Security Advisories | GitStock

high2026-08-12

CVE-2026-32257-Winter: Stored XSS through Brand Settings custom styles

wintercms/winter · GHSA-v7cf-8gh9-gxmj

medium2026-08-12

CVE-2026-9318-tablib: Stored XSS in the HTML export via unescaped dataset title

jazzband/tablib · GHSA-gqgw-jghv-mxwx

medium2026-08-11

CVE-2026-62902-Microsoft Security Advisory CVE-2026-62902 – .NET Information Disclosure Vulnerability

dotnet/wpf · GHSA-9mrh-pw7c-9mqm

high2026-08-11

CVE-2026-62871-Microsoft Security Advisory CVE-2026-62871 – .NET Elevation of Privilege Vulnerability

dotnet/wpf · GHSA-vg44-h755-9hw7

high2026-08-11

CVE-2026-62897-Microsoft Security Advisory CVE-2026-62897 – .NET Remote Code Execution Vulnerability

dotnet/wpf · GHSA-fx4q-gjrx-2jw6

high2026-08-11

CVE-2026-70354-Microsoft Security Advisory CVE-2026-70354 – .NET Core Remote Code Execution Vulnerability

dotnet/wpf · GHSA-gg8c-3338-xw2f

medium2026-08-11

CVE-2026-62909-Microsoft Security Advisory CVE-2026-62909 – .NET Elevation of Privilege Vulnerability

dotnet/runtime · GHSA-9mr8-pwpw-3j2w

high2026-08-11

CVE-2026-62886-Microsoft Security Advisory CVE-2026-62886 – .NET Elevation of Privilege Vulnerability

dotnet/wpf · GHSA-jqhp-238x-qhgf

high2026-08-11

CVE-2026-62901-Microsoft Security Advisory CVE-2026-62901 – .NET Denial of Service Vulnerability

dotnet/runtime · GHSA-m93f-wj8c-rp8p

medium2026-08-11

CVE-2026-62899-Microsoft Security Advisory CVE-2026-62899 – .NET Security Feature Bypass Vulnerability

dotnet/runtime · GHSA-r6mh-95jw-g7qg

high2026-08-11

CVE-2026-62898-Microsoft Security Advisory CVE-2026-62898 – .NET Information Disclosure Vulnerability

dotnet/runtime · GHSA-c494-m2fq-59mx

critical2026-08-11

CVE-2026-73080-SeaweedFS: Unauthenticated SSRF with response read-back via VolumeServer.FetchAndWriteNeedle

seaweedfs/seaweedfs · GHSA-87fv-vqqr-m4jr

medium2026-08-10

CVE-2026-69112-Accelerate path traversal and denial of service via sharded checkpoint weight_map entries

huggingface/accelerate · GHSA-4j2p-28q2-5m79

medium2026-08-10

CVE-2026-68871-Apache Airflow Yandex Lockbox backend allows cross-team secret disclosure

apache/airflow · GHSA-qmrf-jrpr-rjx6

critical2026-08-10

CVE-2026-28672-Apache Ranger has a Command Injection vulnerability

apache/ranger · GHSA-6qc3-v8fv-fv9j

medium2026-08-10

CVE-2026-12570-Keras model loading is vulnerable to denial of service through HDF5 shape bombs

keras-team/keras · GHSA-74m6-m3xx-3vmj

low2026-08-10

CVE-2026-12372-NLTK network URL validation permits SSRF to RFC 6598 shared-address-space hosts

nltk/nltk · GHSA-2jhm-w3mp-jcwr

high2026-08-08

CVE-2026-8798-Bouncy Castle: the native entropy source used on Intel platforms retried the CPU entropy instructions without any bound

bcgit/bc-java · GHSA-v6w3-qrh8-qccc

high2026-08-08

CVE-2026-13505-Bouncy Castle: Zeroisation of sensitive key material on garbage collection relies on finalization.

bcgit/bc-java · GHSA-98j2-6v39-78w8

medium2026-08-07

CVE-2026-71870-pypdf: Possible large memory usage for large /ToUnicode streams

py-pdf/pypdf · GHSA-fp3f-mc75-235c