GHSA-WFHQ-Q4J2-C37M filelock: SoftReadWriteLock follows a lock tree swapped in after its first acquire and writes lock records into directories of the user running the lock

SoftReadWriteLock and AsyncSoftReadWriteLock, which wraps one checks once per lock object, by name, that .rw, .rw/gen and .rw/holders are real directories and not symbolic links files that redirect to another path. It then keeps only a boolean. Every later record operation resolves the full path...

GHSA-6627-M3XW-93MP filelock: StrictSoftFileLock creates its claim directories without the lock mode, so another local user with a write bit on them can end a live hold

StrictSoftFileLock and AsyncStrictSoftFileLock apply the caller's mode to the sentinel the lock file at and to both claim files the files whose presence says a process wants or holds the lock. They create the two directories that hold the claims, .filelock and .filelock/claims, with a bare mkdir...

GHSA-9C4X-GM8V-WGC4 filelock: StrictSoftFileLock and SoftReadWriteLock adopt a protocol directory another user created first, losing mutual exclusion

StrictSoftFileLock, AsyncStrictSoftFileLock, SoftReadWriteLock and AsyncSoftReadWriteLock keep their whole ownership state as files in a directory derived from the lock path .filelock/claims, .rw/gen,holders. When that directory already exists they adopt it after checking only that it is a real...

GHSA-8MX5-7M5M-R77G filelock: WindowsFileLock ignores mode: a 0o600 lock file and the ReadWriteLock database inherit the directory ACL

filelock on Windows ignores the mode argument. FileLockpath, mode=0o600 creates the same file as FileLockpath: one with no security descriptor of its own the Windows record that says who may access a file. Its access list, or ACL, is whatever the lock directory hands down to new files. filelock...

GHSA-CWQR-HH33-GH44 filelock ReadWriteLock: a crafted lock database makes every acquire stall or hang regardless of timeout

ReadWriteLock and AsyncReadWriteLock the SQLite-backed reader/writer lock run PRAGMA journalmode=MEMORY on a fresh connection for every acquire. That statement makes SQLite load the whole schema the sqlitemaster table, which lists every table and index with its CREATE text of whatever file sits a...

GHSA-RFPC-QCW5-3PC4 filelock: SoftFileLock removes a live holder's marker when another user forges the PID in a writable marker

SoftFileLock, MarkerSoftFileLock, SoftFileLease, their async variants and a FileLock that has fallen back to a soft lock on ENOSYS decide from the record inside the marker file whether its owner is gone. The marker is the file whose presence says a process holds the lock. They do not check who...

GHSA-9J6Q-WVJ5-JGJG filelock: Symlink swap during SoftFileLock's writability check leaks whether a path exists and is writable by the lock taker

raiseonnotwritablefile is the check that SoftFileLock and the locks sharing its acquire path run before every attempt. It looks at the lock path with os.lstat, so that it judges a planted symlink a file that points at another path by itself. When the node has no owner-write bit, it then calls...

GHSA-69HJ-F68J-2879 filelock: UnixFileLock truncates and chmods any regular file another user renames or hard-links onto the lock path

UnixFileLock, the backend of FileLock and AsyncFileLock on Unix, empties whatever regular file it finds at the lock path once it holds the flock a kernel lock on an open file. With an explicit mode it also chmods that file sets its permission bits, whether or not this acquire created it. Another...

GHSA-J8F7-RJXC-MR56 filelock: ReadWriteLock follows a symlink at the lock path into SQLite

Summary ReadWriteLock and AsyncReadWriteLock resolve the lock path with pathlib.Path.resolve and pass it to sqlite3.connect without refusing a symlink. A local user who can create names in the lock's directory, such as /tmp or a shared cache, can plant a symlink at the lock path and make the...

GHSA-M462-7RXW-WVPG filelock: StrictSoftFileLock follows a symbolic link swapped in at <path>.filelock and creates claim files in a directory another local user chooses

StrictSoftFileLock and AsyncStrictSoftFileLock check .filelock the coordination directory that holds the lock's state with one lstat call on its name. lstat reports what a name is without following a symbolic link a file that redirects to another path. After that check, the code reaches...

GHSA-FJ95-FR6C-H845 filelock: SoftReadWriteLock holder refresh writes through a hard link and hangs on a named pipe that another local user renames over its record

SoftReadWriteLock and AsyncSoftReadWriteLock, which wraps one refreshes its holder record the file under .rw/holders/ that says a process holds or wants the lock on every poll of a waiting acquire and on every heartbeat the periodic refresh a holder runs to keep its record fresh. It does so by...

GHSA-FQ56-3CX3-FJXP filelock: SoftFileLock stale-lock break removes a live lock file on a reused inode number and admits two holders

The stale-lock break shared by SoftFileLock, MarkerSoftFileLock and SoftFileLease and their async variants, and a FileLock that has fallen back to a soft lock on ENOSYS, the "not implemented" error recognises the marker it judged stale by two values. The marker is the lock file at , whose presenc...

GHSA-9JHJ-WVMW-CFX5 i18next-http-backend: Namespace value starting with / forms a protocol-relative URL when loadPath/addPath places {{ns}} right after a / (bypass of the // check added for GHSA-xvq9-wjp8-hwqf)

Affected versions Verified on 4.0.2 latest on npm and on commit 07e0288 the GHSA-xvq9-wjp8-hwqf fix. Earlier 3.x/4.x versions that allow / in ns are likely affected too. Not verified on them. Impact Same class as GHSA-xvq9-wjp8-hwqf and GHSA-q89c-q3h5-w34g: when an attacker controls the namespace...

GHSA-CCRJ-GW8R-854M opentelemetry-java: Quadratic CPU consumption in W3C tracestate parsing

Summary OpenTelemetry Java's W3C trace-context propagator permits excessive CPU consumption when extracting crafted tracestate headers, potentially leading to denial of service. Regex backtracking causes quadratic parsing time for headers containing long runs of spaces or tabs without a following...

GHSA-C8P4-J97H-3VG8 Happy DOM: SSRF via iframe and link stylesheet when parsing untrusted HTML

Summary happy-dom v20.8.9 makes real server-side HTTP requests to arbitrary URLs when parsing HTML containing or elements. This behavior is enabled by default disableIframePageLoading: false, disableCSSFileLoading: false. When an application uses happy-dom to parse untrusted HTML on the server...

GHSA-8RC2-428Q-7WW3 Vue I18n: `escapeParameter` does not escape named values when the same call also passes a list

Summary When escapeParameter is enabled escapeParameterHtml in the Legacy API, Vue I18n escapes the interpolation parameters before formatting a message. escapeParams escapes either the list values or the named values, but not both: the two branches are joined by else. When a single call passes...

GHSA-83RM-6C8R-G728 Vue I18n: escapeParameter does not prevent XSS through srcdoc in translation messages

Summary When escapeParameter is enabled escapeParameterHtml in the Legacy API, Vue I18n passes the translated string through sanitizeTranslatedHtml. The sanitizer escapes in attribute values and neutralizes event handler attributes such as onerror, but it does not handle the srcdoc attribute of...

GHSA-5FPQ-26GF-QWCR Happy DOM has cookie scope forgery: no DNS-label boundary on Domain= matching , attacker origin sets victim cookies

Summary A cookie-scoping bug in happy-dom lets an attacker origin set cookies that a victim origin then receives, diverging from browser semantics. Details happy-dom matches Domain=example.com against notexample.com endsWith without a DNS-label boundary, diverging from browser semantics verified...

GHSA-3FX2-CQW9-XR3C LangGraph: Unencoded identifiers in LangGraph SDK v3 streaming can redirect authenticated GET requests

Summary The LangGraph Python SDK v3 streaming client interpolates caller-supplied threadid and assistantid values into request paths without encoding them at four synchronous and asynchronous call sites. Relative path segments can therefore redirect an authenticated GET request to another path on...

GHSA-434M-5HCJ-PXF3 GraphQL Tools: Per-request connection parameters persist into later users' WebSocket authentications

Stale authentication state in @graphql-tools/executor-legacy-ws: per-request extensions.connectionParams persist in executor closure state and are replayed in a later caller's connectioninit Report metadata | Field | Value | | --- | --- | | Package | @graphql-tools/executor-legacy-ws npm,...

GHSA-MP66-8WW2-PCWM GraphQL Tools: Shared legacy executor routes one subscription's results to a different caller

Cross-tenant subscription data leak in @graphql-tools/executor-legacy-ws: a shared websocket.onmessage is replaced on every subscribe, and DATA frames are delivered without checking the protocol operation id Report metadata | Field | Value | | --- | --- | | Package |...

GHSA-RMXM-3FG6-PX4F @hono/node-server: `serveStatic` decodes the request path a second time, leading to bypass of middleware on static paths

Summary serveStatic decodes the request path a second time after Hono has already decoded it for routing. A crafted request can be routed as one path and served as another, so middleware mounted on a static prefix does not run for a file under that prefix. Details Hono decodes the request path on...

GHSA-2FFQ-G2XG-C22P Echo: HTTPS Redirect and HSTS Bypass via Unconditional Trust of Forwarded Scheme Headers

Description Context.Scheme unconditionally trusts four client-controlled HTTP headers to determine the request scheme, with no mechanism to configure trusted sources. This allows a remote unauthenticated attacker to bypass HTTPS redirect enforcement and suppress HSTS headers. The trusted headers...

GHSA-3PMX-CF9F-34XR Echo static file middleware route protection bypass via encoded dot-dot traversal

Summary Echo v5.2.0 contains a bypass of the fix for GHSA-vfp3-v2gw-7wfq. The fix rejects encoded path separators such as %2F and %5C before static file path unescaping, but two traversal forms still bypass route-level middleware protections for static files. The primary bypass uses encoded dot-d...

GHSA-XWQ5-6CQP-VX96 Echo has a Static Middleware Double-Unescape Path Traversal

Summary Commit a9ede66a PR 3006, issue 2599 silently fixed a path traversal vulnerability in the Echo web framework's static file middleware. Vulnerability The static middleware double-unescaped URL paths. Go's net/http already decodes Request.URL.Path, but middleware/static.go unconditionally...

GHSA-V753-G4CW-JM48 Echo has Open Redirect via Control-Character Prefix Defeating sanitizeURI

Summary Echo's dedicated open-redirect guard, sanitizeURI, decides whether a redirect target is a local path by inspecting exactly two byte positions: uri0 and uri1. If the value begins with a control character such as a tab or a newline, followed by a separator pair, the guard does not fire and...

GHSA-23WF-92CP-8PCJ Echo has Arbitrary Scheme Injection in WWWRedirect/NonWWWRedirect Middlewares via X-Forwarded-Proto

Summary The c.Scheme method in Echo context.go:162-181 trusts the X-Forwarded-Proto, X-Forwarded-Protocol, and X-Url-Scheme request headers without validating that the value is http or https. The WWWRedirect and NonWWWRedirect middlewares use this unsanitized scheme to construct redirect URLs,...

GHSA-6HGP-FMHR-MRG4 Highcharts Grid: `javascript:` URL in credits.href runs script on click

Impact An attacker who controls the Grid configuration can set credits.href to a javascript: URL. The value is not validated against an allowed-scheme list before it is applied to the credits link, so activating that link runs attacker-supplied script in the origin of the page hosting the Grid...

GHSA-R5WG-Q8FC-P6W2 Highcharts Grid parses pagination language options as HTML

Impact The pagination language strings are written into the DOM as markup rather than as text. An attacker who controls those language options can supply elements carrying event handlers, and those handlers execute in the origin of the page hosting the Grid when the pagination controls render...

GHSA-58G7-7F52-H92C Highcharts Dashboards parses fullscreen labels as HTML

Impact The edit mode fullscreen labels are parsed as HTML when the corresponding control is rendered. An attacker who controls the Dashboards language options can supply markup carrying event handlers, which then execute in the origin of the page hosting the dashboard. Exploitation requires that...

GHSA-RCQF-F6H2-CCG9 Highcharts Dashboards parses sidebar component labels as HTML

Impact The component language strings shown in the edit mode sidebar are parsed as HTML rather than inserted as text. An attacker who controls those language options can supply markup carrying event handlers, which execute in the origin of the page hosting the dashboard once the sidebar renders t...

GHSA-5793-X2Q3-C3Q7 Highcharts: `javascript:` URL in credits.href runs script on click

Impact A credits.href value beginning with javascript: is assigned to the window location when the credits label is clicked, without being checked against an allowed-scheme list. An attacker who controls the chart configuration can therefore run script in the origin of the page hosting the chart...

GHSA-RMQC-XVR3-V46C Highcharts: dotted series.keys paths write to Object.prototype

Impact A dot-separated key path taken from series.keys is followed without filtering the individual segments. An attacker who controls series.keys and the matching point data can use a path such as proto.polluted to set arbitrary properties on Object.prototype. The resulting properties are visibl...

GHSA-GFVX-2C2G-38WQ Highcharts: series column construction writes to Object.prototype

Impact When series columns are built from point objects, the point option keys are used directly as data column ids, so the write that populates a column reaches Object.prototype and the Object constructor. Keys named proto and constructor survive JSON.parse as own enumerable properties, so an...

GHSA-35RR-XWFH-X789 Highcharts Core: `breadcrumbs.style` keys become SVG event-handler attributes

Impact The breadcrumbs style option is applied to the breadcrumb button as SVG attributes rather than as CSS, and the attribute names are not filtered. An attacker who controls the chart configuration can supply keys under breadcrumbs.style that name event handlers, and those keys become live...

GHSA-5GHW-9MGR-JVX2 Highcharts Grid Pro: cell-renderer `attributes` map written with raw `setAttribute`

Impact The input-type cell renderers copy every entry of the renderer's attributes option onto the input or select element they create, without checking the attribute names. An attacker who controls the Grid configuration can supply entries under a column's cells.renderer.attributes or...

GHSA-6G3C-P4FG-XV47 Highcharts Grid: custom icon definition objects written with raw `setAttribute` on `<path>`

Impact A custom icon supplied under rendering.icons as an icon definition object is built by creating an SVG path for each of its child entries and setting every key of that entry as an attribute of the path, without filtering the attribute names; only the string form of the option is passed...

GHSA-GRJ7-R4JV-PW9J Highcharts Dashboards: `chartConstructor` is an unchecked lookup into the Highcharts namespace

Impact The Highcharts component uses the value of chartConstructor to select a function from the Highcharts namespace and invokes it with the component's container element and its chartOptions, without checking the value against the supported chart constructors. An attacker who controls the...

GHSA-C75X-9X9H-28RM Highcharts Dashboards / Grid Pro: `DataTable.setCell` and column writers treat `__proto__` as an existing column.

Impact When a single cell value is written to a data table, the column id is used as a key on the table's column collection without filtering, so a column id of proto resolves to Object.prototype, is taken for an existing column, and the write lands at the row index on Object.prototype; a column ...

GHSA-JQGH-W3CC-7JQW Highcharts Dashboards: `__proto__` data table id writes sync listeners to `Object.prototype`

Impact The data cursor keeps its listener and state bookkeeping in plain objects keyed by data table id, so a table id of proto supplied in the dataPool connector configuration resolves to Object.prototype when a sync registers its listeners, and the registration creates a property on...

GHSA-65HG-CF3F-5M39 Highcharts Core: HTML text parsing falls back to unfiltered `innerHTML` during printing

Impact When the HTML text parser cannot obtain a document from DOMParser because the call throws, it falls back to assigning the raw markup to the innerHTML of an element created in the hosting document, and the allow-list is applied only to the resulting DOM afterwards. In Chromium the Trusted...

GHSA-MW4F-GJ5X-6XR4 Highcharts Core: `javascript:` URL in an `xlink:href` attribute survives text filtering and reaches exported charts

Impact The filter applied to markup in text options checks href, src and a few similar attributes against an allowed-scheme list, but accepts xlink:href without that check, so an SVG anchor whose xlink:href is a javascript: URL passes the filter, whether or not the option is rendered with useHTML...

GHSA-375P-5QHX-8WQ4 Echo's middleware.Static: `%2F`-encoded path bypasses route/group middleware guarding a statically-served path

Summary When middleware.Static is mounted globally e.Usemiddleware.Static... and an application relies on a route- or group-level middleware guard to restrict a path that also falls under the served static root, a %2F-encoded request bypasses that guard while the file is still served. This is the...

GHSA-H9G5-28MM-HX3G Echo vulnerable to Reflected Cross-Site Scripting (XSS) via unsanitized JSONP callback in Context.JSONP / Context.JSONPBlob

Summary The Context.JSONP, Context.JSONPBlob, and internal jsonPBlob helper in context.go directly concatenate the caller-supplied callback parameter into a JavaScript response without any validation, escaping, or allow-listing. This creates a high-impact reflected XSS that can be triggered by an...

GHSA-246P-CPWV-V3JQ Echo has Rate Limiter Bypass via Spoofed X-Forwarded-For Header in Default Configuration

Summary When echo.New is used without explicitly setting EchoIPExtractor, the RealIP method falls back to reading the client-supplied X-Forwarded-For or X-Real-IP header without any proxy-origin validation. The default RateLimiter middleware derives its per-client identifier from ctx.RealIP, so a...

GHSA-R7W9-592Q-9VG4 Echo has CSRF Protection Bypass via MethodOverride Rewriting POST to Safe Method

Summary The MethodOverride middleware accepts any non-empty string as the override target method — including safe methods GET, HEAD, OPTIONS, TRACE — when rewriting a POST request. When MethodOverride is registered before CSRF in the post-routing middleware chain e.Use, it rewrites the request...

GHSA-99JH-6H7P-PP36 Echo: Reverse Proxy Forwards Attacker-Supplied X-Real-IP to Upstream by Default

Summary The Echo proxy middleware middleware/proxy.go preserves an incoming X-Real-IP header verbatim and forwards it to the upstream service when EchoIPExtractor is not configured — which is the default. Because any HTTP client can supply an arbitrary X-Real-IP value, an attacker can cause Echo ...

GHSA-4MFG-R38W-W8FG mcp-sanitizer: URL sanitizer allows localhost/IPv6 loopback SSRF bypass via explicit port or bracketed IPv6

URL sanitizer allows localhost/IPv6 loopback SSRF bypass via explicit port or bracketed IPv6 Summary mcp-sanitizer v1.3.3 fails to block Server-Side Request Forgery SSRF targets when a localhost URL includes an explicit port e.g., http://localhost:8080/ or when an IPv6 loopback/link-local address...

GHSA-7W82-6F9J-V9JP mcp-sanitizer: File Path Sanitizer Permits Arbitrary User-Home Absolute Paths

File Path Sanitizer Permits Arbitrary User-Home Absolute Paths Summary mcp-sanitizer v1.3.3 explicitly whitelists /home/ and /Users/ as allowed absolute path prefixes in its file path validation logic src/utils/validation-utils.js:188-196. As a result, paths such as /home/alice/.ssh/idrsa and...

GHSA-5J9R-FX4X-RPVG rucio has an Authorization Bypass on REST API endpoint for signing URLs

Summary The /credentials/signurl endpoint decides authorization from the client-supplied X-Rucio-Account HTTP header instead of the authenticated token's account. Any client holding any valid auth token even a low-privilege account they legitimately own can send X-Rucio-Account: root to pass the...