Security advisories

low2026-06-19

CVE-2026-55775-OpenBao's System Backend allows Unauthorized Management of the containing Namespace

openbao/openbao · GHSA-mwr2-wmgp-crj6

low2026-06-19

CVE-2026-55774-OpenBao: Cross-namespace lease revocation/renewal via canonical sys/leases/{revoke,renew} — incomplete fix of CVE-2026-45808

openbao/openbao · GHSA-c36x-h252-g9x2

medium2026-06-19

CVE-2026-55770-OpenBao: LDAPi ldaputil (wrong escape func)

openbao/openbao · GHSA-6mwx-4547-5vc9

high2026-06-19

CVE-2026-55692-StarCitizenWiki Extension Embed Video: Stored XSS via malformed src url with $wgEmbedVideoRequireConsent enabled

starcitizenwiki/mediawiki-extensions-embedvideo · GHSA-5c7p-g73q-rpg5

medium2026-06-19

CVE-2026-27878-Grafana Tempo vulnerable to an out-of-memory crash

grafana/tempo · GHSA-6xff-cpcq-vpw2

medium2026-06-19

CVE-2026-55650-Outerbase Studio: Stored XSS in Text Widget Leads to Authentication Token Exposure

outerbase/studio · GHSA-wwf9-7jrc-rv4q

critical2026-06-19

CVE-2026-55447-Langflow: BaseFileComponent-based nodes arbitrary file read with RCE exploit

langflow-ai/langflow · GHSA-ccv6-r384-xp75

high2026-06-19

CVE-2026-55446-Langflow: Unauthenticated DoS through multipart form boundary file upload

langflow-ai/langflow · GHSA-qwqc-p3q8-wcg9

medium2026-06-19

CVE-2026-55423-Langflow: Logout button does not clear session

langflow-ai/langflow · GHSA-7hw8-6q6r-4276

high2026-06-19

CVE-2026-55255-Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow

langflow-ai/langflow · GHSA-qrpv-q767-xqq2

medium2026-06-19

CVE-2026-55206-py7zr: O(n^2) algorithmic complexity DoS in PackInfo._read()

miurahr/py7zr · GHSA-h4gh-22qq-72r7

medium2026-06-19

CVE-2026-55195-py7zr: Decompression bomb (zip bomb) denial of service via unchecked extraction size

miurahr/py7zr · GHSA-gjrg-mpp7-g774

medium2026-06-19

CVE-2026-55187-Mailpit: Incomplete SSRF protection in Link Check API via IPv6 transition mechanisms

axllent/mailpit · GHSA-w4mc-hhc6-xp28

medium2026-06-19

CVE-2026-55185-Open Redirect Bypass in miniflux-v2

miniflux/v2 · GHSA-m999-j542-5w3r

medium2026-06-19

http4k: `ServerFilters.DigestAuth` / `DigestAuthProvider` defaulted to an always-true nonce verifier, disabling replay protection in default deployments

http4k/http4k · GHSA-c7jm-38gq-h67h

medium2026-06-19

http4k: BasicCookieStorage` (renamed `InsecureCookieStorage`) did not enforce RFC 6265 cookie scoping; new `DefaultCookieStorage` is now the default

http4k/http4k · GHSA-pr33-38xx-6r26

high2026-06-19

http4k: `HmacSha256.hash` (despite the `Hmac` naming) computed a plain unkeyed digest; clarified by deprecation in favour of `Sha256.hash` / `Sha256.hmac`

http4k/http4k · GHSA-m4w9-hjfw-vwj4

medium2026-06-19

http4k: `reverseProxy()` defaulted to substring (`Contains`) matching on `Host`; tightened to `Exact`

http4k/http4k · GHSA-jrpc-7vxp-69p6

medium2026-06-19

CVE-2026-54762-Traefik Kubernetes Ingress NGINX provider fails open when auth-secret resolution fails

traefik/traefik · GHSA-4mr2-fg2p-w63c

medium2026-06-19

CVE-2026-55847-Allure Report: Stored XSS via unescaped ANSI helper in status message/trace rendering

allure-framework/allure2 · GHSA-gx93-m64w-5m6h