Security Advisories

critical2026-08-25

CVE-2026-48853-gRPC Erlang package vulnerable to Remote Code Execution with attacker-controlled gRPC payloads

View chart

elixir-grpc/grpc · GHSA-grp7-v8xh-rj7h

high2026-08-25

CVE-2026-55637-genieacs-mcp: DNS rebinding reaches local GenieACS MCP Streamable HTTP transport

View chart

geiserx/genieacs-mcp · GHSA-cmwv-wf9p-p8wx

high2026-08-25

mcp-contextforge-gateway has Server-Side Template Injection (SSTI) leading to Remote Code Execution in `PromptService._render_template` via unsandboxed Jinja2 Environment

View chart

ibm/mcp-context-forge · GHSA-vwf3-4xxj-qg6h

medium2026-08-25

CVE-2026-55419-reachy_mini Allows Unrestricted Upload of File with Dangerous Type

View chart

pollen-robotics/reachy_mini · GHSA-m2pc-3q4q-w6jr

high2026-08-25

CVE-2026-55092-Trivy has a path traversal via a crafted vulnerability database or other downloaded artifacts

View chart

aquasecurity/trivy · GHSA-mcj4-mphf-j9ff

high2026-08-25

phpMyFAQ privilege escalation: GroupController::updatePermissions lets a GROUP_EDIT admin grant rights they do not hold

View chart

thorsten/phpmyfaq · GHSA-pg62-f8g4-4wqh

medium2026-08-25

phpMyFAQ public FAQ APIs expose inactive FAQ content

View chart

thorsten/phpmyfaq · GHSA-mf8r-wm2w-f8c5

medium2026-08-25

phpMyFAQ has Potential Authenticated Path Traversal in PDF Export

View chart

thorsten/phpmyfaq · GHSA-88g4-74f3-63x9

high2026-08-25

CVE-2026-55596-Plate: Media embed provider metadata can bypass URL sanitization and execute iframe JavaScript

View chart

udecode/plate · GHSA-qj6x-xx2h-8hvv

high2026-08-25

CVE-2026-55557-browse-mcp has an arbitrary file write via unconfined download and state paths

View chart

that1drifter/browse-mcp · GHSA-m9mq-7m7q-xc6p

high2026-08-25

CVE-2026-55585-qwed Vulnerable to Authenticated Remote Code Execution via Unsafe SymPy `parse_expr()`

View chart

qwed-ai/qwed-verification · GHSA-q27q-98j4-9pfv

high2026-08-25

CVE-2026-55553-urllib's cross-origin redirects preserve credential-bearing request headers, leading to potential credential leakage

View chart

node-modules/urllib · GHSA-hq3h-g68c-hp78

high2026-08-25

CVE-2026-55677-Echo: Encoded slash (%2F) bypasses route-level protection and exposes static files

View chart

labstack/echo · GHSA-vfp3-v2gw-7wfq

high2026-08-25

CVE-2026-55571-djust authentication bypass: a login_required / on_mount LiveView mount redirect does not close the WebSocket, allowing an unauthenticated client to dispatch event-handler calls

View chart

djust-org/djust · GHSA-xx4j-w367-7247

critical2026-08-25

CVE-2026-55640-nextcloud-mcp-server: Unauthenticated `POST /webhooks/nextcloud` allows arbitrary vector data deletion when `WEBHOOK_SECRET` is unset ( default )

View chart

cbcoutinho/nextcloud-mcp-server · GHSA-8vh3-g2qg-2h2c

high2026-08-25

pickem vulnerable to terminal escape-sequence injection via unsanitized item text

View chart

calebogden/pickem-oss · GHSA-8qx3-8gm5-9cj2

high2026-08-25

utcp-http has an OAuth2 `tokenUrl` Trust Boundary Bypass in OpenAPI Conversion

View chart

universal-tool-calling-protocol/python-utcp · GHSA-8cp3-qxj6-px34

medium2026-08-25

CVE-2026-12210-utcp-gql SSRF: CVE-2026-44661 fix not applied to the GraphQL and WebSocket plugins

View chart

universal-tool-calling-protocol/python-utcp · GHSA-ppx3-28rw-8fpf

high2026-08-25

utcp-http SSRF: HTTP tool invocation follows redirects without re-validating the target

View chart

universal-tool-calling-protocol/python-utcp · GHSA-9qhg-99ww-9mqc

high2026-08-25

CVE-2026-55580-mcp-shell — Security Disabled by Default in Bare-Binary Deploy Path + Shell Interpreter in Secure-Mode Allowlist

View chart

sonirico/mcp-shell · GHSA-f5pj-2738-996m