Security advisories

low2026-04-22

CVE-2026-22746-Spring Security Vulnerable to User Attribute Enumeration when Using DaoAuthenticationProvider

spring-projects/spring-security · GHSA-vxf7-qj7q-83fh

medium2026-04-22

CVE-2026-22747-Spring Security Vulnerable to Unauthorized User Impersonation when Using X.509 Client Certificates

spring-projects/spring-security · GHSA-2jrg-rf5x-568g

low2026-04-21

CVE-2026-6744-Bagisto affected by Server-Side Request Forgery

bagisto/bagisto · GHSA-x3f9-vcp2-hgcw

medium2026-04-21

CVE-2026-22751-Spring Security Core has a TOCTOU race condition when One-Time Token login with JdbcOneTimeTokenService is configured

spring-projects/spring-security · GHSA-x2wq-9x2f-fhj7

low2026-04-21

CVE-2026-6745-Bagisto affected by Cross-site Scripting

bagisto/bagisto · GHSA-65fp-7g2v-658r

medium2026-04-21

CVE-2026-41067-Astro: XSS in define:vars via incomplete </script> tag sanitization

withastro/astro · GHSA-j687-52p2-xcff

high2026-04-21

CVE-2026-41066-lxml: Default configuration of iterparse() and ETCompatXMLParser() allows XXE to local files

lxml/lxml · GHSA-vfmq-68hx-4jfw

high2026-04-21

CVE-2026-40938-Tekton Pipeline: Git Resolver Unsanitized Revision Parameter Enables git Argument Injection Leading to RCE

tektoncd/pipeline · GHSA-94jr-7pqp-xhcq

medium2026-04-21

CVE-2026-40924-Tekton Pipelines: HTTP Resolver Unbounded Response Body Read Enables Denial of Service via Memory Exhaustion

tektoncd/pipeline · GHSA-m2cx-gpqf-qf74

medium2026-04-21

CVE-2026-40923-Tekton Pipelines: VolumeMount path restriction bypass via missing filepath.Clean in /tekton/ check

tektoncd/pipeline · GHSA-rx35-6rhx-7858

critical2026-04-21

CVE-2026-41264-Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability

flowiseai/flowise · GHSA-3hjv-c53m-58jj

critical2026-04-21

CVE-2026-41197-Brillig: Heap corruption in foreign call results with nested tuple arrays

noir-lang/noir · GHSA-jj7c-x25r-r8r3

medium2026-04-21

CVE-2026-40343-free5GC UDR: Fail-open handling in PolicyDataSubsToNotifyPost allows unintended subscription creation

free5gc/free5gc · GHSA-jwch-w7wh-gqjm

high2026-04-21

CVE-2026-40488-OpenMage LTS: Customer File Upload Extension Blocklist Bypass → Remote Code Execution

openmage/magento-lts · GHSA-3j5q-7q7h-2hhv

high2026-04-21

CVE-2026-40161-Tekton Pipelines: Git resolver API mode leaks system-configured API token to user-controlled serverURL

tektoncd/pipeline · GHSA-wjxp-xrpv-xpff

high2026-04-21

CVE-2026-39861-Claude Code: Sandbox Escape via Symlink Following Allows Arbitrary File Write Outside Workspace

anthropics/claude-code · GHSA-vp62-r36r-9xqp

low2026-04-21

CVE-2026-40264-OpenBao's Token Store Allows Cross-Namespace Renewal, Revocation

openbao/openbao · GHSA-p49j-v9wc-wg57

medium2026-04-21

CVE-2026-39946-OpenBao's SQL Injection in PostgreSQL database secrets engine

openbao/openbao · GHSA-6vgr-cp5c-ffx3

low2026-04-21

CVE-2026-39396-OpenBao: Decompression Bomb via Unbounded Copy in OCI Plugin Extraction (DoS)

openbao/openbao · GHSA-r65v-xgwc-g56j

low2026-04-21

CVE-2026-39388-OpenBao's Certificate Authentication Allows Token Renewal With Different Certificate

openbao/openbao · GHSA-7ccv-rp6m-rffr