Security advisories

critical2026-03-05

CVE-2026-27944-Nginx-UI Vulnerable to Unauthenticated Backup Download with Encryption Key Disclosure

0xjacky/nginx-ui · GHSA-g9w5-qffc-6762

high2026-03-05

CVE-2026-25048-xgrammar vulnerable to DoS via multi-layer nesting

mlc-ai/xgrammar · GHSA-7rgv-gqhr-fxg3

medium2026-03-05

CVE-2025-64166-Mercurius: Incorrect Content-Type parsing can lead to CSRF attack

mercurius-js/mercurius · GHSA-v66j-6wwf-jc57

medium2026-03-05

Leantime has HTML injection through firstname and lastname fields

leantime/leantime · GHSA-qrfh-cc86-vc8c

medium2026-03-05

CVE-2026-27982-django-allauth has an open redirect vulnerability

pennersr/django-allauth · GHSA-2jpr-83rg-v67j

high2026-03-05

CVE-2026-29093-AVideo: Unauthenticated PHP session store exposed to host network via published memcached port

wwbn/avideo · GHSA-xxpw-32hf-q8v9

medium2026-03-05

CVE-2026-29791-Agentgateway is missing parameter sanitization in MCP to OpenAPI conversion

agentgateway/agentgateway · GHSA-v2x6-wwfw-r2rq

low2026-03-05

CVE-2026-29790-dbt-common's commonprefix() doesn't protect against path traversal

dbt-labs/dbt-common · GHSA-w75w-9qv4-j5xj

high2026-03-05

CVE-2026-3125-opennextjs-cloudflare has SSRF vulnerability via /cdn-cgi/ path normalization bypass

opennextjs/opennextjs-cloudflare · GHSA-c7mq-gh6q-6q7c

high2026-03-05

CVE-2026-29786-tar has Hardlink Path Traversal via Drive-Relative Linkpath

isaacs/node-tar · GHSA-qffp-2rhf-9h96

high2026-03-05

CVE-2026-29784-Ghost has incomplete CSRF protections around OTC use

tryghost/ghost · GHSA-9m84-wc28-w895

critical2026-03-05

zeptoclaw has Shell allowlist-blocklist bypass via command/argument injection and file name wildcards

qhkm/zeptoclaw · GHSA-5wp8-q9mx-8jx8

high2026-03-05

zeptoclaw has Android device shell blocklist bypass via argument permutation

qhkm/zeptoclaw · GHSA-hhjv-jq77-cmvx

high2026-03-05

CVE-2026-29182-Parse Server's Cloud Hooks and Cloud Jobs bypass `readOnlyMasterKey` write restriction

parse-community/parse-server · GHSA-vc89-5g3r-cmhh

high2026-03-05

CVE-2026-29778-pyLoad has an Arbitrary File Write via Path Traversal in edit_package()

pyload/pyload · GHSA-6px9-j4qr-xfjw

critical2026-03-05

CVE-2026-29000-pac4j-jwt: JwtAuthenticator Authentication Bypass via JWE-Wrapped PlainJWT

pac4j/pac4j · GHSA-pm7g-w2cf-q238

high2026-03-05

CVE-2026-3520-Multer Vulnerable to Denial of Service via Uncontrolled Recursion

expressjs/multer · GHSA-5528-5vmv-3xc2

low2026-03-05

CVE-2026-29781-Sliver is Vulnerable to Authenticated Nil-Pointer Dereference through its Handlers

bishopfox/sliver · GHSA-hx52-cv84-jr5v

low2026-03-05

CVE-2026-29184-@backstage/plugin-scaffolder-backend Vulnerable to Potential Session Token Exfiltration via Log Redaction Bypass

backstage/backstage · GHSA-8qp7-fhr9-fw53

low2026-03-05

CVE-2026-29185-Backstage vulnerable to potential reading of SCM URLs using built in token

backstage/backstage · GHSA-95v5-prp4-5gv5