CVE-2026-57178

The Python Social Auth library, specifically the vk-app backend , is vulnerable to an authentication bypass in versions prior to 5.0.0 . The root cause is that the backend accepts VK application callback data without verifying the signature when the auth_key parameter is missing. This allows an a...

CVE-2026-57177

The python-social-auth (social-auth-core) library is vulnerable to Login CSRF in versions prior to 5.0.0 due to a missing state parameter validation in the LoginRadius backend . An attacker can trick a victim's browser into completing an authentication flow using an attacker-controlled token, res...

CVE-2026-57176

The Python Social Auth library is vulnerable to account takeover in its Vend OAuth2 backend prior to version 5.0.0 . The root cause is an identity binding flaw where the backend uses only the numeric user_id as the social-auth UID. When multiple Vend shops are integrated into the same application...

CVE-2026-57175

The Python Social Auth SAML backend is vulnerable to an improper authentication issue prior to version 5.0.0 . The root cause is the failure to verify that SAML responses on the Assertion Consumer Service endpoint match a previously issued AuthnRequest. An attacker with a valid account on a trust...

CVE-2026-95985

Versions of Amazon Kiro IDE prior to 1.0.242 are vulnerable to an issue where the file write tool allows remote unauthenticated actors to inject crafted instructions into the agent's context. By running the agent in a crafted repository designated as an untrusted workspace , an attacker can cause...

CVE-2026-91119

The open-source discussion platform Discourse is vulnerable to stored HTML injection in versions prior to 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0. The small-action and nested-activity-log components fail to perform URL encoding when interpolating the free-form action_code_who value into mentio...

CVE-2026-91121

The Discourse open-source discussion platform is vulnerable to trusted-HTML injection in versions prior to 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0 . The root cause is that attacker-controlled upload filenames used in chat message excerpts are rendered as unescaped HTML . An attacker capable of...

CVE-2026-97232

The volotat Anagnorisis software (versions up to 0.4.2 ) is vulnerable to a path traversal vulnerability. The flaw exists within the get_file_content , save_file_content , move_files , and start_streaming functions of the page.html file. This vulnerability allows for remote attack initiation, and...

CVE-2026-91120

The open-source discussion platform Discourse contains a stored HTML injection vulnerability in its video notification email and chat summary generation. Prior to versions 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0 , provider-controlled video titles from lazy video embeds (YouTube, Vimeo, or TikT...

CVE-2026-91132

The open-source discussion platform Discourse contains a vulnerability in versions prior to 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0 . Sites utilizing wildcard patterns in the allowed_iframes setting are susceptible to a bypass where a crafted iframe URL places an allowlisted suffix after a URL...

CVE-2026-91122

The Discourse open-source discussion platform contains a vulnerability in the video placeholder component prior to versions 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0. The root cause is an attribute breakout triggered by crafted HTML, allowing an attacker to inject a controlled event handler . An...

CVE-2026-56744

The @bsv/wallet-toolbox , @bsv/wallet-toolbox-client , and @bsv/wallet-toolbox-mobile packages contain a vulnerability where transactions created via a remote StorageClient do not verify that output locking scripts from the provider match the caller's requested outputs. A compromised provider cou...

CVE-2026-91123

The open-source discussion platform Discourse is vulnerable to an iframe src traversal issue in versions prior to 2026.1.8 , 2026.6.3 , 2026.7.2 , and 2026.8.0 . The root cause is that the iframe src traversal guard fails to treat literal backslashes as path separators following decoded dot segme...

CVE-2026-91133

The open-source discussion platform Discourse is vulnerable to an information disclosure flaw in versions prior to 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0 . Authenticated users can provide unescaped SQL LIKE metacharacters in upload-resolution patterns. This allows wildcard input to select unr...

CVE-2026-91134

The open-source discussion platform Discourse contains a vulnerability in its post sanitizer prior to versions 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0 . The root cause is a logic flaw where the sanitizer validates a decoded form of an iframe src differently than how the browser interprets it. ...

CVE-2026-84302

The open-source discussion platform Discourse is vulnerable in versions prior to 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0 . The root cause is that reviewable visibility filtering fails to restrict Discourse AI reviewables associated with private messages. This allows moderators who are not part...

CVE-2026-26054

SumatraPDF, a multi-format reader for Windows, is vulnerable to a heap out-of-bounds read in the MobiDoc::ParseHeader function within src/MobiDoc.cpp. The issue occurs because DecodeMobiDocHeader constructs a decoder sized for kMobiHeaderLen without verifying the actual remaining buffer length, e...

CVE-2026-91161

The OpenWA WhatsApp API gateway (prior to version 0.23.5 ) contains a vulnerability where the GET /api/sessions/{sessionId}/groups/{groupId}/invite-code endpoint and the GroupGetInviteCode MCP tool lack an OPERATOR role requirement. This allows users with a valid VIEWER key to retrieve active gro...

CVE-2026-97231

A vulnerability exists in volotat Anagnorisis versions up to 0.3.1/0.4.0 due to missing authentication in an unknown function within the app.py file of the Socket.IO Connect Interface component. An attacker can remotely exploit this flaw to bypass authentication. While the vendor was contacted, n...

CVE-2026-91160

The OpenWA WhatsApp API gateway is vulnerable to an unauthorized information disclosure in versions prior to 0.23.5 . The /events WebSocket gateway improperly delivers the session.qr event to VIEWER API keys, even though access to the QR code via the REST API requires an OPERATOR role. This vulne...