Security advisories

high2026-06-12

CVE-2026-48152-Budibase: Basic app users can exfiltrate stored REST datasource auth by rewriting datasource base URL

budibase/budibase · GHSA-3gp5-q4jw-3v94

high2026-06-12

CVE-2026-48151-Budibase: Webhook schema endpoint authorization bypass allows unauthenticated mutation of webhook and automation schema

budibase/budibase · GHSA-qhv3-wjg8-6fx6

critical2026-06-12

CVE-2026-48150-Budibase: Workspace-scoped builder escalates to global admin via /api/public/v1/roles/assign

budibase/budibase · GHSA-6xp4-cf37-ppjh

high2026-06-12

Appsmith Super User Creation Race Condition Allows Multiple Instance Administrators

appsmithorg/appsmith · GHSA-9wcp-79g5-5c3c

medium2026-06-12

CVE-2026-48148-Budibase: Unvalidated VectorDB Host Parameter Enables SSRF

budibase/budibase · GHSA-cv96-5348-p5p8

medium2026-06-12

CVE-2026-48147-Budibase: Unanchored Regex in `matchers.ts` Allows CSRF Bypass via Query String Injection in Budibase Worker

budibase/budibase · GHSA-wxq7-x3qp-vcr8

medium2026-06-12

CVE-2025-58175-GeoServer has a Server-Side Request Forgery (SSRF) Vulnerability in its XML Entity Resolution

geoserver/geoserver · GHSA-x4r9-gmw3-hxww

high2026-06-12

CVE-2025-52465-GeoServer has an arbitrary file write vulnerability in its Master Password Dump Page

geoserver/geoserver · GHSA-7qmg-grcp-qf25

high2026-06-12

CVE-2026-48146-Budibase: SSRF via OAuth2 Config Validation — Missing fetchWithBlacklist Protection

budibase/budibase · GHSA-g6qx-g4pr-92v7

medium2026-06-12

CVE-2026-48128-Budibase: SSRF via User-Controlled queryId in Automation Execute Query Step

budibase/budibase · GHSA-6964-pp88-6wp9

medium2026-06-12

CVE-2026-28898-SwiftNIO HTTP/2: HTTP/2-to-HTTP/1 Request Smuggling via unvalidated :path pseudo-header in HTTP2ToHTTP1Codec

apple/swift-nio-http2 · GHSA-4px2-pw77-vc85

medium2026-06-12

CVE-2026-28975-NIOExtras: NIOHTTPRequestDecompressor ratio limit bypass via inflated Content-Length

apple/swift-nio-extras · GHSA-6ph5-fww6-vfwv

high2026-06-12

CVE-2026-28980-SwiftNIO NIOHTTP1: HTTPDecoder accepts unbounded HTTP/1 header blocks, enabling remote DoS

apple/swift-nio · GHSA-rj37-6j9x-74q6

high2026-06-12

CVE-2026-43671-SwiftNIO: Out-of-bounds write via ByteBuffer index and length UInt32 overflow

apple/swift-nio · GHSA-r3rc-9hpw-54v9

medium2026-06-12

CVE-2026-28970-SwiftNIO: CRLF Injection in outbound HTTP request URI via NIOHTTPRequestHeadersValidator

apple/swift-nio · GHSA-cq87-8r7h-962v

medium2026-06-12

CVE-2026-48121-LangGraph has NoSQL parameter injection in MongoDBSaver, allowing cross-tenant state access

langchain-ai/langgraphjs · GHSA-98xf-r82g-9mhx

medium2026-06-12

Firefly II has Stored XSS in Audit Log Entry view via piggy bank name (ale.twig)

firefly-iii/firefly-iii · GHSA-6jq6-x4cx-qvcm

high2026-06-12

CVE-2026-12681-Go-Attestation: Hash injection into trusted measurement list via unskipped SignatureHeaderSize vendor bytes in parseEfiSignatureList()

google/go-attestation · GHSA-9r4w-jg96-92mv

high2026-06-12

CVE-2026-48113-Chisel has an ACL Bypass via Post-Handshake SSH Channel ExtraData Injection

jpillora/chisel · GHSA-24fp-5v3p-rvpw

critical2026-06-12

CVE-2026-50633-Apache CXF JNDI Injection vulnerability in DispatchMDBMessageListenerImpl

apache/cxf · GHSA-qp3f-rvj8-46c8