Security advisories

medium2026-06-16

CVE-2026-54303-n8n: Reflected XSS via Facebook, WhatsApp, and Microsoft Teams Trigger Webhook Verification Endpoints

n8n-io/n8n · GHSA-h86q-fx34-gfjr

high2026-06-16

CVE-2026-54312-n8n: Microsoft SQL Node Prototype Pollution

n8n-io/n8n · GHSA-x6p3-m6h9-fx7r

high2026-06-16

yt-dlp: Arbitrary command injection possible if --exec option used with yt-dlp

yt-dlp/yt-dlp · GHSA-69qj-pvh9-c5wg

medium2026-06-16

CVE-2026-46448-OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints

openstack/nova · GHSA-mfg3-p6m3-gjgr

high2026-06-16

CVE-2026-54322-Daytona: Cross-org IDOR in organization role update/delete — any org owner can rewrite or destroy another org's roles

daytonaio/daytona · GHSA-qxvm-pcfm-qc39

medium2026-06-16

CVE-2026-52846-Caddy: stripHTML template function bypass

caddyserver/caddy · GHSA-vcc4-2c75-vc9v

high2026-06-16

CVE-2026-52845-Caddy: FastCGI header normalization bypass in `forward_auth copy_headers`

caddyserver/caddy · GHSA-f59h-q822-g45g

high2026-06-16

CVE-2026-52844-Caddy: Windows `file_server` path authorization bypass via encoded backslash

caddyserver/caddy · GHSA-qrp7-cvwr-j2c6

high2026-06-16

CVE-2026-50574-yt-dlp: Arbitrary code execution via manifest downloads with aria2c

yt-dlp/yt-dlp · GHSA-vx4q-3cr2-7cg2

high2026-06-16

CVE-2026-54321-Daytona: Public sandbox previews remain accessible for up to one hour after being made private

daytonaio/daytona · GHSA-ww63-pv5x-vfc8

high2026-06-16

CVE-2026-53622-Traefik: HTTP/3 mTLS bypass via exact SNI TLSOptions lookup for wildcard and mixed-case hosts

traefik/traefik · GHSA-9cr8-q42q-g8m7

high2026-06-16

CVE-2026-53755-Crawl4AI: SSRF via proxy settings in the Docker server bypasses the crawl-URL SSRF check

unclecode/crawl4ai · GHSA-6qhc-x826-342c

high2026-06-16

Crawl4AI: Arbitrary file write (symlink/TOCTOU) plus log and webhook-header injection in Docker server

unclecode/crawl4ai · GHSA-7cx2-g3h9-382p

high2026-06-16

Crawl4AI: LLM credential exfiltration in Docker server via request base_url and env: token resolution

unclecode/crawl4ai · GHSA-f989-c77f-r2cq

high2026-06-16

CVE-2026-53754-Crawl4AI: SSRF filter bypass in Docker server via IPv6 transition forms (NAT64 / 6to4 / unspecified / v4-mapped)

unclecode/crawl4ai · GHSA-4qqr-vv2q-cmr5

high2026-06-16

CVE-2026-50023-yt-dlp: Dangerous file type creation via insufficient filename sanitization (Bypass of CVE-2024-38519)

yt-dlp/yt-dlp · GHSA-c6mh-fpjc-4pr3

medium2026-06-16

CVE-2026-50019-yt-dlp: File Downloader cookie leak with curl

yt-dlp/yt-dlp · GHSA-f7j3-774f-rfhj

critical2026-06-16

CVE-2026-54157-LobeHub: Unauthenticated SSRF in `/webapi/proxy`

lobehub/lobehub · GHSA-xmwj-c75x-6346

critical2026-06-16

CVE-2026-56266-Crawl4AI: Multiple Docker API Vulnerabilities - File Write, SSRF, Auth Bypass, XSS, JS Execution

unclecode/crawl4ai · GHSA-365w-hqf6-vxfg

critical2026-06-16

CVE-2026-53753-Crawl4AI: AST Sandbox Escape via gi_frame.f_back Chain - Pre-Auth RCE in Docker API

unclecode/crawl4ai · GHSA-qxjp-w3pj-48m7