Security Warnings — Source: ghsa

pygeoapi 0.23.x: Path Traversal in STAC FileSystemProvider

2026-05-13 CVE-2026-42351

highGitHub GHSA 2026-W20

pygeoapi 0.23.x: Unauthenticated SSRF via OGC API - Processes Subscriber

2026-05-13 CVE-2026-42352

highGitHub GHSA 2026-W20

PyLoad Vulnerable to Path Traversal via Package Folder Name

2026-05-13 CVE-2026-42314

mediumGitHub GHSA 2026-W20

PyLoad vulnerable to Path Traversal via Package Folder Name in set_package_data

2026-05-13 CVE-2026-42315

highGitHub GHSA 2026-W20

PyLoad vulnerable to unauthenticated traceback disclosure via global exception handler in WebUI

2026-05-13 CVE-2026-44226

mediumGitHub GHSA 2026-W20

pyload-ng: non-admin SETTINGS users can disable outbound TLS peer verification via unrestricted `ssl_verify` config (incomplete fix for CVE-2026-33509 / -35463 / -35464 / -35586)

2026-05-13 CVE-2026-42312

mediumGitHub GHSA 2026-W20

pyload-ng: non-admin SETTINGS users can redirect all outbound traffic through an attacker-controlled proxy via unrestric…

2026-05-13 CVE-2026-42313

highGitHub GHSA 2026-W20

pyp2spec is Vulnerable to Code Injection

2026-05-13 CVE-2026-42301

highGitHub GHSA 2026-W20

QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0

2026-05-13 CVE-2026-42339

highGitHub GHSA 2026-W20

quarkus-openapi-generator has overly broad path-parameter matching that sends authentication headers to unintended operations

2026-05-13 CVE-2026-42333

mediumGitHub GHSA 2026-W20

Rack has a root directory disclosure via unescaped regex interpolation in Rack::Directory

2026-05-13 CVE-2026-34763

mediumGitHub GHSA 2026-W20

Rack has Content-Length mismatch in Rack::Files error responses

2026-05-13 CVE-2026-34831

mediumGitHub GHSA 2026-W20

Rack has quadratic complexity in Rack::Utils.select_best_encoding via wildcard Accept-Encoding header

2026-05-13 CVE-2026-34230

highGitHub GHSA 2026-W20

Rack: Forwarded Header semicolon injection enables Host and Scheme spoofing

2026-05-13 CVE-2026-32762

mediumGitHub GHSA 2026-W20

Rack:: Static header_rules bypass via URL-encoded paths

2026-05-13 CVE-2026-34786

mediumGitHub GHSA 2026-W20

Rack::Request accepts invalid Host characters, enabling host allowlist bypass

2026-05-13 CVE-2026-34835

mediumGitHub GHSA 2026-W20

Rack::Sendfile header-based X-Accel-Mapping regex injection enables unauthorized X-Accel-Redirect

2026-05-13 CVE-2026-34830

mediumGitHub GHSA 2026-W20

Rack::Session::Cookie secrets: decrypt failure fallback enables secretless session forgery and Marshal deserialization

2026-05-13 CVE-2026-39324

criticalGitHub GHSA 2026-W20

Rack::Static prefix matching can expose unintended files under the static root

2026-05-13 CVE-2026-34785

highGitHub GHSA 2026-W20

Rack's greedy multipart boundary parsing can cause parser differentials and WAF bypass.

2026-05-13 CVE-2026-26961

mediumGitHub GHSA 2026-W20

Rack's improper unfolding of folded multipart headers preserves CRLF in parsed parameter values

2026-05-13 CVE-2026-26962

mediumGitHub GHSA 2026-W20

Rack's multipart byte range processing allows denial of service via excessive overlapping ranges

2026-05-13 CVE-2026-34826

mediumGitHub GHSA 2026-W20

Rack's multipart header parsing allows Denial of Service via escape-heavy quoted parameters

2026-05-13 CVE-2026-34827

highGitHub GHSA 2026-W20

Rack's multipart parsing without Content-Length header allows unbounded chunked file uploads

2026-05-13 CVE-2026-34829

highGitHub GHSA 2026-W20

Rails Active Storage has a possible DoS vulnerability when in proxy mode via Range requests

2026-05-13 CVE-2026-33174

mediumGitHub GHSA 2026-W20

Rails Active Storage has possible content type bypass via metadata in direct uploads

2026-05-13 CVE-2026-33173

mediumGitHub GHSA 2026-W20

Rails Active Storage has possible glob injection in its DiskService

2026-05-13 CVE-2026-33202

mediumGitHub GHSA 2026-W20

Rails Active Storage has possible Path Traversal in DiskService

2026-05-13 CVE-2026-33195

highGitHub GHSA 2026-W20

Rails Active Support has a possible DoS vulnerability in its number helpers

2026-05-13 CVE-2026-33176

mediumGitHub GHSA 2026-W20

Rails Active Support has a possible XSS vulnerability in SafeBuffer#%

2026-05-13 CVE-2026-33170

mediumGitHub GHSA 2026-W20

Ray: Remote Code Execution via Parquet Arrow Extension Type Deserialization

2026-05-13 CVE-2026-41486

highGitHub GHSA 2026-W20

rdiscount has an Out-of-bounds Read

2026-05-13 CVE-2026-35201

mediumGitHub GHSA 2026-W20

RedwoodSDK has Same-site CSRF through lack of origin validation in its server actions

2026-05-13 CVE-2026-42190

mediumGitHub GHSA 2026-W20

requests-hardened is Vulnerable to Server-Side Request Forgery

2026-05-13 CVE-2026-42175

mediumGitHub GHSA 2026-W20

RoadRunner is at risk of HTTP Request/Response Smuggling through vulnerable dependency

2026-05-13 CVE-2025-22871

criticalGitHub GHSA 2026-W20

russh has pre-auth DoS via unbounded allocation in its keyboard-interactive auth handler

2026-05-13 CVE-2026-42189

highGitHub GHSA 2026-W20

S3-Proxy has Security Issues in its Resource Path Matching Implementation

2026-05-13 CVE-2026-42882

criticalGitHub GHSA 2026-W20

Sandboxed Thymeleaf expressions vulnerable to improper recognition of unauthorized syntax patterns

2026-05-13 CVE-2026-41901

criticalGitHub GHSA 2026-W20

SandboxJS has a sandbox escape via Function.caller leakage of internal call op

2026-05-13 CVE-2026-43898

criticalGitHub GHSA 2026-W20

Scramble vulnerable to remote code execution via evaluation of user-controlled input in validation rules

2026-05-13 CVE-2026-44262

criticalGitHub GHSA 2026-W20

sealed-env: TOTP secret embedded in unseal token payload (enterprise mode)

2026-05-13 CVE-2026-45091

criticalGitHub GHSA 2026-W20

Sentry's improper authentication on SAML SSO process allows user identity linking

2026-05-13 CVE-2026-42354

criticalGitHub GHSA 2026-W20

short-video-maker has a path traversal vulnerability

2026-05-13 CVE-2026-8115

mediumGitHub GHSA 2026-W20

Signal K Server's WebSocket Login Endpoint Lacks Rate Limiting (Credential Brute-Force)

2026-05-13 CVE-2026-41893

highGitHub GHSA 2026-W20

SillyTavern has a Path Traversal issue

2026-05-13 CVE-2026-44650

criticalGitHub GHSA 2026-W20

SillyTavern has a reflected XSS vulnerability in the CORS proxy middleware

2026-05-13 CVE-2026-44651

mediumGitHub GHSA 2026-W20

SillyTavern has a SSRF vulnerability in the CORS proxy middleware

2026-05-13 CVE-2026-44652

mediumGitHub GHSA 2026-W20

SillyTavern has Authentication Bypass via SSO Header Injection

2026-05-13 CVE-2026-44649

criticalGitHub GHSA 2026-W20

SiYuan Affected by Stored XSS via Attribute View Name to Electron Renderer RCE

2026-05-13 CVE-2026-44670

criticalGitHub GHSA 2026-W20

SiYuan Bazaar marketplace renders unescaped package `name` and `version` metadata, allowing stored XSS and Electron code execution

2026-05-13 CVE-2026-45375

criticalGitHub GHSA 2026-W20

SiYuan has broken access control in `/api/search/{searchAsset,searchTag,searchWidget,searchTemplate}` publish-mode

2026-05-13 CVE-2026-45148

mediumGitHub GHSA 2026-W20

SiYuan publish-mode Reader can mutate Conf and SQL index via 8 ungated APIs

2026-05-13 CVE-2026-45371

highGitHub GHSA 2026-W20

SiYuan: Broken access control in `/api/tag/getTag` — Reader role can mutate `Conf.Tag.Sort` and persist to disk

2026-05-13 CVE-2026-45147

mediumGitHub GHSA 2026-W20

Snappier has an infinite loop during SnappyStream decompression with malformed framed input

2026-05-13 CVE-2026-44302

highGitHub GHSA 2026-W20

Spring AI: SpEL injection is triggered when a user-supplied value is used as a filter expression key

2026-05-13 CVE-2026-22738

criticalGitHub GHSA 2026-W20

sse-channel: SSE Injection via unsanitized event fields

2026-05-13 CVE-2026-44217

mediumGitHub GHSA 2026-W20

ssrfcheck Vulnerable to Server-Side Request Forgery (SSRF) and Incomplete List of Disallowed Inputs

2026-05-13 CVE-2026-43929

highGitHub GHSA 2026-W20

Statamic CMS vulnerable to email enumeration via forgot password endpoint

2026-05-13 CVE-2026-44306

mediumGitHub GHSA 2026-W20

Strapi has a rate limit bypass on users-permissions plugin via attacker-controlled email keying

2026-05-13 CVE-2025-64526

mediumGitHub GHSA 2026-W20

Strapi Vulnerable to SQL Injection in Content Type Builder

2026-05-13 CVE-2026-22599

criticalGitHub GHSA 2026-W20