Security advisories

high2026-06-22

CVE-2026-9029-Grafana geomap panel's XYZ tile layer has a sanitize-then-interpolate ordering bug

grafana/grafana · GHSA-9g84-39mm-q4p3

medium2026-06-22

CVE-2026-6062-Mattermost doesn't validate channel ownership of an existing subscription before applying edits

mattermost/mattermost · GHSA-mxq2-5jpg-7474

medium2026-06-22

CVE-2026-6673-Mattermost doesn't authenticate Atlassian Connect installed callbacks, allowing a remote unauthenticated attacker to inject a rogue sharedSecret

mattermost/mattermost · GHSA-jqgv-39mg-7c2r

medium2026-06-22

CVE-2026-5139-Mattermost doesn't enforce administrator authorization on the {{setDefaultInstance}} call within the {{/gitlab connect}} command handler

mattermost/mattermost · GHSA-2g8v-grq3-hq2g

high2026-06-22

CVE-2026-42129-Grafana Loki datasource plugin's callResource handler contains a path traversal vulnerability.

grafana/grafana · GHSA-f74p-cwhp-x2wx

medium2026-06-22

CVE-2026-10601-Grafana: Path traversal in the Tempo and Loki data source plugins

grafana/grafana · GHSA-9493-h4f5-633x

medium2026-06-22

CVE-2025-62198-Apache Atlas UI: Authenticated User XSS

apache/atlas · GHSA-v73p-f52r-fmmr

high2026-06-22

CVE-2026-44914-Apache NiFi: Missing authorization when replacing Process Groups with restricted components

apache/nifi · GHSA-r2g5-993q-664g

low2026-06-22

CVE-2026-44911-Apache NiFi allows read-only users to submit component configuration verification request

apache/nifi · GHSA-qvj8-gwpm-4x49

high2026-06-22

CVE-2025-66336-Apache Doris MCP Server is vulnerable to SQL Injection via metadata query path

apache/doris-mcp-server · GHSA-pqrj-4gwg-h5f7

medium2026-06-22

CVE-2026-44913-Apache NiFi: Improper Escaping of Table Names in CaptureChangeMySQL

apache/nifi · GHSA-chxj-gxww-q98w

medium2026-06-22

CVE-2026-54665-Apache NiFi fails to validate proxy host headers when constructing qualified URLs

apache/nifi · GHSA-8vm2-c32j-mvfr

critical2026-06-21

CVE-2026-56265-Crawl4AI: authentication bypass vulnerability due to a hardcoded default JWT signing key in the Docker API server

unclecode/crawl4ai · GHSA-8qrg-7j2f-rf2h

low2026-06-21

CVE-2026-12796-BerriAI litellm: SSO Login Does Not Invalidate Previous UI Session Tokens

berriai/litellm · GHSA-w2mh-qq9q-453x

low2026-06-21

CVE-2026-12797-BerriAI litellm has Security Feature Bypass in BannedKeywords and AzureContentSafety Guardrails via call_type Mismatch on Async Endpoints

berriai/litellm · GHSA-p897-vf7j-f5h8

low2026-06-21

CVE-2026-12799-BerriAI litellm: UI User Enumeration leads to System-Wide Information Disclosure

berriai/litellm · GHSA-m2v5-74w2-qhcj

low2026-06-21

CVE-2026-12798-BerriAI litellm has SSRF via Unvalidated spec_path URL in MCP OpenAPI Spec Loader

berriai/litellm · GHSA-c693-x898-5g4h

medium2026-06-21

CVE-2026-12795-LiteLLM: SSO Debug Flow Has Improper Authentication

berriai/litellm · GHSA-j37q-q7p9-vpwm

medium2026-06-21

CVE-2026-12773-LiteLLM: MCP Proxy Has Improper Authentication

berriai/litellm · GHSA-4jcj-7x88-m979

low2026-06-21

CVE-2026-12771-LiteLLM: M2M JWT Handler Has Improper Authorization

berriai/litellm · GHSA-qmf3-4767-5fg3