Security advisories

high2026-06-17

CVE-2026-54007-Open WebUI: Cross-origin postMessage confirmation bypass via action:submit

open-webui/open-webui · GHSA-3vv5-8xxp-4f55

medium2026-06-17

CVE-2026-54006-Open WebUI IDOR: Calendar event re-parenting allows writing events into another user's calendar

open-webui/open-webui · GHSA-f3g7-59qc-pqg6

medium2026-06-17

CVE-2026-53931-NocoDB: Server-Side Request Forgery via Spreadsheet Import Endpoint

nocodb/nocodb · GHSA-hmcr-rmjq-47qr

medium2026-06-17

CVE-2026-53930-NocoDB: Server-Side Request Forgery via Base Migration URL

nocodb/nocodb · GHSA-h6vv-pcq8-7xm4

medium2026-06-17

CVE-2026-53929-NocoDB: Stored Cross-Site Scripting via Secure Attachment

nocodb/nocodb · GHSA-6mhr-74x2-98v9

medium2026-06-17

CVE-2026-53928-NocoDB: Refresh Tokens Persist Through Password Recovery

nocodb/nocodb · GHSA-r989-7g3j-wjhw

medium2026-06-17

CVE-2026-53927-NocoDB: Server-Side Request Forgery via Spreadsheet Fetch URL

nocodb/nocodb · GHSA-gprh-27j3-g5h4

medium2026-06-17

CVE-2026-54233-vLLM: OOM Denial of Service via Audio Decompression Bomb

vllm-project/vllm · GHSA-6pr9-rp53-2pmc

medium2026-06-17

CVE-2026-54236-vLLM: incomplete CVE-2026-22778 fix leaks PIL repr addresses via Anthropic router

vllm-project/vllm · GHSA-hgg8-fqqc-vfmw

medium2026-06-17

CVE-2026-53923-vLLM: GGUF dequantize kernel int truncation exposes uninitialized GPU memory in multi-tenant serving

vllm-project/vllm · GHSA-5jv2-g5wq-cmr4

medium2026-06-17

CVE-2026-12491-vLLM: image EXIF Rotation & PNG tRNS Transparency Not Normalized, Causing Mismatch Between Model Input and Expectations

vllm-project/vllm · GHSA-8jr5-v98p-w75m

medium2026-06-17

CVE-2026-54235-vLLM: temperature=NaN and temperature=Infinity bypass validation and propagate to GPU kernels

vllm-project/vllm · GHSA-7h4p-rffg-7823

medium2026-06-17

CVE-2026-54761-Traefik: Kubernetes Gateway crossProviderNamespaces bypass allows HTTPRoute outside the allowlist to expose internal Traefik services

traefik/traefik · GHSA-3g6v-2r68-prfc

medium2026-06-17

CVE-2026-53765-Chrome DevTools for agents: daemon.pid write follows symlinks in /tmp fallback runtime directory

chromedevtools/chrome-devtools-mcp · GHSA-3pvj-jv98-qhjq

medium2026-06-17

n8n: Wrong OAuth Scope on Evaluation Test Runs Endpoints

n8n-io/n8n · GHSA-664h-gpgq-h6xx

medium2026-06-17

CVE-2026-54325-Pi Agent: Pi loads project-local extensions without approval

earendil-works/pi · GHSA-mqxh-6gq7-558m

high2026-06-17

CVE-2026-54328-Pi Agent: Predictable temporary extension install paths allow local privilege escalation on shared Linux hosts

earendil-works/pi · GHSA-jfgx-wxx8-mp94

low2026-06-17

CVE-2026-54327-Pi Agent: Race condition in Pi auth.json writes could expose stored credentials

earendil-works/pi · GHSA-r95r-rj6r-c39x

medium2026-06-17

Laravel Framework: Temporary Signed URL Path Confusion

laravel/framework · GHSA-crmm-hgp2-wgrp

high2026-06-17

Laravel Framework: CRLF injection in default email rule

laravel/framework · GHSA-5vg9-5847-vvmq