Security Advisories

medium2026-09-18

CVE-2026-84992-md-editor-v3: XSS via fenced-code language rendering bypass

imzbf/md-editor-v3 · GHSA-3rm2-h79c-8qw6

medium2026-09-18

CVE-2026-63406-AnyCable: Telemetry Subsystem Contains Hardcoded Authentication Token and Transmits CLI Arguments Including Secrets

View chart

anycable/anycable · GHSA-w72w-9qmj-c9qm

high2026-09-18

CVE-2026-63349-AnyIO run_process/open_process ignores extra_groups and can retain parent supplementary groups

View chart

agronholm/anyio · GHSA-3w57-8xmc-8v26

critical2026-09-18

CVE-2026-63374-AnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing

View chart

agronholm/anyio · GHSA-82r6-8w77-94w6

medium2026-09-18

CVE-2026-64847-AnyIO process-pool workers can block indefinitely on undrained stderr

View chart

agronholm/anyio · GHSA-5p39-cfhj-2xmp

medium2026-09-18

CVE-2026-63405-AnyCable: Pusher REST API Does Not Verify Request Body MD5 Enabling Signed-Request Replay with Arbitrary Body

View chart

anycable/anycable · GHSA-5p54-whvp-x327

high2026-09-18

CVE-2026-58197-ToolHive: containerized MCP servers can reach host services via host.docker.internal, enabling lateral movement

View chart

stacklok/toolhive · GHSA-qg2g-g9w3-m5h8

critical2026-09-18

CVE-2026-61682-kcp front-proxy does not strip inbound X-Remote-* identity headers, allowing any authenticated client to inject groups/warrants and impersonate system:masters in any workspace

View chart

kcp-dev/kcp · GHSA-c8w2-fgvx-vhv4

high2026-09-18

CVE-2026-61833-zot: Bearer authentication maps DELETE to push scope, allowing unauthorized deletion

View chart

project-zot/zot · GHSA-qg67-7m6v-qg25

medium2026-09-18

CVE-2026-61795-Capsule: hostnameRegexHandler.OnUpdate validates stale (old) Tenant regex, allowing invalid AllowedHostnames regex to bypass webhook validation

View chart

projectcapsule/capsule · GHSA-f94q-w3w8-cj67

high2026-09-18

CVE-2026-61672-Capsule: Tenant owner bypasses Capsule's forbidden namespace/service/node label and annotation enforcement

View chart

projectcapsule/capsule · GHSA-gjw4-3v3v-rqxg

medium2026-09-18

CVE-2026-61794-Capsule: Malformed ForbiddenAnnotations.Regex can bypass Tenant validation and trigger namespace admission panic

View chart

projectcapsule/capsule · GHSA-gxjc-74v5-3vx3

high2026-09-18

LMDeploy has an SSRF bypass

View chart

internlm/lmdeploy · GHSA-39wr-7q6h-cf68

high2026-09-18

CVE-2026-33625-LMDeploy vulnerable to arbitrary code execution via eval() of untrusted quant_dtype in model config loading

View chart

internlm/lmdeploy · GHSA-3hmm-rh5q-gwwr

critical2026-09-18

CVE-2025-66455-LMDeploy has Remote Code Execution by Pickle Deserialization via handle_zmq_recv in lmdeploy/lmdeploy/pytorch/disagg/conn/engine_conn.py

View chart

internlm/lmdeploy · GHSA-2vh9-42vm-xmv2

high2026-09-18

Semantic MediaWiki'a missing authorization in the smwtask API module allows unauthenticated access to admin-only maintenance tasks

View chart

semanticmediawiki/semanticmediawiki · GHSA-jr78-w6w5-m8f8

medium2026-09-18

Semantic MediaWiki's Special:FacetedSearch cstate hidden inputs enable reflected XSS (residual of CVE-2025-10354)

View chart

semanticmediawiki/semanticmediawiki · GHSA-9rcc-pmj8-ffhr

medium2026-09-18

CVE-2026-77616-Semantic MediaWiki affected by reflected XSS in `Special:Ask` via a forged cursor pagination token

View chart

semanticmediawiki/semanticmediawiki · GHSA-cx86-7xwp-w9wf

medium2026-09-18

CVE-2026-77610-Semantic MediaWiki has a query debug output XSS (`DebugFormatter`)

View chart

semanticmediawiki/semanticmediawiki · GHSA-q5fm-9mx6-44f4

medium2026-09-18

CVE-2026-77609-Semantic MediaWiki has an open redirect in Special:URIResolver

View chart

semanticmediawiki/semanticmediawiki · GHSA-hw3m-8j5x-94ff