Security advisories

high2026-06-19

Uni-CLI: Legacy HTTP MCP transport accepted browser-originated localhost requests

olo-dot-io/uni-cli · GHSA-v3f4-w7r7-v3hm

high2026-06-19

stigmem-node: decay sweep expires and counts facts across all tenants (cross-tenant BOLA)

eidetic-labs/stigmem · GHSA-6gqw-jqv7-v88m

high2026-06-19

stistigmem-node: quarantine review surface exposes and mutates other tenants' quarantined facts (cross-tenant BOLA)

eidetic-labs/stigmem · GHSA-xhv3-q4xx-349r

high2026-06-19

stigmem-node: RTBF tombstones are mis-attributed and suppress reads tenant-blind (cross-tenant BOLA)

eidetic-labs/stigmem · GHSA-x26h-xmv8-gxf7

high2026-06-19

MessagePack for Python: Out-of-bounds read / crash on Unpacker reuse after a caught error

msgpack/msgpack-python · GHSA-6v7p-g79w-8964

high2026-06-19

Gogs: XSS in .ipynb files renderer due to outdated notebookjs

gogs/gogs · GHSA-6vxv-wg6j-5qwp

low2026-06-19

parse-server: LiveQuery discloses object data to a subscriber across an ACL read-access change

parse-community/parse-server · GHSA-97pr-9hgg-3p8r

high2026-06-19

SearXNG MCP Server: DNS-resolved Private Hostname SSRF in `web_url_read`

ihor-sokoliuk/mcp-searxng · GHSA-mrvx-jmjw-vggc

high2026-06-19

SearXNG MCP Server: Unbounded Response Body Read Bypasses URL Size Limit in `web_url_read`

ihor-sokoliuk/mcp-searxng · GHSA-xcqx-9jf5-w339

medium2026-06-19

Network-AI: EnvironmentManager.restore() backup ID path traversal copies arbitrary directories into environment data

jovancoding/network-ai · GHSA-48x2-6pr9-2jjf

medium2026-06-19

Network-AI: EnvironmentManager.backup() follows symlinked directories and copies files outside the environment root into backups

jovancoding/network-ai · GHSA-6x2m-p4xp-wg22

medium2026-06-19

Network-AI: ApprovalInbox HTTP server has no authentication — anyone can approve pending agent actions

jovancoding/network-ai · GHSA-mxjx-28vx-xjjj

medium2026-06-19

Network-AI: AgentRuntime sandbox path-prefix checks allow file access outside the configured base directory

jovancoding/network-ai · GHSA-jvcm-f35g-w78p

high2026-06-19

Network-AI: Poisoned environment backup manifest allows arbitrary recursive deletion during backup pruning

jovancoding/network-ai · GHSA-2fmp-9rvw-hc96

medium2026-06-19

CVE-2026-57442-MCPVault: PathFilter restricted directories (.git/.obsidian/node_modules) only denied at vault root, not nested

bitbonsai/mcpvault · GHSA-9c83-rr99-vfwj

low2026-06-19

Sveltia CMS: Stored XSS in Markdown/RichText preview via unsandboxed same-origin iframe

sveltia/sveltia-cms · GHSA-h5jc-78hr-3pc9

high2026-06-19

CVE-2026-55878-symfony/ux-toolkit: Path Traversal Allows Arbitrary File Write and Read via Crafted Recipe Manifest

symfony/ux · GHSA-p9xj-fpr2-jf2q

medium2026-06-19

CVE-2026-55877-symfony/ux-icons: XSS via unsanitized SVG content in local files and Iconify on-demand responses

symfony/ux · GHSA-6v8j-33hc-mv84

low2026-06-19

CVE-2026-55866-SpiceDB: Checks involving relations with caveats can result in unconditional permission when conditional permission is expected

authzed/spicedb · GHSA-4vrg-r928-h5vv

medium2026-06-19

CVE-2026-55776-OpenBao: Transit secrets engine crashes on key creation with `derived: true` for asymmetric key types

openbao/openbao · GHSA-8w8f-r2xv-4q4j