Security advisories

medium2026-09-03

CVE-2026-73295-Material for MkDocs: DOM XSS in search suggestions via query parameter

View chart →

squidfunk/mkdocs-material · GHSA-xvg9-69gf-fjrf

high2026-09-03

CVE-2026-82404-TOON: Prototype pollution when decoding untrusted TOON input

View chart →

toon-format/toon · GHSA-p95v-992w-h6c3

high2026-09-03

CVE-2026-73222-Claude Code Templates: Unauthenticated OS command injection (RCE) in Claude Code Studio server (--studio)

View chart →

davila7/claude-code-templates · GHSA-79wm-x847-7cvg

high2026-09-03

CVE-2026-73293-Semaphore UI: Manager-to-owner privilege escalation via custom-role slug collision

View chart →

semaphoreui/semaphore · GHSA-cxvf-gvfq-36w2

high2026-09-03

CVE-2026-73292-Semaphore UI: CSRF vulnerability on password change endpoint - No CSRF token or password confirmation

View chart →

semaphoreui/semaphore · GHSA-8cj9-r88m-8945

critical2026-09-03

CVE-2026-62681-Orval: RCE via OpenAPI path -> unescaped request-URL template literal (backtick breakout)

View chart →

orval-labs/orval · GHSA-fg9p-mrxr-hvq7

critical2026-09-03

CVE-2026-62682-Orval: RCE via servers[].url -> unescaped request-URL template literal (with getBaseUrlFromSpecification)

View chart →

orval-labs/orval · GHSA-88f2-fpv8-89q2

critical2026-09-03

CVE-2026-72717-Orval: Import-time RCE via schema default -> zod module-level template literal

View chart →

orval-labs/orval · GHSA-w727-8j6c-2rj4

critical2026-09-03

CVE-2026-71869-Orval: Import-time RCE via array-items default -> zod module-level template literal

View chart →

orval-labs/orval · GHSA-2h9g-j24r-h63g

critical2026-09-03

CVE-2026-71871-Orval: Import-time RCE via header-parameter default -> zod module-level template literal

View chart →

orval-labs/orval · GHSA-8j6p-r8jg-mxqh

critical2026-09-03

CVE-2026-71867-Orval: RCE via schema property name -> computed-property-key injection in the MSW mock generator

View chart →

orval-labs/orval · GHSA-2w86-xfrc-g85r

critical2026-09-03

CVE-2026-71868-Orval: Import-time RCE via enum-typed default -> zod module-level template literal

View chart →

orval-labs/orval · GHSA-3575-w9fc-c2j6

critical2026-09-03

CVE-2026-71865-Orval: Import-time RCE via query parameter name -> computed-property-key injection in the zod cli

View chart →

orval-labs/orval · GHSA-653q-5476-x79g

critical2026-09-03

CVE-2026-71864-Orval: Import-time RCE via header parameter name -> computed-property-key injection in the zod client

View chart →

orval-labs/orval · GHSA-6437-gxhq-pqv8

high2026-09-03

CVE-2026-73232-ffuf denial of service (OOM) via HTTP response decompression bomb

View chart →

ffuf/ffuf · GHSA-jcvh-xf52-2cwm

medium2026-09-03

CVE-2026-61625-VictoriaMetrics vmrestore: Path traversal via crafted backup part names escapes restore root

View chart →

victoriametrics/victoriametrics · GHSA-8q3c-rjr9-xxrp

high2026-09-03

CVE-2026-61556-LiquidJS has an infinite loop vulnerability in its `strip_html` filter

View chart →

harttle/liquidjs · GHSA-m7fp-h3p4-hr49

medium2026-09-03

CVE-2026-75602-OpenList: Authenticated arbitrary file write via Content-Disposition path traversal in SimpleHttp offline-download tool

View chart →

openlistteam/openlist · GHSA-h6cj-26g5-67fv

high2026-09-03

OpenClaw Feishu permission tools could ignore per-account disablement

View chart →

openclaw/openclaw · GHSA-w8wf-3qvj-6xqf

high2026-09-03

OpenClaw Feishu tools could ignore per-account disablement

View chart →

openclaw/openclaw · GHSA-2q7j-2vhx-56g8