Security advisories

high2026-03-17

CVE-2026-31898-jsPDF has a PDF Object Injection via FreeText color

parallax/jspdf · GHSA-7x6v-j9x4-qf24

high2026-03-17

CVE-2026-31891-Cockpit CMS has SQL Injection in MongoLite Aggregation Optimizer via toJsonExtractRaw()

cockpit-hq/cockpit · GHSA-7x5c-vfhj-9628

high2026-03-17

CVE-2026-33013-Micronaut vulnerable to DoS via crafted form-urlencoded body binding with descending array indices

micronaut-projects/micronaut-core · GHSA-43w5-mmxv-cpvh

medium2026-03-17

CVE-2026-31865-Elysia Cookie Value Prototype Pollution

elysiajs/elysia · GHSA-8hq9-phh3-p2wp

high2026-03-17

CVE-2026-30922-Denial of Service in pyasn1 via Unbounded Recursion

pyasn1/pyasn1 · GHSA-jr27-m4p2-rc6r

medium2026-03-17

CVE-2026-29057-Next.js: HTTP request smuggling in rewrites

vercel/next.js · GHSA-ggv3-7p47-pfv8

medium2026-03-17

CVE-2026-27980-Next.js: Unbounded next/image disk cache growth can exhaust storage

vercel/next.js · GHSA-3x4c-7xq6-9pq8

medium2026-03-17

CVE-2026-27979-Next.js: Unbounded postponed resume buffering can lead to DoS

vercel/next.js · GHSA-h27x-g6w4-24gq

medium2026-03-17

CVE-2026-4324-Katello: Denial of Service and potential information disclosure via SQL injection

katello/katello · GHSA-fwj4-6wgp-mpxm

medium2026-03-17

CVE-2026-27978-Next.js: null origin can bypass Server Actions CSRF checks

vercel/next.js · GHSA-mq59-m269-xvcx

low2026-03-17

CVE-2026-27977-Next.js: null origin can bypass dev HMR websocket CSRF checks

vercel/next.js · GHSA-jcc7-9wpm-mj36

critical2026-03-17

CVE-2026-32940-SiYuan has a SanitizeSVG bypass via data:text/xml in getDynamicIcon (incomplete fix for CVE-2026-29183)

siyuan-note/siyuan · GHSA-4mx9-3c2h-hwhg

critical2026-03-17

CVE-2026-32938-SiYuan Vulnerable to Arbitrary File Read in Desktop Publish Service

siyuan-note/siyuan · GHSA-fq2j-j8hc-8vw8

high2026-03-17

CVE-2026-9769-Uncontrolled recursion DoS in JustHTML() via deeply nested HTML

emilstenstrom/justhtml · GHSA-v7cf-c9rm-wm3j

medium2026-03-17

CVE-2026-28563-Apache Airflow: DAG authorization bypass

apache/airflow · GHSA-x3fv-96qh-67m7

high2026-03-17

CVE-2026-30911-Apache Airflow: Execution API HITL Endpoints Missing Per-Task Authorization

apache/airflow · GHSA-8x34-9q3v-h7g8

high2026-03-17

CVE-2026-28779-Apache Airflow: Path of session token in cookie does not consider base_url - session hijacking via co-hosted applications

apache/airflow · GHSA-4fhm-p86v-hwpx

high2026-03-17

CVE-2026-26929-Apache Airflow: Wildcard DagVersion Listing Bypasses Per‑DAG RBAC and Leaks Metadata

apache/airflow · GHSA-4m3h-wp5w-5hqh

low2026-03-17

CVE-2026-4202-Broken Access Control in extension "Redirect Tab" (redirect_tab)

ayacoo/redirect_tab · GHSA-755r-r738-mjgp

high2026-03-17

CVE-2026-4208-Authentication Bypass in extension "E-Mail MFA Provider" (mfa_email)

mrsilaz/mfa_email · GHSA-29r8-gvx4-r9w3