Security advisories

medium2026-06-04

CVE-2026-48681-OpenStack Ironic allows file overwrite via directory traversal during deployment with a crafted ISO image

openstack/ironic · GHSA-9v62-qx4c-44x5

critical2026-06-04

CVE-2026-41283-OpenStack Mistral allows Arbitrary Remote Code Execution when the API is exposed

openstack/mistral · GHSA-9hfw-w3f4-c4p8

medium2026-06-04

CVE-2026-46447-OpenStack Ironic allows Boot Script Injection

openstack/ironic · GHSA-jrh2-f5jc-xpgr

low2026-06-04

CVE-2026-10775-SGLang is Vulnerable to DoS via the data_hash Function

sgl-project/sglang · GHSA-jrcc-j37m-v8fg

low2026-06-04

CVE-2026-10783-Gradio: Audio cache key ignores metadata when saving numpy audio outputs

gradio-app/gradio · GHSA-6655-8ph2-63j3

high2026-06-03

CVE-2026-52793-Froxlor's API Authentication bypasses 2FA Authentication

froxlor/froxlor · GHSA-f9rx-7wf7-jr36

high2026-06-03

CVE-2026-49143-browserstack-runner vulnerable to Remote Code Execution via vm sandbox escape in _log HTTP handler

browserstack/browserstack-runner · GHSA-6vr3-7wcx-v5g5

high2026-06-03

CVE-2026-49144-browserstack-runner has an unauthenticated arbitrary file read via path traversal in HTTP server

browserstack/browserstack-runner · GHSA-8rpw-6cqh-2v9h

critical2026-06-03

CVE-2026-44182-Jupyter Enterprise Gateway: Kubernetes Manifest Injection in Jinja2 Template Rendering

jupyter-server/enterprise_gateway · GHSA-cfw7-6c5v-2wjq

critical2026-06-03

CVE-2026-44181-Jupyter Enterprise Gateway: Jinja2 Template Server Side Template Injection resulting in Remote Code Execution

jupyter-server/enterprise_gateway · GHSA-f49j-v924-fx9w

medium2026-06-03

CVE-2026-47265-AIOHTTP is vulnerable to cross-origin redirect with per-request cookies

aio-libs/aiohttp · GHSA-hg6j-4rv6-33pg

low2026-06-03

CVE-2026-10766-mlrun: DataFrame hash collisions can cause dataset artifact path conflicts and silent data corruption

mlrun/mlrun · GHSA-phx2-3w66-h4pw

high2026-06-03

CVE-2026-7888-Concrete CMS is vulnerable to PHP Object Injection via unserialize() calls in the Workflow, Form block, and File/Set components

concretecms/concretecms · GHSA-52pr-7vmf-2w7x

critical2026-06-03

CVE-2026-44180-Jupyter Enterprise Gateway: ContainerProcessProxy._enforce_prohibited_ids Bypass

jupyter-server/enterprise_gateway · GHSA-chq7-94j8-cj28

high2026-06-03

CVE-2026-44023-Docling Core: Unsafe remote filename resolution

docling-project/docling-core · GHSA-jmmv-h3mp-59v8

high2026-06-03

CVE-2026-44019-Docling Core: Insufficient validation of image reference URIs

docling-project/docling-core · GHSA-j5xp-7m2f-49jv

high2026-06-03

CVE-2026-47214-Docling: Unsafe URI and Path Handling in HTML Backend

docling-project/docling · GHSA-q29v-xc37-wh5m

medium2026-06-03

CVE-2026-44022-Docling: Potential Path Traversal via LaTeX \includegraphics and \input Commands

docling-project/docling · GHSA-2j5p-7p5m-cvqr

high2026-06-03

CVE-2026-44020-Docling: Unsafe XML Entity Expansion in USPTO Patent Backend

docling-project/docling · GHSA-m88r-rg27-5xfg

medium2026-06-03

CVE-2026-44018-Docling: Unsafe Archive Extraction and XML Parsing in METS-GBS Backend

docling-project/docling · GHSA-r3xg-rg9j-67fv