Security advisories

high2026-05-09

[email protected]/gitlab-mcp-server's SSE transport has no authentication and wildcard CORS, exposing all 86 GitLab tools

yoda-digital/mcp-gitlab-server · GHSA-8jr5-6gvj-rfpf

high2026-05-09

CVE-2026-44983-smallbitvec: Integer overflow in safe API leads to heap buffer overflow

servo/smallbitvec · GHSA-97wc-2hqc-cjgr

medium2026-05-08

CVE-2026-44788-SharpCompress has directory traversal via directory entries in WriteToDirectory (zip slip variant)

adamhathcock/sharpcompress · GHSA-6c8g-7p36-r338

high2026-05-08

CVE-2026-44900-epa4all-client has a VAU Signature bypass

oviva-ag/epa4all-client · GHSA-g8r3-5hwf-qp96

medium2026-05-08

CVE-2026-44896-Mistune has XSS via unescaped figclass/figwidth in Figure directive

lepture/mistune · GHSA-58cw-g322-p94v

medium2026-05-08

CVE-2026-44708-Mistune Math Plugin has an XSS Escape Bypass

lepture/mistune · GHSA-8g87-j6q8-g93x

medium2026-05-08

CVE-2026-44837-view_component: System Test Entry Point Path Check Allows Sibling Directory Escape

viewcomponent/view_component · GHSA-hg3h-g7xc-f7vp

medium2026-05-08

CVE-2026-44836-view_component: Preview Route Can Dispatch Inherited Helper Methods

viewcomponent/view_component · GHSA-7f3r-gwc9-2995

medium2026-05-08

CVE-2026-44833-Snipe-IT has an open redirect vulnerability

grokability/snipe-it · GHSA-mghp-5cq4-v6mg

high2026-05-08

GitPython: Newline injection in config_writer() section parameter bypasses CVE-2026-42215 patch, enabling RCE via core.hooksPath

gitpython-developers/gitpython · GHSA-mv93-w799-cj2w

medium2026-05-08

CVE-2026-44844-eml_parser has recursion DoS via nested message/rfc822 attachments

govcert-lu/eml_parser · GHSA-g47v-rwmh-r9f8

high2026-05-08

CVE-2026-44843-LangChain vulnerable to unsafe deserialization of attacker-controlled objects through overly broad `load()` allowlists

langchain-ai/langchain · GHSA-pjwx-r37v-7724

high2026-05-08

CVE-2023-49316-Phpseclib needs guardrails on large binaryfield integers

phpseclib/phpseclib · GHSA-2f25-pfq3-c7h8

critical2026-05-08

CVE-2026-37709-Snipe-IT has insecure permissions in file uploads

grokability/snipe-it · GHSA-xg82-2hrv-hf64

critical2026-05-08

CVE-2026-44330-free5GC's NEF nnef-pfdmanagement API is unauthenticated; forged bearer tokens can read PFD data and create/delete PFD subscriptions

free5gc/free5gc · GHSA-rwww-x45w-p52w

critical2026-05-08

CVE-2026-44329-free5GC's SMF UPI management interface lacks auth middleware; unauthenticated topology read/write requests reach handlers

free5gc/free5gc · GHSA-3258-qmv8-frp3

high2026-05-08

CVE-2026-44328-free5GC's SMF UPI DELETE /upi/v1/upNodesLinks/{ref} panics on AN-node deletion via nil UPF dereference; unauthenticated, state-mutating

free5gc/free5gc · GHSA-p9mg-74mg-cwwr

critical2026-05-08

CVE-2026-44327-free5GC's NEF nnef-oam route group is unauthenticated; no-token requests reach the OAM handler

free5gc/free5gc · GHSA-cmpj-2x3g-m7g3

critical2026-05-08

CVE-2026-44326-free5GC's NEF 3gpp-traffic-influence API is unauthenticated; missing or forged bearer tokens can create, read, patch, and delete subscriptions

free5gc/free5gc · GHSA-3p28-73q7-45xp

high2026-05-08

CVE-2026-44325-free5GC NRF: type-confusion panic in POST /oauth2/token structured-form parser via Reflect.Set on incompatible types

free5gc/free5gc · GHSA-f8qv-7x5w-qr48