Security advisories

medium2026-06-18

CVE-2026-54319-Daytona: Path traversal in sandbox volume id mounts arbitrary host paths into the sandbox — cross-tenant data access and host escape

daytonaio/daytona · GHSA-fjv8-j4p5-cr9m

high2026-06-18

CVE-2026-11719-MCP Toolbox for Databases: authenticated authorization bypass

googleapis/mcp-toolbox · GHSA-5gf6-gc35-xjpc

critical2026-06-18

CVE-2026-11718-googleapis/mcp-toolbox: authentication bypass vulnerability in the generic opaque token validation path (validateOpaqueToken)

googleapis/mcp-toolbox · GHSA-wcpr-6g7x-p44r

critical2026-06-18

CVE-2026-11717-googleapis/mcp-toolbox: authentication bypass vulnerability in the generic opaque token validation path (validateOpaqueToken)

googleapis/mcp-toolbox · GHSA-8fcc-w5hv-4gxv

low2026-06-18

CVE-2026-55170-OpenFGA Improper Policy Enforcement

openfga/openfga · GHSA-cf98-j28v-49v6

medium2026-06-18

CVE-2026-55093-tract-nnef: integer overflow in NNEF `.dat` tensor parser yields an out-of-bounds read on model load

sonos/tract · GHSA-x5mv-8wgw-29hg

low2026-06-18

CVE-2026-54711-PGHoard: Password written to debug log

aiven-open/pghoard · GHSA-mpx4-jmpr-vm8v

high2026-06-18

CVE-2026-54695-Pipecat: Telephony WebSocket `/ws` Unauthenticated Call-Control Abuse via Attacker-Supplied Call SID

pipecat-ai/pipecat · GHSA-j8cv-x86q-rj85

medium2026-06-18

CVE-2026-55701-opentelemetry-collector-contrib: githubreceiver silently ignores configured required_headers authentication

open-telemetry/opentelemetry-collector-contrib · GHSA-w5cv-pw74-4rxc

high2026-06-18

CVE-2026-54005-Kirby: `pages.access` permission is not checked in the `site/find` REST API route

getkirby/kirby · GHSA-r3w8-2c5r-h9j9

medium2026-06-18

CVE-2026-54004-Kirby: Access to files of top-level drafts is not protected by permissions

getkirby/kirby · GHSA-89cp-7p28-jffg

critical2026-06-18

CVE-2026-54003-Kirby: External Initialization of the Panel on reverse proxy setups with the `Forwarded` header

getkirby/kirby · GHSA-whxw-24jc-cwmv

high2026-06-18

CVE-2026-54002-Kirby: Cross-site scripting (XSS) from incomplete HTML/XML sanitization in `Dom::sanitize()`

getkirby/kirby · GHSA-wr9h-4r83-f4v6

medium2026-06-18

CVE-2026-50188-Kirby: Request header injection in `Http\Remote`

getkirby/kirby · GHSA-4v4h-m2qq-ppgw

high2026-06-18

CVE-2026-49276-Kirby: Self cross-site scripting (self-XSS) in the writer field

getkirby/kirby · GHSA-rhj6-r49h-5932

medium2026-06-18

CVE-2026-49274-Kirby: `pages.access` permission is not checked in the pages picker for parent pages

getkirby/kirby · GHSA-23q2-54qv-rq5x

medium2026-06-18

CVE-2026-47256-opentelemetry-collector-contrib sentryexporter: Path traversal in Sentry exporter via attacker-controlled service.name reaches privileged Sentry API endpoints with operator bearer token

open-telemetry/opentelemetry-collector-contrib · GHSA-4jvg-4jfx-fmhc

critical2026-06-18

CVE-2026-44727-Jupyter Server: Stored XSS in `NbconvertFileHandler` / `NbconvertPostHandler` via missing `sandbox` CSP

jupyter-server/jupyter_server · GHSA-fcw5-x6j4-ccmp

low2026-06-18

CVE-2026-12567-BBOT: Symlink-Following Arbitrary Write via github_workflows Module

blacklanternsecurity/bbot · GHSA-rvp7-w75q-9fv2

medium2026-06-18

CVE-2026-12568-BBOT: Arbitrary File Write in postman_download Module

blacklanternsecurity/bbot · GHSA-m54h-vhf9-3w3m