Security advisories

high2026-03-10

CVE-2026-30837-Elysia has a string URL format ReDoS

elysiajs/elysia · GHSA-f45g-68q3-5w8x

critical2026-03-10

CVE-2026-29793-Feathers has a NoSQL Injection via WebSocket id Parameter in MongoDB Adapter

feathersjs/feathers · GHSA-p9xr-7p9p-gpqx

critical2026-03-10

CVE-2026-29792-Feathers has an OAuth Callback Account Takeover issue

feathersjs/feathers · GHSA-wg9x-qfgw-pxhj

medium2026-03-10

CVE-2026-28692-ImageMagick has a heap buffer over-read via 32-bit integer overflow in MAT decoder

imagemagick/imagemagick · GHSA-mrmj-x24c-wwcv

medium2026-03-10

CVE-2026-28689-ImageMagick has a Path Policy TOCTOU symlink race bypass

imagemagick/imagemagick · GHSA-493f-jh8w-qhx3

critical2026-03-10

CVE-2026-27825-MCP Atlassian has an arbitrary file write leading to arbitrary code execution via unconstrained download_path in confluence_download_attachment

sooperset/mcp-atlassian · GHSA-xjgw-4wvw-rgm4

high2026-03-10

CVE-2026-27826-MCP Atlassian has SSRF via unvalidated X-Atlassian-Jira-Url / X-Atlassian-Confluence-Url headers

sooperset/mcp-atlassian · GHSA-7r34-79r5-rcc9

critical2026-03-10

CVE-2026-28292-simple-git has blockUnsafeOperationsPlugin bypass via case-insensitive protocol.allow config key enables RCE

steveukx/git-js · GHSA-r275-fr43-pm7q

medium2026-03-10

CVE-2026-26330-Envoy's global rate limit may crash when the response phase limit is enabled and the response phase request is failed directly

envoyproxy/envoy · GHSA-c23c-rp3m-vpg3

medium2026-03-10

CVE-2026-26311-Envoy: HTTP - filter chain execution on reset streams causing UAF crash

envoyproxy/envoy · GHSA-84xm-r438-86px

low2026-03-10

CVE-2026-2741-Vaadin: Specially crafted ZIP archives can escape the intended extraction directory

vaadin/flow · GHSA-8jrh-7jg8-fvmv

medium2026-03-10

CVE-2026-2742-Vaadin Vulnerable to Authentication Bypass When Accessing the /VAADIN Endpoint Without a Trailing Slash

vaadin/flow · GHSA-rjgh-wgc7-m37j

high2026-03-10

CVE-2026-26118-Azure MCP Server has Server-Side Request Forgery issue that allows authorized attacker to elevate privileges over a network

microsoft/mcp · GHSA-hhfx-wfvq-7g9c

medium2026-03-10

CVE-2026-23907-Apache PDFBox has Path Traversal through PDComplexFileSpecification.getFilename() function

apache/pdfbox · GHSA-jjwr-xmw6-gf78

high2026-03-10

CVE-2025-56421-LimeSurvey is vulnerable to SQL injection

limesurvey/limesurvey · GHSA-rccq-2fxq-7x3h

medium2026-03-10

CVE-2026-26309-Envoy affected by off-by-one write in JsonEscaper::escapeString()

envoyproxy/envoy · GHSA-56cj-wgg3-x943

high2026-03-10

CVE-2026-26308-Envoy has RBAC Header Validation Bypass via Multi-Value Header Concatenation

envoyproxy/envoy · GHSA-ghc4-35x6-crw5

critical2026-03-10

CVE-2026-31840-Parse Server: SQL injection via dot-notation field name in PostgreSQL

parse-community/parse-server · GHSA-qpr4-jrj4-6f27

medium2026-03-10

CVE-2026-31867-Craft Commerce: Potential IDOR in Commerce carts

craftcms/commerce · GHSA-vff3-pqq8-4cpq

low2026-03-10

CVE-2026-29177-Craft Commerce has stored XSS in Craft Commerce Order Details Slideout

craftcms/commerce · GHSA-mj32-r678-7mvp