Security advisories

high2026-04-01

CVE-2026-34825-NocoBase Has SQL Injection via template variable substitution in workflow SQL node

nocobase/nocobase · GHSA-vx58-fwwq-5g8j

medium2026-04-01

CVE-2026-34974-phpMyFAQ: SVG Sanitizer Bypass via HTML Entity Encoding Leads to Stored XSS and Privilege Escalation

thorsten/phpmyfaq · GHSA-5crx-pfhq-4hgg

medium2026-04-01

CVE-2026-34973-phpMyFAQ has a LIKE Wildcard Injection in Search.php — Unescaped % and _ Metacharacters Enable Broad Content Disclosure

thorsten/phpmyfaq · GHSA-gcp9-5jc8-976x

high2026-04-01

CVE-2026-49114-ONNX: TOCTOU arbitrary file read/write in save_external_dat

onnx/onnx · GHSA-q56x-g2fj-4rj6

high2026-04-01

CVE-2026-34783-Ferret: Path Traversal in IO::FS::WRITE allows arbitrary file write when scraping malicious websites

montferret/ferret · GHSA-j6v5-g24h-vg4j

low2026-04-01

CVE-2026-34969-Nhost Leaks Refresh Tokens via URL Query Parameter in OAuth Provider Callback

nhost/nhost · GHSA-g2qj-prgh-4g9r

critical2026-04-01

CVE-2026-34953-PraisonAI Has Authentication Bypass via OAuthManager.validate_token()

mervinpraison/praisonai · GHSA-98f9-fqg5-hvq5

critical2026-04-01

CVE-2026-34952-PraisonAI Has Missing Authentication in WebSocket Gateway

mervinpraison/praisonai · GHSA-cfh6-vr3j-qc3g

high2026-04-01

CVE-2026-34954-PraisonAI Has SSRF in FileTools.download_file() via Unvalidated URL

mervinpraison/praisonai · GHSA-44c2-3rw4-5gvh

high2026-04-01

CVE-2026-34955-PraisonAI Has Sandbox Escape via shell=True and Bypassable Blocklist in SubprocessSandbox

mervinpraison/praisonai · GHSA-r4f2-3m54-pp7q

medium2026-04-01

AVideo has Stored XSS via Unescaped Menu Item Fields in TopMenu Plugin

wwbn/avideo · GHSA-gmpc-fxg2-vcmq

high2026-04-01

CVE-2026-34940-KubeAI: OS Command Injection via Model URL in Ollama Engine startup probe allows arbitrary command execution in model pods

kubeai-project/kubeai · GHSA-324q-cwx9-7crr

high2026-04-01

CVE-2026-34936-PraisonAI: SSRF via Unvalidated api_base in passthrough() Fallback

mervinpraison/praisonai · GHSA-x6m9-gxvr-7jpv

medium2026-04-01

CVE-2026-34939-PraisonAI Has ReDoS via Unvalidated User-Controlled Regex in MCPToolIndex.search_tools()

mervinpraison/praisonai · GHSA-8w9j-hc3g-3g7f

critical2026-04-01

CVE-2026-34934-PraisonAI Has Second-Order SQL Injection in `get_all_user_threads`

mervinpraison/praisonai · GHSA-9cq8-3v94-434g

critical2026-04-01

CVE-2026-34935-PraisonAI: OS Command Injection in MCPHandler.parse_mcp_command()

mervinpraison/praisonai · GHSA-9gm9-c8mq-vq7m

high2026-04-01

CVE-2026-34937-PraisonAI: Shell Injection in run_python() via Unescaped $() Substitution

mervinpraison/praisonai · GHSA-w37c-qqfp-c67f

critical2026-04-01

CVE-2026-34938-PraisonAI: Python Sandbox Escape via str Subclass startswith() Override in execute_code

mervinpraison/praisonai · GHSA-6vh2-h83c-9294

high2026-04-01

CVE-2026-34784-Parser Server's streaming file download bypasses afterFind file trigger authorization

parse-community/parse-server · GHSA-hpm8-9qx6-jvwv

medium2026-04-01

Tesla Fleet Telemetry allows spoofing telemetry for arbitrary vehicles via compromised vehicle credentials

teslamotors/fleet-telemetry · GHSA-prxj-3gcv-cqrh