Security advisories

medium2026-04-22

CVE-2026-41131-OpenFGA has Improper Policy Enforcement

openfga/openfga · GHSA-57j5-qwp2-vqp6

high2026-04-22

CVE-2026-40937-RustFS: Missing admin authorization on notification target endpoints allows unauthenticated configuration of event webhooks

rustfs/rustfs · GHSA-pfcq-4gjr-6gjm

medium2026-04-22

CVE-2026-34066-nimiq-blockchain: Peer-triggerable panic during history sync

nimiq/core-rs-albatross · GHSA-j99g-7rqw-q9jg

medium2026-04-22

CVE-2026-34068-nimiq-transaction: UpdateValidator transactions allows voting key change without proof-of-knowledge

nimiq/core-rs-albatross · GHSA-pf4j-pf3w-95f9

low2026-04-22

CVE-2026-34067-nimiq-transaction: Panic via `HistoryTreeProof` length mismatch

nimiq/core-rs-albatross · GHSA-264v-m8fm-76jm

high2026-04-22

CVE-2026-34065-nimiq-primitives: Node crash due to missing interlink validation in election macro block proposals

nimiq/core-rs-albatross · GHSA-7c4j-2m43-2mgh

medium2026-04-22

CVE-2026-34064-nimiq-account: Vesting insufficient funds error can panic

nimiq/core-rs-albatross · GHSA-vc34-39q2-m6q3

critical2026-04-22

CVE-2026-33471-nimiq-block has skip block quorum bypass via out-of-range BitSet indices & u16 truncation

nimiq/core-rs-albatross · GHSA-6973-8887-87ff

medium2026-04-22

CVE-2026-32885-DDEV has ZipSlip path traversal in tar and zip archive extraction

ddev/ddev · GHSA-x2xq-qhjf-5mvg

medium2026-04-22

CVE-2026-25996-Inspektor Gadget uses unsanitized ANSI Escape Sequences In `columns` Output Mode

inspektor-gadget/inspektor-gadget · GHSA-34r5-6j7w-235f

medium2026-04-22

CVE-2026-35372-uutils coreutils has a UNIX Symbolic Link (Symlink) Following issue

uutils/coreutils · GHSA-wq63-vh5h-pr5p

low2026-04-22

CVE-2026-35375-uutils coreutils has an Improper Handling of Unicode Encoding Issue

uutils/coreutils · GHSA-vx9m-xjwf-8cqm

medium2026-04-22

CVE-2026-35380-uutils coreutils has an Improper Input Validation Issue in its cut Utility

uutils/coreutils · GHSA-m2pg-c7m6-77pj

low2026-04-22

CVE-2026-35379-uutils coreutils has an Incorrect Provision of Specified Functionality Issue

uutils/coreutils · GHSA-fhr3-xh3q-69w6

medium2026-04-22

CVE-2026-35376-uutils coreutils has a Time-of-check Time-of-use (TOCTOU) Race Condition

uutils/coreutils · GHSA-6g8r-74qp-6859

low2026-04-22

CVE-2026-35377-uutils coreutils has an Improper Input Validation Issue in its env Utility

uutils/coreutils · GHSA-5v4g-vw9x-h534

low2026-04-22

CVE-2026-35378-uutils coreutils has an Incorrect Short Circuit Evaluation Issue

uutils/coreutils · GHSA-5pv5-xh52-hvrp

medium2026-04-22

CVE-2026-35374-uutils coreutils has a Time-of-check Time-of-use (TOCTOU) Race Condition

uutils/coreutils · GHSA-4wrp-79m8-9m9p

medium2026-04-22

CVE-2026-35354-uutils coreutils has a Time-of-Check to Time-of-Use (TOCTOU) race condition

uutils/coreutils · GHSA-x4mc-mqm7-gg39

medium2026-04-22

CVE-2026-35350-uutils coreutils doesn't properly handle setuid and setgid bits when ownership preservation fails

uutils/coreutils · GHSA-x2wv-9p67-mh9w