| IBM:7286479 |
Security Bulletin: Multiple Vulnerabilities in IBM Event Streams
|
IBM |
2026‑09‑06 |
Critical |
| IBM:7286476 |
Security Bulletin: IBM Integration Designer is vulnerable to CVE-2026-68494
|
IBM |
2026‑09‑05 |
High |
| GHSA-848M-R628-VRXW |
SurrealDB: Custom API route lets authenticated callers override namespace/database scope via URL path
|
GitHub |
2026‑09‑04 |
High |
| GHSA-7Q9C-HPX7-9CWM |
TypeSpec: Unauthenticated Remote Shutdown of Spector Mock Server via POST /.admin/stop
|
GitHub |
2026‑09‑04 |
High |
| GHSA-7J5W-7R7X-9V27 |
CodeWhale: Argument Injection in `git_show` Tool Allows Arbitrary File Write Without Approval
|
GitHub |
2026‑09‑04 |
High |
| GHSA-6V2G-FPXH-PMMH |
CodeWhale: SSRF bypass - TOCTOU on DNS failure for DNS pinning
|
GitHub |
2026‑09‑04 |
Critical |
| GHSA-6HXQ-P678-4HR2 |
SimpleWebAuthn: Registration verification does not sufficiently ensure that attestation certificates chain to a trust anchor
|
GitHub |
2026‑09‑04 |
Low |
| GHSA-66R2-5GWJ-GXM2 |
SurrealDB: Writes in a PERMISSIONS clause bypass table permissions
|
GitHub |
2026‑09‑04 |
Medium |
| GHSA-62F5-CP2P-VQ95 |
CodeWhale: Project config `instructions` override enables arbitrary file read into AI system prompt via cloned repository
|
GitHub |
2026‑09‑04 |
High |
| GHSA-5W7R-F4CG-RQQ7 |
SiYuan: Missing publish-access filter on the HPath/path-resolution endpoints discloses the private document tree to anonymous readers
|
GitHub |
2026‑09‑04 |
Medium |
| GHSA-48JH-3GJ7-FG8V |
vLLM: ReDoS via structured_outputs.regex in the lm-format-enforcer backend (no compile timeout) — missed sibling of GHSA-rwxx-mrjm-wc2m
|
GitHub |
2026‑09‑04 |
Medium |
| GHSA-34FJ-MWM6-FJFG |
SiYuan: The session-cookie signing key (Conf.CookieKey) is returned to anonymous readers by /api/system/getConf
|
GitHub |
2026‑09‑04 |
High |
| WID-SEC-2026-3192 |
Checkmk: Schwachstelle ermöglicht Denial of Service
|
BSI |
2026‑09‑04 |
Low |
| WID-SEC-2026-3189 |
vm2: Mehrere Schwachstellen ermöglichen Codeausführung
|
BSI |
2026‑09‑04 |
Critical |
| WID-SEC-2026-3188 |
ImageMagick: Mehrere Schwachstellen ermöglichen Denial of Service
|
BSI |
2026‑09‑04 |
Low |
| WID-SEC-2026-3187 |
vllm: Schwachstelle ermöglicht Denial of Service
|
BSI |
2026‑09‑04 |
Medium |
| WID-SEC-2026-3186 |
Microsoft Clouddienste: Mehrere Schwachstellen
|
BSI |
2026‑09‑04 |
High |
| WID-SEC-2026-3185 |
xpdf: Schwachstelle ermöglicht Denial of Service
|
BSI |
2026‑09‑04 |
Medium |
| WID-SEC-2026-3182 |
MongoDB: Mehrere Schwachstellen
|
BSI |
2026‑09‑04 |
Medium |
| WID-SEC-2026-3181 |
Ollama: Schwachstelle ermöglicht Offenlegung von Informationen
|
BSI |
2026‑09‑04 |
Medium |