Security advisories

low2026-06-18

CVE-2026-12566-BBOT: Server-Side Request Forgery (SSRF) in docker_pull module via WWW-Authenticate realm parsing

blacklanternsecurity/bbot · GHSA-3mp7-vp6j-2mxx

medium2026-06-18

CVE-2026-12565-BBOT: Path traversal (Zip-Slip) in unarchive module - incomplete fix for CVE-2025-10284

blacklanternsecurity/bbot · GHSA-3vgw-585j-4m45

medium2026-06-18

CVE-2026-53861-OpenClaw: macOS Swift exec allowlist missed combined POSIX inline flags

openclaw/openclaw · GHSA-c226-q6fx-6j6c

medium2026-06-18

CVE-2026-55890-Grav: Stored CSS injection via Markdown image ?style=… reaches MediaObjectTrait::style() — incomplete patch of GHSA-r7fx-8g49-7hhr

getgrav/grav · GHSA-pmf8-g7c8-7v54

medium2026-06-18

praisonai-platform: Authorization Bypass Through User-Controlled Key

mervinpraison/praisonai · GHSA-2fjj-qqg8-fg7x

medium2026-06-18

CVE-2026-55885-Grav: Admin Backup Zip File Exposes Account Credentials and Configuration Secrets

getgrav/grav · GHSA-2f86-9cp8-6hcf

medium2026-06-18

CVE-2026-57441-MCPVault: PathFilter restricted-directory deny-list bypass via case and trailing dot/space equivalence

bitbonsai/mcpvault · GHSA-j99q-93c9-h869

medium2026-06-18

pypdf: Missing stream length values ignore defined limits

py-pdf/pypdf · GHSA-jm82-fx9c-mx94

medium2026-06-18

CVE-2026-55686-Podman: WORKDIR symlink traversal vulnerability

podman-container-tools/podman · GHSA-q6r4-3wmg-fwcq

high2026-06-18

CVE-2026-9697-undici vulnerable to TLS certificate validation bypass via dropped requestTls in SOCKS5 ProxyAgent

nodejs/undici · GHSA-vmh5-mc38-953g

medium2026-06-18

CVE-2026-9678-undici vulnerable to cross-user information disclosure via shared cache whitespace bypass

nodejs/undici · GHSA-pr7r-676h-xcf6

high2026-06-18

CVE-2026-9675-undici WebSocket client vulnerable to denial of service via cumulative fragment bypass

nodejs/undici · GHSA-38rv-x7px-6hhq

high2026-06-18

CVE-2026-82659-Nodemailer: Message-level raw option bypasses disableFileAccess/disableUrlAccess, enabling arbitrary file read and full-response SSRF in the delivered message

nodemailer/nodemailer · GHSA-p6gq-j5cr-w38f

critical2026-06-18

CVE-2026-47103-python-statemachine SCXML <data expr> Eval Injection

fgmacedo/python-statemachine · GHSA-v4jc-pm6r-3vj8

medium2026-06-18

CVE-2026-65898-DOMPurify: Permanent `ALLOWED_ATTR` pollution via `setConfig()` bypassing the hook clone-guard (incomplete fix of the 3.4.7 hook-pollution patch)

cure53/dompurify · GHSA-cmwh-pvxp-8882

critical2026-06-18

CVE-2026-57147-praisonai-platform: default JWT signing secret 'dev-secret-change-me' enables token forgery

mervinpraison/praisonai · GHSA-cwj8-7gp2-ggcw

high2026-06-18

CVE-2026-57144-PraisonAI SandlockSandbox falls back to unrestricted subprocess execution when Landlock is unavailable

mervinpraison/praisonai · GHSA-6jcq-6546-qrrw

high2026-06-18

CVE-2026-57132-PraisonAI: PRAISONAI_CALL_AUTH=disabled environment variable unconditionally disables authentication

mervinpraison/praisonai · GHSA-8ccj-p46r-jwqq

high2026-06-18

CVE-2026-57143-PraisonAI: Server-Side Request Forgery (SSRF) in SearxNG / search_web tools via attacker-controlled searxng_url parameter

mervinpraison/praisonai · GHSA-4pcv-mg8v-vrgf

critical2026-06-18

CVE-2026-57148-praisonai-platform 0.1.4 still boots on the hardcoded JWT secret dev-secret-change-me (default-open production guard)

mervinpraison/praisonai · GHSA-f38v-77qj-h4jq