Security advisories

high2026-06-18

CVE-2026-56833-PraisonAI Dynamic Context history and terminal tools read files outside configured storage via path traversal

mervinpraison/praisonai · GHSA-22cj-m4wf-fv2c

high2026-06-18

CVE-2026-56832-PraisonAI DiscordApproval accepts unrelated channel messages as dangerous-tool approvals

mervinpraison/praisonai · GHSA-8579-rgg5-ph2m

medium2026-06-18

CVE-2026-55669- ZITADEL: Missing Token Audience Validation (`aud`) in JWT IdP Provider

zitadel/zitadel · GHSA-g5h5-m4hm-xjrr

medium2026-06-18

CVE-2026-56664- ZITADEL: Missing Token Lifecyle Validation (`exp` and `iat`) in JWT IdP Provider

zitadel/zitadel · GHSA-wxg7-w2v3-w38g

high2026-06-18

CVE-2026-55672- ZITADEL: Missing client_id binding in OIDC authorization code exchange and refresh token flows (RFC 6749 Section 4.1.3 violation)

zitadel/zitadel · GHSA-xqxv-4jc2-x56x

medium2026-06-18

CVE-2026-57128-PraisonAI: Unauthenticated Event Injection via SSE `/publish` Endpoint

mervinpraison/praisonai · GHSA-35w5-pcw4-jx94

low2026-06-18

CVE-2026-55670- ZITADEL: Cross-Tenant User Leakage via Recycled Identifiers

zitadel/zitadel · GHSA-6x8v-2fq5-2229

high2026-06-18

CVE-2026-56740-JLine3 Telnet server: Unauthenticated Remote Memory Exhaustion via Unbounded Telnet NEW-ENVIRON Variables

jline/jline3 · GHSA-47qp-hqvx-6r3f

high2026-06-18

CVE-2026-56741-JLine3 Telnet server: Unauthenticated Remote DoS via Unbounded Telnet NAWS Terminal Geometry

jline/jline3 · GHSA-2r2c-cx56-8933

medium2026-06-18

CVE-2026-55661-TinaCMS rich-text (slatejson) rendering does not sanitize link/image URLs, allowing stored XSS via dangerous URL schemes

tinacms/tinacms · GHSA-2vcc-5v34-9jc8

high2026-06-18

Karate Mock Server RCE via embedded expression evaluation of request-derived data

karatelabs/karate · GHSA-2c85-rfcc-g74j

medium2026-06-18

CVE-2026-55617-Hydro: Insufficient session expiration when recreating sessions

hydro-dev/hydro · GHSA-94jp-7776-qj6q

high2026-06-18

CVE-2026-55603-http-proxy-middleware: multipart/form-data field injection via unescaped CRLF in `fixRequestBody`

chimurai/http-proxy-middleware · GHSA-gcq2-9pq2-cxqm

medium2026-06-18

CVE-2026-55602-http-proxy-middleware `router` host+path substring matching allows Host-header-driven backend routing bypass

chimurai/http-proxy-middleware · GHSA-64mm-vxmg-q3vj

medium2026-06-18

CVE-2026-55254-NCalc: Denial of Service via Unbounded and Non-Terminating Factorial Evaluation

ncalc/ncalc · GHSA-3w5p-95mh-gq75

high2026-06-18

CVE-2026-55388-piscina: Prototype Pollution Gadget → RCE via inherited options.filename

piscinajs/piscina · GHSA-x9g3-xrwr-cwfg

high2026-06-18

CVE-2026-55887-Docker MCP Gateway: Argument injection via OCI image label YAML

docker/mcp-gateway · GHSA-r2xf-7jw5-pjg6

medium2026-06-18

CVE-2026-55886-jodit: Prototype pollution in Jodit via Jodit.modules.Helpers.set()

xdan/jodit · GHSA-vpmm-x3fm-qr5c

high2026-06-18

CVE-2026-55229-Gotenberg: SSRF via LibreOffice document processing

gotenberg/gotenberg · GHSA-2mrg-35hw-x3x9

medium2026-06-18

CVE-2026-55226-Strimzi: Unrestricted access to all Secrets within namespace watched by the Topic operator

strimzi/strimzi-kafka-operator · GHSA-r427-j2h7-wv3m