Source: github

MCP Gateway: Authority-injection and JWT/session bypass via the unauthenticated router hair-pin "router-key" / "mcp-init-host" path

2026-05-19 GHSA-G53W-W6MJ-HRPP

criticalGitHub GitHub 2026-W21

MCP Registry: OCI validator skips ownership check on upstream rate limits

2026-05-19 CVE-2026-45781

n8n: Credential exfiltration via Allowed HTTP Request Domains Bypass

2026-05-19 GHSA-3875-8GCX-7V46

n8n: Legacy ExecuteWorkflow Node Bypassed File Path Restrictions

2026-05-19 GHSA-2VX9-7WPG-88JQ

Nautobot vulnerable to secrets exposure and data manipulation through Jinja2 templating

2026-05-19 CVE-2025-49142

Netmaker has Hardcoded DNS Secret Key

2026-05-19 CVE-2023-32077

Nuxt: `__nuxt_island` endpoint does not bind responses to request props, enabling shared-cache poisoning

2026-05-19 CVE-2026-46342

Nuxt: Dev server exposes built source over LAN to malicious sites (incomplete fix for GHSA-4gf7-ff8x-hq99)

2026-05-19 CVE-2026-45670

Nuxt: Reflected XSS in `navigateTo()` external redirect

2026-05-19 CVE-2026-45669

Open redirect endpoint in Datasette

2026-05-19 CVE-2025-64481

Open WebUI Arbitrary File Write, Delete via Path Traversal

2026-05-19 CVE-2026-44565

Open WebUI Exposes System Prompt to Regular User [Non-Admin]

2026-05-19 CVE-2026-45351

Open WebUI has an Indirect Object Reference (IDOR) in user notes

2026-05-19 CVE-2026-45666

Open WebUI has Improper Authorization Control

2026-05-19 CVE-2026-44567

Open WebUI has inconsistent authorization controls within memories API

2026-05-19 CVE-2026-44570

Open WebUI has Stored Cross-Site Scripting In Profile Picture

2026-05-19 CVE-2026-45299

Open WebUI Has Stored Cross-Site Scripting in SVG Renderer

2026-05-19 CVE-2026-45346

Open WebUI has Stored XSS in Banner Component via Improper Sanitization Order

2026-05-19 CVE-2026-45665

Open WebUI has stored XSS in Excel file preview

2026-05-19 CVE-2026-44549

Open WebUI has stored XSS via attacker-controlled file extension in /api/v1/audio/transcriptions

2026-05-19 CVE-2026-45315

Open WebUI has stored XSS via the HTML renedering view

2026-05-19 CVE-2026-45303

Open WebUI has stored XSS via unsanitized Office/Excel/DOCX file preview rendering ({@html} without DOMPurify)

2026-05-19 CVE-2026-45318

Open WebUI has XSS via SVG in /api/v1/channels/webhooks/{webhook_id}/profile/image

2026-05-19 CVE-2026-45314

Open WebUI missing authorization check at the model update function - models from other users can be updated

2026-05-19 CVE-2026-45345

Open WebUI Vulnerable to Arbitrary File Upload and Path Traversal

2026-05-19 CVE-2026-44566

Open WebUI vulnerable to blind server side request forgery (SSRF) via the PDF generate function

2026-05-19 CVE-2026-45347

Open WebUI Vulnerable to Cross-Site Request Forgery (CSRF) via Image URL Manipulation

2026-05-19 CVE-2026-45317

Open WebUI Vulnerable to SSRF via OAuth Profile Picture URL in _process_picture_url (oauth.py)

2026-05-19 CVE-2026-45338

Open WebUI: Authenticated users can bypass model access control via exposed query parameter [AI-ASSISTED]

2026-05-19 CVE-2026-45365

Open WebUI: Missing permission check in files API allows authenticated users to list, access and delete every uploaded file

2026-05-19 CVE-2026-45301

Open WebUI: Read-Only Users Can Toggle Note Pin Status via Incorrect Permission Check (Write via Read-Only Access)

2026-05-19 CVE-2026-45316

Open WebUI: Unauthenticated endpoint can trigger embedding generation (cost/DoS)

2026-05-19 CVE-2026-45667

Open WebUI's chat completion API allows tool restrictions to be bypassed

2026-05-19 CVE-2026-45350

Open WebUI's Improper Authorization in Standard Channels Allows Message Updates with Read Permission

2026-05-19 CVE-2026-44571

Open WebUI's Insecure Message Access Breaks Authorization

2026-05-19 CVE-2026-44569

OpenClaw vulnerable to arbitrary code execution via attacker-controlled setup-api.js loaded from cwd during env-key resolution

2026-05-19 CVE-2026-45004

OpenClaw: Hook mapping templates could bypass hook session-key opt-in

2026-05-19 CVE-2026-45002

OpenClaw: Isolated cron awareness events were recorded as trusted system events

2026-05-19 CVE-2026-44999

OpenClaw: MCP stdio server env could load dangerous startup variables from workspace config

2026-05-19 CVE-2026-44995

OpenClaw: Owner-enforced commands could accept wildcard channel senders as command owners

2026-05-19 CVE-2026-44991

OpenClaw: Workspace dotenv files cannot override connector endpoint hosts

2026-05-19 CVE-2026-45003

OpenClaw: Workspace dotenv MiniMax host override could redirect credentialed requests

2026-05-19 CVE-2026-44992

OpenClaw's ACP child sessions inherit subagent security envelope constraints

2026-05-19 CVE-2026-44997

OpenClaw's Webhooks SecretRef route secret remains valid after rotation/reload

2026-05-19 CVE-2026-45005

OpenMcdf: Uncatchable infinite loop in DirectoryTree.TryGetDirectoryEntry on crafted CFB directory cycle

2026-05-19 CVE-2026-45785

OpenStack Ironic: Pre-Validation Checksum Calculation allows Denial of Service (DoS) via Infinite Block Devices

2026-05-19 CVE-2026-44919

OpenStack Nova Information leak in libvirt LVM-backed instances

2026-05-19 CVE-2012-5625

ORAS Java: Path traversal in pullArtifact via attacker-controlled org.opencontainers.image.title annotation

2026-05-19 GHSA-XM96-GFJX-JCRC

PenPot MCP REPL server binds to 0.0.0.0 with unauthenticated /execute endpoint — RCE

2026-05-19 CVE-2026-45805

podman kube play symlink traversal vulnerability

2026-05-19 CVE-2025-9566

protobufjs: Denial of Service via unbounded recursive JSON descriptor expansion

2026-05-19 CVE-2026-45740

Regression in pymdownx.snippets reintroduces sibling-prefix path traversal bypass despite restrict_base_path

2026-05-19 CVE-2026-46338

rmcp Streamable HTTP server transport has a DNS rebinding vulnerability

2026-05-19 CVE-2026-42559

rok Python ProxyShare can be used as an SSRF proxy through absolute URL paths

2026-05-19 CVE-2026-45568

criticalGitHub GitHub 2026-W21

rust-openssl: Potential out-of-bounds write in `CipherCtxRef::cipher_update_inplace` for AES-KW-PAD ciphers

2026-05-19 CVE-2026-45784

SaltStack Salt Directory traversal vulnerability in minion id validation

2026-05-19 CVE-2017-12791

criticalGitHub GitHub 2026-W21

scim_proton and kanidm_proto have an authenticated process abort via SCIM filter stack exhaustion

2026-05-19 CVE-2026-46689

Scriban: array.insert_at index parameter DoS bypasses LoopLimit and LimitToString

2026-05-19 GHSA-24C8-4792-22HX

SillyTavern: SSRF in SearXNG Search Proxy via Unvalidated baseUrl

2026-05-19 CVE-2026-46372