Security advisories

medium2026-07-31

CVE-2026-53573-core-geonetwork has an Open Redirect Bypass

geonetwork/core-geonetwork · GHSA-pjp7-q6wp-97qx

medium2026-07-31

CVE-2026-54908-Pion DTLS vulnerable to denial of service via panic while parsing a crafted ECDHE_PSK ServerKeyExchange message

pion/dtls · GHSA-wg4g-wm44-ch5j

medium2026-07-31

CVE-2026-54909-Pion STUN vulnerable to remote denial of service via panic while parsing a malformed XOR-MAPPED-ADDRESS attribute

pion/stun · GHSA-34rh-wp3j-6cxc

low2026-07-31

CVE-2026-54787-sigstore-go fails to check signature timestamps against a signing key's validity period

sigstore/sigstore-go · GHSA-wqqc-jjcq-vfxm

high2026-07-31

CVE-2026-53608-@apostrophecms/seo Vulnerable to Stored XSS via Unsanitized Google Analytics / GTM ID Injected into Script Tag

apostrophecms/apostrophe · GHSA-wf43-fpp3-cf65

low2026-07-31

CVE-2026-53607-@apostrophecms/file pretty-URL Vulnerable to Unauthenticated SSRF via Host header

apostrophecms/apostrophe · GHSA-34pj-2622-jvxq

critical2026-07-31

CVE-2026-53609-Apostrophe has Server-Side Prototype Pollution in apos.util.set via patch operators that leads to process-wide authorization bypass

apostrophecms/apostrophe · GHSA-6h5j-32cf-4253

medium2026-07-31

CVE-2026-53606-sanitize-html has incomplete URI scheme validation in that allows javascript: URIs through action, formaction, data, poster, and background attributes

apostrophecms/apostrophe · GHSA-vccv-cmxp-4j9h

critical2026-07-31

CVE-2026-68770-sentence-transformers local model loading bypasses trust_remote_code and executes custom Python

huggingface/sentence-transformers · GHSA-jhr6-gm9c-rqjv

medium2026-07-31

CVE-2026-53551-free5GC AUSF: null byte injection in supiOrSuci causes HTTP 500 internal service failure

free5gc/free5gc · GHSA-qj55-47fp-p62j

medium2026-07-31

zaino-state has a Non-Finalized State Reorg — No Cycle Detection or Depth Limit

zingolabs/zaino · GHSA-3whf-vgf2-9w6g

critical2026-07-31

CVE-2026-52887-NocoBase: SQL injection in /api/myInAppChannels:list filter to PG-superuser RCE

nocobase/nocobase · GHSA-p849-8hwh-84j9

high2026-07-31

CVE-2026-53599-Redaxo has a Mediapool isAllowedExtension bypass via multi-segment filename that leads to authenticated RCE on Apache mod_php multi-extension handlers

redaxo/core · GHSA-98pp-vccm-qm25

medium2026-07-31

CVE-2026-53466-ImageMagick: Heap Buffer Over-Read in XCF decoder due to integer conversion overflow

imagemagick/imagemagick · GHSA-pjxj-pchx-4c3m

high2026-07-31

CVE-2026-53510-Savon::Model evaluates WSDL operation names as Ruby source

savonrb/savon · GHSA-mx5j-mp4f-g8jg

medium2026-07-31

CVE-2026-65841-Jodit has cross-site scripting (XSS) via <script> nested in SVG that bypasses clean-html sanitization

xdan/jodit · GHSA-45qg-252v-3f7p

high2026-07-31

CVE-2026-58263-Jodit Editor: Mutation XSS in jodit clean-html via a MathML/style rawtext carrier

xdan/jodit · GHSA-rxcw-mc6f-6hr3

medium2026-07-31

CVE-2026-54756-Jodit has prototype pollution via Jodit.configure() / ConfigMerge

xdan/jodit · GHSA-5957-5c94-3v7w

medium2026-07-31

CVE-2026-62324-Jodit has incomplete javascript: scheme normalization in sanitizeHTMLElement href check that allows link XSS

xdan/jodit · GHSA-j839-gqq4-gf9j

high2026-07-31

CVE-2026-53502-Thumbor has path traversal via post-validation URL decoding bypass in file_loader

thumbor/thumbor · GHSA-cj54-hpcc-gj6h