Security advisories

medium2026-06-09

CVE-2026-47240-Net::IMAP: Command Injection via non-synchronizing literal in "raw" argument

ruby/net-imap · GHSA-8p34-64r3-mwg8

high2026-06-09

CVE-2026-50636-LimeSurvey has a SQL Injection issue

limesurvey/limesurvey · GHSA-pr6f-87hf-hx24

high2026-06-09

CVE-2026-50635-LimeSurvey constructs account password-reset links from the client-supplied HTTP Host header without validating it.

limesurvey/limesurvey · GHSA-5c37-5j7w-8mh8

critical2026-06-09

CVE-2026-9277-shell-quote quote() does not escape newlines in object .op values

ljharb/shell-quote · GHSA-w7jw-789q-3m8p

medium2026-06-09

CVE-2026-52902-awxkit has a path traversal vulnerability

ansible/awx · GHSA-g29c-rgq6-gxgj

medium2026-06-09

CVE-2026-34031-Apache Answer has an Unrestricted Upload of File with Dangerous Type vulnerability

apache/answer · GHSA-x4f6-mqg6-28xx

medium2026-06-09

CVE-2026-25699-Apache Answer has an Exposure of Private Personal Information to an Unauthorized Actor vulnerability

apache/answer · GHSA-w754-5646-xq9j

medium2026-06-09

CVE-2026-33582-Apache Answer has an Unrestricted Upload of File with Dangerous Type vulnerability

apache/answer · GHSA-v553-g2w6-295p

medium2026-06-09

CVE-2026-25688-Apache Answer has an Improper Neutralization of Alternate XSS Syntax vulnerability

apache/answer · GHSA-hmr2-99jm-8x45

medium2026-06-09

CVE-2026-49818-Apache Airflow has a Path Traversal issue

apache/airflow · GHSA-f6vj-48fm-hmvx

medium2026-06-09

CVE-2026-34905-Apache Answer has an Exposure of Sensitive Information to an Unauthorized Actor vulnerability

apache/answer · GHSA-85r2-pvg8-89r9

medium2026-06-09

CVE-2026-34033-Apache Answer vulnerable to Cross-site Scripting

apache/answer · GHSA-6qwm-5fm9-cvjx

high2026-06-09

CVE-2026-11572-degit has a Command Injection issue

rich-harris/degit · GHSA-77c7-pq4r-6mcq

high2026-06-09

CVE-2026-41855-Spring Framework Unsafe Deserialization via Jackson JMS Converters

spring-projects/spring-framework · GHSA-x863-p983-p4f7

medium2026-06-09

CVE-2026-41851-Spring Framework Denial of Service via Unbounded Cache in SpEL

spring-projects/spring-framework · GHSA-wxpp-56q6-5pcg

medium2026-06-09

CVE-2026-41847-Spring Framework Security Filter Bypass in WebFlux Kotlin Router DSL

spring-projects/spring-framework · GHSA-vqgp-pf68-6947

high2026-06-09

CVE-2026-41850-Spring Framework Algorithmic Denial of Service via SpEL Expressions

spring-projects/spring-framework · GHSA-r5w3-xv2f-j59q

medium2026-06-09

CVE-2026-41853-Spring Framework Multipart Request Smuggling in Spring MVC and WebFlux

spring-projects/spring-framework · GHSA-cjpg-rgq5-fr37

low2026-06-09

CVE-2026-41852-Spring Framework Arbitrary Method Invocation in SpEL Expressions

spring-projects/spring-framework · GHSA-9f52-rjqv-25qv

medium2026-06-09

CVE-2026-41846-Spring Framework Cross-site Scripting via JSP Form Tags

spring-projects/spring-framework · GHSA-957g-f97v-vppc