Security advisories

high2026-07-06

CVE-2026-55790-Craft CMS: DOM XSS via GitHub issue title in CraftSupport widget

craftcms/cms · GHSA-24x4-j6x9-rfw5

medium2026-07-06

CVE-2026-54724-Kiwi TCMS has an Open Redirect via unvalidated next parameter in account confirmation endpoint

kiwitcms/kiwi · GHSA-hmj5-jm8h-h9fh

critical2026-07-06

CVE-2026-54496-Zebra: Missing copy constraint in halo2_gadgets variable-base scalar multiplication allows under-constrained base, breaking Orchard Action circuit soundness

zcashfoundation/zebra · GHSA-ww9q-8r59-xv46

critical2026-07-06

CVE-2026-55615-Langroid: Neo4jChatAgent executes LLM-generated Cypher without validation (prompt-to-Cypher injection; config-conditional RCE), mirroring the SQLChatAgent bug fixed in CVE-2026-25879

langroid/langroid · GHSA-2pq5-3q89-j7cc

critical2026-07-06

9router has unauthenticated CRUD on /api/providers and Full API Key Leak via /api/usage/stats

decolua/9router · GHSA-vjc7-jrh9-9j86

medium2026-07-06

CVE-2026-55438-Coder's workspace app CORS origin check can be bypassed via UUID-based subdomain spoofing

coder/coder · GHSA-5wg6-jmq2-53pw

high2026-07-06

CVE-2026-55426-Linuxfabrik Monitoring Plugins have local privilege escalation using embedded command

linuxfabrik/monitoring-plugins · GHSA-798h-hpph-m24j

medium2026-07-06

CVE-2026-55437-Coder vulnerable to stored HTML injection via workspace agent logs in AgentLogLine component

coder/coder · GHSA-7qw2-f75v-62f7

high2026-07-06

CVE-2026-55436-Coder's AI Bridge Proxy skips TLS certificate verification in default configuration

coder/coder · GHSA-84rm-42xw-mx52

medium2026-07-06

CVE-2026-55435-Suspended Coder users retain access to AI Bridge LLM proxy endpoints

coder/coder · GHSA-wqxv-w64v-5wh6

medium2026-07-06

CVE-2026-55434-Coder vulnerable to denial of service via unbounded request body in AI Bridge provider endpoints

coder/coder · GHSA-f5vp-w269-392g

medium2026-07-06

CVE-2026-55433-Coder: Devcontainer recreate endpoint missing write authorization allows read-only roles to destroy containers

coder/coder · GHSA-jqj2-x4c5-jfxm

medium2026-07-06

CVE-2026-55432-Coder's sub-agent app registration bypasses template port-sharing policy enforcement

coder/coder · GHSA-x9qq-2qh5-8rxf

high2026-07-06

CVE-2026-55431-Coder's session token leaked to arbitrary hosts via `coder open app` for external workspace apps

coder/coder · GHSA-v54h-cp2w-9x4g

medium2026-07-06

CVE-2026-55078-Coder: Zip upload decompression lacks aggregate size limit, enabling denial of service

coder/coder · GHSA-2mg2-p7r7-g27f

medium2026-07-06

CVE-2026-55430-Coder's subdomain workspace app routing trusts unauthenticated X-Forwarded-Host header, enabling cross-app data access

coder/coder · GHSA-5g4w-3vw9-478w

high2026-07-06

CVE-2026-55428-Coder: Route hijacking through lack of validation of agent-supplied AllowedIPs in tailnet coordinator

coder/coder · GHSA-wrq8-fcv5-8hvp

high2026-07-06

CVE-2026-55429-Coder's workspace app upsert allows cross-workspace agent rebinding via user-controlled app ID

coder/coder · GHSA-9rjw-3gwp-f59v

medium2026-07-06

CVE-2026-55079-Coder's unbounded memory allocation in provisioner file upload allows authenticated denial of service

coder/coder · GHSA-f962-qm93-mj4c

high2026-07-06

CVE-2026-55427-Coder vulnerable to SSH config injection via unsanitized server-supplied values in `coder config-ssh`

coder/coder · GHSA-mcqq-fqgf-rxwm