Security Advisories

high2026-09-17

CVE-2026-86049-Jupyter Server: 5xx request logging leaks token-bearing Referer header values

View chart

jupyter-server/jupyter_server · GHSA-c3mw-737p-c7g2

medium2026-09-17

CVE-2026-81176-Svelte devalue: DoS via malformed input

View chart

sveltejs/devalue · GHSA-9rgm-9g3h-6x36

critical2026-09-17

CVE-2026-79752-CakePHP: Multiple methods in FunctionsBuilder vulnerable to SQL injection

View chart

cakephp/cakephp · GHSA-vjqc-q4mp-2rvf

high2026-09-17

CVE-2026-72697-Grav: media_directory() Twig function allows filesystem path traversal and file content disclosure from sandboxed page content

View chart

getgrav/grav · GHSA-47ch-6w46-6xm7

high2026-09-17

CVE-2026-76839-Grav: UserInterface offsetget/offsetexists allow-listed in Twig sandbox let editor-authored content leak hashed_password and 2FA secrets via offsetGet()

View chart

getgrav/grav · GHSA-3jhr-mxmx-38cx

high2026-09-17

CVE-2026-76846-Grav: config_denied_paths default list omits `system`, exposing real secrets (e.g. system.cache.redis.password) via the Twig sandbox when config_access is enabled

View chart

getgrav/grav · GHSA-xjw5-q542-3vmr

high2026-09-17

CVE-2026-72698-Grav: The system, site, and theme Twig variables bypass the content sandbox entirely and are never covered by config_denied_paths

View chart

getgrav/grav · GHSA-p597-crqc-m349

low2026-09-17

CVE-2026-72701-Grav: Non constant time nonce comparison in Utils::verifyNonce() used for CSRF protection

View chart

getgrav/grav · GHSA-38p6-h87p-r4cg

low2026-09-17

CVE-2026-72702-Grav: Origin validation bypass in Uri::referrer() and Pages::referrerRoute() via unanchored prefix match

View chart

getgrav/grav · GHSA-9ccq-2jfg-qw33

critical2026-09-17

CVE-2026-45140-Chamilo LMS CStudio upload flow allows unauthenticated remote code execution

View chart

chamilo/chamilo-lms · GHSA-g4c3-4g96-6g4m

high2026-09-17

CVE-2026-68537-Fulgur: Non-painting replaced elements amplify to thousands of blank PDF pages (denial of service)

View chart

fulgur-rs/fulgur · GHSA-4rf6-qx84-q9fv

high2026-09-17

CVE-2026-68523-Fulgur: Unbounded page slicing from attacker-controlled CSS height causes denial of service

View chart

fulgur-rs/fulgur · GHSA-j5cx-ph8g-95v3

high2026-09-17

CVE-2026-86039-libp2p: PeerStore accepts attacker-signed PeerRecords for a victim peer ID and stores certified attacker addresses

View chart

libp2p/js-libp2p · GHSA-vrf4-mx87-p53w

medium2026-09-17

CVE-2026-75523-Steeltoe.Management.Endpoint: HttpExchanges URI masking leaks query-string secrets

View chart

steeltoeoss/security-advisories · GHSA-8phw-xrj9-cpqp

medium2026-09-17

CVE-2026-75831-Grav: Stored XSS via Markdown audio/video media <source> URL

View chart

getgrav/grav · GHSA-6qw9-4vv5-jr97

high2026-09-17

CVE-2026-86038-libp2p: Gossipsub StrictSign accepts attacker-signed messages as a victim RSA peer ID

View chart

libp2p/js-libp2p · GHSA-c3gv-825q-fvmp

medium2026-09-17

CVE-2026-72832-Grav: Stored XSS via quoted-attribute bypass in detectXss

View chart

getgrav/grav · GHSA-269c-h76q-8cxw

medium2026-09-17

CVE-2026-85717-AsyncHttpClient re-sends client-wide realm credentials to a cross-origin redirect target

View chart

asynchttpclient/async-http-client · GHSA-f8m2-889x-vw4x

medium2026-09-17

CVE-2026-85720-AsyncHttpClient sends origin credentials to the proxy on the plaintext CONNECT request

View chart

asynchttpclient/async-http-client · GHSA-xr57-gcx8-52hf

high2026-09-17

CVE-2026-85721-AsyncHttpClient's unbounded HTTP/1.1 response decompression enables a decompression-bomb denial of service

View chart

asynchttpclient/async-http-client · GHSA-7grg-jcf7-rpmx