Security advisories

medium2026-06-12

CVE-2026-47352-TYPO3 CMS has Broken Access Control in Backend API

typo3/typo3 · GHSA-2j54-93q2-3hjq

medium2026-06-12

CVE-2026-47351-TYPO3 CMS: Broken Access Control in Media Module

typo3/typo3 · GHSA-q93m-25xv-94hh

medium2026-06-12

CVE-2026-47348-TYPO3 CMS has Cross-Site Scripting in Indexed Search

typo3/typo3 · GHSA-cg75-qfg2-w9hj

low2026-06-12

CVE-2026-47344-TYPO3 HTML Sanitizer allows Cross-site Scripting

typo3/html-sanitizer · GHSA-jvf5-rxvv-3mcg

medium2026-06-12

CVE-2026-3433-Mattermost doesn't restrict role_updated websocket event broadcasts to members of the affected team or channel

mattermost/mattermost · GHSA-rp4v-qc77-phm4

medium2026-06-12

CVE-2026-6739-Mattermost doesn't require system-level permission when patching protected default system roles

mattermost/mattermost · GHSA-m2w9-h2mm-79qr

medium2026-06-12

CVE-2026-6689-Mattermost doesn't enforce PermissionInviteUser when setting AllowOpenInvite or AllowedDomains during team creation

mattermost/mattermost · GHSA-c28q-m4gf-vg4q

medium2026-06-12

CVE-2026-7184-Mattermost doesn't sanitize the Remote Cluster API response on PATCH operations

mattermost/mattermost · GHSA-9p44-r552-4wp9

high2026-06-12

CVE-2026-6961-Mattermost doesn't sanitize FileInfo.Name received from federated peers during shared channel file sync

mattermost/mattermost · GHSA-8qq9-cqj8-82w4

high2026-06-12

CVE-2026-7387-Mattermost doesn't require role-management authorization when setting the scheme_admin flag on group syncable link and patch endpoints

mattermost/mattermost · GHSA-6hxm-w4hv-vgvw

medium2026-06-12

CVE-2026-6046-Mattermost doesn't validate that a username returned during bot registration belongs to a bot account

mattermost/mattermost · GHSA-3vmp-whvv-5v9v

high2026-06-12

CVE-2026-45831-ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to

chroma-core/chroma · GHSA-xph7-9rjv-w5fr

critical2026-06-12

CVE-2026-45833-ChromaDB has a code injection vulnerability

chroma-core/chroma · GHSA-36p7-vc44-83pf

high2026-06-12

CVE-2026-45830-ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection

chroma-core/chroma · GHSA-2wm9-hf6c-p5cr

low2026-06-12

CVE-2026-49854-Tornado has out-of-bounds memory access via C extension

tornadoweb/tornado · GHSA-cx3h-4qpv-8hc9

low2026-06-12

nebula-mesh: POST /api/v1/hosts/{id}/mobile-bundle response lacks Cache-Control: no-store

juev/nebula-mesh · GHSA-6vgg-xhvh-38ff

medium2026-06-12

CVE-2026-48156-pypdf: Possible long runtimes for zero-only width values in cross-reference streamsuntimes for zero-only width values in cross-reference streams

py-pdf/pypdf · GHSA-248m-82v9-q6g6

medium2026-06-12

CVE-2026-48155-pypdf: Possible large memory usage for large offsets for layout mode text

py-pdf/pypdf · GHSA-cj93-chg6-vgv8

medium2026-06-12

CVE-2026-48154-gorest InMemorySecret2FA race condition allows process crash via concurrent map access (CWE-362)

pilinux/gorest · GHSA-cpwg-x64r-rgwg

high2026-06-12

Appsmith: Configuration-dependent origin validation bypass in password reset and email verification link generation

appsmithorg/appsmith · GHSA-j9gf-vw2f-9hrw