Security advisories

high2026-04-21

CVE-2026-39386-Neko has a Self-service Privilege Escalation for Authenticated Users

m1k1o/neko · GHSA-2gw9-c2r2-f5qf

medium2026-04-21

CVE-2026-39378-nbconvert has an Arbitrary File Read via Path Traversal in HTMLExporter Image Embedding

jupyter/nbconvert · GHSA-7jqv-fw35-gmx9

medium2026-04-21

CVE-2026-39377-nbconvert has an Arbitrary File Write via Path Traversal in Cell Attachment Filenames

jupyter/nbconvert · GHSA-4c99-qj7h-p3vg

high2026-04-21

CVE-2026-39320-Signal K Server has an Unauthenticated Regular Expression Denial of Service (ReDoS) via WebSocket Subscription Paths

signalk/signalk-server · GHSA-7gcj-phff-2884

low2026-04-21

CVE-2026-29179-October CMS: Editor Sub-Permission Bypass for Asset and Blueprint File Operations

octobercms/october · GHSA-jvwg-phxx-j3rp

low2026-04-21

CVE-2026-27937-October CMS: Reflected XSS via DataTable Form Widget

octobercms/october · GHSA-jj38-h5w5-mvpf

medium2026-04-21

CVE-2026-26274-October CMS has Safe Mode Bypass via Twig Database Write Operations

octobercms/october · GHSA-h6jm-f4hh-fw27

medium2026-04-21

CVE-2026-26067-October CMS has Safe Mode Bypass via CSS Preprocessor Compilers

octobercms/october · GHSA-3888-q23f-x7qh

medium2026-04-21

CVE-2026-25542-Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching

tektoncd/pipeline · GHSA-rmx9-2pp3-xhcr

high2026-04-21

CVE-2026-31019-Dolibarr user with permission to edit PHP content can bypass filtering to restrict dangerous PHP functions

dolibarr/dolibarr · GHSA-j2g9-rprv-hrhc

high2026-04-21

CVE-2026-31018-Dolibarr Allows Code Injection through its Website Module

dolibarr/dolibarr · GHSA-676v-wh57-p375

medium2026-04-21

CVE-2026-40155-Auth0 Next.js SDK has Improper Proxy Cache Lookup

auth0/nextjs-auth0 · GHSA-xq8m-7c5p-c2r6

medium2026-04-21

CVE-2026-40098-OpenMage LTS: Cross-user wishlist import leads to private option & file disclosure

openmage/magento-lts · GHSA-665x-ppc4-685w

medium2026-04-21

CVE-2026-35588-Glances has CQL Injection in its Cassandra Export Module via Unsanitized Config Values

nicolargo/glances · GHSA-grp3-h8m8-45p7

high2026-04-21

CVE-2026-35587-Glances has SSRF in IP Plugin via public_api leading to credential leakage

nicolargo/glances · GHSA-g5pq-48mj-jvw8

high2026-04-21

CVE-2026-35570-OpenClaude: Sandbox Bypass via Early-Exit Logic Flaw Allows Path Traversal

gitlawb/openclaude · GHSA-m6rx-7pvw-2f73

high2026-04-21

CVE-2026-34839-Glances: Cross-Origin Information Disclosure via Unauthenticated REST API (/api/4) due to Permissive CORS

nicolargo/glances · GHSA-gfc2-9qmw-w7vh

high2026-04-21

CVE-2026-34403-Nginx-UI: Cross-Site WebSocket Hijacking (CSWSH) via missing origin validation on all WebSocket endpoints

0xjacky/nginx-ui · GHSA-78mf-482w-62qj

high2026-04-21

CVE-2026-33626-LMDeploy has Server-Side Request Forgery (SSRF) via Vision-Language Image Loading

internlm/lmdeploy · GHSA-6w67-hwm5-92mq

high2026-04-21

CVE-2026-33031-Nginx-UI: Disabled users retain full API access through previously issued bearer tokens

0xjacky/nginx-ui · GHSA-x234-x5vq-cc2v