Security advisories

medium2026-07-01

SurrealDB: Crafting malicious LIVE queries writes to the database, resulting in DoS, without permission to the table required

surrealdb/surrealdb · GHSA-4v76-cw68-4vc9

medium2026-07-01

SurrealDB has an Authorization Bypass via Composite Record-id Paths

surrealdb/surrealdb · GHSA-6vg3-hgrw-p5gf

medium2026-07-01

CVE-2026-63746-SurrealDB: Graph traversal bypasses table SELECT permissions

surrealdb/surrealdb · GHSA-vjjx-rfw4-rmfc

medium2026-07-01

CVE-2026-63755-SurrealDB: Scraping a TABLE with no available PERMISSIONS to current auth level

surrealdb/surrealdb · GHSA-98fx-66cf-fc7c

medium2026-07-01

SurrealDB vulnerable to Denial of Service due to nested types annotations

surrealdb/surrealdb · GHSA-q8qp-67f9-wr3f

high2026-07-01

SurrealDB has unauthenticated remote DoS via malformed RPC `use` call

surrealdb/surrealdb · GHSA-wjjj-24cx-f28g

high2026-07-01

CVE-2026-63760-SurrealDB has Denial of Service in JSON parser due to nested objects

surrealdb/surrealdb · GHSA-q729-696q-g9pq

high2026-07-01

SurrealDB: HTTP RPC Session Race Condition Allows Privilege Escalation

surrealdb/surrealdb · GHSA-4vgr-h27g-cf9p

high2026-07-01

SurrealDB: HTTP /rpc `sessions` method leaks attached session UUIDs, enabling full session hijack by anonymous callers

surrealdb/surrealdb · GHSA-5qfp-32cf-69jh

high2026-07-01

CVE-2026-48815-sigstore's `certificateOIDs` verification constraints are silently dropped and never enforced

sigstore/sigstore-js · GHSA-52v5-jr5w-gjxr

medium2026-07-01

CVE-2026-48816-sigstore-js has Insufficient Verification of Data Authenticity

sigstore/sigstore-js · GHSA-xgjw-pm74-86q4

low2026-07-01

CVE-2026-49989-CrateDB's Blob HTTP handler bypasses authorization

crate/crate · GHSA-2xv8-gjwh-fv8p

low2026-07-01

Kimai Password Reset Link Remains Valid After Password Change

kimai/kimai · GHSA-m492-gv72-xvxj

medium2026-07-01

CVE-2026-49988-repomix: attach_packed_output can bypass file-read secret scanning for supported local files

yamadashy/repomix · GHSA-hwpp-h97w-2h3j

low2026-07-01

CVE-2026-49826-Concourse login flow has an open redirect issue

concourse/concourse · GHSA-8w27-c4vc-88q9

high2026-07-01

CVE-2026-49987-repomix Vulnerable to Command Injection (RCE) via `--remote-branch` Argument Injection

yamadashy/repomix · GHSA-9mm9-rqhj-j5mx

high2026-07-01

pay-rails/pay: non-constant-time HMAC comparison in Paddle Billing webhook signature verifier

pay-rails/pay · GHSA-mjgf-xj26-9qf9

high2026-07-01

CVE-2026-49981-Twig: Sandbox filter, tag and function allow-list bypass when sandbox state changes between renders for a cached `Template`

twigphp/twig · GHSA-529h-vh3j-85hq

medium2026-07-01

Constrata's coordinator transit engine `ciphertextContainer.UnmarshalJSON` panics on attacker-controlled short ciphertexts

edgelesssys/contrast · GHSA-3ccm-4qq2-5wrp

low2026-07-01

Contrast's Imagepuller registryFor uses unanchored suffix matching, leaking auth credentials and trusted CA configuration to sibling-domain registries

edgelesssys/contrast · GHSA-6c87-g9pw-78fx