Security advisories

medium2026-06-23

CVE-2026-50550-Snipe-IT has a 2FA reset privilege bypass

grokability/snipe-it · GHSA-6x4j-8954-5hxm

medium2026-06-23

CVE-2026-49976-Snipe-IT Vulnerable to User Account Escalation via CSV Import

grokability/snipe-it · GHSA-p68w-rgmg-3c2v

medium2026-06-23

Flask-Security has an Open Redirect issue

pallets-eco/flask-security · GHSA-w2j7-f3c6-g8cw

medium2026-06-23

CVE-2026-49870-Snipe-IT's TOTP is Brute-Forceable Due to Missing Rate Limiting on `POST /two-factor`

grokability/snipe-it · GHSA-mr8g-2mj4-pcq2

medium2026-06-23

CVE-2026-49205-phpMyFAQ: Missing userHasPermission() in 4 API write endpoints (CVE-2026-24421 Incomplete Fix)

thorsten/phpmyfaq · GHSA-8c6h-7g6x-m5x4

high2026-06-23

CVE-2026-48507-Snipe-IT: Bulk editing users allowed `ldap_import` and `activated_in` bulk editing users

grokability/snipe-it · GHSA-6f75-x745-xcpr

medium2026-06-23

OpenTofu: Provider cache installation follows root-module-controlled package directory symlink and writes outside the working tree

opentofu/opentofu · GHSA-wcmj-x466-56mm

medium2026-06-23

CVE-2026-48500-Filament: Unauthenticated temporary file upload on auth pages

filamentphp/filament · GHSA-44wp-g8f4-f4v5

medium2026-06-23

CVE-2026-48496-opentelemetry-ebpf-profiler: Unprivileged process can trigger a denial of service on the ebpf-profiler agent

open-telemetry/opentelemetry-ebpf-profiler · GHSA-f2r5-5m7w-p5cx

medium2026-06-23

CVE-2026-48493-Snipe-IT Vulnerable to Privilege Escalation for self via API Permissions Assignment

grokability/snipe-it · GHSA-52fw-7fw2-fmv5

medium2026-06-23

CVE-2026-48492-Snipe-IT's selectlist visibility is too permissive

grokability/snipe-it · GHSA-f3c5-6cw8-fg57

low2026-06-23

CVE-2026-48488-phpMyFAQ has Weak Cryptography - SHA1 for Password Hashing

thorsten/phpmyfaq · GHSA-58fg-62fg-3fcj

medium2026-06-23

CVE-2026-48480-OHttpVersionChunkDraft: Missing Final-Chunk Enforcement Leads to Undetected Stream Truncation

netty/netty-incubator-codec-ohttp · GHSA-r6fj-869h-4f6q

medium2026-06-23

CVE-2026-48167-Filament: Unvalidated ImageColumn and ImageEntry values can be used for XSS

filamentphp/filament · GHSA-3fc8-8hp6-6jr4

medium2026-06-23

CVE-2026-48166-Filament: Timing-based user enumeration on login page

filamentphp/filament · GHSA-5w46-g9pq-wh6f

medium2026-06-23

CVE-2026-48157-Slim has Reflected XSS in the HtmlErrorRenderer

slimphp/slim · GHSA-53h4-8rc4-f539

high2026-06-23

CVE-2026-48126-Algernon: Host header path traversal in --domain mode reads files and runs Lua from parent dir

xyproto/algernon · GHSA-jc3j-x6pg-4hmv

medium2026-06-23

CVE-2026-9073-foreman-mcp-server Inserts Sensitive Information into Log File

inframcp/foreman-mcp-server · GHSA-7rcj-2493-83x3

high2026-06-23

CVE-2026-41862-Spring Statemachine's Kryo-based persistence backends deserialize persisted state-machine contexts without enforcing a class allowlist

spring-attic/spring-statemachine · GHSA-85qj-f5wg-rwp9

medium2026-06-23

CVE-2026-54517-jackson-databind has @JsonView bypass for setterless creator properties

fasterxml/jackson-databind · GHSA-5hh8-q8hv-fr38