Security advisories

low2026-04-23

CVE-2026-6874-copilot-api has Reliance on Reverse DNS Resolution for a Security-Critical Action

ericc-ch/copilot-api · GHSA-3vr4-cvmg-7fx4

medium2026-04-22

CVE-2026-42086-OpenC3 COSMOS is Vulnerable to Self-XSS Through the Command Sender

openc3/cosmos · GHSA-ffq5-qpvf-xq7x

medium2026-04-22

CVE-2026-42085-OpenC3 COSMOS allows arbitrary writes to plugins directory via path-traversed config filenames

openc3/cosmos · GHSA-4jvx-93h3-f45h

high2026-04-22

CVE-2026-42084-OpenC3 COSMOS: Hijacked session token can be used to reset password for persistence

openc3/cosmos · GHSA-wgx6-g857-jjf7

medium2026-04-22

CVE-2026-41511-OpenMcdf has an Infinite loop DoS via crafted CFB directory cycle

openmcdf/openmcdf · GHSA-jxpf-xq2m-q525

high2026-04-22

CVE-2026-42075-Evolver: Path Traversal via `--out` flag in `fetch` command allows Arbitrary File Write

evomap/evolver · GHSA-r466-rxw4-3j9j

critical2026-04-22

CVE-2026-42076-Evolver: Command Injection via `execSync` in `_extractLLM()` function allows Remote Code Execution

evomap/evolver · GHSA-j5w5-568x-rq53

medium2026-04-22

CVE-2026-42077-Evolver has Prototype Pollution via `Object.assign()` in its mailbox store operations

evomap/evolver · GHSA-2cjr-5v3h-v2w4

critical2026-04-22

CVE-2026-42072-NornicDB has Improper Network Binding in its Bolt Server, allowing unauthorized remote access

orneryd/nornicdb · GHSA-2hp7-65r3-wv54

medium2026-04-22

justhtml has sanitization bypass in custom policies and programmatic DOM

emilstenstrom/justhtml · GHSA-vrx2-77f2-ww34

high2026-04-22

CVE-2026-41676-rust-openssl: Deriver::derive and PkeyCtxRef::derive can overflow short buffers on OpenSSL 1.1.1

rust-openssl/rust-openssl · GHSA-pqf5-4pqq-29f5

low2026-04-22

CVE-2026-41677-rust-opennssl has an Out-of-bounds read in PEM password callback when returning an oversized length

rust-openssl/rust-openssl · GHSA-xmgf-hq76-4vx2

high2026-04-22

CVE-2026-41678-rust-openssl has incorrect bounds assertion in aes key wrap

rust-openssl/rust-openssl · GHSA-8c75-8mhr-p7r9

high2026-04-22

CVE-2026-41681-rust-openssl: rustMdCtxRef::digest_final() writes past caller buffer with no length check

rust-openssl/rust-openssl · GHSA-ghm9-cr32-g9qj

high2026-04-22

CVE-2026-41898-rust-openssl: Unchecked callback length in PSK/cookie trampolines leaks adjacent memory to peer

rust-openssl/rust-openssl · GHSA-hppc-g8h3-xhp3

medium2026-04-22

CVE-2026-41907-uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided

uuidjs/uuid · GHSA-w5hq-g745-h8pq

high2026-04-22

CVE-2026-41894-SiYuan: Path Traversal via Double URL Encoding in `/export/` Endpoint (Incomplete Fix Bypass for CVE-2026-30869)

siyuan-note/siyuan · GHSA-hjh7-r5w8-5872

high2026-04-22

MCPHub has Path Traversal via Malicious MCPB Manifest Name

samanhappy/mcphub · GHSA-p3h2-2j4p-p83g

low2026-04-22

CVE-2026-41889-pgx: SQL Injection via placeholder confusion with dollar quoted string literals

jackc/pgx · GHSA-j88v-2chj-qfwx

medium2026-04-22

Gitea has insecure default SSH settings

go-gitea/gitea · GHSA-3m6q-h5gj-7mrw