Security advisories

medium2026-07-17

Formie: Missing authorization in administrative settings allows low-privileged CP users to modify plugin configuration

verbb/formie · GHSA-cvpc-hccg-wmw4

high2026-07-17

CVE-2026-27771-Gitea has insufficient permission checks for Composer package source links

go-gitea/gitea · GHSA-8qw8-rq86-9pc2

medium2026-07-17

CVE-2026-54546-TAK-PS-Stats Web UI: Authenticated full-read SSRF in CloudTAK basemap import (PUT /api/basemap) — no IP-classification guard

dfpc-coe/cloudtak · GHSA-vqrw-qphh-p34v

low2026-07-17

oapi-codegen: OpenAPI Server Description Escapes Generated Go Comment and Injects Executable Code

oapi-codegen/oapi-codegen · GHSA-rjwr-m7qx-3fjr

high2026-07-17

CVE-2026-54547-meta-ads-mcp: X-Pipeboard-Token Header Auth Bypass Reuses Operator Meta Token

pipeboard-co/meta-ads-mcp · GHSA-2v2f-mvfg-ph56

high2026-07-17

CVE-2026-54549-meta-ads-mcp: Server-Side Request Forgery (SSRF) in `upload_ad_image` via Unrestricted `image_url` Fetch

pipeboard-co/meta-ads-mcp · GHSA-45gf-fjxp-cjpq

high2026-07-17

CVE-2026-54552-sh _uid does not drop supplementary groups (incomplete privilege drop)

amoffat/sh · GHSA-q38v-wp89-2w55

high2026-07-17

CVE-2026-11400-AWS-JDBC Wrapper: Privilege Escalation in Aurora PostgreSQL instance

aws/aws-advanced-jdbc-wrapper · GHSA-mhww-p97m-3368

medium2026-07-17

plone.restapi: Stored XSS by spoofing mime type

plone/plone.restapi · GHSA-8rqh-vxpr-x77p

medium2026-07-17

CVE-2026-54503-plone.app.textfield: Stored XSS by spoofing mime type

plone/plone.app.textfield · GHSA-4r4f-gg25-rmg5

medium2026-07-17

CVE-2026-54247-Skipper: Unbounded Request Body Read in Admission Webhook Causes Memory Exhaustion DoS

zalando/skipper · GHSA-cwxq-rc9x-2jvv

medium2026-07-17

CVE-2026-55646-vLLM: Speech-to-text upload size limit is enforced after full UploadFile read

vllm-project/vllm · GHSA-v82g-2437-67m2

high2026-07-17

CVE-2026-55574-vLLM: ReDoS via structured_outputs.regex compiled without timeout in xgrammar and outlines backends

vllm-project/vllm · GHSA-rwxx-mrjm-wc2m

high2026-07-17

CVE-2026-54234-vLLM has Remote DoS via Invalid Recovered Token Reinjection

vllm-project/vllm · GHSA-8wr5-jm2h-8r4f

medium2026-07-17

CVE-2026-34760-vLLM: Processing differential in multi-channel audio downmixing enables hidden-input/moderation bypass for audio models

vllm-project/vllm · GHSA-6c4r-fmh3-7rh8

high2026-07-16

CVE-2026-63397-Genql: inject arbitrary JavaScript or TypeScript via a GraphQL schema

remorses/genql · GHSA-w757-xvvv-vgfw

high2026-07-16

ArcadeDB has cross-database IDOR: /ts/*, /batch/*, Prometheus and Grafana handlers bypass authorization

arcadedata/arcadedb · GHSA-x8mg-6r4p-87pf

high2026-07-16

ArcadeDB: Scripting authorization gate (GHSA-48qw-824m-86pr) bypassed via SQL DEFINE FUNCTION ... LANGUAGE js

arcadedata/arcadedb · GHSA-vwjc-v7x7-cm6g

high2026-07-16

ArcadeDB: Trigger scripts run with java.lang.* allowed, enabling OS command execution (RCE)

arcadedata/arcadedb · GHSA-x9f9-r4m8-9xc2

high2026-07-16

CVE-2026-59950-MCP Python SDK: WebSocket server transport does not support Host/Origin validation

modelcontextprotocol/python-sdk · GHSA-vj7q-gjh5-988w