Security advisories

low2026-06-16

CVE-2026-54326-Pi Agent: Potential XSS in HTML session exports via Markdown URL sanitization bypass

earendil-works/pi · GHSA-7v5m-pr3q-6453

medium2026-06-16

CVE-2026-20706-Gitea: Token scope bypass on web archive download endpoint

go-gitea/gitea · GHSA-cr4g-f395-h25h

medium2026-06-16

CVE-2026-27783-Gitea: Missing repository-unit authorization on issue-template API endpoints

go-gitea/gitea · GHSA-3fwp-p5rj-2pxf

medium2026-06-16

CVE-2026-25714-Gitea: Incomplete CVE-2025-68941 fix: /user/orgs missing checkTokenPublicOnly + switch-case logic flaw

go-gitea/gitea · GHSA-8629-vc8r-5p58

high2026-06-16

CVE-2026-26231-Gitea: Authorization Bypass via "Allow edits from maintainers" allows unauthorized commits to any readable repo

go-gitea/gitea · GHSA-mm7c-rhg6-qr4r

high2026-06-16

CVE-2026-28699-Gitea: OAuth2 access token scope enforcement bypass via HTTP Basic authentication

go-gitea/gitea · GHSA-9r5x-wg6m-x2rc

high2026-06-16

CVE-2026-52797-Gogs: Overwriting critical files results in a denial of service

gogs/gogs · GHSA-pm6v-2h4w-4rp2

critical2026-06-16

CVE-2026-49980-Rclone: Unauthenticated command execution in `rclone rcd --rc-serve` via inline remote instantiation, bypassing CVE-2026-41179 fix

rclone/rclone · GHSA-qw24-gh76-8rvv

medium2026-06-16

CVE-2026-49993-@nuxt/webpack-builder and @nuxt/rspack-builder dev server same-origin check bypassed when Sec-Fetch-Site, Origin, and Referer are all absent (incomplete fix for GHSA-6m52-m754-pw2g)

nuxt/nuxt · GHSA-x6qj-4h56-5rj5

low2026-06-16

CVE-2026-56317-Cross-site scripting via <NoScript> slot content in Nuxt's head components

nuxt/nuxt · GHSA-m3q2-p4fw-w38m

critical2026-06-16

CVE-2026-49468-LiteLLM: Authentication Bypass via Host Header Injection

berriai/litellm · GHSA-4xpc-pv4p-pm3w

high2026-06-16

CVE-2026-28744-Gitea: Git Smart HTTP Skips Repository Token Scopes for Bearer Tokens

go-gitea/gitea · GHSA-cc8w-r4qh-3v65

high2026-06-16

CVE-2026-54304-n8n: SecurityScorecard Node Leaks API Token to User-Controlled Host

n8n-io/n8n · GHSA-rm2v-h48j-895m

high2026-06-16

CVE-2026-54309-n8n: MCP Browser HTTP Transport Exposes Unauthenticated Browser-Control Sessions

n8n-io/n8n · GHSA-qrx8-25qr-5r7v

high2026-06-16

CVE-2026-54305-n8n: Cross-Tenant Credential Takeover via Dynamic Credentials EE Endpoints

n8n-io/n8n · GHSA-2j5h-858j-5mpf

high2026-06-16

CVE-2026-54307-n8n: Credential Exfiltration via Permission Bypass

n8n-io/n8n · GHSA-pmqw-72cg-wx85

medium2026-06-16

CVE-2026-54314-n8n: Denial of Service via ZIP decompression in webhook workflow

n8n-io/n8n · GHSA-jqpw-qww5-cj4c

medium2026-06-16

n8n: Public API Execution Retry Authorization Bypass

n8n-io/n8n · GHSA-h3jj-5f3v-3685

medium2026-06-16

n8n: Python Code Node AST Validator Bypass

n8n-io/n8n · GHSA-jwm3-qcfw-c5pp

high2026-06-16

CVE-2026-54302-n8n: Stored XSS in Chat Trigger Node

n8n-io/n8n · GHSA-42h7-m79w-wvg5