Security advisories

medium2026-05-29

CVE-2026-47230-Admidio: IDOR in documents-files.php allows cross-folder file rename and description changes by unauthorized uploaders

admidio/admidio · GHSA-q6w3-hpfv-rg36

medium2026-05-29

CVE-2026-47229-Admidio: CSRF in SSO client `enable` action toggles SAML/OIDC clients without token validation

admidio/admidio · GHSA-xg76-5qj2-2hhv

medium2026-05-29

CVE-2026-47228-Admidio's CSRF in registration `send_login` mode resets arbitrary user passwords

admidio/admidio · GHSA-mx25-j3rc-6w2w

medium2026-05-29

CVE-2026-47227-Admidio module-administrator can delete or reorder categories owned by other modules via dead authorization check in `modules/categories.php`

admidio/admidio · GHSA-rwjr-qjj3-mq2f

medium2026-05-29

CVE-2026-47226-Admidio: Authorization bypass in file_delete enables cross-folder file removal by authenticated users without delete privileges

admidio/admidio · GHSA-qc4c-hrmc-4f78

medium2026-05-29

CVE-2026-47213-BoxLite has a Timeout Bypass Vulnerability

boxlite-ai/boxlite · GHSA-xjhv-pp2r-6f82

medium2026-05-29

CVE-2026-47212-Symfony: Twilio SMS Notifier allows unauthenticated webhook injection due to missing X-Twilio-Signature verification

symfony/symfony · GHSA-55rj-x2vc-4whq

high2026-05-29

CVE-2026-48557-Spatie Laravel Media Library contains a file upload restriction bypass

spatie/laravel-medialibrary · GHSA-3ggm-c5m7-hfv5

medium2026-05-29

CVE-2026-48555-Spatie Laravel Media Library contains a server-side request forgery vulnerability

spatie/laravel-medialibrary · GHSA-fggg-964j-3j7h

high2026-05-29

CVE-2026-47211-ouroboros-ai Vulnerable to Remote Code Execution via Untrusted Project-Directory .env

q00/ouroboros · GHSA-c4m7-2gwp-vw76

low2026-05-29

CVE-2026-47203-Authelia Missing Username Canonicalization in Basic Auth (LDAP)

authelia/authelia · GHSA-hjj4-hfjm-fmrj

high2026-05-29

CVE-2026-47201-authentik's XML Signature Wrapping in SAML Source ACS allows authentication as arbitrary federated user

goauthentik/authentik · GHSA-c3m2-jqmq-pvp3

high2026-05-29

CVE-2026-47695-CC-Tweaked has an SSRF Protection Bypass with NAT64

cc-tweaked/cc-tweaked · GHSA-5jh9-2h63-pw4q

medium2026-05-29

CVE-2026-47184-zeroconf has unbounded DNS record cache that allows LAN-local memory exhaustion via multicast flood

python-zeroconf/python-zeroconf · GHSA-rfg2-pjw2-56x2

medium2026-05-29

CVE-2026-47183-zeroconf: Unbounded exception-dedup state retains packet buffers via traceback frame locals, enabling LAN-local memory exhaustion

python-zeroconf/python-zeroconf · GHSA-phvx-9mgw-67r5

medium2026-05-29

CVE-2026-47180-zeroconf has unbounded recursion in DNS compression-pointer decoder that allows LAN-local denial of service

python-zeroconf/python-zeroconf · GHSA-9pgc-3ccv-5297

medium2026-05-29

Nerdbank.MessagePack has Inefficient CPU Computation

aarnott/nerdbank.messagepack · GHSA-92vj-hp7m-gwcj

high2026-05-29

CVE-2026-47260-Koel Vulnerable to SSRF via Podcast Episode Enclosure URLs

koel/koel · GHSA-7j2f-6h2r-6cqc

medium2026-05-29

Nerdbank.MessagePack has a memory amplification DoS in collection deserialization

aarnott/nerdbank.messagepack · GHSA-qjvr-435c-5fjh

medium2026-05-29

CVE-2026-47122-Sparkle's AppInstaller post-stage-1 XPC listener accepts unvalidated connections, allowing spoofed appcast item data injection

sparkle-project/sparkle · GHSA-g3hp-f6mg-559v