenticated client...

GHSA-9GH4-XW24-9XH5 OpenWISP Controller CA CRL REST API does not scope requests to managed organizations

Summary The authenticated REST API endpoint for downloading a CA Certificate Revocation List resolves the requested CA without applying the organization-scoped queryset used by the rest of the PKI API. An organization manager with CA view permission can request another organization's sequential C...

GHSA-G5JQ-QMQR-QRWF Fiber: CORS wildcard origins matched without a dot boundary, allowing credentialed cross-origin reads

Summary In v2.52.1 and v2.52.2 the CORS middleware matched a wildcard origin such as https://.example.com by suffix only, without a dot boundary and without comparing the scheme. Any origin whose host ends with the base domain, for example https://evil-example.com or http://notexample.com, was...

GHSA-7WPF-CH8F-5F4X signalk-server has SSRF via absolute signalk.appIcon URL in the app store icon fetcher

Summary The app store icon code dist/appstore/icon-probe.js around line 200 and icon-bytes.js around line 138 resolves a plugin's declared signalk.appIcon. Relative paths are pinned to the CDN, but an absolute https URL is used as-is: the server fetches it, follows redirects, and stores any image...

GHSA-4XM8-RG9H-JHQ2 Signal K resources API path traversal can disclose the JWT signing secret and enable remote code execution

Summary Path traversal in the Signal K resources and applicationData APIs lets an unauthenticated or low-privileged user read, write and delete files outside the storage root. Reading /security.json discloses the JWT signing secret, enabling admin token forgery and remote code execution. Details...

GHSA-HFF9-5PQW-6W9F imgproxy has integer overflow in imgproxy ICO loader that causes denial of service and may permit remote code execution

Summary The ICO loader allocates datasize + BMPFILEHEADERLEN bytes after reading a 32-bit attacker-controlled datasize. For datasize UINT32MAX - BMPFILEHEADERLEN, the addition wraps before allocation. imgproxy then writes the ICO prefix and reads up to the original declared size starting 14 bytes...

GHSA-494M-4556-WF5P imgproxy has out-of-bounds heap read/write in ICO loader BMP header reconstruction that allows unauthenticated remote worker crash

Summary Out-of-bounds heap write in imgproxy's ICO loader vips/icoload.c: when the ICO entry's image data buffer is small, the loader's BMP-header-reconstruction writes land past the allocation, corrupting the size field of the following heap chunk. The worker then aborts deterministically glibc...

GHSA-MMQ5-XM89-9PFG imgproxy has unbounded memory allocation in ICO loader that allows unauthenticated memory-exhaustion DoS via crafted data_size field

Summary Unbounded and unvalidated memory allocation in imgproxy's ICO loader vips/icoload.c. An attacker-controlled datasize field u32 from the ICO directory entry is passed directly to VIPSMALLOC without any bounds check, so a single crafted 23-byte ICO file makes an imgproxy worker attempt a 4G...

GHSA-2WRX-84QJ-4PCG anacrolix torrent has unbounded recursion in the bencode decoder that causes stack-overflow crash and CPU-exhaustion DoS

Summary anacrolix/torrent's bencode decoder bencode/ applies no limit on the nesting depth of nested dictionaries and lists. Two distinct denial-of-service mechanisms follow from that single root cause, both reachable from a single crafted .torrent file or from metadata obtained from a peer on a...

GHSA-P96F-P2P2-2G3H AdminNeo SQLite: multi_query Incorrect Check of Function Return Value RCE

Summary This vulnerability is a patch bypass that exploits catastrophic backtracking in a regular expression used to filter ATTACH statements in AdminNeo's SQLite functionality. The original vulnerability CVE-2021-43008 allowed authenticated users to create PHP files through SQLite ATTACH...

GHSA-6VFX-W7Q3-42GQ AdminNeo SQLite Database-List Drop Arbitrary File Deletion

Summary AdminNeo allows an authenticated SQLite-mode user to delete arbitrary files writable by the PHP process through the database-list drop action. The SQLite driver validates file extensions when creating or renaming databases, but the database-list drop path passes submitted db values direct...

GHSA-79WV-8RH2-9VP2 AdminNeo has Cookie Attribute Injection via Unsanitized X-Forwarded-Prefix in Set-Cookie Headers

Summary AdminNeo versions 4.6.0 through at least 5.5.0 are vulnerable to cookie attribute injection via the X-Forwarded-Prefix HTTP header. An attacker who can influence this header e.g., through a reverse proxy that forwards it from clients, an attacker-controlled upstream proxy, or a...

GHSA-RX7M-WXWQ-VXR9 AdminNeo Vulnerable to XSS via Rogue MySQL Server Version String (CSP Nonce Bypass)

Summary AdminNeo inserts the database server's version string into a tag that carries a valid CSP nonce, without any sanitization. A rogue database server can return a crafted version string that breaks out of the JavaScript context and executes arbitrary code. Because the script tag already has ...

GHSA-Q5MP-GFJF-CF2J AdminNeo: RCE via SQLite VACUUM INTO (ATTACH Blocklist Bypass)

Summary Adminer blocks ATTACH queries for SQLite to prevent arbitrary file creation. However, VACUUM INTO is not blocked and achieves the same result: writing a database file containing attacker-controlled PHP code to any path with any extension. An authenticated SQLite user can write a web shell...

GHSA-WM25-49W3-5QRG AdminNeo: CSRF Token Secret Recoverable from Single Observed Token, Enabling Cross-Site Request Forgery

Summary AdminNeo's CSRF protection uses a BREACH-resistant XOR masking scheme, but the implementation transmits both the XOR mask and the masked value in every token. This allows any observer who sees a single CSRF token via network sniffing, log files, Referrer header, or XSS to instantly recove...

GHSA-C6Q7-WQW2-H65W NationalSecurityAgency/emissary has an incomplete fix for CVE-2026-35571

Summary The URL validation regex ^https?:/?/. added to emissary's NavAction.java allows protocol-relative URLs //evil.com/... and single-slash scheme variants http:/evil.com to bypass validation, enabling SSRF and open redirect attacks. Affected Package - Ecosystem: Maven - Package:...

GHSA-5XJX-3W67-W9X9 pypi-publish action revocation of CA in the chain that Sigstore uses in Trusted Publishing and Digital Attestations for PyPI

Summary The pypi-publish actionpypi-publish versions before 1.14.2 used to bundle the emSign root CA trust store certificate through the certifi distribution. It has since been removed through the bundle and the new version no longer includes them. pypi-publish:...

GHSA-JM85-8CPP-9CJC AdminNeo: version-cache array injection causes persistent denial of service

Summary AdminNeo v5.4.1 gets the latest version from GitHub API in a browser JavaScript function. Version number is then sent by POST request to ?script=version. This endpoint lacks origin validation and accepts POST data from any source. An attacker can POST version parameter which PHP converts ...

GHSA-9PG5-8C7X-5HFX joserfc: Compact JWS size guard allocates attacker-controlled segments before rejection

Summary joserfc 1.7.4 defines compact-JWS header, payload, and signature limits, but calls value.splitb"." before validating them. Python bytes.split copies the attacker-controlled segments, so the current guard allocates roughly one complete payload before rejecting it. Reproduction bash...

GHSA-JPXQ-7H8P-2Q76 joserfc: Unbounded JWE General JSON `recipients` Array Leads to CPU Exhaustion (DoS) via Repeated RSA Private-Key Decryption

Summary joserfc.jwe.decryptjson, the library's public parser for JWE General JSON Serialization, accepts an attacker-controlled recipients array of unbounded length and performs one full private-key decryption operation decryptcek for every recipient present in the input, with no cap on recipient...

GHSA-F3FJ-9625-RV3M charmbracelet/soft-serve: Race in `SetPrivate` leaves a private repository readable by unauthenticated users

Summary Soft Serve cached repository records in memory with no expiry, and trusted the cached record for every access check. SetPrivate cleared the cached record before it saved the new visibility, and not afterwards. A request that arrived between the two read the old, public record from the...