Security advisories

critical2026-04-17

CVE-2026-23500-Dolibarr: OS Command Injection (RCE) via MAIN_ODT_AS_PDF configuration

dolibarr/dolibarr · GHSA-w5j3-8fcr-h87w

medium2026-04-17

OpenClaw: Sandbox noVNC helper route exposed interactive browser session credentials

openclaw/openclaw · GHSA-92jp-89mq-4374

high2026-04-17

CVE-2026-5598-Bouncy Castle Has Covert Timing Channel Vulnerability

bcgit/bc-java · GHSA-p93r-85wp-75v3

high2026-04-17

CVE-2026-3505-Bouncy Castle Uncontrolled Resource Consumption vulnerability

bcgit/bc-java · GHSA-cj8j-37rh-8475

medium2026-04-17

CVE-2026-0636-Bouncy Castle has an LDAP injection

bcgit/bc-java · GHSA-c3fc-8qff-9hwx

critical2026-04-17

CVE-2025-14813-Bouncy Castle for Java GOST 28147 CTR mode reuses keystream after 255 blocks

bcgit/bc-java · GHSA-574f-3g2m-x479

high2026-04-17

CVE-2026-40458-PAC4J has a Cross-Site Request Forgery (CSRF) Vulnerability

pac4j/pac4j · GHSA-xw5c-jc7x-gf75

medium2026-04-17

CVE-2026-31317-Craftql vulnerable to Server-Side Request Forgery

markhuot/craftql · GHSA-8wmw-prw8-2ggm

low2026-04-17

CVE-2026-27769-Mattermost doesn't validate whether users were correctly owned by the correct Connected Workspace

mattermost/mattermost · GHSA-mxxh-fmjq-j6x4

medium2026-04-17

CVE-2026-3590-Mattermost has session spoofing due to lack of single-use consumption of guest magic link tokens enforcement

mattermost/mattermost · GHSA-mh4x-rmrx-3hp4

medium2026-04-17

CVE-2026-28741-Mattermost doesn't validate CSRF tokens on an authentication endpoint

mattermost/mattermost · GHSA-m7cf-4gh2-v4qg

medium2026-04-17

CVE-2026-5160-goldmark vulnerable to Cross-site Scripting (XSS)

yuin/goldmark · GHSA-c97m-vxhj-p7j6

high2026-04-17

CVE-2026-5807-HashiCorp Vault Vulnerable to Denial-of-Service via Unauthenticated Root Token Generation/Rekey Operations

hashicorp/vault · GHSA-88v5-9hxc-f85r

high2026-04-17

CVE-2026-3605-HashiCorp Vault has a KVv2 Metadata and Secret Deletion Policy Bypass that leads to Denial-of-Service

hashicorp/vault · GHSA-m2w4-8ggf-rj47

medium2026-04-17

CVE-2026-5052-HashiCorp Vault has Server-Side Request Forgery in ACME Challenge Validation via Attacker-Controlled DNS

hashicorp/vault · GHSA-8r5m-3f66-qpr3

high2026-04-17

CVE-2026-4525-HashiCorp Vault May Expose Tokens to Auth Plugins Due to Incorrect Header Sanitization

hashicorp/vault · GHSA-72gw-fmmr-c4r4

medium2026-04-16

CVE-2026-42259-Saltcorn: Open Redirect in `POST /auth/login` due to incomplete `is_relative_url` validation (backslash bypass)

saltcorn/saltcorn · GHSA-f3g8-9xv5-77gv

low2026-04-16

CVE-2026-41488-langchain-openai: Image token counting SSRF protection can be bypassed via DNS rebinding

langchain-ai/langchain · GHSA-r7w7-9xr2-qq2r

medium2026-04-16

CVE-2026-41481-LangChain Text Splitters: HTMLHeaderTextSplitter.split_text_from_url SSRF Redirect Bypass

langchain-ai/langchain · GHSA-fv5p-p927-qmxr

low2026-04-16

Plonky3: The sponge construction used to get a hash function from a cryptographic permutation is not collision resistant for inputs of different lengths

plonky3/plonky3 · GHSA-3g92-f9ch-qjcm