Security advisories

medium2026-09-02

CVE-2026-82394-Sulu: Fix authorization bypass when creating preview links

View chart →

sulu/sulu · GHSA-65cv-w493-7vhq

medium2026-09-02

CVE-2026-82395-Sulu: Media move/update authorization bypass (IDOR)

View chart →

sulu/sulu · GHSA-h6cx-gjxx-v25c

medium2026-09-02

CVE-2026-63667-ApostropheCMS: Arbitrary file read via import-export attachment-name path traversal

View chart →

apostrophecms/apostrophe · GHSA-79qf-vqgc-7xx3

medium2026-09-02

CVE-2026-75592-Kirby: Access to image files outside of the site root via path traversal in the media handling

View chart →

getkirby/kirby · GHSA-6j4c-mgqr-qv76

high2026-09-02

CVE-2026-62680-Orval: Generation-time SSRF + remote/local file inclusion via unrestricted $ref

View chart →

orval-labs/orval · GHSA-cxq5-97v7-87j8

critical2026-09-02

CVE-2026-72716-Orval: Import-time RCE via query-parameter default -> zod module-level template literal

View chart →

orval-labs/orval · GHSA-p4cg-3328-rvfg

critical2026-09-02

CVE-2026-71866-Orval: Import-time RCE via schema property name -> computed-property-key injection in the zod client

View chart →

orval-labs/orval · GHSA-6mr6-jvcr-2f25

medium2026-09-02

CVE-2026-73845-CKAN MCP Server: MQA server allowlist bypass via unanchored regex (`isValidMqaServer`)

View chart →

ondata/ckan-mcp-server · GHSA-83x6-42hr-jc76

critical2026-09-02

CVE-2026-72920-SeaweedFS: Unauthenticated filer IAM gRPC service grants S3 administrative control

View chart →

seaweedfs/seaweedfs · GHSA-2v6v-25fm-p4fg

high2026-09-02

CVE-2026-64850-Grav: Remote code execution via unrestricted callable in Blueprint::dynamicData()

View chart →

getgrav/grav · GHSA-fj2p-qj2f-74v5

medium2026-09-02

CVE-2026-62672-Grav: Authenticated ReDoS via regex_replace in Twig Sandbox

View chart →

getgrav/grav · GHSA-37f3-6p89-6qr9

medium2026-09-02

CVE-2026-82562-qs array-limit bypass via bracket-key comma parsing

View chart →

ljharb/qs · GHSA-x5fp-wj9c-mxmx

medium2026-09-02

CVE-2026-82417-qs: Denial of Service via Attacker Controlled isBuffer

View chart →

ljharb/qs · GHSA-4mjr-xmp4-gh2g

medium2026-09-02

Tiptap: mergeAttributes() turns an own __proto__ key into inherited executable DOM attributes

View chart →

ueberdosis/tiptap · GHSA-cp6q-959q-f8rh

high2026-09-02

CVE-2026-81892-EasyAdmin custom-action dispatcher bypasses access_control on other routes

View chart →

easycorp/easyadminbundle · GHSA-g2fm-8hr4-j82h

medium2026-09-02

CVE-2026-81887-Livewire DOM-based cross-site scripting during client-side state handling

View chart →

livewire/livewire · GHSA-g3hc-697w-wm82

high2026-09-02

CVE-2026-82397- Tornado: Urlencoded body parsing omits max_num_fields, so one request can stall the event loop

View chart →

tornadoweb/tornado · GHSA-mpf4-983q-p7j4

medium2026-09-02

CVE-2026-71492-Banks: Path traversal in `DirectoryPromptRegistry.set()` allows arbitrary file write outside the registry root

View chart →

masci/banks · GHSA-x8wg-4xgc-vr54

medium2026-09-02

CVE-2026-82398-pypdf: Inefficient handling of non-whitespace inputs in read_until_whitespace

View chart →

py-pdf/pypdf · GHSA-fc8x-2rww-xw9m

high2026-09-02

CVE-2026-81891-elFinder: ZIP extraction bypasses uploadDeny MIME filter allowing PHP file upload (RCE)

View chart →

studio-42/elfinder · GHSA-gxmj-r5rf-ggwq