Published issues

All published security issues are tracked and resolved on GitHub.

NIXPKGS-2026-2513

GitHub issue published 1 week ago

Bruno 3.4.2 Arbitrary File Read via Unconfined Body File Path

          Permalink
          
            CVE-2026-85665
          
        7.1 HIGH
      
        CVSS version (CVSS): 4.0
      
          Attack Vector (AV): Network (N)
        
          Attack Complexity (AC): Low (L)
        
          Attack Requirement (AT): None (N)
        
          Privileges Required (PR): None (N)
        
          User Interaction (UI): Passive (P)
        
          Vulnerable System Impact Confidentiality (VC): High (H)
        
          Vulnerable System Impact Integrity (VI): None (N)
        
          Vulnerable System Impact Availability (VA): None (N)
        
          Subsequent System Impact Confidentiality (SC): None (N)
        
          Subsequent System Impact Integrity (SI): None (N)
        
          Subsequent System Impact Availability (SA): None (N)
        
          Modified Attack Vector (MAV): Network (N)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Attack Requirement (MAT): None (N)
        
          Modified Privileges Required (MPR): None (N)
        
          Modified User Interaction (MUI): Passive (P)
        
          Modified Vulnerable System Impact Confidentiality (MVC): High (H)
        
          Modified Vulnerable System Impact Integrity (MVI): None (N)
        
          Modified Vulnerable System Impact Availability (MVA): None (N)
        
          Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
        
          Modified Subsequent System Impact Integrity (MSI): Negligible (N)
        
          Modified Subsequent System Impact Availability (MSA): Negligible (N)
        
          Safety (S): Not Defined (X)
        
          Automatable (AU): Not Defined (X)
        
          Recovery (R): Not Defined (X)
        
          Value Density (V): Not Defined (X)
        
          Vulnerability Response Effort (RE): Not Defined (X)
        
          Provider Urgency (U): Not Defined (X)
        
          Confidentiality Req. (CR): Not Defined (X)
        
          Integrity Req. (IR): Not Defined (X)
        
          Availability Req. (AR): Not Defined (X)
        
          Exploit Maturity (E): Not Defined (X)
        
              updated
            
          1 week ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          1 week, 1 day ago
          
          @LeSuisse
          
              ignored
            
              package bruno-cli
            
          1 week ago
          
          @LeSuisse
          
              accepted
            
          1 week ago
          
          @LeSuisse
          
              published on GitHub
            
          1 week ago
          
            Bruno 3.4.2 Arbitrary File Read via Unconfined Body File Path
          
      GitHub Issue #8230
    
    issue-trackingexploit
  
      https://github.com/usebruno/bruno
    
    product
  
      https://github.com/usebruno/bruno/blob/v4.1.0/packages/bruno-cli/src/runner/pre…
    
    technical-description
  
      VulnCheck Advisory: Bruno 3.4.2 Arbitrary File Read via Unconfined Body File Path
    
    third-party-advisory
  
    bruno

            =<4.1.0

NIXPKGS-2026-2512

GitHub issue published 1 week ago

Snipe-IT before 8.6.2 Authorization Bypass via Checkout-Acceptance

          Permalink
          
            CVE-2026-85616
          
        8.4 HIGH
      
        CVSS version (CVSS): 4.0
      
          Attack Vector (AV): Network (N)
        
          Attack Complexity (AC): Low (L)
        
          Attack Requirement (AT): None (N)
        
          Privileges Required (PR): Low (L)
        
          User Interaction (UI): None (N)
        
          Vulnerable System Impact Confidentiality (VC): None (N)
        
          Vulnerable System Impact Integrity (VI): High (H)
        
          Vulnerable System Impact Availability (VA): Low (L)
        
          Subsequent System Impact Confidentiality (SC): None (N)
        
          Subsequent System Impact Integrity (SI): High (H)
        
          Subsequent System Impact Availability (SA): Low (L)
        
          Modified Attack Vector (MAV): Network (N)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Attack Requirement (MAT): None (N)
        
          Modified Privileges Required (MPR): Low (L)
        
          Modified User Interaction (MUI): None (N)
        
          Modified Vulnerable System Impact Confidentiality (MVC): None (N)
        
          Modified Vulnerable System Impact Integrity (MVI): High (H)
        
          Modified Vulnerable System Impact Availability (MVA): Low (L)
        
          Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
        
          Modified Subsequent System Impact Integrity (MSI): High (H)
        
          Modified Subsequent System Impact Availability (MSA): Low (L)
        
          Safety (S): Not Defined (X)
        
          Automatable (AU): Not Defined (X)
        
          Recovery (R): Not Defined (X)
        
          Value Density (V): Not Defined (X)
        
          Vulnerability Response Effort (RE): Not Defined (X)
        
          Provider Urgency (U): Not Defined (X)
        
          Confidentiality Req. (CR): Not Defined (X)
        
          Integrity Req. (IR): Not Defined (X)
        
          Availability Req. (AR): Not Defined (X)
        
          Exploit Maturity (E): Not Defined (X)
        
              updated
            
          1 week ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          1 week, 1 day ago
          
          @LeSuisse
          
              accepted
            
          1 week ago
          
          @LeSuisse
          
              published on GitHub
            
          1 week ago
          
            Snipe-IT before 8.6.2 Authorization Bypass via Checkout-Acceptance
          
      GitHub Security Advisory (GHSA-jqgw-vpjc-86fc)
    
    vendor-advisoryexploit
  
      VulnCheck Advisory: Snipe-IT before 8.6.2 Authorization Bypass via Checkout-Acceptance
    
    third-party-advisory
  
    snipe-it

            ==8.6.2
          
            <8.6.2

NIXPKGS-2026-2511

GitHub issue published 1 week ago

Libsoup: libsoup: heap use-after-free in libsoup http/2 client on_data_read() via goaway during body upload

          Permalink
          
            CVE-2026-85197
          
        7.6 HIGH
      
        CVSS version (CVSS): 3.1
      
          Attack Vector (AV): Network (N)
        
          Attack Complexity (AC): Low (L)
        
          Privileges Required (PR): None (N)
        
          User Interaction (UI): Required (R)
        
          Scope (S): Unchanged (U)
        
          Confidentiality (C): Low (L)
        
          Integrity (I): Low (L)
        
          Availability (A): High (H)
        
          Modified Attack Vector (MAV): Network (N)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Privileges Required (MPR): None (N)
        
          Modified User Interaction (MUI): Required (R)
        
          Modified Confidentiality (MC): Low (L)
        
          Modified Scope (MS): Unchanged (U)
        
          Modified Integrity (MI): Low (L)
        
          Modified Availability (MA): High (H)
        
              updated
            
          1 week ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          1 week, 1 day ago
          
          @LeSuisse
          
              ignored
            
              package libsoup_2_4
            
          1 week ago
          
          @LeSuisse
          
              accepted
            
          1 week ago
          
          @LeSuisse
          
              published on GitHub
            
          1 week ago
          
            Libsoup: libsoup: heap use-after-free in libsoup http/2 client on_data_read() via goaway during body upload
          
      https://access.redhat.com/security/cve/CVE-2026-85197
    
    vdb-entryx_refsource_REDHAT
  
      RHBZ#2528425
    
    issue-trackingx_refsource_REDHAT
  
      https://gitlab.gnome.org/GNOME/libsoup/-/work_items/552
    
    exploit
  
    libsoup

    libsoup3

NIXPKGS-2026-2510

GitHub issue published 1 week ago

ntopng: security issues < 6.7.260717

          Permalink
          
            CVE-2026-86090
          
        7.1 HIGH
      
        CVSS version (CVSS): 4.0
      
          Attack Vector (AV): Network (N)
        
          Attack Complexity (AC): Low (L)
        
          Attack Requirement (AT): None (N)
        
          Privileges Required (PR): Low (L)
        
          User Interaction (UI): None (N)
        
          Vulnerable System Impact Confidentiality (VC): None (N)
        
          Vulnerable System Impact Integrity (VI): Low (L)
        
          Vulnerable System Impact Availability (VA): High (H)
        
          Subsequent System Impact Confidentiality (SC): None (N)
        
          Subsequent System Impact Integrity (SI): None (N)
        
          Subsequent System Impact Availability (SA): None (N)
        
          Modified Attack Vector (MAV): Network (N)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Attack Requirement (MAT): None (N)
        
          Modified Privileges Required (MPR): Low (L)
        
          Modified User Interaction (MUI): None (N)
        
          Modified Vulnerable System Impact Confidentiality (MVC): None (N)
        
          Modified Vulnerable System Impact Integrity (MVI): Low (L)
        
          Modified Vulnerable System Impact Availability (MVA): High (H)
        
          Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
        
          Modified Subsequent System Impact Integrity (MSI): Negligible (N)
        
          Modified Subsequent System Impact Availability (MSA): Negligible (N)
        
          Safety (S): Not Defined (X)
        
          Automatable (AU): Not Defined (X)
        
          Recovery (R): Not Defined (X)
        
          Value Density (V): Not Defined (X)
        
          Vulnerability Response Effort (RE): Not Defined (X)
        
          Provider Urgency (U): Not Defined (X)
        
          Confidentiality Req. (CR): Not Defined (X)
        
          Integrity Req. (IR): Not Defined (X)
        
          Availability Req. (AR): Not Defined (X)
        
          Exploit Maturity (E): Not Defined (X)
        
              updated
            
          1 week ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          1 week, 1 day ago
          
          @LeSuisse
          
              accepted
            
          1 week ago
          
          @LeSuisse
          
              published on GitHub
            
          1 week ago
          
            ntopng before 6.7.260717 Missing Authorization on the Notification Endpoint and Recipient Delete Handlers
          
      GitHub Security Advisory (GHSA-m22w-f647-vx88)
    
    vendor-advisory
  
      Patch Commit
    
    patch
  
      https://github.com/ntop/ntopng
    
    product
  
      https://github.com/ntop/ntopng/blob/f41cc1beff90e40e12bbc2cc135bdbf649ec559f/sc…
    
    technical-description
  
      https://github.com/ntop/ntopng/blob/f41cc1beff90e40e12bbc2cc135bdbf649ec559f/sc…
    
    technical-description
  
      VulnCheck Advisory: ntopng before 6.7.260717 Missing Authorization on the Notification Endpoint and Recipient Delete Handlers
    
    third-party-advisory
  
    ntopng

            <6.7.260717

          Permalink
          
            CVE-2026-86091
          
        7.1 HIGH
      
        CVSS version (CVSS): 4.0
      
          Attack Vector (AV): Network (N)
        
          Attack Complexity (AC): Low (L)
        
          Attack Requirement (AT): None (N)
        
          Privileges Required (PR): Low (L)
        
          User Interaction (UI): None (N)
        
          Vulnerable System Impact Confidentiality (VC): None (N)
        
          Vulnerable System Impact Integrity (VI): High (H)
        
          Vulnerable System Impact Availability (VA): Low (L)
        
          Subsequent System Impact Confidentiality (SC): None (N)
        
          Subsequent System Impact Integrity (SI): None (N)
        
          Subsequent System Impact Availability (SA): None (N)
        
          Modified Attack Vector (MAV): Network (N)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Attack Requirement (MAT): None (N)
        
          Modified Privileges Required (MPR): Low (L)
        
          Modified User Interaction (MUI): None (N)
        
          Modified Vulnerable System Impact Confidentiality (MVC): None (N)
        
          Modified Vulnerable System Impact Integrity (MVI): High (H)
        
          Modified Vulnerable System Impact Availability (MVA): Low (L)
        
          Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
        
          Modified Subsequent System Impact Integrity (MSI): Negligible (N)
        
          Modified Subsequent System Impact Availability (MSA): Negligible (N)
        
          Safety (S): Not Defined (X)
        
          Automatable (AU): Not Defined (X)
        
          Recovery (R): Not Defined (X)
        
          Value Density (V): Not Defined (X)
        
          Vulnerability Response Effort (RE): Not Defined (X)
        
          Provider Urgency (U): Not Defined (X)
        
          Confidentiality Req. (CR): Not Defined (X)
        
          Integrity Req. (IR): Not Defined (X)
        
          Availability Req. (AR): Not Defined (X)
        
          Exploit Maturity (E): Not Defined (X)
        
              updated
            
          1 week ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          1 week, 1 day ago
          
          @LeSuisse
          
              accepted
            
          1 week ago
          
          @LeSuisse
          
              published on GitHub
            
          1 week ago
          
            ntopng before 6.7.260717 Missing Authorization on the Host Pool Bulk Delete Handler
          
      GitHub Security Advisory (GHSA-m22w-f647-vx88)
    
    vendor-advisory
  
      Patch Commit
    
    patch
  
      https://github.com/ntop/ntopng
    
    product
  
      https://github.com/ntop/ntopng/blob/f41cc1beff90e40e12bbc2cc135bdbf649ec559f/sc…
    
    technical-description
  
      https://github.com/ntop/ntopng/blob/f41cc1beff90e40e12bbc2cc135bdbf649ec559f/sc…
    
    technical-description
  
      VulnCheck Advisory: ntopng before 6.7.260717 Missing Authorization on the Host Pool Bulk Delete Handler
    
    third-party-advisory
  
    ntopng

            <6.7.260717

NIXPKGS-2026-2509

GitHub issue published 1 week ago

freeipmi: security issues < 1.6.19 (backport needed)

Permalink CVE-2026-85508

9.8 CRITICAL

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

updated 1 week ago by @LeSuisse Activity log

Created suggestion 1 week, 1 day ago
@LeSuisse accepted 1 week ago
@LeSuisse published on GitHub 1 week ago

ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow …

FreeIPMI

<1.6.19

Permalink CVE-2026-85509

9.8 CRITICAL

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

updated 1 week ago by @LeSuisse Activity log

Created suggestion 1 week, 1 day ago
@LeSuisse accepted 1 week ago
@LeSuisse published on GitHub 1 week ago

FreeIPMI before 1.6.19 has a stack-based buffer overflow in _read_fru_data …

FreeIPMI

<1.6.19

Permalink CVE-2026-85506

9.8 CRITICAL

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

updated 1 week ago by @LeSuisse Activity log

Created suggestion 1 week, 1 day ago
@LeSuisse accepted 1 week ago
@LeSuisse published on GitHub 1 week ago

ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow …

FreeIPMI

<1.6.19

Permalink CVE-2026-85507

9.8 CRITICAL

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

updated 1 week ago by @LeSuisse Activity log

Created suggestion 1 week, 1 day ago
@LeSuisse accepted 1 week ago
@LeSuisse published on GitHub 1 week ago

ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow …

FreeIPMI

<1.6.19

Permalink CVE-2026-85505

7.5 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): None (N)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): High (H)

updated 1 week ago by @LeSuisse Activity log

Created suggestion 1 week, 1 day ago
@LeSuisse accepted 1 week ago
@LeSuisse published on GitHub 1 week ago

ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer over-read …

FreeIPMI

<1.6.19

Permalink CVE-2026-85504

9.8 CRITICAL

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

updated 1 week ago by @LeSuisse Activity log

Created suggestion 1 week, 1 day ago
@LeSuisse accepted 1 week ago
@LeSuisse published on GitHub 1 week ago

FreeIPMI before 1.6.19 has a stack-based buffer overflow in _ipmi_sel_oem_fujitsu_get_sel_entry_long_text …

FreeIPMI

<1.6.19

NIXPKGS-2026-2508

GitHub issue published 1 week ago

traefik: security issues < 3.7.12 (backport needed)

Permalink CVE-2026-85595

9.3 CRITICAL

CVSS version (CVSS): 4.0
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Attack Requirement (AT): None (N)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Vulnerable System Impact Confidentiality (VC): High (H)
Vulnerable System Impact Integrity (VI): High (H)
Vulnerable System Impact Availability (VA): High (H)
Subsequent System Impact Confidentiality (SC): None (N)
Subsequent System Impact Integrity (SI): None (N)
Subsequent System Impact Availability (SA): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Attack Requirement (MAT): None (N)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Vulnerable System Impact Confidentiality (MVC): High (H)
Modified Vulnerable System Impact Integrity (MVI): High (H)
Modified Vulnerable System Impact Availability (MVA): High (H)
Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
Modified Subsequent System Impact Integrity (MSI): Negligible (N)
Modified Subsequent System Impact Availability (MSA): Negligible (N)
Safety (S): Not Defined (X)
Automatable (AU): Not Defined (X)
Recovery (R): Not Defined (X)
Value Density (V): Not Defined (X)
Vulnerability Response Effort (RE): Not Defined (X)
Provider Urgency (U): Not Defined (X)
Confidentiality Req. (CR): Not Defined (X)
Integrity Req. (IR): Not Defined (X)
Availability Req. (AR): Not Defined (X)
Exploit Maturity (E): Not Defined (X)

updated 1 week ago by @LeSuisse Activity log

Created suggestion 1 week, 1 day ago
@LeSuisse ignored package traefik-certs-dumper 1 week ago
@LeSuisse accepted 1 week ago
@LeSuisse published on GitHub 1 week ago

Traefik before v2.11.55 Authentication Bypass via digestAuth

GitHub Security Advisory (GHSA-5w68-77r2-r64c) vendor-advisory
VulnCheck Advisory: Traefik before v2.11.55 Authentication Bypass via digestAuth third-party-advisory

traefik

<2.11.55
==2.11.55
=<3.7.12

Permalink CVE-2026-85596

8.2 HIGH

CVSS version (CVSS): 4.0
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Attack Requirement (AT): Present (P)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Vulnerable System Impact Confidentiality (VC): High (H)
Vulnerable System Impact Integrity (VI): None (N)
Vulnerable System Impact Availability (VA): None (N)
Subsequent System Impact Confidentiality (SC): None (N)
Subsequent System Impact Integrity (SI): None (N)
Subsequent System Impact Availability (SA): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Attack Requirement (MAT): Present (P)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Vulnerable System Impact Confidentiality (MVC): High (H)
Modified Vulnerable System Impact Integrity (MVI): None (N)
Modified Vulnerable System Impact Availability (MVA): None (N)
Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
Modified Subsequent System Impact Integrity (MSI): Negligible (N)
Modified Subsequent System Impact Availability (MSA): Negligible (N)
Safety (S): Not Defined (X)
Automatable (AU): Not Defined (X)
Recovery (R): Not Defined (X)
Value Density (V): Not Defined (X)
Vulnerability Response Effort (RE): Not Defined (X)
Provider Urgency (U): Not Defined (X)
Confidentiality Req. (CR): Not Defined (X)
Integrity Req. (IR): Not Defined (X)
Availability Req. (AR): Not Defined (X)
Exploit Maturity (E): Not Defined (X)

updated 1 week ago by @LeSuisse Activity log

Created suggestion 1 week, 1 day ago
@LeSuisse ignored package traefik-certs-dumper 1 week ago
@LeSuisse accepted 1 week ago
@LeSuisse published on GitHub 1 week ago

Traefik v3.7 Authentication Bypass via TLS Option Conflict

GitHub Security Advisory (GHSA-j994-9gqj-9hwq) vendor-advisory
VulnCheck Advisory: Traefik v3.7 Authentication Bypass via TLS Option Conflict third-party-advisory

traefik

=<3.7.12

Permalink CVE-2026-85597

8.2 HIGH

CVSS version (CVSS): 4.0
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Attack Requirement (AT): Present (P)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Vulnerable System Impact Confidentiality (VC): High (H)
Vulnerable System Impact Integrity (VI): None (N)
Vulnerable System Impact Availability (VA): None (N)
Subsequent System Impact Confidentiality (SC): None (N)
Subsequent System Impact Integrity (SI): None (N)
Subsequent System Impact Availability (SA): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Attack Requirement (MAT): Present (P)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Vulnerable System Impact Confidentiality (MVC): High (H)
Modified Vulnerable System Impact Integrity (MVI): None (N)
Modified Vulnerable System Impact Availability (MVA): None (N)
Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
Modified Subsequent System Impact Integrity (MSI): Negligible (N)
Modified Subsequent System Impact Availability (MSA): Negligible (N)
Safety (S): Not Defined (X)
Automatable (AU): Not Defined (X)
Recovery (R): Not Defined (X)
Value Density (V): Not Defined (X)
Vulnerability Response Effort (RE): Not Defined (X)
Provider Urgency (U): Not Defined (X)
Confidentiality Req. (CR): Not Defined (X)
Integrity Req. (IR): Not Defined (X)
Availability Req. (AR): Not Defined (X)
Exploit Maturity (E): Not Defined (X)

updated 1 week ago by @LeSuisse Activity log

Created suggestion 1 week, 1 day ago
@LeSuisse ignored package traefik-certs-dumper 1 week ago
@LeSuisse accepted 1 week ago
@LeSuisse published on GitHub 1 week ago

Traefik before v2.11.55 mTLS Bypass via TLS Option Conflict

GitHub Security Advisory (GHSA-g55h-rg46-x9c5) vendor-advisory
VulnCheck Advisory: Traefik before v2.11.55 mTLS Bypass via TLS Option Conflict third-party-advisory

traefik

<2.11.55
==2.11.55
=<3.7.12

Permalink CVE-2026-85594

7.0 HIGH

CVSS version (CVSS): 4.0
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Attack Requirement (AT): Present (P)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Vulnerable System Impact Confidentiality (VC): High (H)
Vulnerable System Impact Integrity (VI): None (N)
Vulnerable System Impact Availability (VA): None (N)
Subsequent System Impact Confidentiality (SC): High (H)
Subsequent System Impact Integrity (SI): None (N)
Subsequent System Impact Availability (SA): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Attack Requirement (MAT): Present (P)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Vulnerable System Impact Confidentiality (MVC): High (H)
Modified Vulnerable System Impact Integrity (MVI): None (N)
Modified Vulnerable System Impact Availability (MVA): None (N)
Modified Subsequent System Impact Confidentiality (MSC): High (H)
Modified Subsequent System Impact Integrity (MSI): Negligible (N)
Modified Subsequent System Impact Availability (MSA): Negligible (N)
Safety (S): Not Defined (X)
Automatable (AU): Not Defined (X)
Recovery (R): Not Defined (X)
Value Density (V): Not Defined (X)
Vulnerability Response Effort (RE): Not Defined (X)
Provider Urgency (U): Not Defined (X)
Confidentiality Req. (CR): Not Defined (X)
Integrity Req. (IR): Not Defined (X)
Availability Req. (AR): Not Defined (X)
Exploit Maturity (E): Not Defined (X)

updated 1 week ago by @LeSuisse Activity log

Created suggestion 1 week, 1 day ago
@LeSuisse ignored package traefik-certs-dumper 1 week ago
@LeSuisse accepted 1 week ago
@LeSuisse published on GitHub 1 week ago

Traefik v3.7.1 crossProviderNamespaces Bypass via Service Middleware

GitHub Security Advisory (GHSA-m6wx-622r-48r9) vendor-advisory
VulnCheck Advisory: Traefik v3.7.1 crossProviderNamespaces Bypass via Service Middleware third-party-advisory

traefik

=<3.7.12

Needs a backport

NIXPKGS-2026-2507

GitHub issue published 1 week ago

yeswiki: security issues < 4.6.6

          Permalink
          
            CVE-2026-52766
          
        9.1 CRITICAL
      
        CVSS version (CVSS): 3.1
      
          Attack Vector (AV): Network (N)
        
          Attack Complexity (AC): Low (L)
        
          Privileges Required (PR): None (N)
        
          User Interaction (UI): None (N)
        
          Scope (S): Unchanged (U)
        
          Confidentiality (C): None (N)
        
          Integrity (I): High (H)
        
          Availability (A): High (H)
        
          Modified Attack Vector (MAV): Network (N)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Privileges Required (MPR): None (N)
        
          Modified User Interaction (MUI): None (N)
        
          Modified Confidentiality (MC): None (N)
        
          Modified Scope (MS): Unchanged (U)
        
          Modified Integrity (MI): High (H)
        
          Modified Availability (MA): High (H)
        
              updated
            
          1 week ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          1 week, 1 day ago
          
          @LeSuisse
          
              accepted
            
          1 week ago
          
          @LeSuisse
          
              published on GitHub
            
          1 week ago
          
            YesWiki: Unauthenticated arbitrary page deletion via `{{erasespamedcomments}}` action
          
      https://github.com/YesWiki/yeswiki/security/advisories/GHSA-6x7x-gcmf-7r8x
    
    x_refsource_CONFIRM
  
      https://github.com/YesWiki/yeswiki/commit/ed5b548a705c8091ba0282aaaba73ddda976abef
    
    x_refsource_MISC
  
      https://github.com/YesWiki/yeswiki/releases/tag/v4.6.6
    
    x_refsource_MISC
  
    yeswiki

            ==< 4.6.6

          Permalink
          
            CVE-2026-52771
          
        8.3 HIGH
      
        CVSS version (CVSS): 3.1
      
          Attack Vector (AV): Network (N)
        
          Attack Complexity (AC): Low (L)
        
          Privileges Required (PR): Low (L)
        
          User Interaction (UI): None (N)
        
          Scope (S): Unchanged (U)
        
          Confidentiality (C): High (H)
        
          Integrity (I): High (H)
        
          Availability (A): Low (L)
        
          Modified Attack Vector (MAV): Network (N)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Privileges Required (MPR): Low (L)
        
          Modified User Interaction (MUI): None (N)
        
          Modified Confidentiality (MC): High (H)
        
          Modified Scope (MS): Unchanged (U)
        
          Modified Integrity (MI): High (H)
        
          Modified Availability (MA): Low (L)
        
              updated
            
          1 week ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          1 week, 1 day ago
          
          @LeSuisse
          
              accepted
            
          1 week ago
          
          @LeSuisse
          
              published on GitHub
            
          1 week ago
          
            YesWiki: Second-Order SQL Injection in Page Delete API via Unescaped Page Tag (`ApiController::deletePage`)
          
      https://github.com/YesWiki/yeswiki/security/advisories/GHSA-8f2v-2qhj-gfwg
    
    x_refsource_CONFIRM
  
      https://github.com/YesWiki/yeswiki/commit/23d3cc124613b9428ab963b31807c08879a9c631
    
    x_refsource_MISC
  
      https://github.com/YesWiki/yeswiki/releases/tag/v4.6.6
    
    x_refsource_MISC
  
    yeswiki

            ==>= 4.2.0, < 4.6.6

          Permalink
          
            CVE-2026-52769
          
        8.3 HIGH
      
        CVSS version (CVSS): 3.1
      
          Attack Vector (AV): Network (N)
        
          Attack Complexity (AC): Low (L)
        
          Privileges Required (PR): None (N)
        
          User Interaction (UI): None (N)
        
          Scope (S): Changed (C)
        
          Confidentiality (C): Low (L)
        
          Integrity (I): Low (L)
        
          Availability (A): Low (L)
        
          Modified Attack Vector (MAV): Network (N)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Privileges Required (MPR): None (N)
        
          Modified User Interaction (MUI): None (N)
        
          Modified Confidentiality (MC): Low (L)
        
          Modified Scope (MS): Changed (C)
        
          Modified Integrity (MI): Low (L)
        
          Modified Availability (MA): Low (L)
        
              updated
            
          1 week ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          1 week, 1 day ago
          
          @LeSuisse
          
              accepted
            
          1 week ago
          
          @LeSuisse
          
              published on GitHub
            
          1 week ago
          
            YesWiki: Unauthenticated Server-Side Request Forgery via ActivityPub `Signature.keyId`
          
      https://github.com/YesWiki/yeswiki/security/advisories/GHSA-vw42-752g-5mrp
    
    x_refsource_CONFIRM
  
      https://github.com/YesWiki/yeswiki/releases/tag/v4.6.6
    
    x_refsource_MISC
  
      http://github.com/YesWiki/yeswiki/commit/87e627f33e79879827a3669fee2aa1244612c487
    
    x_refsource_MISC
  
    yeswiki

            ==>= 4.6.2, < 4.6.6

          Permalink
          
            CVE-2026-52774
          
        6.1 MEDIUM
      
        CVSS version (CVSS): 3.1
      
          Attack Vector (AV): Network (N)
        
          Attack Complexity (AC): Low (L)
        
          Privileges Required (PR): None (N)
        
          User Interaction (UI): Required (R)
        
          Scope (S): Changed (C)
        
          Confidentiality (C): Low (L)
        
          Integrity (I): Low (L)
        
          Availability (A): None (N)
        
          Modified Attack Vector (MAV): Network (N)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Privileges Required (MPR): None (N)
        
          Modified User Interaction (MUI): Required (R)
        
          Modified Confidentiality (MC): Low (L)
        
          Modified Scope (MS): Changed (C)
        
          Modified Integrity (MI): Low (L)
        
          Modified Availability (MA): None (N)
        
              updated
            
          1 week ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          1 week, 1 day ago
          
          @LeSuisse
          
              accepted
            
          1 week ago
          
          @LeSuisse
          
              published on GitHub
            
          1 week ago
          
            Reflected XSS via Unescaped `id` Parameter in Bazar Widget HTML Attributes in YesWiki
          
      https://github.com/YesWiki/yeswiki/security/advisories/GHSA-r5xw-gcgw-hwp5
    
    x_refsource_CONFIRM
  
      https://github.com/YesWiki/yeswiki/commit/1aa2710c7505630b858f2142a65f9441bfaba2b2
    
    x_refsource_MISC
  
      https://github.com/YesWiki/yeswiki/releases/tag/v4.6.6
    
    x_refsource_MISC
  
    yeswiki

            ==< 4.6.6

          Permalink
          
            CVE-2026-52777
          
        9.4 CRITICAL
      
        CVSS version (CVSS): 4.0
      
          Attack Vector (AV): Network (N)
        
          Attack Complexity (AC): Low (L)
        
          Attack Requirement (AT): None (N)
        
          Privileges Required (PR): None (N)
        
          User Interaction (UI): Active (A)
        
          Vulnerable System Impact Confidentiality (VC): High (H)
        
          Vulnerable System Impact Integrity (VI): High (H)
        
          Vulnerable System Impact Availability (VA): High (H)
        
          Subsequent System Impact Confidentiality (SC): High (H)
        
          Subsequent System Impact Integrity (SI): High (H)
        
          Subsequent System Impact Availability (SA): High (H)
        
          Modified Attack Vector (MAV): Network (N)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Attack Requirement (MAT): None (N)
        
          Modified Privileges Required (MPR): None (N)
        
          Modified User Interaction (MUI): Active (A)
        
          Modified Vulnerable System Impact Confidentiality (MVC): High (H)
        
          Modified Vulnerable System Impact Integrity (MVI): High (H)
        
          Modified Vulnerable System Impact Availability (MVA): High (H)
        
          Modified Subsequent System Impact Confidentiality (MSC): High (H)
        
          Modified Subsequent System Impact Integrity (MSI): High (H)
        
          Modified Subsequent System Impact Availability (MSA): High (H)
        
          Safety (S): Not Defined (X)
        
          Automatable (AU): Not Defined (X)
        
          Recovery (R): Not Defined (X)
        
          Value Density (V): Not Defined (X)
        
          Vulnerability Response Effort (RE): Not Defined (X)
        
          Provider Urgency (U): Not Defined (X)
        
          Confidentiality Req. (CR): Not Defined (X)
        
          Integrity Req. (IR): Not Defined (X)
        
          Availability Req. (AR): Not Defined (X)
        
          Exploit Maturity (E): Not Defined (X)
        
              updated
            
          1 week ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          1 week, 1 day ago
          
          @LeSuisse
          
              accepted
            
          1 week ago
          
          @LeSuisse
          
              published on GitHub
            
          1 week ago
          
            YesWiki: Authenticated PHP Object Injection in BazarImportAction via unserialize
          
      https://github.com/YesWiki/yeswiki/security/advisories/GHSA-9369-69wj-7m2f
    
    x_refsource_CONFIRM
  
      https://github.com/YesWiki/yeswiki/commit/8f70a8d6b8befa0e644d03c785701dbbc55b8fd0
    
    x_refsource_MISC
  
      https://github.com/YesWiki/yeswiki/releases/tag/v4.6.6
    
    x_refsource_MISC
  
    yeswiki

            ==< 4.6.6

Permalink CVE-2026-52763

6.5 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): None (N)
Availability (A): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): None (N)

updated 1 week ago by @LeSuisse Activity log

Created suggestion 1 week, 1 day ago
@LeSuisse accepted 1 week ago
@LeSuisse published on GitHub 1 week ago

YesWiki: SQL injection via the `recentchanges` action `period` argument leading to arbitrary DB read

https://github.com/YesWiki/yeswiki/security/advisories/GHSA-89v6-j5x6-cmj3 x_refsource_CONFIRM
https://github.com/YesWiki/yeswiki/releases/tag/v4.6.6 x_refsource_MISC

yeswiki

==< 4.6.6

          Permalink
          
            CVE-2026-52770
          
        7.5 HIGH
      
        CVSS version (CVSS): 3.1
      
          Attack Vector (AV): Network (N)
        
          Attack Complexity (AC): Low (L)
        
          Privileges Required (PR): None (N)
        
          User Interaction (UI): None (N)
        
          Scope (S): Unchanged (U)
        
          Confidentiality (C): High (H)
        
          Integrity (I): None (N)
        
          Availability (A): None (N)
        
          Modified Attack Vector (MAV): Network (N)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Privileges Required (MPR): None (N)
        
          Modified User Interaction (MUI): None (N)
        
          Modified Confidentiality (MC): High (H)
        
          Modified Scope (MS): Unchanged (U)
        
          Modified Integrity (MI): None (N)
        
          Modified Availability (MA): None (N)
        
              updated
            
          1 week ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          1 week, 1 day ago
          
          @LeSuisse
          
              accepted
            
          1 week ago
          
          @LeSuisse
          
              published on GitHub
            
          1 week ago
          
            Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in yeswiki/yeswiki
          
      https://github.com/YesWiki/yeswiki/security/advisories/GHSA-qg78-vmvc-fhjw
    
    x_refsource_CONFIRM
  
      https://github.com/YesWiki/yeswiki/commit/f3b0dd093a7ace47dc29a515faeb02635baceae2
    
    x_refsource_MISC
  
      https://github.com/YesWiki/yeswiki/releases/tag/v4.6.6
    
    x_refsource_MISC
  
    yeswiki

            ==< 4.6.6

          Permalink
          
            CVE-2026-52775
          
        8.8 HIGH
      
        CVSS version (CVSS): 3.1
      
          Attack Vector (AV): Network (N)
        
          Attack Complexity (AC): Low (L)
        
          Privileges Required (PR): Low (L)
        
          User Interaction (UI): None (N)
        
          Scope (S): Unchanged (U)
        
          Confidentiality (C): High (H)
        
          Integrity (I): High (H)
        
          Availability (A): High (H)
        
          Modified Attack Vector (MAV): Network (N)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Privileges Required (MPR): Low (L)
        
          Modified User Interaction (MUI): None (N)
        
          Modified Confidentiality (MC): High (H)
        
          Modified Scope (MS): Unchanged (U)
        
          Modified Integrity (MI): High (H)
        
          Modified Availability (MA): High (H)
        
              updated
            
          1 week ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          1 week, 1 day ago
          
          @LeSuisse
          
              accepted
            
          1 week ago
          
          @LeSuisse
          
              published on GitHub
            
          1 week ago
          
            YesWiki Authenticated SQL Injection in ReactionManager
          
      https://github.com/YesWiki/yeswiki/security/advisories/GHSA-4pf7-cc4r-g63h
    
    x_refsource_CONFIRM
  
      https://github.com/YesWiki/yeswiki/commit/90ca54fb518e1c43a1ead6e4f5bf9f0389789841
    
    x_refsource_MISC
  
      https://github.com/YesWiki/yeswiki/releases/tag/v4.6.6
    
    x_refsource_MISC
  
    yeswiki

            ==< 4.6.6

          Permalink
          
            CVE-2026-52762
          
        7.1 HIGH
      
        CVSS version (CVSS): 4.0
      
          Attack Vector (AV): Network (N)
        
          Attack Complexity (AC): Low (L)
        
          Attack Requirement (AT): None (N)
        
          Privileges Required (PR): Low (L)
        
          User Interaction (UI): None (N)
        
          Vulnerable System Impact Confidentiality (VC): None (N)
        
          Vulnerable System Impact Integrity (VI): High (H)
        
          Vulnerable System Impact Availability (VA): None (N)
        
          Subsequent System Impact Confidentiality (SC): None (N)
        
          Subsequent System Impact Integrity (SI): None (N)
        
          Subsequent System Impact Availability (SA): None (N)
        
          Modified Attack Vector (MAV): Network (N)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Attack Requirement (MAT): None (N)
        
          Modified Privileges Required (MPR): Low (L)
        
          Modified User Interaction (MUI): None (N)
        
          Modified Vulnerable System Impact Confidentiality (MVC): None (N)
        
          Modified Vulnerable System Impact Integrity (MVI): High (H)
        
          Modified Vulnerable System Impact Availability (MVA): None (N)
        
          Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
        
          Modified Subsequent System Impact Integrity (MSI): Negligible (N)
        
          Modified Subsequent System Impact Availability (MSA): Negligible (N)
        
          Safety (S): Not Defined (X)
        
          Automatable (AU): Not Defined (X)
        
          Recovery (R): Not Defined (X)
        
          Value Density (V): Not Defined (X)
        
          Vulnerability Response Effort (RE): Not Defined (X)
        
          Provider Urgency (U): Not Defined (X)
        
          Confidentiality Req. (CR): Not Defined (X)
        
          Integrity Req. (IR): Not Defined (X)
        
          Availability Req. (AR): Not Defined (X)
        
          Exploit Maturity (E): Not Defined (X)
        
              updated
            
          1 week ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          1 week, 1 day ago
          
          @LeSuisse
          
              accepted
            
          1 week ago
          
          @LeSuisse
          
              published on GitHub
            
          1 week ago
          
            YesWiki: Authenticated (Admin) Server-Side Template Injection to Remote Code Execution via Bazar Semantic Templates
          
      https://github.com/YesWiki/yeswiki/security/advisories/GHSA-65p8-9433-jpcp
    
    x_refsource_CONFIRM
  
      https://github.com/YesWiki/yeswiki/commit/89462f1577a8a1fe7fcff75e77b5058a74d8047b
    
    x_refsource_MISC
  
      https://github.com/YesWiki/yeswiki/releases/tag/v4.6.6
    
    x_refsource_MISC
  
    yeswiki

            ==< 4.6.6

          Permalink
          
            CVE-2026-52773
          
        6.1 MEDIUM
      
        CVSS version (CVSS): 3.1
      
          Attack Vector (AV): Network (N)
        
          Attack Complexity (AC): Low (L)
        
          Privileges Required (PR): None (N)
        
          User Interaction (UI): Required (R)
        
          Scope (S): Changed (C)
        
          Confidentiality (C): Low (L)
        
          Integrity (I): Low (L)
        
          Availability (A): None (N)
        
          Modified Attack Vector (MAV): Network (N)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Privileges Required (MPR): None (N)
        
          Modified User Interaction (MUI): Required (R)
        
          Modified Confidentiality (MC): Low (L)
        
          Modified Scope (MS): Changed (C)
        
          Modified Integrity (MI): Low (L)
        
          Modified Availability (MA): None (N)
        
              updated
            
          1 week ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          1 week, 1 day ago
          
          @LeSuisse
          
              accepted
            
          1 week ago
          
          @LeSuisse
          
              published on GitHub
            
          1 week ago
          
            Reflected XSS via Unescaped Archived-Revision `time` Parameter in `handlers/page/show.php` in YesWiki
          
      https://github.com/YesWiki/yeswiki/security/advisories/GHSA-35f3-pg38-486f
    
    x_refsource_CONFIRM
  
      https://github.com/YesWiki/yeswiki/commit/35ad9c2bb6cd338198b37c1f745e24bc302a3560
    
    x_refsource_MISC
  
      https://github.com/YesWiki/yeswiki/releases/tag/v4.6.6
    
    x_refsource_MISC
  
    yeswiki

            ==>= 4.1.0, < 4.6.6

          Permalink
          
            CVE-2026-52767
          
        8.2 HIGH
      
        CVSS version (CVSS): 3.1
      
          Attack Vector (AV): Network (N)
        
          Attack Complexity (AC): Low (L)
        
          Privileges Required (PR): None (N)
        
          User Interaction (UI): None (N)
        
          Scope (S): Unchanged (U)
        
          Confidentiality (C): None (N)
        
          Integrity (I): High (H)
        
          Availability (A): Low (L)
        
          Modified Attack Vector (MAV): Network (N)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Privileges Required (MPR): None (N)
        
          Modified User Interaction (MUI): None (N)
        
          Modified Confidentiality (MC): None (N)
        
          Modified Scope (MS): Unchanged (U)
        
          Modified Integrity (MI): High (H)
        
          Modified Availability (MA): Low (L)
        
              updated
            
          1 week ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          1 week, 1 day ago
          
          @LeSuisse
          
              accepted
            
          1 week ago
          
          @LeSuisse
          
              published on GitHub
            
          1 week ago
          
            YesWiki: Unauthenticated ActivityPub Signature-Verification Bypass via `!openssl_verify(...)` accepting `int(-1)`
          
      https://github.com/YesWiki/yeswiki/security/advisories/GHSA-mv28-wj57-f57g
    
    x_refsource_CONFIRM
  
      https://github.com/YesWiki/yeswiki/commit/d1795e0301e1a1078f17b4b98f56fff70de2029e
    
    x_refsource_MISC
  
      https://github.com/YesWiki/yeswiki/releases/tag/v4.6.6
    
    x_refsource_MISC
  
    yeswiki

            ==>= 4.6.2, < 4.6.6

          Permalink
          
            CVE-2026-52772
          
        5.5 MEDIUM
      
        CVSS version (CVSS): 3.1
      
          Attack Vector (AV): Network (N)
        
          Attack Complexity (AC): Low (L)
        
          Privileges Required (PR): High (H)
        
          User Interaction (UI): None (N)
        
          Scope (S): Changed (C)
        
          Confidentiality (C): Low (L)
        
          Integrity (I): Low (L)
        
          Availability (A): None (N)
        
          Modified Attack Vector (MAV): Network (N)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Privileges Required (MPR): High (H)
        
          Modified User Interaction (MUI): None (N)
        
          Modified Confidentiality (MC): Low (L)
        
          Modified Scope (MS): Changed (C)
        
          Modified Integrity (MI): Low (L)
        
          Modified Availability (MA): None (N)
        
              updated
            
          1 week ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          1 week, 1 day ago
          
          @LeSuisse
          
              accepted
            
          1 week ago
          
          @LeSuisse
          
              published on GitHub
            
          1 week ago
          
            YesWiki: Bazar form-field templates still apply `|raw('html')` to `field.label` / `field.hint` in attribute and label-body contexts — stored XSS in form renders (sibling class of commit `e6b66aa`)
          
      https://github.com/YesWiki/yeswiki/security/advisories/GHSA-xc7j-3g8q-9vh4
    
    x_refsource_CONFIRM
  
      https://github.com/YesWiki/yeswiki/commit/5d1a4d07fecb0706f33e5dfbbe6ff5ef1892b2a7
    
    x_refsource_MISC
  
      https://github.com/YesWiki/yeswiki/releases/tag/v4.6.6
    
    x_refsource_MISC
  
    yeswiki

            ==< 4.6.6

NIXPKGS-2026-2506

GitHub issue published 1 week, 1 day ago

Gfs2-utils: gfs2-utils: stack overflow via alloca(1<<di_depth) in hash table traversal

          Permalink
          
            CVE-2026-71219
          
        4.7 MEDIUM
      
        CVSS version (CVSS): 3.1
      
          Attack Vector (AV): Local (L)
        
          Attack Complexity (AC): High (H)
        
          Privileges Required (PR): None (N)
        
          User Interaction (UI): Required (R)
        
          Scope (S): Unchanged (U)
        
          Confidentiality (C): None (N)
        
          Integrity (I): None (N)
        
          Availability (A): High (H)
        
          Modified Attack Vector (MAV): Local (L)
        
          Modified Attack Complexity (MAC): High (H)
        
          Modified Privileges Required (MPR): None (N)
        
          Modified User Interaction (MUI): Required (R)
        
          Modified Confidentiality (MC): None (N)
        
          Modified Scope (MS): Unchanged (U)
        
          Modified Integrity (MI): None (N)
        
          Modified Availability (MA): High (H)
        
              updated
            
          1 week, 1 day ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          1 week, 2 days ago
          
          @LeSuisse
          
              accepted
            
          1 week, 2 days ago
          
          @LeSuisse
          
              published on GitHub
            
          1 week, 1 day ago
          
            Gfs2-utils: gfs2-utils: stack overflow via alloca(1<<di_depth) in hash table traversal
          
      https://access.redhat.com/security/cve/CVE-2026-71219
    
    vdb-entryx_refsource_REDHAT
  
      RHBZ#2507750
    
    issue-trackingx_refsource_REDHAT
  
    gfs2-utils

            No upstream fix as of 2026-09-04

NIXPKGS-2026-2505

GitHub issue published 1 week, 1 day ago

WordPress WP Statistics plugin <= 14.16.11 - Cross Site Scripting (XSS) vulnerability

Permalink CVE-2026-84774

6.1 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): Required (R)
Scope (S): Changed (C)
Confidentiality (C): Low (L)
Integrity (I): Low (L)
Availability (A): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): Low (L)
Modified Scope (MS): Changed (C)
Modified Integrity (MI): Low (L)
Modified Availability (MA): None (N)

updated 1 week, 1 day ago by @LeSuisse Activity log

Created suggestion 1 week, 2 days ago
@LeSuisse accepted 1 week, 2 days ago
@LeSuisse published on GitHub 1 week, 1 day ago

WordPress WP Statistics plugin <= 14.16.11 - Cross Site Scripting (XSS) vulnerability

https://patchstack.com/database/wordpress/plugin/wp-statistics/vulnerability/wo… vdb-entry

wp-statistics

=<14.16.11

NIXPKGS-2026-2504

GitHub issue published 1 week, 1 day ago

DbGate through 7.2.6 Arbitrary File Read and Write via file:// jslid

          Permalink
          
            CVE-2026-85176
          
        8.7 HIGH
      
        CVSS version (CVSS): 4.0
      
          Attack Vector (AV): Network (N)
        
          Attack Complexity (AC): Low (L)
        
          Attack Requirement (AT): None (N)
        
          Privileges Required (PR): Low (L)
        
          User Interaction (UI): None (N)
        
          Vulnerable System Impact Confidentiality (VC): High (H)
        
          Vulnerable System Impact Integrity (VI): High (H)
        
          Vulnerable System Impact Availability (VA): High (H)
        
          Subsequent System Impact Confidentiality (SC): None (N)
        
          Subsequent System Impact Integrity (SI): None (N)
        
          Subsequent System Impact Availability (SA): None (N)
        
          Modified Attack Vector (MAV): Network (N)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Attack Requirement (MAT): None (N)
        
          Modified Privileges Required (MPR): Low (L)
        
          Modified User Interaction (MUI): None (N)
        
          Modified Vulnerable System Impact Confidentiality (MVC): High (H)
        
          Modified Vulnerable System Impact Integrity (MVI): High (H)
        
          Modified Vulnerable System Impact Availability (MVA): High (H)
        
          Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
        
          Modified Subsequent System Impact Integrity (MSI): Negligible (N)
        
          Modified Subsequent System Impact Availability (MSA): Negligible (N)
        
          Safety (S): Not Defined (X)
        
          Automatable (AU): Not Defined (X)
        
          Recovery (R): Not Defined (X)
        
          Value Density (V): Not Defined (X)
        
          Vulnerability Response Effort (RE): Not Defined (X)
        
          Provider Urgency (U): Not Defined (X)
        
          Confidentiality Req. (CR): Not Defined (X)
        
          Integrity Req. (IR): Not Defined (X)
        
          Availability Req. (AR): Not Defined (X)
        
          Exploit Maturity (E): Not Defined (X)
        
              updated
            
          1 week, 1 day ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          1 week, 2 days ago
          
          @LeSuisse
          
              accepted
            
          1 week, 2 days ago
          
          @LeSuisse
          
              published on GitHub
            
          1 week, 1 day ago
          
            DbGate through 7.2.6 Arbitrary File Read and Write via file:// jslid
          
      GitHub Issue #1502
    
    issue-tracking
  
      https://github.com/dbgate/dbgate
    
    product
  
      getJslFileName.js at v7.2.6
    
    technical-description
  
      jsldata.js at v7.2.6
    
    technical-description
  
      VulnCheck Advisory: DbGate through 7.2.6 Arbitrary File Read and Write via file:// jslid
    
    third-party-advisory
  
    dbgate

            =<7.2.6