Security Advisories

medium2026-08-20

CVE-2026-54256-Winter: Authenticated IDOR in backend FileUpload widget allows cross-user access to attachment metadata

high2026-08-20

CVE-2026-54251-netty-incubator-codec-ohttp: [OHttpServerCodec] Native Direct-Memory Leak on AEAD Decryption Failure Leads to Gateway Denial of Service

View chart

netty/netty-incubator-codec-ohttp · GHSA-vmr9-j6wf-pmh2

high2026-08-20

CVE-2026-54245-Fleet: SQL injection in Okta conditional access endpoint allows host-controlled compromise of the Fleet database

View chart

fleetdm/fleet · GHSA-7q96-f8xw-jv5j

high2026-08-20

CVE-2026-54182-Laravel Backpack CRUD: OS command injection in Stats::makeCurlRequest via attacker-controlled Host header (pre-auth)

View chart

laravel-backpack/crud · GHSA-mrc5-3mm3-45c5

medium2026-08-20

CVE-2026-54181-Laravel Backpack CRUD: Stored XSS in the color column — the `@if($column['escaped'])` branches are inverted

View chart

laravel-backpack/crud · GHSA-mmg4-322v-6jvc

high2026-08-20

CVE-2026-54180-Laravel Backpack CRUD: CRUD panel query scopes are not enforced on Update, Delete, and Reorder (cross-tenant IDOR)

View chart

laravel-backpack/crud · GHSA-vgmv-8xjc-6rch

medium2026-08-20

CVE-2026-54179-Laravel Backpack CRUD: SingleBase64Image accepts any base64 payload behind a `data:image` prefix — SVG-with-script lands on the public disk

View chart

laravel-backpack/crud · GHSA-8hw4-7qjr-3wxg

high2026-08-20

CVE-2026-54178-Laravel Backpack CRUD: Arbitrary file deletion via attacker-controlled clear_<attr>[] in HasUploadFields::uploadMultipleFilesToDisk

View chart

laravel-backpack/crud · GHSA-8xjm-wqrp-2f25

medium2026-08-20

CVE-2026-54177-Laravel Backpack CRUD: HasUploadFields keeps the attacker-supplied file extension — public-disk uploads of `shell.php` reach the webserver

View chart

laravel-backpack/crud · GHSA-8q2w-pv9p-mjvc

medium2026-08-20

CVE-2026-54176-Laravel Backpack CRUD: MyAccountController allows changing the login email without a current-password check

View chart

laravel-backpack/crud · GHSA-9fw9-8c49-qch8

high2026-08-20

CVE-2026-54175-Laravel Backpack CRUD: Unverified password change in MyAccountController via mass assignment

View chart

laravel-backpack/crud · GHSA-xpv2-hrfc-hw62

critical2026-08-20

CVE-2026-55445-Qinglong has an incomplete fix for CVE-2026-3965: Improper Authentication

View chart

whyour/qinglong · GHSA-v667-gc2r-2xm7

medium2026-08-20

CVE-2026-54168-Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution

View chart

tektoncd/pipelines-as-code · GHSA-6f2p-296r-cc28

high2026-08-20

CVE-2026-54167-Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header

View chart

tektoncd/pipelines-as-code · GHSA-f5f4-3hh4-f54m

low2026-08-20

OpenTofu has high CPU usage when using K8S remote state backend or when parsing specifically crafted TLS certificates from untrusted or compromised servers

View chart

opentofu/opentofu · GHSA-22w5-2fxg-vrwx

medium2026-08-20

CVE-2026-54162-Ember has unneutralized terminal escape/control sequences from Caddy logs injected into the operator's TUI

View chart

alexandre-daubois/ember · GHSA-x3g7-qrwc-f6c5

high2026-08-20

CVE-2026-54156-node-opcua: Unbounded nonce cache enables unauthenticated heap exhaustion DoS

View chart

node-opcua/node-opcua · GHSA-6wvw-vrw4-363w

high2026-08-20

CVE-2026-54155-node-opcua missing nonce verification in UserNameIdentityToken authentication

View chart

node-opcua/node-opcua · GHSA-mq36-523m-x7vv

medium2026-08-20

CVE-2026-54150-next-video: Unauthenticated arbitrary file read via /api/video request handler

View chart

muxinc/next-video · GHSA-2p39-2jf3-fv2q

low2026-08-20

Coder: Stored HTML injection via unescaped ApplicationName and LogoURL appearance settings

View chart

coder/coder · GHSA-h58c-xccx-75m3