Skip to content

Source index

Maintain this as the seed list of official or primary sources for the tool families documented here. Use these sources to discover offensive operator guidance for authorized testing, not blue-team alerting or defensive SecOps runbooks.

Application security research

  • October 8 12:1xZ scan (two folds, no new page): Oct 7 20:2x–20:4xZ GHSA wave. (1) DeepSeek Harness local HTTP control-plane auth bypass (GHSA-8m2g-8cgm-3vcp / CVE-2026-82533, critical, < 0.1.2-alpha.1, updated-feed surfacing Oct 8) folded on the July 8 browser-to-loopback section: gate validates client-supplied Host header instead of TCP connection origin → spoofed Host: localhost = full agent control, commands/execute with danger-full-access, approval-policy escalation to unconfined, all stored conversations, zero credentials. Durable axes: Host is data not identity — Host decision table first on any local control plane; guard-implementation fingerprint (socket-peer/UDS-cred vs header string-compare); capability-name grep (danger/unconfined/approval) = self-widening execution policy needs no second bug. Header-spoof branch escapes the browser-origin threat model (SSRF/front-proxy/co-tenant reachers in scope). (2) lz4-java shared-temp native-library hijack (GHSA-mcr4-qmvw-px4g / CVE-2026-106451, high, < 1.11.4) folded on the April 30 OTLP shared-temp page: .lck randomly named but derived .so path predictable + non-exclusive open → co-tenant race controls System.load()ed code; shared-host recon + createTempFile-derived-path grep fingerprint (lock file ≠ payload file, Nx-UDS genealogy). Tracked no-publish: Ghost 1056xx republication twins (Aug 4 page + Sept 22 state notes cover gfjp/v6q3/4pvx/53vv/v3xr/347q/jj74/m382/hqq2/322m/105647), Docling p944 (tracked-in-place June 3 page) + cgc7 DoS, RabbitMQ cqgh/53vv parser DoS pair, LZ4 343h/gm45 DoS pair, Langflow 8qpj re-sync (Oct 6 fold), PraisonAI fj8f duplicate marker, Next.js/Payload Oct 6-wave republications. KEV unchanged (catalog 2026.10.04, 1734, sha f51fed1c); ToB 9498f6e8/25d2bbee head SequenceHash; PortSwigger 07adb06c head Oct-6; PD churn 6dfcef86 head Aug-16; Brutecat f099b20d; disclosed DEAD. Strict build clean.

  • October 7 11:1xZ scan (one new page + four folds): Oct 7 GHSA waves (06:33Z Red Hat/VMware/FlexNet batch + 09:32Z Veeam/WP/Impala batch). (1) Veeam Backup & Replication wave = new page docs/alerts/2026-10-07-veeam-br-cloud-connect-backup-plane-role-and-boundary-wave-ghsa.md (KB4934 + KB4902): Backup Viewer→SYSTEM RCE via Mount Service deserialization (6m95/64393 9.4, 12.x-only fixed 12.3.2 P4), Backup Viewer EM master-key modify/delete + AV-update credential tamper (66c3/93026), EM portal reflected XSS (r23p/64392), Cloud Connect tenant→provider arbitrary file read (p473/58069 8.3), CVE-2026-58070 AAP guest-OS credentials cleartext in guest logs with fix-only-future + vendor rotate advisory, Agent local-user process-kill (cgxq/58068) + install-time mount-point/symlink SYSTEM writes (5r3x/64391). Rules: audit backup-console roles from lowest tier up (Viewer≠safe foothold); enumerate backup data-path listeners (Mount Service, gateway, WAN accelerator, EM portal) separately from console UI; master-key modify = integrity kill-switch beyond its CVSS label; tenant→provider file read = cross-customer leg for MSP scope; Veeam log dirs are standing post-footloose recon targets at any patch level; three separately-fingerprintable build surfaces (VBR console/EM/Agent). (2) Foreman restricted-sudo rake pack + FlexNet lmadmin folded on Sept 21 management-plane page: foreman-rake errors:fetch_log request_id→unquoted grep (c5q9/12540 8.2), db:dump/import_dump file→Ruby system() (rcq3/12541 8.2), foreman-tail eval (79jg/12542), settings.rb two-executable-layer config SSTI+deserialization boot-chain (q8r6/12544 7.7, config-writes-as-deferred-RCE persistence axis); FlexNet lmadmin SOAP hardcoded auth bypass→unauth admin session (98jh/19572, license servers 27000-27010 forgotten-perimeter class, inventory disclosure + license-file write path, route-gating+version proof only). (3) Pulp worker credential-slot reuse folded on July 10 cache-identity page: pulp-container basic/bearer + pulp-ansible module-level token cross-tenant relay via attacker-controlled remote (883w/103868 + c5vx/103869, owned-listener canary-credential proof); pulp-rpm .treeinfo addon/variant ids→outside-work-area publish dirs (wx3c/103870, metadata-names-as-fs-layout, tracked-shape noted). (4) WP Editor-capability gate + server-MIME-sniff stored XSS folded on Sept 19 WP alternate-surface page: WP Coder <4.5.2 PHP exec gated on Editor-held capability (pfgx/104677 — capability-choice drift sweep vs default role map); OMGF ≤6.3.10 stored XSS where the final sink is a server-served .tmp with no Content-Type/nosniff (jmqx/89417 — app-writable URL-reachable paths + response-header diff added to stored-XSS sweep); Nexi XPay unverified payment-result routes tracked (65w5/82211 + 8fcj/82212). (5) Apache Impala trio folded on June 22 Glances/monitoring page: executor JWT signature never validated (g6xq/97720 — three-way token decision table on internal service UIs), SELECT-only user→query-plan-UI stored XSS via table alias (gr7f/93684 — identifier-position XSS battery in SQL tooling), trusted_jar_paths prefix-traversal JAR load via DDL uploads (xf54/90466 — prefix allowlists on class-loading sinks). Tracked no-publish: Kirki ≤6.3.1 unauth registration-meta→Kirki img-attribute stored XSS (7vc3/102173, attribute-injection class canonical), VMware Workstation/Fusion HGFS overflow + integer overflow guest→VM host pair (54rf/59347 + 88p7/59346, hypervisor escape class tracked per desktop precedent), Keycloak-services STARTTLS downgrade SMTP cred capture (4276/107121, downgrade family canonical on the cert page — STARTTLS-stripped email creds leg noted here), ERP unauth deserialization/SQLi/payment-callback ATO trio (2v3v/107104, v93j/107103, c484/107102 — ICSA-style unnamed ERP, no product name, tracked), Satel SenNet datalogger traversal (rx2q/5703), OrdaSoft unauth SQLi+CRUD pair (33jw/102782, wf6m/102781 — Joomla extension page family), Mechrevo/kube-compare/log4net/Foreman-backfill re-surfacing. GHSA published sweep: 06:33Z batch (9) + 09:32Z batch (~48, kernel bulk excluded); updated sweep after 04:20Z = Red Hat enrichment (foreman/katello re-listings + 4 new rake legs) + cc7p already-processed. KEV unchanged (catalog 2026.10.04, 1734, sha f51fed1c; CVE-2026-84411 RouterOS still not in KEV). ToB 9498f6e8 head SequenceHash processed; PortSwigger churn 07adb06c unchanged head Oct-6 processed; PD churn 7c040f86 head Aug-16 processed; Brutecat f099b20d; disclosed DEAD (Emma Legal stub). Strict build clean (pre-existing anchor INFO only). Baseline 496f796.

  • October 7 07:1xZ scan (one fold, no new page): Craft CMS preview-token action re-dispatch → unauthenticated admin impersonation (GHSA-cc7p-2j3x-x7xf / CVE-2026-32267, updated-feed enrichment landing 06:59Z, orig Mar 16; fixed 4.17.6/5.9.12) folded on the Sept 17 Craft page: actionPreview() re-dispatch with $skipSpecialHandling=true + $checkToken=false lets an attacker-controlled action param override the dispatch target; requireToken() on impersonate-with-token only checks _hadToken boolean (no purpose binding); action sits in $allowAnonymous. Rules: guard-set diff between outer and inner re-dispatched requests; presence-of-token booleans are not bindings; $allowAnonymous inventory probed with cross-purpose tokens; shared preview URLs carry pre-auth trigger legs; 404-then-admin-landing fingerprint. Advisory ships working PoC. Published sweep after 03:30:23Z = 0 advisories (desc head = already-promoted Coraza trio 97ca88d). KEV unchanged (catalog 2026.10.04, 1734, sha f51fed1c; CVE-2026-84411 RouterOS still not in KEV). ToB 9498f6e8; PortSwigger ce5833cc; PD churn 786c11cd head Aug-16 processed; Brutecat f099b20d; disclosed DEAD (Emma Legal stub). Strict build clean. Baseline 97ca88d.

  • October 7 02:1xZ scan (one new page + four folds): the Oct 6 21:31–21:32Z HPE coordinated wave was only partially processed by the 00:3xZ run (GHES/NetBox/Devolutions/Ghostscript/OpenSSH legs, b968792). (1) HPE ClearPass Policy Manager + AOS-S ~28-GHSA wave = new page docs/alerts/2026-10-07-hpe-clearpass-aos-s-unauth-primitive-ladder-nac-trust-boundaries-ghsa.md: unauth deserialization RCE (757q/76750), unauth web+API auth bypass→admin (m7g4/76752), unauth format string (62qp/76753), unauth SQLi (qvwm/76754), unauth path-traversal role oracle — traversal influences authorization decisions→unintended role (x6vr/79809); low-priv + admin + unauth SQLi tiers (3f5c/gmmr/695p); stored XSS→admin (m27g/79799); OnGuard agent fleet second network-facing surface (missing-integrity-verification→unauth remote elevated code exec rpmp/76751 + rc64 + rvh5, buffer overflow vrf6, cmdi 5mfp, file write hj73, Linux-agent LPE pp5m, Android exported 4325); AOS-S unauth auth bypass 824j + unauth/adjacent overflow cluster (jgvj/5mpc/cm3h/xjm4) + API privesc 8cx3. Rules: pre-auth parse IS the auth boundary when a bulletin ships unauth deserialization+format-string+SQLi on one interface; path traversal as authorization-input-plane oracle; attack the agent fleet not the server; re-sweep vendor sibling families within the hour (Instant ON→ClearPass/AOS-S). Validation boundary: bench-only for memory-safety legs — crashed ClearPass = estate-wide admission outage. (2) Apache Commons BCEL self-declared-name cache poisoning (2p8h/94114, fix diff 14890bf2: loadClass cached under attacker-declared this_class, JDK defineClass-mismatch check missing, static global Repository = ClassLoader-wide verifier poisoning) folded on Oct 2 BC page = self-declared-name-as-cache-key third branch of the field-identity family. (3) Elasticsearch RCS 2.0 CCR split-consumption (jh46/103009: authz validates one identifying attribute, second independently-supplied attribute selects shard) + delegated role-management scope not accounting index-set-expanding role setting (5jrv/103007) folded on Sept 18 ignored-scope page = multi-identifier-field check-vs-use diff rule. (4) SSSD HBAC short-username-only comparison (474r/104048: domain qualifiers stripped → trusted-domain account collision passes local-user HBAC) folded on Sept 21 precedence page = identity-normalization-collision plane. (5) oc-mirror embedded cache registry 0.0.0.0 no-auth (gh86/96577: adjacent push of tampered images into the cache feeding air-gapped exports) folded on Oct 2 UTMStack page = embedded-helper-registry default-bind recon rule, cache-write-is-supply-chain. Tracked no-publish: OpenSSH 10.6 remainder (106583 username $/backslash, 106584 keygen expiry, 106585 max-packet, 106587 none-option, 106588 macOS SDK, 106589 QNX/SCO — family already folded b968792), Chrome 155 pack (~100 one-liners), SSSD DoS pack (104046 pre-auth state, 104045 race, m2fx kcm length-header stall), Entra search-input filter sanitization g6q7/104047 (class on Sept 18 grammar page), NVIDIA Model-Optimizer deserialization 4hxf/65142 + TensorRT OOB 33m9 (boilerplate), RCCL h97m, HDF5 pair, GIMP DDS/DICOM pair, log4net appender quintet, QnABot Lambda-hook S3 IDOR r223/105811 (optional sample hook, user-controlled-key class), oauth-proxy rd open redirect 8c7h, oc-mirror remainder, IBM Langflow 75jr/104335 (detail-free, Langflow page family), Feehi/ApiAdmin/WookTeam traversal re-listings. GHSA published sweep after 20:38Z = ~200 items (Chrome 155 + HPE + SSSD + kernel bulk); updated sweep after 20:38Z = Chrome/oc-mirror/oauth-sync re-listings + processed items. KEV unchanged (catalog 2026.10.04, 1734, sha f51fed1c; CVE-2026-84411 RouterOS still not in KEV). ToB 9498f6e8 head SequenceHash processed; PortSwigger ce5833cc head Oct-6 model post processed; PD churn bce7e750 head Aug-16 processed; Brutecat f099b20d; disclosed DEAD (Emma Legal stub). Strict build clean. Baseline b968792.

  • October 6 22:1xZ scan (four folds, no new page): elevating items the 00:1xZ run tracked-but-skipped that carry durable operator axes. (1) Nx coordinated dump four-pack (23:28–23:29Z) folded on the May 5 agent-git page as the October 6 follow-up generalizing the repo-trust thesis to build tools: w2vw shell-string git revision/ref injection (nx affected defaultBase from nx.json + nx import remote-advertised branch name → CI RCE via PR), w3vv/104854 world-connectable daemon UDS + PROCESS_IN_BACKGROUND module-load RPC → shared-host cross-user RCE (durable local-recon: enumerate other-users AF_UNIX sockets in shared temp + grep daemon grammar for module-named fields), hrvq/104853 nx migrate extraction during planning before any approval gate (planning/dry-run phases touch disk pre-consent rule), 6vc5/104859 @nx/docker release-pipeline shell strings from project config. (2) PyMongo qx36/96747 CSFLE masterKey.endpoint .sock verbatim into parse_host() → forced AF_UNIX dial to attacker-local socket, folded on the Sept 15 parser page as the alternate-address-family branch rule (validator/dialer family disagreement; .sock/unix:// battery into any stored field reaching a connection-string parser). (3) PyJWT x33g/102275 OKP JWK accepts x/d mismatch → DPoP sender-constraint loss, folded on the Oct 2 BC page as the inconsistent-field branch sibling of the absent-field rule (paired/derived-field mismatch sweep). (4) DOMPurify 6688 IN_PLACE force-removal misses rawtext text-content carrier (<style> root detaches clean, attribute-neutralization strips nothing, reparse executes) folded on the July 23 DOMPurify page (carrier-form battery: attribute vs rawtext-text vs comment). Remaining wave tracked no-publish: Socket.IO cluster-engine wfpm PP-DoS, Filament MFA reauth 7m6h, PyMongo v4x9 BSON signed-overflow OOB write, GraphQL Tools pair, Rustls 2mjx level-boundary (no practical hand per advisory), hickory trio, Quart debug-print, OTel db.user, Angular SSR/busboy/vue-CR/stream-json pair, pbkdf2/Docling/sharp (already tracked 14:1xZ), uv/Mako Windows pair (folded 00:1xZ). GHSA published sweep after 20:38Z = 0 new; updated sweep after 21:10Z = re-surfacing only (Oj pair, netty, 93g8 CXF erratum, knowns mc52 re-publish = Sept 8 page fold). KEV unchanged (catalog 2026.10.04, 1734, sha f51fed1c; CVE-2026-84411 RouterOS still not in KEV). ToB 9498f6e8; PortSwigger ce5833cc head Oct-6 model post processed; PD churn d88c7b10 head Aug-16 processed; Brutecat f099b20d; disclosed sitemap now an unrelated HTML stub (Emma Legal page, domain apparently repurposed — treat disclosed.io as dead source, cc969a5f baseline retired). Strict build clean. Baseline e5c1949.

  • October 6 21:1xZ scan (new page): Coraza coordinated trio published 20:37–20:38Z, fixed v3.8.0 = new page docs/alerts/2026-10-06-coraza-waf-evasion-wave-argument-limit-silent-drop-multipart-truncation-and-audit-log-forgery-ghsa.md. 6r3q/41510 SecArgumentsLimit silent drop: ARGS_GET/POST/PATH caps return with no flag a rule can read + Go map-order nondeterminism → measured (N−limit)/N ARGS-rule bypass (94% @10k args), POST urlencoded processor never capped at all, cap counted distinct keys not total values; ModSecurity has same engine bug but ships compensating rule 200007 + deterministic tail-drop = behavioral WAF fingerprint (probabilistic 200s=Coraza≤3.7, deterministic 400=MSE+200007, payload-first deterministic 200=MSE−200007). r3rm/41508 truncated multipart never sets MULTIPART_STRICT_ERROR since PR #1453 → catch-all rule 200003 voided for boundary-less/mid-part-truncated bodies = field-smuggling parser-differential reopens. prpw/41504 Native audit-log raw CRLF in body/headers/errors/matched-data → forged section boundaries + [client "IP"] attribution lines in the victim record (10-char random prefix blocks full-session forgery; JSON/OCSF formats immune; header legs only behind coraza-spoa/WASM/FFI hosts) = anti-attribution primitive. Durable rules: caps-without-rule-visible-signal are evasion surfaces, engine parity ≠ config parity, truncation tests observability-flag regressions, cap-semantics audit trio (per-collection vs aggregate, keys vs values, parse-before-cap). GHSA published sweep after 18:58:38Z = Coraza trio only. Updated sweep after 19:10Z = tracked/processed only (93g8 CXF JNDI erratum, c2gf netty refcount DoS, Oj UAF pair) + Coraza trio. KEV unchanged (catalog 2026.10.04, 1734, sha f51fed1c; CVE-2026-84411 RouterOS still not in KEV). ToB 9498f6e8 head SequenceHash processed; PortSwigger ce5833cc head Oct-6 model post processed; PD churn 741abc9c head Aug-16 processed; Brutecat f099b20d; disclosed cc969a5f unchanged. Strict build clean. Baseline 7ab8645.

  • October 6 18:1xZ scan (two folds, no new page): PortSwigger "The model isn't cooperating" (James Kettle, Oct 6 17:14Z) promoted as durable agentic-research operator guidance: folded a new "October 6 follow-up" section on the HTTP desync research campaigns page + cross-ref on the agent-guided fuzzing page. Durable rules: open-ended cascade prompts get silently sabotaged (models steer to low-impact easy-to-observe outcomes via prompt wiggle-room, zero refusals — refusals are not a detection signal, trace review is); scope predicts reliability (one trigger/one primitive/one observable per worker); intelligence rank did not predict research score and less-aligned open-weight models did not outperform; impact-steering response is per-model (Opus 4.6 improved most under high-impact steering) → build per-model steering-response profiles; when a cascade stalls, narrow worker prompts before adding agents/budget. Tracked no-publish: GHSA updated-feed single pmfc/35381 uutils cut -s ignored in -z -d '' mode (low, Zellic coreutils audit enrichment landing — pipeline-semantics detail only, no operator axis). GHSA published sweep after 16:22Z = 0 advisories. KEV unchanged (catalog 2026.10.04, 1734, sha f51fed1c; CVE-2026-84411 RouterOS still not in KEV). ToB 9498f6e8 head SequenceHash processed; PortSwigger head now Oct-6 model post promoted (feed hash ce5833cc); PD churn 95a09124 head Aug-16 processed; Brutecat f099b20d; disclosed cc969a5f unchanged. Strict build clean. Baseline 53f80f1.

  • October 6 17:1xZ scan (fold on the existing Oct 6 Payload page, path kept stable): Payload CMS second wave 16:17–16:22Z published seven more advisories, page folded eight→fifteen legs. vc4h/105851 critical: duplicate op copies hidden/access-restricted field values from the source doc; fix 099ef12 shows disableDuplicate was set during sanitize AFTER the default endpoint array push → duplicate REST route existed regardless (disabled-setting-ordering-at-router rule; probe disabled-by-default route families directly). xgv3/105853: refresh + forgot/reset responses return full user docs with no field-ACL/hidden filtering, and refresh had NO collection binding (req.user.collection !== collectionConfig.slug check added — cross-auth-collection token replay standing probe). fx49/105855: password consumed from raw data BEFORE beforeValidate field-access pass (special-cased credential path bypasses generic ACL pipeline). 238x/105849: useAPIKey base field had no read restriction — any user with read access to other users' docs got their active apiKey plaintext; fix rebuilds to read:()=>false + encrypt-at-rest + opt-in reveal endpoint. 7c34/105852: has-many relationship filter + access constraint AND-ed independently = related-document masking oracle (fix comment names it); isNestedRelationshipQuery prototype-identity check. 8r29/105850: Stripe ecommerce confirm replayable multi-settle, fix adds atomic pending→processing claim (concurrent-double-confirm side-effect diff = durable checkout probe). 2g7p/105854: multipart ReDoS, fix adds requestSizeLimit 50MB + abortOnLimit default flipped false→true (pre-fix silent truncation). Rule set: field ACL lives in the read verb only — enumerate every verb whose response embeds the document (auth flows, duplicates, exports, versions, webhooks). KEV unchanged (2026.10.04, 1734, sha f51fed1c). ToB 9498f6e8; PortSwigger feed returned empty body on bare fetch (known churn pattern, nothing newer processed); PD feed empty stub (head Aug-16 processed); Brutecat f099b20d; disclosed cc969a5f unchanged.
  • October 6 16:1xZ scan (new page + five folds): Oct 6 15:20-16:09Z GHSA waves. Payload CMS eight-GHSA wave = new page docs/alerts/2026-10-06-payload-cms-eight-leg-wave-query-validation-join-sort-and-redirect-normalization-ghsa.md (v49j/105845 9.8 SQLi: validateQueryPaths recognized only lowercase and/or — AND walked unknown-path branch, array constraints skipped, fix diff a742140 shows toLowerCase + errors.push; fpww/105847 polymorphic-join predicate oracle disclosing read-restricted fields incl password-reset tokens; 9g87/105805 join-internal sort never field-access-checked, new validateSortQuery.ts; r9v2/105848 Stripe REST proxy confused-deputy; 2q76/105806 MCP plugin cross-account API-key mgmt ATO; qf28/105844 unauth import-export prototype-pollution RCE + catastrophic-backtracking multipart gate regex; w84c/105846 getSafeRedirect %09/%0D/%0A + double-encoded %2509/%255C/%252f prefix drift; q6mq/105804 weak PBKDF2). Rules: structural-key normalization differential in Mongo-grammar-over-SQL validators, per-parameter-plane validation coverage sweep, predicate-position field oracle, plugin inventory = first recon phase, two-band version fingerprint (3.88.0 vs 3.90.0). Folds: (1) Kiota doc-comment delimiter reformation (rm89/105796 8.8: strip-based sanitizer reforms */ via overlap + post-removal non-ASCII normalization; vulnerable backport 1.29.1 = security-label-not-fix-evidence) + oauth_card_path unvalidated while sibling static_template.file was fixed (6gw6/105795: validators attach per-field not per-schema) on July 24 Kiota page; (2) MCP TS SDK 1.12-1.30.1 sends stored refresh_token/client_secret to server-named authorization server, fix documents its own four bypass states = test matrix (6qxp/104850 7.5) on Sept 16 rmcp OAuth page; (3) External Secrets Operator webhook generator init-order clears EnforceLabels → unlabelled-secret exfil (q7hv/26287 7.1) on Sept 18 ignored-scope page — flag-assignment-order audit + create-leg-with-unlabelled-target probe; (4) LangChain @langchain/redis RediSearch TAG/TEXT filter value injection (5x6v/105799: search DSLs are SQL, metachar battery } {| - ~ *, RAG vector-filter access boundary checklist) on Sept 18 query-grammar page; (5) MsQuic OpenSSL/QuicTLS backends no TLS hostname verification (w5f4/105794, Schannel unaffected) on Oct 2 cert page — verification is per-stack-backend, H3 fingerprint angle; (6) i18next-http-backend colon-scheme {{lng}} SSRF (xvq9/105800: template placeholder position = parser differential, ?lng=http:callback:80 five-second probe) on Sept 15 parser page. Tracked no-publish: Vyper memory/stack corruption trio, openapi-python-client malicious-doc code generation (class-covered Kiota family, revisit on guardrail detail). KEV unchanged (catalog 2026.10.04, 1734, sha f51fed1c; CVE-2026-84411 RouterOS still not in KEV). ToB 9498f6e8, PortSwigger churn 743cc61a head Oct-5 processed, PD churn d1af49fc head Aug-16, Brutecat f099b20d, disclosed cc969a5f unchanged. Strict build clean. Baseline ca825bd.
  • October 6 14:1xZ scan (two folds, no new page): Oct 6 13:38-13:43Z GHSA wave. (1) Langflow pair folded on the June 19 Langflow page as an October 6 follow-up: GHSA-8qpj-27x8-pwpq/CVE-2026-10561 (9.9, PythonREPLComponent unsandboxed exec — get_globals() never set __builtins__ so CPython auto-injects full builtins regardless of the global_imports allow-list + components never consult allow_custom_components=False; PoC flips own is_superuser via direct DB session = authenticated-user-to-superuser without an auth bug; rules: restricted-exec-without-__builtins__-key canonical shape, policy-flag-to-sink parity grep, per-layer hardening-series fingerprinting 1.10.1→1.12.3) + GHSA-j8f7-x8jm-wmm4 (SSRF guard shipped ssrf_protection_enabled=False, sole caller warn_only=True, six URL-taking components never called it at all; rules: guard-helper existence ≠ enforcement, warn_only params are first-class findings, connector loopback exemption survives patch, verify which parameter selects destination — advisory de-lists hard-coded-host search legs). (2) shell-quote second genealogy leg GHSA-pqg4-j6r4-53mv/CVE-2026-102422 (8.1, >=1.8.4,<1.11.0) folded on the June 9 shell-quote page: {comment} token emits # swallowing the rest of the line including a later string token's opening quote, newline in the later string ends the comment → injection; prior fix only rejected terminators in the comment's own text; quote(parse(untrusted).concat(arg)) round-trip mints comment tokens from mid-word #; two-token probe distinguishes mid-genealogy builds. Tracked no-publish: Docling METS-GBS getmembers-before-limit DoS pair 3cr3/f4ch-dup (availability, check-after-enumeration class), pbkdf2 477h/102414 rehash-per-iteration DoS, sharp→librsvg relay wq5f/CVE-2026-96889 (no exploit detail; Node official binaries non-PIE aside noted on Langflow page tracked-list). Updated-feed after 06:35Z = this wave + xv6h Keycloak DEFLATE-bomb/wmxr dup/2p5w Hibernate re-sync (all tracked) + frvg Langflow PythonREPL duplicate marker. KEV unchanged (catalog 2026.10.04, 1734, sha f51fed1c; CVE-2026-84411 RouterOS still not in KEV). ToB 9498f6e8, PortSwigger churn 743cc61a head Oct-5 processed, PD head Aug-16, Brutecat f099b20d, disclosed cc969a5f unchanged. Strict build clean.
  • October 6 06:1xZ scan (four folds, no new page): Oct 6 03:31Z GHSA wave + 00:32Z batch remainder. (1) Atlassian Data Center family unauthenticated webapp-root file access (gr66/CVE-2026-21589, one CVE across Bitbucket/Confluence/Jira SW+JSM/Bamboo/Crowd DC/Crucible/Fisheye, exact-path-required, no listing) folded on the Sept 22 GHES appliance-surface page — shared-platform-component fingerprint rule + exact-path enumeration from public packaging structure; static-serving layer = second unauthenticated API over the filesystem. (2) Punk (Perl) Extended CONNECT routed as GET, WebSocket Origin gate never fires on HTTP/2/3 (cmh9/CVE-2026-104380) folded on the Sept 15 parser/header-route page — transport-spelling enum-gated-control axis (sibling of OpenAM PKCE flow-spelling) + cross-origin WS-open 2xx route-status oracle as path-enumeration primitive. (3) SSSD expired-password warning terminates LDAP access-rule evaluation as success (3hrm/CVE-2026-92821, expired pwd + SSH key auth bypasses all access restrictions) + shadow expiry 0 sentinel not treated as expired (v9m6/CVE-2026-104033) folded on the Sept 21 auth-precedence page — informational-branch-as-terminal-success + sentinel-value semantics axes. (4) SSSD Entra ID Graph OData quote-injection via unescaped lookup names (p2pv/CVE-2026-104040) folded on the Sept 18 query-grammar page — OData $filter as fourth SQL/Mongo/LDAP grammar dialect, identity name as injection payload. Tracked no-publish: SSSD responder DoS dozen (local availability class); Oct 6 00:32Z batch = ViewSonic ViewBoard vCast pair, AMD Zynq/Versal USB boot DFU overflow pair, Docling f4ch METS-GBS pre-limit allocation (residual guard, DoS), MongoDB OpsManager CR validation, TOTOLINK 10.0, girishsaraf SQLi quintet, openSIS teacher password reset, Lilishop/newbee-mall/SpringBlade/reNgine (reNgine subdomain_discovery cmdi = recon-tool input-handling class, revisit on fix PR)/srs singles. Updated-feed after 03:15Z = same-wave sync + retro enrichment re-surfacing (GLib sextet, libaom quartet, TaskingAI/SuperAGI/agentscope/pandas-ai/DeepTutor Oct 2 wave re-sync, GDBus, xdgmime, xmllint — all processed/tracked classes). KEV unchanged (catalog 2026.10.04, 1734, sha f51fed1c; CVE-2026-84411 RouterOS still not in KEV). ToB 25d2bbeef7ae051c, PortSwigger cd88cdf9, PD churn 50f6771d head Aug-16, Brutecat f099b20d, disclosed cc969a5f unchanged. Strict build clean.
  • October 6 00:1xZ scan (GHSA wave published 2026-10-05T23:19Z–2026-10-06T00:02Z): five folds, no new page. (1) vm2 dump continued: GHSA-5h3f-q97h-ccvc/CVE-2026-100721 (10.0, NodeVM custom-resolver externals stored as ^<path> prefix regex without end/separator anchor → prefix-sharing sibling require executes via hostRequire; prefix-match-allowlist class) + GHSA-2v2p-6j97-cjg9/CVE-2026-100722 (8.6, construct-trap missing markHostPromiseHandled that the apply trap has → host-Promise rejection kills host process; trap-family parity rule) + adjacent Seroval GHSA-p6vx-979v-rg4c/CVE-2026-104846 (9.8, fromJSON thenable assimilation invokes plugin callables, bypass of GHSA-mv8w-475r-vwqw) — folded on the Oct 5 vm2 page as an October 6 follow-up section. (2) simple-git four-pack in one minute (g4wm/102826 -c include.path unlisted + pending-fix regex misses includeIf; 858h/102827 long-option abbreviation --receive-p/--exe bypass; x6jw/102828 trailer..cmd unlisted; v5rq/102829 VISUAL env omitted from editor detection) — folded on the May 5 agent-git page as the denylist-incomplete-fix family with the command-executing-git-key enumeration and truncation battery. (3) proxy-addr jqcg/CVE-2026-90711 9.1 (::ffff:10.0.0.0/8 compiles match-everything → XFF trusted-hop-0 spoof; XFF probe rule) + PyMongo vp6j/CVE-2026-96748 (%2C/%3A decode-before-split host injection) + Werkzeug g6x2/CVE-2026-102598 safe_join NUL: empty-ADS incomplete fix + Mako 5639 drive-letter twin — folded on the Sept 15 parser/header-route page. (4) vLLM six-leg dump 105752-105760 (Harmony tool continuation drops cache_salt = documented-mitigation branch-drop; disaggregated /inference/v1/generate trusts caller-supplied features blob = two-step trust handoff class; P0/P1 mirror-cache desync on rejected-after-render) — folded on the Oct 2 AI serving page. (5) Docling q43m/CVE-2026-105750 enable_local_fetch not enforced in browser-render backend + 4xhp ODT xlink:href leg — folded on the Sept 20 media-pipeline page as guard-per-backend parity; plus GridFS operator-injection pair 8fxw/8fvv (MongoDB PHP + pymongo id-position consumed as query criteria) folded on the Sept 18 ORM query-grammar page. Tracked no-publish: Socket.IO cluster-engine wfpm PP-DoS, Filament MFA reauth 7m6h, PyJWT x33g OKP x/d confusion (JWT-parser class), PyMongo v4x9 BSON OOB write, uv 2cv4 + nx hrvq Windows traversal pair, smol-toml ReDoS, KaTeX 238p PP-chain, Seroval jp82 TypedArray DoS, OpenClaw g7fw target-allowlist skip (existing OpenClaw pages), MongoDB driver remainder, Rustls 2mjx level-boundary, Nx socket/traversal pair, compression DoS. Updated-feed deltas = same-wave sync + sprintf-js hp3w retro enrichment (ReDoS class). KEV unchanged (catalog 2026.10.04, 1734, sha f51fed1c; CVE-2026-84411 RouterOS still not in KEV). ToB 25d2bbeef7ae051c, PortSwigger cd88cdf9, PD churn a220682b head Aug-16, Brutecat f099b20d, disclosed cc969a5f unchanged. Strict build clean.

  • October 5 21:1xZ scan (new page + 4 folds): Oct 5 18:34Z GHSA wave (32 advisories, missed by 20:1xZ scan due to feed ordering — published_at predates that scan). Joomla extension quartet = new page docs/alerts/2026-10-05-joomla-extension-token-existence-public-controller-and-task-trigger-ghsa.md — Phoca Cart d/o download tokens checked for non-emptiness only never equality → guest sequential-ID digital-goods download (6qrr/CVE-2026-102775): equality-vs-existence probe (real token vs sentinel x, identical 200s = decorative token); TF Content guest-reachable shared RecordController accepts raw jform + request-selected record ID + unfiltered bind → mass-assign published/access/created_by using login-form CSRF tokens (5q6m/102780) + unauthenticated records.custom_action task trigger by numeric ID (hqjq/102779) — public-token-supply-as-attacker-resource + task-name fuzzing from manifests + composition test (publish then trigger); Event Gallery Google Photos picker SSRF attaching admin OAuth token, cross-site zero-click trigger leg (2gw6/102777); OrdaSoft CCK unauth order-column SQLi (ch52/102428, canonical sort-param class). Folds: Eclipse Che resolver SSRF (c4vh/CVE-2026-86671, no fix: openConnection no allow-list + file:// SA-token read + stored SCM PAT Authorization-forward + devfile parent.uri zero-click leg) on Sept 21 automation-platform page; Velociraptor trio (gpw6 wrong-predicate LABEL_CLIENTS→server metadata, 83qj WatchEvent OrgId caller-vs-target scope, 9q45 SysmonLogForward missing EXECVE → Investigator fleet RCE) on Oct 2 UTMStack fleet page — role-differential auditing rule; FacturaScripts WidgetSelect unserialize no-allowed_classes → bundled XLSXWriter __destruct file-delete → reinstall-hijack (8rvh/CVE-2026-104905) on July 14 Kimai/FacturaScripts page; HyperShift kubeconfig-Secret exec-plugin control-plane RCE (9pmf/CVE-2026-101919) on July 28 k8s proxy identity page — clientcmd.Load-on-Secret grep + exec-stanza-as-gadget rule. Tracked no-publish: Quay XSS pair, LearnPress/Adsmonetizer/ImageSlider XSS, dormakaba evolo detail-free, GouGuOA/ApiAdmin/WookTeam/HospitalMgmt singles, @orpc/zod (tracked 17:3xZ). KEV unchanged (catalog 2026.10.04, 1734, sha f51fed1c; CVE-2026-84411 RouterOS still not in KEV). ToB 9498f6e8 head SequenceHash processed; PortSwigger head smashing-the-token-limit Oct-5 already processed; PD head Aug-16; Brutecat f099b20d; disclosed cc969a5f unchanged. Strict build clean. Baseline 7d9b410.

  • October 5 18:1xZ scan (1 fold, no new page): Updated-feed 18:38-18:39Z enrichment wave (all April/May-original advisories re-surfacing with descriptions): Camel-Mail inbound header injection (2vqf/CVE-2026-33454, 9.4) folded on the June 5 Camel CXF/Knative page — MailHeaderFilterStrategy sets only setOutFilterStartsWith, never setInFilterStartsWith, so from("imap://")/pop3 consumers map Camel-prefixed MIME headers unfiltered; attacker vector is email delivery to a monitored mailbox driving camel-bean/camel-exec/camel-sql; operator rule: in/out filter-symmetry grep + delivery-channel (mailbox/queue/inbox) enumeration as untrusted-input sources. Tracked no-publish: GHSA-jm7w-5684-pvh8/CVE-2025-70974 FASTJSON pre-1.2.48 autoType JNDI re-publication (legacy class, incomplete-fix lineage of CVE-2017-18349, no new axis), LiteLLM 42208 + CXF 47323 + Camel 40453 re-surfacing (already on May 4/June 5/May 22 pages). KEV unchanged (catalog 2026.10.04, 1734, sha f51fed1c; CVE-2026-84411 RouterOS still not in KEV). ToB 25d2bbeef7ae051c head SequenceHash processed; PortSwigger churn cd88cdf9 head already promoted; PD churn 57ad8708 head Aug-16 processed; Brutecat f099b20d; disclosed cc969a5f unchanged. Strict build clean. Baseline 446aee9.

  • October 5 17:3xZ scan (1 fold, no new page): Oct 5 17:32Z GHSA wave (3 advisories). SiYuan path-guard residual pair folded on the July 10 SiYuan boundary page: (1) 4wwp IsForbiddenAbsPath() blocks only conf/conf.json by exact match — conf/key.pem + conf/ca.key (TLS + locally-generated-CA private keys, generated every boot even with TLS off) readable via POST /api/file/getFile; v3.8.1 grants RoleAdministrator to every authenticated user, default no-auth-code instances need no token — deny-list sibling-file enumeration rule + authenticated-equals-admin role-grant downgrade rule; (2) 3cm4 the same fix wired the guard into file.go + MCP file tool but /history/*path and /repo/diff/*path serve files by path independently without calling it, and history/repo snapshots of publishAccess.json/templates/* sit legitimately inside the tracked root — per-call-site guard-rollout sweep + snapshot/history/backup directories as bypass plane over live-path protection. Tracked no-publish: @orpc/zod gcgf/CVE-2026-103918 request-scoped prototype injection in smart coercion (per-object __proto__ setter + shape[key] inherited-member lookup; advisory itself states no global pollution and no generic escalation; prototype-pollution class covered by Sept 19 JS-sandbox/Sept 18 pages, revisit only if a real handler-level escalation publishes). Published sweep after 15:32Z = this 3-advisory wave only; updated sweep after 15:35Z = flatted rf6f + locutus rxrv enrichment re-surfacing only. KEV unchanged (catalog 2026.10.04, 1734, sha f51fed1c; CVE-2026-84411 RouterOS still not in KEV). ToB 25d2bbeef7ae051c head SequenceHash processed; PortSwigger churn cd88cdf9 head already promoted 85bfd98; PD churn 5e9e5ef5 head Aug-16 processed; Brutecat f099b20d; disclosed cc969a5f unchanged. Strict build clean. Baseline 90c297a (f8bf58a).

  • October 5 16:1xZ scan (4 folds, no new page, commit 90c297a): Oct 5 15:32Z GHSA wave (12 advisories). (1) Fiddler Classic smuggling pair folded on the Sept 15 parser/header-route page: p3gc/CVE-2026-77802 duplicate conflicting Content-Length forwarded verbatim while Fiddler frames on first value, and the pipe pool returns the upstream connection after reading only the first response → smuggled response buffered and served to the next reusing session (pool-readback cross-user channel); xq67/CVE-2026-77803 front-end TE+CL split with both headers forwarded, no vulnerable origin required — durable rule: forward-verbatim/frame-locally mismatch applies to debug proxies too, run the framing battery against the proxy itself. (2) Fiddler Authenticode helper gate + cert-install TOCTOU folded on the Sept 23 desktop page: mpj7/CVE-2026-77805 publisher-name-fragment allowlist ≠ file identity → signed-binary substitution at helper path executes elevated (LPE); rx7m/CVE-2026-77804 elevated TrustCert helper imports root cert from user-writable temp file (TOCTOU) → attacker root into Local Computer Trusted Root = machine-wide TLS interception; generalizes the low-priv-write/elevated-read handoff audit. (3) k6 MCP server ffg3/CVE-2026-89039 convert_playwright_script cwd restriction only on documented @-form, bare path via undocumented branch unrestricted + ~ expansion → arbitrary file read (SSH keys), symlink-in-cwd bypasses the checked path — enumerate argument forms not just values, fold on Sept 15 MCP page. (4) Northstar ≤9.1.1 8hhc/CVE-2026-88391 H2 Console exposed because auth interceptor covers only /northstar/**, embedded H2 sa/empty → pre-auth CREATE ALIAS RCE with public PoC — auth-filter path-prefix never includes framework console families; fold on July 30 control-plane page completing the Juggle console chain. Tracked no-publish: Sitefinity Next.js SDK SSRF sparse, HPE iLO7 remote user validation failure sparse (await firmware bulletin), WookTeam/Unimall django-haystack/Kit-Woo/CMS singles known classes. Updated sweep after 12:35Z = flatted/locutus prototype-pollution enrichment re-surfacing only. KEV unchanged (catalog 2026.10.04, 1734, sha f51fed1c; CVE-2026-84411 RouterOS still not in KEV). ToB 9498f6e8 head SequenceHash processed; PortSwigger churn cd88cdf9 head Oct-5 overlapping-fragments already promoted 85bfd98; PD churn 9e82f086 head Aug-16 processed; Brutecat f099b20d; disclosed cc969a5f unchanged. Strict build clean. Baseline 85bfd98 -> 90c297a.

  • October 5 15:1xZ scan (1 fold, no new page): PortSwigger research feed advanced (Oct 5 15:04Z): Heyes + Alex, "Smashing the token limit with overlapping fragments" — CSS-exfiltration follow-up that eliminates the recursive-@import requirement and shrinks token extraction ~193x. Folded on the existing CSS sanitizer/host-UI methodology page as the "Overlapping-fragment token reconstruction" section: positionless k-chunk presence oracle -> de Bruijn-style chunk-graph reconstruction client-side; alphabet^k rule budget drives tiered verification (3-char hex set + middle-character-tiered stronger checks: 223 KB/4,128 selectors = 12-char hex token at <=5 candidates ~96%; same 257 MB budget as the original generator = 210 hex chars one-candidate 99% / 640 chars <=5-candidate 90%); 62-char alphabet drops to 2-char chunks (3,844 rules); candidate-count-distribution harness over 100k regenerated fixture URLs before live use; ten token-scripts labs. Durable rule: recursive imports are NOT required for long-token CSS exfil — re-test previously written-off CSS injections. GHSA published/updated sweeps after 12:35Z = 0 advisories (head still the already-promoted Oct 5 12:31Z wave, 8aae8aa). KEV unchanged (catalog 2026.10.04, 1734, sha f51fed1c). ToB 25d2bbeef7ae051c head SequenceHash processed; PD churn 8f441123 head Aug-16 processed; Brutecat f099b20d; disclosed 02a9effe sitemap stub unchanged. Strict build clean.

  • October 5 13:1xZ scan (5 folds, no new page): Oct 5 12:31Z GHSA wave (27 advisories). (1) LibreOffice six-leg external-link family folded on the Sept 23 document-viewer page — remote-Java-classpath calc data source = code-exec on open (5jx8/63277 high); env/INI expansion exfil via XForms+csv/sql suppliers the CVE-2024-12426 check missed (p537/63270); csv link fetch file-read/SSRF on load (2r33/63267); sql-provider local text read (rvj5/63268); embedded Firebird arbitrary user-dir file write (5436/63266); HLS-playlist GStreamer file-read+fetch (hx75/63269) — rule: per-supplier fix differentials, enumerate every place the format supplies a URL. (2) Heym HITL approval-link steering (84cp/105396) folded Oct 1 n8n approval page: build_public_base_url from spoofed Origin/X-Forwarded-Host delivers capability-token review links to attacker domain → decision executes as workflow owner. (3) Zabbix transport trio folded June 22 control-plane page: heartbeat skips PSK/cert auth (jmxh/59786), hidden-field host-search credential guess oracle IPMI/PSK (pr2j/59785), ZBXTRAP record-delimiter injection in Perl trap receiver (3p5c/59787). (4) UPI QR Payment Gateway unbound confirmation (vjc6/84169) folded Sept 23 payment page. (5) libaom encoder SVC crash-oracle RCE (qr4p/56211) folded Sept 20 media-pipeline page — encoder-as-attack-surface + fork-model ASLR brute force. Tracked no-publish: Casdoor ApiFilter authz_filter auth bypass detail-free (c4rm/105307, exploit public), Zabbix Duktape/binary-item DoS pair, Qt MCUs img-tag halt, Comelit gateway unauth config read + vertical password-overwrite pair (g5xq/wv8r, ICSA-adjacent, no sink detail), WooCommerce File Uploads Addon public-uploads pair (8493/cm5p, guessed-filename disclosure class), WP Missing-Authorization singles, feelcrm-os/Totolink sparse singles, MediaTek/Android re-surfacing, GLib/GIMP/libaom decoder memory-safety. KEV unchanged (catalog 2026.10.04, 1734, sha f51fed1c; CVE-2026-84411 RouterOS still not in KEV). ToB 25d2bbeef7ae051c head SequenceHash processed; PortSwigger feed variant churn, head Sept-23 processed; PD head Aug-16 processed; Brutecat f099b20d; disclosed cc969a5f unchanged. Strict build clean.

  • September 23 18:12Z GitHub wave (fold only, 1 page): 9router four-GHSA pack folded onto the Aug 28 9router page — (1) unauth /v1/* via reverse-proxy locality collapse (CVE-2026-56675/GHSA-x5c9-v98j-722r): socket-peer locality fix is no fix behind a same-host loopback nginx proxy (every internet client stamped 127.0.0.1, forwarded X-Real-IP/XFF ignored for the decision); Origin-header presence flips the verdict so browser probes false-negative — test direct-vs-proxied entry points and with/without browser headers; (2) image-prefetch DNS-rebinding TOCTOU SSRF (56676) reachable via /v1/chat/completions image_url but gated on a vision-capable model — resolve-then-fetch guards need TTL-0 public→internal rebinding probes and feature-gates are reachability preconditions; (3) PATCH /api/settings unfiltered mass assignment sets requireLogin:false = global auth-off switch, /api/keys readable unauth (56679); (4) Kiro region interpolates into codewhisperer.${region}.amazonaws.com, host:8443# fragment terminator relocates the request with the bearer Authorization forwarded (56678) — undici rejects the @host# userinfo payload so # is the live JS-runtime spelling of trusted-suffix template escape. Fifth bug class on one guard module. Tracked: JLine ReDoS trio (77420-77422), WEBCON vacation-chart IDOR (92419), Dell SCG Policy Manager pack, WatchGuard AuthPoint LDAP sync (95676), Forcepoint NGFW bypass detail-free (12974), IBM FTM missing-authz payments pair (18177/18179), Isotope authenticated-backend blind SQLi (96600), FFmpeg mov.c/Robur ring-buffer/WEOLL thin. KEV unchanged (sha e4988831e6d3c903, catalog 2026.09.23, 1721); ToB 68adb289 Sept-21 SAML, PortSwigger 905e004b Sept-23 HTTP/3, PD f82fe663 head Aug-16, Brutecat f099b20d, disclosed cc969a5f unchanged as of the 18:1xZ Sep 23 scan. Note: AGENTS.md memory write blocked (protected file, non-interactive) — this page carries the note. https://github.com/advisories/GHSA-x5c9-v98j-722r

  • September 23 00:31Z GitHub wave (fold only, 4 pages, no new page): (1) openEQUELLA <2026.1.0 SignedObject-nested Java deserialization bypass (CVE-2026-67615/GHSA-h2p3-9m67-89gr, 8.8) folded onto the Sept 20 media-pipeline page — /invoker/* HTTP-invoker PluginAwareObjectInputStream denylist applies to the outer stream only; payload nested in java.security.SignedObject is deserialized by a fresh unfiltered inner ObjectInputStream → JNDI RCE for any authenticated non-guest. Axis: deserialization filters enforce only the filtered stream; sweep JDK secondary-deserialization containers (SignedObject, JRMP_Stub, MXClean, Rome) whenever a Java sink ships ObjectInputFilter/custom resolveClass; per-stream coverage drift. (2) OpenEye Apex NVR ≤3.2.9.376 four-GHSA chain folded onto the June 23 appliance page — hardcoded unrotatable recovery account into password-reset workflow (92928/GHSA-2h86-6hmv-8f46) + unlock codes with no per-device secret, offline-forgeable (92930/GHSA-g4p9-62qj-r366) + XFF→127.0.0.1 local-only-control bypass on non-TLS interface (92929/GHSA-2jx4-m53c-2mqc) + recbackup backup-config cmdi as nvr user (94367/GHSA-xr8v-x794-fm52); design present since 2.2.3.4, fixed 3.5.4; axes: compose low-severity bundles per product into the real ladder, unlock/recovery codes need per-device secret material, XFF-as-identity twin of 9router. (3) mcp-toolbox-sdk-python toolbox-core token cache not keyed by audience (CVE-2026-19202/GHSA-jcjp-gr26-563j) folded onto the Sept 22 mcp-atlassian deputy page — Service-A Google ID token cached process-globally and replayed to Service B; lowest-trust SDK peer = token-capture position; sweep credential-cache key shape. (4) TDuckCloud tduck-platform ≤5.3 orders[0].column ORDER BY SQLi (CVE-2026-95829/GHSA-rj23-5g4f-59vx, public exploit) folded onto the Sept 18 query-grammar page — MyBatis-Plus PaginationInnerInterceptor.concatOrderBy concatenates client sort columns; sweep sort params on every Java/Spring list endpoint, scaffold derived-project population predicts the sink across vendor products. Tracked no-publish: IBM FTM/DataStage/Concert ~40-GHSA vendor pack, MCMS SQLi/XSS, CMSimple CSRF-default-off, Apache Lounge hardcoded creds, openCode Worktree.remove path validation, lwIP MQTT OOB (87121), tar TOCTOU trio, SourceCodester/Pixtream/College-Notes/Restaurant-Management SQLi/upload singles, Netty split-TE + SPDY + WebSocket DoS re-surfacing (processed), yaml-cpp info disclosure. KEV JSON unchanged (sha256 b912a7f9a4c46304, catalog 2026.09.22, 1721 entries); ToB 68adb289 head Sept-21 SAML processed; PortSwigger 73d1204c head Aug-25 processed; PD hash churn head Aug-16 processed; Brutecat f099b20d; disclosed cc969a5f unchanged as of the 01:1xZ Sep 23 scan. https://github.com/advisories/GHSA-h2p3-9m67-89gr, https://github.com/advisories/GHSA-2h86-6hmv-8f46, https://github.com/advisories/GHSA-jcjp-gr26-563j, https://github.com/advisories/GHSA-rj23-5g4f-59vx

  • September 22 06:30Z GitHub wave (fold onto the Sept 19 WordPress alternate-surface page): Meta Box AIO ≤3.11.0 unauth→Administrator three-link chain (CVE-2026-13355/GHSA-q84q-9hmp-p3qm; Frontend Submission ≤4.5.6, User Profile ≤3.11.0 standalone twins) — populate_via_query_string() overrides the form's target object_id from GET rwmb_frontend_field_object_id with no authz, Form::process() lacks the user_can_edit() check render() has → unauth wp_update_post() of any page with an arbitrary shortcode, and mb-user-profile trusts the injected [mb_user_profile_register] shortcode's role/auto_login attributes → register-as-admin. CMP – Coming Soon & Maintenance ≤4.1.17 missing capability check on cmp_ajax_import_settings → editor arbitrary-option write → default_role=administrator + open registration → self-admin (CVE-2026-12470/GHSA-wchw-wpj2-8j67). Give Tributes ≤2.3.1 unauth POI reachable only when Multiple-Recipients is ON and the eCard custom-message option is OFF (single-recipient path sanitizes, give_clean() blanks serialized input on the required-message path); no known POP chain in-plugin (CVE-2026-19658/GHSA-wq6q-gx9m-7669). Durable axes: render-vs-process authorization parity (call process endpoints without ever rendering), caller-target override params (*_object_id), injected WP content parsed as trusted configuration (privilege-bearing shortcode attributes), options-update endpoints as privilege-escalation routes, configuration posture as part of the exploitability proof (third same-week exemplar after Dancer2 static_handler:0 and NivoCart chunk asymmetry), chain-conditional POI reporting. Tracked without publication: Text Styler contributor <style>-block stored XSS + missing edit check (CVE-2026-88788/GHSA-gxqc-8737-rfmf), Contextual Related Posts other_attributes author XSS (CVE-2026-85653/GHSA-73p4-x7g3-p8jm), Booking Calendar wpbc_auto_fill reflected XSS (CVE-2026-93655/GHSA-f9mc-qc82-mqr7). Updated-feed sweep after 03:35Z showed only these 6 + RestrictedPython/tarfile re-surfacing (already processed). KEV JSON unchanged (sha256 e0b2bc151428bddd, catalog 2026.09.21, 1717 entries, Zyxel CVE-2026-7273 tracked); ToB 68adb289 head Sept-21 SAML post processed; PortSwigger 7af2255e head whats-in-a-tag-name Aug-25 processed; PD head Aug-16 processed (hash churn); Brutecat f099b20d; disclosed cc969a5f unchanged as of the 06:4xZ Sep 22 scan. Sources: https://github.com/advisories/GHSA-q84q-9hmp-p3qm, https://github.com/advisories/GHSA-wchw-wpj2-8j67, https://github.com/advisories/GHSA-wq6q-gx9m-7669

  • September 21 Trail of Bits post (new methodology page): SAML: A fractal of bad design promoted as SAML Assertion Attack-Surface Testing — retirement essay inverted into an operator target map: six independent parser layers between assertion bytes and the authz decision (XML/DTD, C14N, enveloped signature, conditions, binding parity, identity linking), mutation-battery order (metadata fingerprint → own-signed canary → XSW family → comment/whitespace c14n family → condition-stripping matrix → per-binding verdict table → Go round-trip asymmetries → two-tenant linking review), shape-normalization defense inverted as bypass target, report language = which copy of the doc the signature check vs identity check read. Sources cited on page: USENIX '12 On Breaking SAML, Black Hat '18 XML comment bypass, Mattermost Go round-trip, libxml2 GitHub Enterprise bypass, GitHub parser-differentials post, PortSwigger SAML roulette + Fragile Lock. GHSA published/updated sweeps after 09:35Z Sep 21 = 0 advisories; KEV JSON unchanged (catalog 2026.09.18, 1716 entries); PortSwigger 02015ac7 head whats-in-a-tag-name Aug-25 processed (hash churn); ToB head now Sept-21 SAML post (promoted this run, feed hash 68adb289); PD 2f570dd6 head Aug-16 (feed redirect-to-RSS now requires -L; content unchanged); Brutecat f099b20d; disclosed cc969a5f unchanged as of the 12:4xZ Sep 21 scan. https://blog.trailofbits.com/2026-09-21/saml-a-fractal-of-bad-design/

  • September 21 updated-feed Argo Workflows follow-up (fold onto the May 4 Argo Workflows page): Strict/Secure allow-list depth-one bypass — the CVE-2026-31892/GHSA-3775-99mw-8rp4 fix validates user WorkflowSpec overrides by reflection over top-level fields only; ArtifactGC is allow-listed wholesale and WorkflowLevelArtifactGC.PodSpecPatch flows unmodified into the same util.ApplyPodSpecPatch strategic-merge-patch sink on the artifact-GC pod (auto-mounted SA token) → under templateReferencing: Strict/Secure, referenced template with any output artifact + submitter-set artifactGC.strategy: OnWorkflowCompletion yields attacker image/command, privileged: true, hostPath: /, hostNetwork: true (CVE-2026-54526/GHSA-48p8-g2fx-3wwm, fixed v4 4.0.6 / v3.7.15; updated feed 02:47Z Sep 21). Axes: depth-one allow-lists enforce nothing (every allow-listed field is a subschema), enumerate every call site of the patched sink helper, the fix's regression-test file is the attack map, clusterless Go unit-test PoC harness pattern. GHSA published sweep after 00:35Z Sep 21 = 0 advisories; updated feed = this advisory only. KEV JSON unchanged (sha256 7b770a6f5eb1d47a, catalogVersion 2026.09.18, 1716 entries); PortSwigger 0ea006f4 head whats-in-a-tag-name Aug-25 processed; ToB 25d2bbee head Sept-18 Miden post processed; PD 7c040f86 head Aug-16 processed; Brutecat f099b20d; disclosed cc969a5f unchanged as of the 03:2xZ Sep 21 scan.

  • September 21 00:30Z wave (fold onto the June 30 model-parser/deserialization page): ML library pickle-loader regression cluster — stable-baselines3 ≤2.9.0 PPO.load/load_replay_buffer/VecNormalize.load unpickle by default; weights_only=True hardening landed in v2.9.0 then was reverted on master (PR #1913, PyTorch 1.13 compat), and the prior fix (PR #41) gated only the separate huggingface_sb3 hub loader (CVE-2026-94093/GHSA-rh54-3493-vqgc); gensim ≤4.4.0 SaveLoad.load unsafe at develop HEAD, issue closed same-day with no fix (CVE-2026-94091/GHSA-9h85-xr59-9fh8); DGL ≤2.1.0 load_info/_read_torch_data unguarded deserialization, vendor unresponsive (CVE-2026-94092/GHSA-jf58-7v68-wxqh). Axes: fingerprint installed loader call sites not changelogs, package-A fix ≠ package-B coverage, stagnant-repo default-unsafe artifacts as code-exec channels; bounded canary-loader validation matrix added to the page. Tracked: Netcore NBR200V2 CGI/traceroute/LAN-IP cmdi trio (94097/94096/94095, router cmdi class), OpenClaw canvas-host buffer DoS (94094), Manalyze PE integer-underflow (94090), Oracle EBS/Hyperion April CPU-update sync wave. KEV JSON unchanged (sha256 7b770a6f5eb1d47a, catalogVersion 2026.09.18, 1716 entries); PortSwigger 0ea006f4 head whats-in-a-tag-name Aug-25 processed; ToB d5d2b5d0 head Sept-18 Miden post processed; PD head Aug-16 processed (rss hash churn); Brutecat f099b20d; disclosed cc969a5f unchanged as of the 01:1xZ Sep 21 scan.

  • September 20 06:30Z wave + Sept 15 late-feed items (new page): SmartLife/ZTE app-backend app-auth forgery chain (CVE-2026-86553/GHSA-9f8w-25xq-gfm7 8.5 + CVE-2026-86552/GHSA-5vgr-9q5r-pvpj): client-runtime-generated app-authentication params are a forgeable service-level capability → verify.serv email→account-ID oracle + reset trusting asserted ID = ATO; signup accepts any unowned email (ZTE bulletins 2171542593031840100 / 460174866982102946). Devolutions Server 4-GHSA credential-vault cluster (CVE-2026-90971 low-priv connection-definition SSRF in VMware datacenter discovery leaking other users' credentials; CVE-2026-90969 listing endpoint honoring password-disclosure params without view-password grant; CVE-2026-13327 LDAPS + CVE-2026-84850 shared sync HTTP client accepting spoofed certs). HPE SD-WAN Orchestrator read-only cache-sync token disclosure (CVE-2026-76672/GHSA-c2cc-g2j3-9qhg 9.9, HPE hpesbnw05135en_us). Axes: app-auth params as forged capability + resolver→sink trace, endpoint-level (not UI-level) permission checks with parameter decision tables, read-only roles reaching token-bearing integrations. Tracked: NPM unauth cert-validate echo route (93964), SxDevOps MCP-stdio Popen injection (93965, Aug 6 axis), Pixelfed instancePeers (93960), UJCMS username enumeration (93961), Kamailio CDP heap overflow (93962), Suricata Http2ThreadMultiBuf UAF + DoH2 type confusion (94084/94083, defensive-engine memory safety), Firefox 156 UAF wave, D-Link R95 NTP cmdinj (93958), Z80Ultra Settings.Secure MAC read, IBM Verify Identity Access trio (12101/11927/13272 detail-sparse), Oracle Hyperion HFM pair (87192/87194 detail-free, revisit), Gammu triples, Pod::Text, EGO-Planner, SourceCodester SQLi. KEV JSON unchanged (sha256 7b770a6f5eb1d47a, catalogVersion 2026.09.18, 1716 entries); all blog feeds unchanged (PortSwigger 0ea006f4, ToB d5d2b5d0, PD 8ef64520/7d2ff73b hash churn only head Aug-16, Brutecat f099b20d, disclosed cc969a5f) as of the ~00:2xZ Sep 20 PDT scan: https://github.com/advisories/GHSA-9f8w-25xq-gfm7, https://github.com/advisories/GHSA-5vgr-9q5r-pvpj, https://github.com/advisories/GHSA-5256-r6g6-4j2j, https://github.com/advisories/GHSA-hfw6-c783-wrw2, https://github.com/advisories/GHSA-xp86-5592-qh57, https://github.com/advisories/GHSA-m9jg-rh2h-mw5m, https://github.com/advisories/GHSA-c2cc-g2j3-9qhg

  • September 20 00:30Z wave (new page + 3 folds): Exim post-rejection SMTP smuggling (CVE-2026-94057/GHSA-3mrg-v8x6-xfjw, fixed 4.100.1) + Expat UTF-16 lone-high-surrogate markup hiding (CVE-2026-93990/GHSA-rfp9-ffqc-h4x8, through 2.8.4) promoted as a grammar-desync page — three-way sent-pre/sent-retry/delivered diff pattern for MTA message-integrity testing; invalid-surrogate XXE battery for UTF-16 XML entry points; family rule = buffer/decoder state surviving its kill-boundary (Sanic trailer, aiosmtplib carryover, Grav preg_match /u). Folds: Argo Workflows ListArchivedWorkflows NotEquals field selector skips cluster-scoped access review (CVE-2026-93991/GHSA-3fwg-9p8x-37mv, 7.7) onto the Sept 17 guard-composition page (operator-polarity axis: enumerate the full operator matrix including negations); Mistral Vibe worktree-creation post-checkout hooks before trust validation (CVE-2026-93993/GHSA-92v2-hh9v-6vj5, 8.8) onto the June 12 developer-control page (git-worktree leg of the repo-hooks rule; ordering bypass of trust gates); Exim PROXY-protocol stack read + OOB write (CVE-2026-94056/GHSA-xcfp-8rjq-j39w 7.5, CVE-2026-94054/GHSA-r24f-7cqq-88w4 7.0) as native-parser attack-surface note on the June 8 SMTP PROXY page. Tracked: Exim GnuTLS UAF (94055), Gopeed AutoExtract traversal (93992), QloApps admin AJAX file read (93988), vLLM bad_words cross-request logits corruption (93989, no PoC chain), grimmory/Booklore pair (93954/93955), PHP-FTS XSS (93956), Pod::Text DoS (re-surfacing). KEV JSON unchanged (sha256 7b770a6f5eb1d47a, catalogVersion 2026.09.18, 1716 entries, newest dateAdded 2026-09-18 kernel trio tracked); PortSwigger 0ea006f4 head whats-in-a-tag-name (Aug 25) processed; ToB 25d2bbee head Sept-18 Miden post processed (5372af2); PD 7c040f86 head Aug-16 processed; Brutecat f099b20d; disclosed.org cc969a5f unchanged as of the ~00:3xZ Sep 20 scan (note: cisa.gov /2026/feed/ JSON path now Akamai-denied for plain UAs; the /sites/default/files/feeds/ path works with a curl UA): https://github.com/advisories/GHSA-3mrg-v8x6-xfjw, https://github.com/advisories/GHSA-rfp9-ffqc-h4x8, https://github.com/advisories/GHSA-3fwg-9p8x-37mv, https://github.com/advisories/GHSA-92v2-hh9v-6vj5, https://github.com/advisories/GHSA-xcfp-8rjq-j39w, https://github.com/advisories/GHSA-r24f-7cqq-88w4

  • September 19 00:32Z OpenShift console follow-up + late-morning tracked items (fold only): OpenShift console unauthenticated /api/devfile/ + /api/devfile/samples/ SSRF promoted as a September 19 follow-up on the Aug 10 AI feature-store/cluster control-plane page — CVE-2026-75885/GHSA-hm52-6738-r26p, critical 9.3 scope-changed; crafted devfile payloads make the console pod fetch internal services and reflect partial responses (liveness/content-prefix oracle); paired missing-content-length unbounded-memory DoS tracked not published. Durable axis: enumerate fetch-bearing console route families by feature (devfile/proxy/catalog/update-check) and probe each unauthenticated — the patched webhook-helper SSRF says nothing about the devfile family. Tracked without publication this run: WP Cloud Plugins Use-your-Drive/Out-of-the-Box/Share-one-Drive/Lets-Box 2.0–3.8.3 download_file_to_uploads subscriber-level arbitrary file upload via wp_ajax_nopriv_ import action, can_import() missing capability check, no get_allowed_mime_types() validation (CVE-2026-93031/GHSA-v278-3mjv-f38g, 8.8 — same nopriv-AJAX-upload axis as the Sept 19 Gravity Forms page, no new operator pattern); MitraStar GPT-2741GNAC-N2-SV authenticated OS command injection via concatenated params on /cgi-bin/device-management-utilities-internet.cgi ping diagnostics (CVE-2026-52483/GHSA-9g99-j4p5-23vw — router diagnostic-command class already covered); calculator-vault Android app whose SQLite/media sits in shared external storage unbound to the passcode boundary (CVE-2026-77875/GHSA-92ph-4c2m-29x6 — local ADB/file-read precondition, mobile-storage hygiene reminder only); SiYuan 3.8.4 renderer trio + getDynamicIcon read-only-token template-injection metadata read (CVE-2026-93921/93922/93923, already tracked on the Sept 4 SiYuan page, still no PoC chain detail); Totolink A3002MU CVE-2026-93741 10.0 (tracked in prior run); Netty TE pair, Edge UAF, vLLM/SGLang singles, Oracle EBS/BIA patch singles = re-surfacing/summary-only. KEV JSON unchanged (sha256 7b770a6f5eb1d47a, catalogVersion 2026.09.18, 1716 entries, newest dateAdded 2026-09-16); PortSwigger 0ea006f4 head whats-in-a-tag-name (Aug 25) processed; ToB head Sept-18 Miden post processed (5372af2); PD head Aug-16; Brutecat f099b20d; disclosed.org cc969a5f unchanged as of the ~08:1xZ Sep 19 scan: https://github.com/advisories/GHSA-hm52-6738-r26p, https://github.com/advisories/GHSA-v278-3mjv-f38g, https://github.com/advisories/GHSA-9g99-j4p5-23vw, https://github.com/advisories/GHSA-92ph-4c2m-29x6
  • September 16 GitHub late-night wave (published 2026-09-16T22:09Z–22:15Z): one new operator page, 4 GHSAs promoted, plus two folds. New page: MCP OAuth resource-metadata spoofing, markdown-sanitizer matching misses, and AI route guard parity — rmcp < 2.0.0 OAuth Protected Resource Metadata discovery (RFC 9728) never reads/validates the returned resource field, so a malicious MCP server at fake-mcp.com serving metadata that declares resource: real-mcp.com + the legitimate AS makes the victim complete a genuine consent flow whose resulting token is then sent to the attacker → full impersonation on the real server (GHSA-33f5-2c5q-wgwj / CVE-2026-63127); rmcp Streamable HTTP server allocates a session before body validation and every early-return skips close_session → one ~250-byte unauthenticated POST permanently leaks ~400–550 bytes, ~170M entries/day ≈75 GB at verified leak rates (GHSA-9pj6-vhgr-3mwh / CVE-2026-63128); @nuxtjs/mdc < 0.22.1 default sanitizer scheme-checks only attributes named exactly href/src (SVG xlink:href javascript: survives parse and re-renders as a real attribute) and compares data:text/html deny entries against url.protocol which is always just "data:" → every data:text/* deny entry is dead code, <iframe src="data:text/html,..."> passes (GHSA-mxm6-v9r6-r94c / CVE-2026-63671); vLLM audio decode-duration guard (VLLM_MAX_AUDIO_DECODE_DURATION_S) threaded only into /v1/audio/transcriptions, the /v1/chat/completions input_audio chain calls load_audio(..., sr=None) with no limit and inline data: URLs bypass fetch timeouts, third sibling after CVE-2026-5497 (video) and GHSA-pq5c-rjhq-qp7p (image) (GHSA-hcwq-8wjf-3gcr / CVE-2026-57173). Durable axes: partial-RFC-adoption (client implements the metadata fetch but drops the MUST binding checks), exact-name/prefix-exactness sanitizer matching missing its attribute and scheme siblings, and resource guards wired to one serving route not its siblings — page: MCP OAuth resource-metadata spoofing, sanitizer gaps, and AI route guard parity. Folded into the Aug 25 Grav page: Security::detectXss() runs pre-Twig so {% set x="on"~"error" %} + {{ x }}=... reconstructs blocked event handlers, tag names (<s{{"c"~"r"~"i"~"p"~"t"}}>), and schemes (href="{{"java"~"script"}}:) at render time into {{ content|raw }} (GHSA-2c4f-86xc-cr74 / CVE-2026-61453, fixed 2.0.1), plus stored CSS injection via the media resize() action writing caller values into styleAttributes past the ?style= sanitizer (GHSA-ffmg-hfvg-jhg9 / CVE-2026-58657). Folded into the June 11 OpenFGA page: ListUsers returns a but not-excluded user when the exclusion base rides a user:* wildcard and the excluded user holds a concrete tuple via the sibling intersection operand (GHSA-g3pg-frfm-pr2m / CVE-2026-61709, fixed 1.18.1) → Check vs ListUsers vs ListObjects differential on ReBAC engines. Tracked without publication: Grav Installer::unZip() zip-bomb (GHSA-2vcx-h8p2-9pg9), node-opcua FIN-WAIT-2 socket leak (GHSA-r2pf-9cw4-5j65), Immutable.js/Directus updated-feed re-surfacings. Other feeds unchanged this run: PortSwigger newest Aug 4, ToB newest Sept 15 (1Password benchmark, defender framing, not promotable), PD newest Aug 16, Brutecat June 11; KEV JSON catalog 2026.09.16, 1713 entries, newest dateAdded 2026-09-16 — all three Sept 16 KEV rows (Acronis/Cisco ISE/Pixel) already folded in prior runs. Sources: https://github.com/advisories/GHSA-33f5-2c5q-wgwj, https://github.com/advisories/GHSA-9pj6-vhgr-3mwh, https://github.com/advisories/GHSA-mxm6-v9r6-r94c, https://github.com/advisories/GHSA-hcwq-8wjf-3gcr, https://github.com/advisories/GHSA-2c4f-86xc-cr74, https://github.com/advisories/GHSA-ffmg-hfvg-jhg9, https://github.com/advisories/GHSA-g3pg-frfm-pr2m
  • September 16 GitHub unreviewed advisory wave (published 2026-09-16T18:32Z): one new operator page, 3 GHSAs promoted, plus one fold and one KEV row. New page: Scanner, C2, and SOAR control-plane trust boundaries — Nuclei < 3.11.1 caches template signature verification on file mtime without content checksums; replacing verified templates with unsigned content + touch -r mtime restore bypasses the check → OS command execution on the scanner host (GHSA-77rj-h8wx-6cgq / CVE-2026-92718, 7.3); Covenant ≤ 0.6 registers the CovenantHub SignalR hub without [Authorize], so unauthenticated callers invoke CreateHttpListener and receive a signed JWT unlocking the entire operator API — grunts, credentials, binaries, events, operator roster (GHSA-h9hg-x52x-c465, critical); Shuffle ≤ 2.2.1 HandleApiGeneration lets an org admin reset/read API keys for arbitrary user IDs in other organizations → cross-tenant ATO (GHSA-gxxx-83g3-wgp9). Durable axes: scanner signature gates that trust mtime, hub/transport auth parity on C2 control planes, and admin action endpoints without tenant binding — page: Scanner, C2, and SOAR control-plane trust boundaries. Folded into the Sept 16 route-authorization page: Concrete CMS quartet — public Form Block upload serves XML/XSLT inline from app origin → xml-stylesheet stored XSS (GHSA-f2mp-hj9g-qf89), legacy Express entry search skips canViewExpressEntries() (GHSA-3w9f-9wfp-x8gr), POST /ccm/api/1.0/users creates accounts for any users:add-scoped client_credentials token with no permission check (GHSA-82fx-23wg-996j), bearer-only auth keeps tokens valid after account deactivation/deletion (GHSA-pmgv-hgv2-w69h). Also folded into Nuclei template update hygiene. KEV gained Acronis Backup cPanel/Plesk plugin incorrect default permissions LPE (CVE-2026-87886, SEC-10986) — added to the Sept 15 KEV wave page as the third hosting-control-plugin privilege-tier entry; tracked as hygiene, no exploit detail. Tracked without publication: Kubero unauth notifications API (GHSA-m69f-42c6-7334), Scirius PCAP _id traversal (GHSA-h754-2546-79g9), Quickwit queue_url SSRF (GHSA-rx45-hj8g-x4vm), IRIS case-comment authz, AEM stored XSS, kkFileView onlinePreview reflected XSS, Guns pair, Dell UPF stack overflow + DRM default permissions, and the MuPDF/GPAC/Open5GS/Ruijie/SourceCodester/Sogou sparse singles. ToB/PD/PortSwigger/Brutecat feeds unchanged; KEV CSV 1713 unique entries, newest dateAdded 2026-09-16.
  • September 16 GitHub updated-feed late wave (advisories published 2026-09-11T21:31Z–2026-09-14T18:14Z, surfaced via the updated feed 2026-09-14/15): one new operator page, 18 GHSAs promoted. New page: Identity-assertion, MCP-metadata, and client-render late-wave boundaries — Prowler SAML ACS re-derives tenant from the asserted email domain instead of the validated SAML configuration → cross-tenant ATO (GHSA-h8m9-jgf8-vwvp / CVE-2026-59151, CVSS 9.6); ZITADEL auto-linking by email without checking IdP-side verification (GHSA-992q-9gwp-7r79) and JWT IdP exp non-validation replay (GHSA-v77h-2w3m-94hx); Okta Java SDK 11.0.0–20.0.0 ApiClient race leaking status/header from one response into another's authorization branch (GHSA-j5gq-897m-2rff, CVSS 8.4); Apache Doris MCP Server metadata-query SQLi with dropped caller auth context (GHSA-pqrj-4gwg-h5f7 / CVE-2025-66336); yayson JSON:API type:"__proto__" prototype pollution with attacker-controlled key+value, included leg bypassing type allow-lists (GHSA-325j-mg25-8q58, CVSS 9.1); SiYuan Bazaar zero-click metadata XSS + unsanitized README → Electron nodeIntegration RCE (GHSA-v3mg-9v85-fcm7 / CVE-2026-56397 + duplicate GHSA-24r3-p3x6-cqvx); Mattermost unauth /ac/installed sharedSecret injection (MMSA-2026-00654), no-admin /gitlab connect global-instance overwrite, subscription-ownership skip, bot-deactivation permission skip, and WebSocket cached-auth surviving global session revocation (5 GHSAs); NiFi CaptureChangeMySQL identifier escaping, X-ProxyHost/X-Forwarded-Host outside the Host-restriction property, Process-Group replace skipping @Restricted authz, read-only config-verification write primitive (4 GHSAs) — page: SAML tenant claim, MCP metadata, JSON:API, marketplace, route authorization boundaries. Folded into existing product pages: LiteLLM late wave (MCP spec_path SSRF GHSA-c693-x898-5g4h, async guardrail call_type bypass GHSA-p897-vf7j-f5h8, SSO session non-invalidation GHSA-w2mh-qq9q-453x, user-enumeration incomplete fix GHSA-m2v5-74w2-qhcj) into the June 8 LiteLLM page; Crawl4AI hardcoded default JWT signing key (GHSA-8qrg-7j2f-rf2h / CVE-2026-56265, CVSS 9.8) into the June 5 Crawl4AI page; historical Flowise overrideConfig advisory + duplicate (GHSA-5cph-wvm9-45gj, GHSA-5w6g-rc45-wvv9) noted on the Aug 4 Flowise page; October CMS safe-mode sandbox-bypass third leg (GHSA-xv9m-fm3w-8w5x / CVE-2026-46696) tracked on the Sept 15 page. Marked processed as already-published updated-feed re-surfacing: FrontMCP $ref fix bypass, both Mockoon records, Shopper siblings, Prowler beyond the table. Sources: https://github.com/advisories/GHSA-h8m9-jgf8-vwvp, https://github.com/advisories/GHSA-992q-9gwp-7r79, https://github.com/advisories/GHSA-j5gq-897m-2rff, https://github.com/advisories/GHSA-pqrj-4gwg-h5f7, https://github.com/advisories/GHSA-325j-mg25-8q58, https://github.com/advisories/GHSA-v3mg-9v85-fcm7, https://github.com/advisories/GHSA-8qrg-7j2f-rf2h, https://github.com/advisories/GHSA-chxj-gxww-q98w, https://github.com/advisories/GHSA-8vm2-c32j-mvfr, https://github.com/advisories/GHSA-jqgv-39mg-7c2r
  • September 16 GitHub unreviewed advisory wave (published 2026-09-16T00:31Z–03:31Z): one new operator page, 5 GHSAs promoted, plus completion of the three pages from the Sept 15 scan (KEV wave 2026-09-09→14, AI/agent local-surface week 44 GHSAs, Http4s Ember + Traefik 19 GHSAs — all wired into alerts index and homepage this run). New page: Secret Server / OT hardcoded-key cluster — Delinea Secret Server criticals: padding oracle letting an unauthenticated user with access decrypt or encrypt data using a server cryptographic key (GHSA-grw7-x4gw-45r5 / CVE-2026-15638), valid SAML IdP response reused to impersonate another Secret Server user (GHSA-43cm-c736-gj85 / CVE-2026-15640), malicious-link script execution (GHSA-5jwp-q2ph-6mgc / CVE-2026-15639); Wärtsilä FOS-Onboard deployer-ng Update Controller hardcoded cryptographic server key (GHSA-xr64-qq65-vf4r / CVE-2026-78225, CVSS 9.0) and robot testing framework hardcoded client authentication key (GHSA-j2xg-7hvh-hxm5 / CVE-2026-81855, CVSS 9.1). Durable axes: vault-side crypto-oracle and SAML-binding audits on secrets managers; update-channel key extraction from shipped OT/appliance software — page: Secret Server identity/crypto boundaries + OT hardcoded update keys. Tracked adjacent without publication: @jitsi/electron-sdk contextBridge screen enumeration without picker gate (GHSA-q3gq-fmhq-w6pr / CVE-2026-92299, high — existing Electron/IPC axis), Chrome 153.0.8010.47 memory-safety mirror wave, Arista EOS IS-IS/VRRP/DHCP/MLAG protocol DoS set, Netcore NR255/NR268 firmware CGI bundle, mySCADA myPRO unauth command API and hardcoded-key records, VeloCloud Edge input-validation/update-signature records (vendor embargo), Microsoft Edge (Chromium) memory-safety, Oracle GraalVM CPU, a2ui/ag-ui/vLLM sparse entries, Cotonti unserialize(), Podman podman load tar follow-up, adm-zip decompression limits, GIMP file-psd, QloApps back-office XSS, Devolutions log disclosure, rejected-CVE records. KEV recheck this run: catalog 2026.09.14 unchanged since the KEV wave page was drafted — no new KEV entries beyond the published wave. Sources: https://github.com/advisories/GHSA-grw7-x4gw-45r5, https://github.com/advisories/GHSA-43cm-c736-gj85, https://github.com/advisories/GHSA-5jwp-q2ph-6mgc, https://github.com/advisories/GHSA-xr64-qq65-vf4r, https://github.com/advisories/GHSA-j2xg-7hvh-hxm5, https://github.com/advisories/GHSA-q3gq-fmhq-w6pr, https://www.cisa.gov/known-exploited-vulnerabilities-catalog
  • September 9 late GitHub unreviewed advisory wave (published 2026-09-08T21:34Z) plus CISA KEV 2026-09-08: two new operator pages, 18 items promoted. N-able N-Central (new KEV page): CVE-2026-86218 added to KEV 2026-09-08 — pre-authentication remote code execution on the N-Central server via a "static code injection" class (CWE-96), critical CVSS per the vendor, forensic-triage flag set, CISA due date 2026-09-11; vendor fixed it in 2026.3 Hotfix 4 (build 2026.3.1.14), superseding HF3. This is the second N-Central KEV this quarter after the 2026-08-03 incomplete-auth-fix entry (CVE-2026-18577), so the durable workflow is the generated-artifact audit (which unauthenticated fields survive into appliance-executed config/command/code) plus the repeat-KEV route-family differential across pre-fix/intermediate/current builds — page: N-Central pre-auth RCE static code injection KEV. Okta Access Gateway / Hyperdrive (new page, 17 GHSAs): OAG appliance generated-config injection across five unsanitized writers — application label into nginx server blocks (GHSA-r66p-gcff-8wm2 / CVE-2026-78545), dashboard label into PHP config included during auth requests (GHSA-vp2w-94gp-w964 / CVE-2026-78625), app-level custom config escaping the Lua directive restriction (GHSA-5hj5-f578-54jw / CVE-2026-78552), SNMP config metacharacters into a privileged root OS command (GHSA-872h-225f-x88w / CVE-2026-78630), and unsanitized input into eval() in the admin SSH console (GHSA-7r5r-h4wq-43gr / CVE-2026-78550); identity/assertion boundaries — optional pass-through auth source trusting a client-supplied HTTP header without cryptographic validation when no upstream sanitizer is configured (GHSA-fv22-crrj-w4gc / CVE-2026-78560), SAML attribute values interpolated into LDAP search filters (GHSA-vx4x-6r95-wf4x / CVE-2026-78579), SAML assertion values into database queries in advanced datastore mode (GHSA-9j47-j79g-74hf / CVE-2026-78623, high 7.7), and a Protected Rule authorization-check sanitization/regex-evaluation bypass (GHSA-4vpp-8gg6-2rvh / CVE-2026-78626, high 8.1); credential leakage — Hyperdrive agent writing the decoded SAML bearer assertion to its log at default level on every MFA completion (GHSA-7x42-7j3m-qc6m / CVE-2026-78631) and the Hyperdrive Integration installer leaking the OAuth client secret via MSI property into installer log, event log, and command line (GHSA-mm4c-wvrq-74qm / CVE-2026-78627, high 7.3); and agent-side integrity/verdict gaps — unsigned-assembly LoadFrom from the user-hive registry path (GHSA-7xfw-pj33-px3g / CVE-2026-78574, high 7.5), success response without a signed SAML assertion when policy requires no MFA (GHSA-p4wq-g97j-pcf5 / CVE-2026-78629), Verify for Windows uninstaller junction-following elevated delete (GHSA-63pc-vhwj-p2qm / CVE-2026-78622), Privileged Access scaleft:// URL handler missing the option terminator so hyphen-leading values parse as SSH-CLI flags (GHSA-wf33-c5j5-v44h / CVE-2026-78635), OAG backup-restore unvalidated filename in the encrypted payload (GHSA-5fhg-v2mq-37m7 / CVE-2026-78624), and OAG Kerberos-config unvalidated event-payload write path (GHSA-q832-9j8g-vg4h / CVE-2026-78620). Durable axes: generated-config writer→artifact matrices on SSO edge appliances, "trust the upstream proxy" as an architecture-condition rather than a control, auth verdicts that lack a verifier-checked artifact, and credentials travelling in install-time/log-time artifacts — page: Okta OAG/Hyperdrive config injection and identity boundaries. Adjacent tracked without publication: ScreenConnect client file-transfer/execution without Host confirmation (GHSA-rc8v-f46m-jcgm / CVE-2026-84869, critical — client-side only, servers not impacted, no public mechanism), Auth0 AD/LDAP Connector low-priv config modification → service-account code execution on restart (GHSA-pvm6-cj89-m3wx / CVE-2026-85983, high), ColdFusion high-priv attacker SQL injection (GHSA-mx44-53mh-83m6 / CVE-2026-75746, critical — requires high-priv attacker, no new operator axis beyond existing ColdFusion advisory tracking). The remaining 85 GHSAs in the wave (Adobe patch-Tuesday cluster: Acrobat Reader ~20, Photoshop/Illustrator ~10, ColdFusion/Experience Manager ~12; HTML::FormHandler XSS cluster; Silverpeas XSS; Halo plugin install; DPDK vhost length validation; GDK-Pixbuf heap overflow; GDBus DoS; GStreamer RealMedia; popt; FFmpeg RTP; Concrete CMS sub-block asset leak; Waves Central macOS XPC helper LPE; Maono Link LPE; Eclipse Ditto client hardcoded rejectUnauthorized:false; Eclipse aeriOS dev-version; U-speed cleartext admin creds; moltis; opengeos GeoLibre; Open-Web-Analytics; CMSimple CoAuthors; rejected-CVE records) were marked processed without publication — vendor patch-Tuesday boilerplate, single-product memory-safety/XSS entries, or no reusable operator pattern. Sources: https://github.com/advisories/GHSA-4vpp-8gg6-2rvh, https://github.com/advisories/GHSA-9j47-j79g-74hf, https://github.com/advisories/GHSA-7xfw-pj33-px3g, https://github.com/advisories/GHSA-mm4c-wvrq-74qm, https://github.com/advisories/GHSA-vx4x-6r95-wf4x, https://github.com/advisories/GHSA-872h-225f-x88w, https://github.com/advisories/GHSA-vp2w-94gp-w964, https://github.com/advisories/GHSA-7r5r-h4wq-43gr, https://github.com/advisories/GHSA-r66p-gcff-8wm2, https://github.com/advisories/GHSA-5hj5-f578-54jw, https://github.com/advisories/GHSA-63pc-vhwj-p2qm, https://github.com/advisories/GHSA-q832-9j8g-vg4h, https://github.com/advisories/GHSA-p4wq-g97j-pcf5, https://github.com/advisories/GHSA-7x42-7j3m-qc6m, https://github.com/advisories/GHSA-wf33-c5j5-v44h, https://github.com/advisories/GHSA-5fhg-v2mq-37m7, https://github.com/advisories/GHSA-fv22-crrj-w4gc, https://www.cisa.gov/known-exploited-vulnerabilities-catalog, https://status.n-able.com/2026/09/06/n-central-2026-3-hotfix-4-cve-2026-86218/
  • September 8 late GitHub unreviewed advisory wave (published 2026-09-08 15:31 UTC): two new operator pages, 22 GHSAs promoted. XenForo before 2.3.13 (new page, 14 GHSAs): OAuth2/PKCE token-lifecycle breaks — empty client_secret/code_verifier treated as falsy in PHP so token-endpoint validation is skipped (GHSA-pr5w-fh2v-7c9q, critical), authorization-code reuse minting a second token pair (GHSA-mrq5-6m75-wpj5, critical), refresh-token replay for the token's full lifetime (GHSA-5x52-2mc2-4jqr, critical), and code-to-redirect-URI binding absent so a code exchanges against a different allowlisted redirect (GHSA-3hj9-69jw-9xx6); PayPal REST webhook unverified-external trust — signature check fails open when the header maps to no known algorithm (GHSA-rqwm-9m4j-f7g3), transaction IDs not deduplicated so captured payments replay (GHSA-xc22-88fm-2h5f), and webhook config cert-URL fetch reachable from the payment flow (GHSA-x4fx-w4wf-c38c, SSRF); passkey MFA bypass (GHSA-wwh4-p7r6-v97f); style-archive importer path validation is slash-only so Windows backslash names escape the style root (GHSA-fxw8-p3x8-7xqx); plus BBCode uncontrolled recursion (GHSA-vv8x-44ww-j3wh), dynamic-redirect XSS (GHSA-vggm-cwh9-fm3v), force-agreement and ACP cache-rebuild missing authz (GHSA-gw9m-qhxg-fr69, GHSA-9j29-fqp6-x79p), and unauth info disclosure (GHSA-5j56-975f-v5v8). Durable axis: single-use tokens not marked consumed, PHP truthiness skipping optional-field validation, and external webhook envelopes trusted before signature/identity checks — page: XenForo OAuth/PKCE, webhook, MFA, traversal boundaries. Ivanti Neurons for ITSM before 2026.2 (new page, 8 GHSAs): five deserialization-of-untrusted-data sinks with inconsistent credential gating — three unauthenticated remote arbitrary-code-execution paths (GHSA-rqrh-xrq8-v5c4, GHSA-fgj3-259w-8mmm, GHSA-w2vf-r8hj-2qr9) plus two authenticated (GHSA-8c5w-pg5c-69g3, GHSA-7556-4q8c-55vc) — and three missing-authorization code-execution management routes (GHSA-c82j-rg2r-f495, GHSA-5mqc-6wv5-fvcw, GHSA-x5fg-jpx8-4322). Durable axis: per-endpoint auth matrix attached to deserialization sinks + route-level authorization checks on code-executing management routes in ITSM/CMDB appliances — page: Ivanti Neurons for ITSM deserialization and missing-authz. Adjacent tracked without publication: Ivanti Endpoint Manager Mobile missing authorization (GHSA-qgx5-9x4j-gqmx, same low-priv-to-admin axis, different product). The remaining records in the 15:31 wave (CommServe, Private Metrics Server, Content Extractor, DataCube, Cvlaunchd, Jetty HTTP desync, Qt Xml recursion, Arm/BES2300 kernel drivers, WatchGuard, ONLYOFFICE ownCloud, Netis NX10, various single-product WordPress/VulDB entries) were marked processed without publication — no reusable operator pattern. Sources: https://github.com/advisories/GHSA-pr5w-fh2v-7c9q, https://github.com/advisories/GHSA-mrq5-6m75-wpj5, https://github.com/advisories/GHSA-5x52-2mc2-4jqr, https://github.com/advisories/GHSA-3hj9-69jw-9xx6, https://github.com/advisories/GHSA-rqwm-9m4j-f7g3, https://github.com/advisories/GHSA-xc22-88fm-2h5f, https://github.com/advisories/GHSA-x4fx-w4wf-c38c, https://github.com/advisories/GHSA-wwh4-p7r6-v97f, https://github.com/advisories/GHSA-fxw8-p3x8-7xqx, https://github.com/advisories/GHSA-rqrh-xrq8-v5c4, https://github.com/advisories/GHSA-fgj3-259w-8mmm, https://github.com/advisories/GHSA-w2vf-r8hj-2qr9, https://github.com/advisories/GHSA-8c5w-pg5c-69g3, https://github.com/advisories/GHSA-7556-4q8c-55vc, https://github.com/advisories/GHSA-c82j-rg2r-f495, https://github.com/advisories/GHSA-5mqc-6wv5-fvcw, https://github.com/advisories/GHSA-x5fg-jpx8-4322
  • September 8 NLTK file-boundary follow-up (4 GHSAs, patched 3.9.3/3.10.0) folded into the July 31 library/tenant/commerce file-boundaries page: StreamBackedCorpusView._open() calls builtins.open on a raw string fileid without routing through nltk.pathsec.open, so the ENFORCE=True gate does not apply to corpus views (GHSA-x5ph-mj9p-rfr8); FileSystemPathPointer.open()'s "SECURITY PATCH ENFORCING SANDBOX" guard compares path to os.path.normpath(self._path) where path was just assigned that same value — the check is a tautology that can never fire, so any readable file is reachable via nltk.data.load("file:///abs/path") (GHSA-72r2-7mfr-5xr9); CorpusReader.open() blocks absolute paths and .. lexically but never resolves symlinks, so a link placed inside a corpus root reads outside it (GHSA-r6gq-whwq-mvg9); and the downloader verifies package SHA-256 only before download, never on the file actually received, so an HTTP mirror compromise/MITM lands unverified bytes in the extraction path (GHSA-5wp5-5229-5g6q). Durable axis: a lexical sandbox guard that routes around the enforcement point, compares a path to itself, resolves nothing, or checks on the wrong side of extraction fails at a different step every time — audit all four failure classes per corpus/data-loading library. Sources: https://github.com/advisories/GHSA-x5ph-mj9p-rfr8, https://github.com/advisories/GHSA-72r2-7mfr-5xr9, https://github.com/advisories/GHSA-r6gq-whwq-mvg9, https://github.com/advisories/GHSA-5wp5-5229-5g6q
  • September 8 late GitHub unreviewed advisory wave (published 2026-09-08 12:31 UTC): one new operator page plus two folds, 5 GHSAs promoted. hawtio-operator (new page, 3 GHSAs): OpenShift operator trust-boundary cluster — the operator reads the OpenShift Service CA private signing key and mints client certificates with a Subject CN supplied by the author of a namespaced Hawtio CR, and because its ClusterRole aggregates Hawtio CR permissions into edit/admin, any user with edit in any namespace obtains a Service-CA-signed cert with an arbitrary CN usable to impersonate any in-cluster service identity to Service-CA-trusting peers such as Jolokia (GHSA-hvx2-xh3r-xcr6 / CVE-2026-78234, critical 9.9); in cluster mode it creates a cluster-scoped OAuthClient with GrantMethod: auto and no client secret whose redirect URIs are tenant-controlled via spec.routeHostName, so a tenant registers an arbitrary redirect host and obtains any cluster user's token without consent (GHSA-7xpg-hm9r-chmf / CVE-2026-80219, high 8.7); and its ClusterRole grants secrets: [create,get,list,update,watch] across all namespaces, so operator-pod compromise reads every cluster Secret including bootstrap tokens and cloud creds (GHSA-r6x8-cqxr-wwp4 / CVE-2026-77968, high 8.2). Durable axis: namespaced input → cluster-scope authority across three control planes (signing identity, OAuth tokens, Secret storage) — page: hawtio-operator OpenShift operator trust-boundaries. SiYuan (fold into the Sept 4 SiYuan kernel page, 1 GHSA): before 3.8.2 the paste handler trusts the attacker-writable text/siyuan clipboard MIME type and skips sanitization, so a crafted web page that writes text/siyuan to the clipboard executes injected script with full Node.js access in the desktop (Electron) renderer (GHSA-358r-j9r9-9hv6 / CVE-2026-86712, high 8.8) — durable axis: client-writable MIME/content-type branch that skips the sanitizer, and desktop-Node vs. web trust tiers. electerm (fold into the May 8 electerm terminal-client page, 1 GHSA): before 5.3.15, 40+ main-process functions are exposed through an unvalidated Electron IPC handler with no function-name allowlist or sender validation, so renderer script execution invokes openFileWithEditor and siblings to execute system commands in the main process (GHSA-hxxx-8rvv-qg5m / CVE-2026-86711, high 7.4) — durable axis: IPC handler without a function-name allowlist = whole main process reachable from the renderer. The remaining 14 GHSAs in the wave (WordPress Event Tickets, Live Composer, EDD Product Catalog, Beaver Builder, Zephyr PM, Bookly, WPML time-based SQLi, LearnPress; libxml2 Python-bindings remote exploit; PX4 Autopilot UAF + netman stack over-read; Eclipse Che dashboard backend; Horizon Security Analyzer privilege management; one generic XXE) were marked processed without publication — product-specific or no reusable operator pattern. Sources: https://github.com/advisories/GHSA-hvx2-xh3r-xcr6, https://github.com/advisories/GHSA-7xpg-hm9r-chmf, https://github.com/advisories/GHSA-r6x8-cqxr-wwp4, https://github.com/advisories/GHSA-358r-j9r9-9hv6, https://github.com/advisories/GHSA-hxxx-8rvv-qg5m
  • September 8 GitHub unreviewed advisory wave: new operator page for two clusters, 11 GHSAs: knowns agent-server trust boundaries + Lara Dashboard admin-privilege breaks. knowns (< 0.30.0, 8 GHSAs): management API served unauthenticated on all interfaces with /api/tunnel/start republishing the API publicly (GHSA-pcf3-jgx6-7m94, critical 9.8); MCP tool-argument filesystem paths unvalidated — read/create/overwrite/delete outside the project root (GHSA-qjrq-cvv4-3g9w, 8.8); code.replace handler accepts absolute/traversal paths and can write shell startup and SSH config files (GHSA-g6q2-h5cf-8q26, 8.3); mutating code.replace misclassified as read-only so read-restricted sessions can edit permission configuration and escalate (GHSA-q52j-357p-5pv8, 8.1); .knowns/config.json settings.lsp.languages binary field unvalidated — opens a crafted repo and the binary executes twice under the user (GHSA-6ph4-r249-58p2, 7.8); unauthenticated import-route name parameter traversal writes files outside the imports directory (GHSA-8mhw-737q-f96r, 9.1); unauthenticated POST /api/templates/preview templateFile traversal reads arbitrary files into JSON (GHSA-g3m9-72x4-rrgv, 7.5); and POST /api/embedding-models/test SSRF to caller-supplied destinations with error-message reachability disclosure (GHSA-fc26-7cjr-27x6, 7.2, through 0.33.0). Lara Dashboard (< 1.3.2, 3 GHSAs): MarketplaceModuleBrowser::installModule Livewire action unauthenticated for non-Superadmins — marketplace module download + auto-activation = RCE (GHSA-9wqq-j933-4w98, 7.2); POST /admin/settings/core-upgrades/upload gated only by settings.edit — zip extraction over the live application source tree (GHSA-849q-7g6r-c83p, 7.2); and post-builder image/video upload reachable without content permissions, attacker-chosen extension into public web root (GHSA-v24q-8gmj-8457, 5.4). Durable axes: tool→risk-classification tables as the real auth control in agent tooling, repo-local config files as untrusted inputs with exec sinks, model connectivity-test endpoints as standing SSRF oracles, permission-granularity vs sink danger in Laravel admin panels, and auto-activating module installs over unsigned HTTP collapsing supply-chain and authorization. All proofs restricted to canary files just outside disposable project roots, marker zips in disposable copies, and owned no-content peers; no live tunnel republish, no shell/SSH/credential file writes, no module installs on live installs. Sources: https://github.com/advisories/GHSA-pcf3-jgx6-7m94, https://github.com/advisories/GHSA-qjrq-cvv4-3g9w, https://github.com/advisories/GHSA-g6q2-h5cf-8q26, https://github.com/advisories/GHSA-q52j-357p-5pv8, https://github.com/advisories/GHSA-6ph4-r249-58p2, https://github.com/advisories/GHSA-8mhw-737q-f96r, https://github.com/advisories/GHSA-g3m9-72x4-rrgv, https://github.com/advisories/GHSA-fc26-7cjr-27x6, https://github.com/advisories/GHSA-9wqq-j933-4w98, https://github.com/advisories/GHSA-849q-7g6r-c83p, https://github.com/advisories/GHSA-v24q-8gmj-8457
  • September 7 GitHub unreviewed advisory wave: new operator page covering the 389 Directory Server auth-boundary cluster plus JetBrains, LibreNMS, and MISP trust boundaries, 12 GHSAs: page. 389 DS: SASL PLAIN stale-identity crossbind — a failed Directory Manager PLAIN bind's DN lingers in a Cyrus SASL auxiliary property and installs on a subsequent ANONYMOUS (or low-priv) bind on the same connection, granting Directory Manager with no valid credentials (CVE-2026-18922 / GHSA-pr87-24g5-hphv, critical 9.8); Cockpit 389 Console LDAP editor embeds an entry DN into an ldapsearch shell string unescaped, so a delegated create/rename user plants metacharacters in a DN and a later admin view runs them as root on the DS host (CVE-2026-19843 / GHSA-p34m-7cj2-q64p, high 8.4); SELFDN ACI bind-rule evaluator matches an anonymous empty bind DN against an empty stored attribute value, opening SELFDN-protected add/modify (CVE-2026-76560 / GHSA-g4xg-g9jg-549h, high 7.5); and SASL I/O wrapped-record length validated only against an upper bound — wire length 0–2 underflows the unsigned encrypted_buffer_count, requesting ~4 GiB into a 1024-byte heap buffer (CVE-2026-18355 / GHSA-r5vv-79fp-2427, high 7.5). JetBrains: YouTrack Helpdesk unauth ATO via self-asserted email address (CVE-2026-86478 / GHSA-w44j-qc22-m82h, critical 9.8), Hub unauth trusted-service registration → superuser (CVE-2026-86480 / GHSA-3hfh-j9g4-36r5, critical 9.8), YouTrack shared GitHub App token cache enabling cross-tenant installation-token theft (CVE-2026-86492 / GHSA-p8f6-44xp-3cp8, high 8.5), plus iP-spoofing Bitbucket webhooks (CVE-2026-86485 / GHSA-cxhf-5fgf-w8g4) and blank-secret VCS webhook fail-open (CVE-2026-86486 / GHSA-rjvc-hh2w-62q5). LibreNMS < 26.8.0: REST API token check hit by MySQL numeric type coercion — integer 0–9 input matches token hashes, unauth access to device credentials/admin and RCE via alert templates (CVE-2026-86426 / GHSA-84cr-xjpw-q9mc, critical), plus graph_title argument injection into rrdtool with only double-quote escaping — DEF/LINE injection for cross-device RRD reads or newline injection for arbitrary rrdtool commands, bypassing per-device authorization (CVE-2026-86427 / GHSA-j7jc-m6xg-rrcw, high). MISP ≤ 2.5.45: feed retrieval follows redirects without scheme/destination validation and reuses the original request headers across redirect hops, forwarding configured feed API credentials to an attacker-influenced host and enabling SSRF into internal resources; the TAXII discovery path's literal-address gethostbyname() check missed ::1, numeric encodings, and multi-record DNS (CVE-2026-86419 / GHSA-qp9m-r348-236g, high; sibling CVE-2026-86452 / GHSA-6crc-w8rh-cr5w unauth reset-path persistence tracked). Durable axes: state that outlives its scope (stale SASL identity, cross-tenant cache, blank-secret fail-open), one-directional bounds checks leaving underflow open, low-priv write → high-priv read as the RCE enabler, empty-string/numeric-input equivalence at auth decision points, self-asserted vs verifier-proven identity in support flows, and credentials-travel-with-redirects for server-side outbound fetches. The remaining 109 unreviewed GHSAs in the wave (Dell SCG cluster, commonmark DoS, ImageMagick TOCTOU, WP plugins, GLib2, json-tools, llama.cpp, ILIAS group permission bypass, Adobe, Linux kernel, Perl modules) were marked processed without publication — product-specific or no reusable operator pattern. Sources: https://github.com/advisories/GHSA-pr87-24g5-hphv, https://github.com/advisories/GHSA-p34m-7cj2-q64p, https://github.com/advisories/GHSA-g4xg-g9jg-549h, https://github.com/advisories/GHSA-r5vv-79fp-2427, https://github.com/advisories/GHSA-w44j-qc22-m82h, https://github.com/advisories/GHSA-3hfh-j9g4-36r5, https://github.com/advisories/GHSA-p8f6-44xp-3cp8, https://github.com/advisories/GHSA-cxhf-5fgf-w8g4, https://github.com/advisories/GHSA-rjvc-hh2w-62q5, https://github.com/advisories/GHSA-84cr-xjpw-q9mc, https://github.com/advisories/GHSA-j7jc-m6xg-rrcw, https://github.com/advisories/GHSA-qp9m-r348-236g, https://www.jetbrains.com/privacy-security/issues-fixed
  • September 7 GitHub updated advisory follow-up: Fleet observer-class field-masking differential folded into the May 14 Fleet MDM identity/rate-limit boundary page. POST /api/latest/fleet/targets returned unmasked team enroll secrets and credential-bearing team agent options (AWS keys, proxy passwords, session tokens) to Observer/Observer+/Technician roles while sibling team endpoints masked the same fields (GHSA-88p2-jj8w-j8qg / CVE-2026-48786, medium 6.5, fleet/v4 < 4.87.0). Durable axes: per-role response sanitization is a per-route property, search/aggregate endpoints are the weak routes, and read-only-role readable fields must be inventoried for what they enable (enroll/proxy/API-call primitives). Validation: disposable pre-4.87.0 lab, synthetic observer user, marker enroll secret, field-shape diff against a known-masked endpoint; no real enrollment or credential use. Source: https://github.com/advisories/GHSA-88p2-jj8w-j8qg
  • September 5 late GitHub unreviewed advisory wave (published 2026-09-05 15:30 UTC): one new page plus two follow-up folds, 12 GHSAs total. AVideo (new page, 5 GHSAs): unauthenticated arbitrary file write in notify.ffmpeg.json.php — caller-chosen avideoRelativePath plus a notifyCode ciphertext that is decrypted but never validated, so any previously issued token replays as auth and writes files to the application root (GHSA-w6w9-fw29-2x88, critical 9.8); videoViewsInfo broken access control returning full user records (password hashes, recovery tokens, live session identifiers) to unauthenticated callers with a hash parameter (GHSA-hr26-p4g3-798m, critical 9.1); rate limiting disabled for all eight protected operations when a bot User-Agent is sent (GHSA-54jr-hcr3-c8jp); unauthenticated XSS via YPTSocket callback-name dispatch into global functions that assign untrusted data to innerHTML (GHSA-jjf2-9w5j-xm7r); and rand()-generated external-login passwords under unsalted MD5 (GHSA-hfr9-8xm8-cq6w) — operator page: AVideo notify file-write, socket-callback, and rate-limit boundary batch, extending the May 9 and May 15 AVideo batches. Durable axes: decryption-is-not-authentication for IPC/notify tokens, notify endpoints as disguised file-write primitives, hash-param lookups leaking full object records, User-Agent-shaped rate-limit bypass, and socket callback-name dispatch as client-side injection. Grav (fold into the August 25 Grav boundary page, 5 GHSAs): Twig sandbox addJs/addCss asset-escape XSS executing in all visitors' heads including admins (GHSA-5pmv-xr2f-mrf8, Grav core < 2.0.20), forgot-password reset links built from the untrusted Host header (GHSA-gg9g-7x93-5gq2, grav-plugin-api < 1.0.20), Form plugin cross-page form-name resolution without page authorization (GHSA-99h4-pmfq-pv63, Form < 9.1.22), stripSuperFlags() missing dot-keyed variants (api.super) so an invitation mints a super-admin JWT (GHSA-rg66-gwrp-wj75), and user-management guards skipping group-inherited super permissions (GHSA-6rq7-cjmj-rc58). SiYuan kernel (fold into the September 4 SiYuan page, 2 GHSAs, fixed v3.8.2): getAttributeViewKeys returns private cell values from rows bound to inaccessible documents (GHSA-rw64-64f2-x73j) and getAttributeViewKeysByID skips parent-database visibility, leaking hidden-database key schemas (GHSA-5p8j-x73f-mfw4). All proofs kept to disposable lab instances with synthetic accounts, marker files, marker assets, owned no-content peers, and denied file/network/process sinks: no real file writes, session hijacks, brute-force, or hash cracking.

  • September 5 CISA KEV unauth RCE/admin wave: new operator page for three actively-exploited unauthenticated entries — Kestra OSS suffix-match auth bypass (endsWith("/configs")) → unauth workflow creation → RCE with default script plugins (CVE-2026-49869, GHSA-5vc5-wxxq-3fjx, CWE-78/287, fixed 1.0.45/1.3.21), JFrog Artifactory default-config unauth admin (CVE-2026-82329, CWE-287), and Sangoma Switchvox SMB 8.3 unauth /pa PhoneIP → PostgreSQL SQLi → COPY … TO PROGRAM RCE (CVE-2026-9586, CWE-89, CVSSv4 9.3, patched 8.4.0.2, in-the-wild exploitation observed): page. Chromium V8 type-confusion (CVE-2026-85046, same day) is a browser memory-safety entry with no public exploit path and is tracked, not published. Durable axes: suffix-match vs exact-path auth filters, default-enabled execution plugins converting config/workflow writes to RCE, "default configuration" as a vuln class, and the COPY … TO PROGRAM PostgreSQL superuser RCE primitive. Sources: https://www.cisa.gov/known-exploited-vulnerabilities-catalog, https://nvd.nist.gov/vuln/detail/CVE-2026-49869, https://github.com/kestra-io/kestra/security/advisories/GHSA-5vc5-wxxq-3fjx, https://nvd.nist.gov/vuln/detail/CVE-2026-82329, https://docs.jfrog.com/releases/docs/jfrog-security-advisories, https://nvd.nist.gov/vuln/detail/CVE-2026-9586, https://labs.sra.io/posts/switchvox/, https://horizon3.ai/attack-research/disclosures/cve-2026-9586-sangoma-switchvox-rce/, and https://sangomakb.atlassian.net/wiki/spaces/Switchvox/pages/1802371073/Switchvox+-+Release+Notes+Version+8.4.0.2+July+14+2026

  • September 4 late-wave follow-up folds into existing pages (stranded recovery): SiYuan kernel eight late-wave GHSAs into the SiYuan kernel page (reader-reachable metadata endpoints, static-file route bypass, and getConf secret-stripping blocklist gaps incl. session-cookie signing-key disclosure, GHSA-mp7r-57w4-5qm3 through GHSA-5w7r-f4cg-rqq7); OpenChoreo critical unauthenticated cluster-gateway internal proxy into the OpenChoreo page (GHSA-rh53-xvx2-j327 / CVE-2026-73842, /api/proxy/ + /api/exec/ with no caller auth, tenant-namespace Secret reads, fixed 1.0.3/1.1.3/1.2.0); SurrealDB PERMISSIONS-clause embedded writes, cross-scope DEFINE API definer-rights invocation, and deny-net DNS-bypass into the SurrealDB/Anki/agent-files page (GHSA-66r2-5gwj-gxm2 / CVE-2026-63733, GHSA-848m-r628-vrxw / CVE-2026-63735, GHSA-m3c3-78fh-w3w7 / CVE-2025-71390); vLLM derender unbounded-output, error-path disclosure, and structured-output guard siblings into the axios/ssh/vLLM runtime-boundaries page (GHSA-hwrm-c4cx-rf4j / CVE-2026-73555, GHSA-48jh-3gj7-fg8v / CVE-2026-73556, GHSA-8737-qx52-hjff / CVE-2026-71486, GHSA-pr7f-p5mw-fc87 / CVE-2026-73557, all patched vLLM 0.26.0). All proofs kept to disposable lab kernels/containers with synthetic marker objects and denied file/network/process sinks: https://github.com/advisories/GHSA-rh53-xvx2-j327, https://github.com/advisories/GHSA-mp7r-57w4-5qm3, https://github.com/advisories/GHSA-h4v5-crx2-3cv4, https://github.com/advisories/GHSA-34fj-mwm6-fjfg, https://github.com/advisories/GHSA-h6w7-xxcf-w2mq, https://github.com/advisories/GHSA-fgmr-7w36-9qfq, https://github.com/advisories/GHSA-f2rw-w22v-54vh, https://github.com/advisories/GHSA-mfrj-v65r-979c, https://github.com/advisories/GHSA-5w7r-f4cg-rqq7, https://github.com/advisories/GHSA-66r2-5gwj-gxm2, https://github.com/advisories/GHSA-848m-r628-vrxw, https://github.com/advisories/GHSA-m3c3-78fh-w3w7, https://github.com/advisories/GHSA-hwrm-c4cx-rf4j, https://github.com/advisories/GHSA-48jh-3gj7-fg8v, https://github.com/advisories/GHSA-8737-qx52-hjff, and https://github.com/advisories/GHSA-pr7f-p5mw-fc87

  • September 4 late GitHub updated advisory wave (stranded recovery): two new operator-boundary pages plus a Claude Code Studio follow-up. CodeWhale / deepseek-tui (new page, 9 GHSAs, codewhale >= 0.8.41, < 0.8.64 and deepseek-tui in-range): agent-tool trust-boundary cluster — repo-config allow_shell shell-policy override (GHSA-GX45-XRJ5-G6C4 / CVE-2026-75911), repo-config instructions prompt-content injection (GHSA-62F5-CP2P-VQ95 / CVE-2026-75859), rlm_eval auto-approve Python RCE (GHSA-WRJ3-VJ8C-784F / CVE-2026-75858), git_blame/git_show argument-injection file read/write (GHSA-C6MW-8XH8-GPQ6 / CVE-2026-75912, GHSA-7J5W-7R7X-9V27 / CVE-2026-75913), exec_shell_interact LLM-input-to-shell (GHSA-G29H-PFMP-QP9R / CVE-2026-75857), js_execution env-scrub leak (GHSA-H539-C7R8-3XQ4 / CVE-2026-75915), image_analyze workspace-symlink follow (GHSA-W7WX-5Q49-R59W / CVE-2026-75914), and the critical SSRF guard TOCTOU on DNS-failure pin-check vs connect (GHSA-6V2G-FPXH-PMMH / CVE-2026-75856); validated with a disposable install, synthetic repo/markers, an owned lab DNS resolver, and denied file/network/process sinks. AI/ML ingestion (new page, 5 GHSAs): unstructured URL-partitioning server-side-fetch SSRF with no allow/deny gate (GHSA-4MVJ-M6J5-PMF7 / CVE-2026-71428, critical), crewai-tools tool-fetch SSRF redirect-hop bypass (GHSA-MR4R-HCGX-8P4H / CVE-2026-62240), PyTorch-Lightning checkpoint _instantiator callable-on-load RCE (GHSA-QQMF-GPG7-G8GW / CVE-2026-58659), pyod persistence.load deserialization-before-validation order (GHSA-997V-R4V7-9F3G / CVE-2026-15529), and Cognee non-superuser global LLM-config overwrite (GHSA-49F7-WHX5-4256 / CVE-2026-58473, critical); validated with owned no-content peers, marker checkpoints/pickles, synthetic roles, and denied network/file/process sinks. Claude Code Studio follow-up (folded into the June 10 Claude Code page): claude-code-templates <= 1.29.2 unauthenticated OS command injection in the --studio server (GHSA-79WM-X847-7CVG / CVE-2026-73222, high 8.8) — unauthenticated HTTP route -> user-controlled field -> shell sink, proven with an inert canary on a loopback-only disposable server: https://github.com/advisories/GHSA-79wm-x847-7cvg, https://github.com/advisories/GHSA-6v2g-fpxh-pmmh, https://github.com/advisories/GHSA-62f5-cp2p-vq95, https://github.com/advisories/GHSA-GX45-XRJ5-G6C4, https://github.com/advisories/GHSA-WRJ3-VJ8C-784F, https://github.com/advisories/GHSA-C6MW-8XH8-GPQ6, https://github.com/advisories/GHSA-7J5W-7R7X-9V27, https://github.com/advisories/GHSA-G29H-PFMP-QP9R, https://github.com/advisories/GHSA-H539-C7R8-3XQ4, https://github.com/advisories/GHSA-W7WX-5Q49-R59W, https://github.com/advisories/GHSA-4MVJ-M6J5-PMF7, https://github.com/advisories/GHSA-MR4R-HCGX-8P4H, https://github.com/advisories/GHSA-QQMF-GPG7-G8GW, https://github.com/advisories/GHSA-997V-R4V7-9F3G, and https://github.com/advisories/GHSA-49F7-WHX5-4256

  • September 4 late GitHub unreviewed advisory wave: five new operator-boundary pages plus five follow-up folds. SiYuan kernel (new page, 22 GHSAs — publish-access tier enforcement gaps, localhost-trust admin bypass GHSA-3mp7-4rh5-jrv9 / CVE-2026-72809, attribute-view → SQL/SSTI GHSA-x67c-8pwr-m8g3 / CVE-2026-72807): trusted loopback note-app kernel granting broad privileges on origin trust with missing per-route access-tier enforcement; validated with a disposable SiYuan desktop/Docker kernel, synthetic notebooks, synthetic block IDs, a lab AccessAuthCode, and denied SQLite/file sinks. OpenChoreo (new page, 4 GHSAs): unauth git-push workflow trigger (GHSA-c5f6-2rm9-2w8g / CVE-2026-73840), cross-project command execution + wirelog leak (GHSA-52gf-6rpq-fgmx / CVE-2026-73841), unauth data-plane operations (GHSA-qh9r-j7rp-4x2m / CVE-2026-73843), authenticated OS command injection (GHSA-2mw5-23gm-pccq / CVE-2026-73667). Omnigent (new page, 4 GHSAs): guardrail shell-command parser policy bypass (GHSA-7mqg-cx4g-x2rf / CVE-2026-62676), unvalidated os_env.cwd (GHSA-p8rw-8qj3-hf33 / CVE-2026-62677), shared agent-bundle overwrite → auth bypass (GHSA-jrrm-9hc7-2v3h / CVE-2026-62674), uploaded bundle → authenticated runner RCE (GHSA-756x-9hf6-q4h4 / CVE-2026-62675). Orval codegen (new page, 12 GHSAs): OpenAPI path/servers[].url → unescaped request-URL template RCE (GHSA-fg9p-mrxr-hvq7, GHSA-88f2-fpv8-89q2), generation-time SSRF + remote/local file inclusion (GHSA-cxq5-97v7-87j8), and the import-time RCE cluster (GHSA-w727-8j6c-2rj4, GHSA-2h9g-j24r-h63g, GHSA-8j6p-r8jg-mxqh, GHSA-2w86-xfrc-g85r, GHSA-3575-w9fc-c2j6, GHSA-653q-5476-x79g, GHSA-6437-gxhq-pqv8, GHSA-p4cg-3328-rvfg, GHSA-6mr6-jvcr-2f25) — spec file is an executable trust boundary at import/generation time. fast-uri (new page, 4 GHSAs): SSRF via parse-then-connect differential — malformed URL (GHSA-f65p-4m7j-42xc), repeated/malformed host (GHSA-fph4-wmhf-6fwf), IDN non-ASCII host confusion (GHSA-5jgf-p345-68v8), percent-encoded scheme (GHSA-jqff-g426-hqxp); the parser's normalization is not the connector's, so an allow/block check passes but a different host is dialled. Follow-up folds (existing pages): CKAN MCP server cache-key canonicalization, unanchored allowlist match, and verbose error disclosure (GHSA-78x9-fhhx-v2g6 / CVE-2026-73846, GHSA-83x6-42hr-jc76 / CVE-2026-73845, GHSA-6f9w-9hf2-5rg3 / CVE-2026-73844) into the better-auth/aider/netfoil/CKAN MCP page; SonicWall SMA1000 KEV wave SSRF (CVE-2026-83548) + OS command injection (CVE-2026-83549) into the agent desktop proxy appliance page; NLTK pathsec default-off (GHSA-p3m8-78j2-g5p3 / CVE-2026-62388) and DNS-resolution SSRF fail-open (GHSA-3gqm-fcw5-w839 / CVE-2026-63311) into the library/tenant/commerce page; Grav 2FA secret rotation / sandbox exfil / decompression / blueprint callable into the Grav sandbox-escape page; SeaweedFS Filer JWT allowed_prefixes literal prefix-match escape (GHSA-gv5w-hfx8-8cwq / CVE-2026-72921) and unauth filer IAM gRPC S3-credential minting (GHSA-2v6v-25fm-p4fg / CVE-2026-72920) into the SeaweedFS page. All proofs kept to disposable lab kernels/containers/peers with inert canaries, synthetic objects, and denied file/network/process/SQLite sinks; no real note content, cloud-internal services, or production credentials touched: https://github.com/advisories/GHSA-5fhr-f75j-8wr9, https://github.com/advisories/GHSA-3mp7-4rh5-jrv9, https://github.com/advisories/GHSA-x67c-8pwr-m8g3, https://github.com/advisories/GHSA-c5f6-2rm9-2w8g, https://github.com/advisories/GHSA-52gf-6rpq-fgmx, https://github.com/advisories/GHSA-qh9r-j7rp-4x2m, https://github.com/advisories/GHSA-2mw5-23gm-pccq, https://github.com/advisories/GHSA-7mqg-cx4g-x2rf, https://github.com/advisories/GHSA-p8rw-8qj3-hf33, https://github.com/advisories/GHSA-jrrm-9hc7-2v3h, https://github.com/advisories/GHSA-756x-9hf6-q4h4, https://github.com/advisories/GHSA-fg9p-mrxr-hvq7, https://github.com/advisories/GHSA-88f2-fpv8-89q2, https://github.com/advisories/GHSA-cxq5-97v7-87j8, https://github.com/advisories/GHSA-f65p-4m7j-42xc, https://github.com/advisories/GHSA-fph4-wmhf-6fwf, https://github.com/advisories/GHSA-5jgf-p345-68v8, https://github.com/advisories/GHSA-jqff-g426-hqxp, https://github.com/advisories/GHSA-78x9-fhhx-v2g6, https://github.com/advisories/GHSA-83x6-42hr-jc76, https://github.com/advisories/GHSA-6f9w-9hf2-5rg3, https://github.com/advisories/GHSA-p3m8-78j2-g5p3, https://github.com/advisories/GHSA-3gqm-fcw5-w839, https://github.com/advisories/GHSA-gv5w-hfx8-8cwq, and https://github.com/advisories/GHSA-2v6v-25fm-p4fg

  • August 26 GitHub unreviewed MCE (OpenShift Multicluster Engine) advisory wave: seven records folded into the May 7 cluster control-plane secret and impersonation boundary page as an August 26 follow-up. cluster-proxy-addon unauthenticated route proxies arbitrary cross-cluster services via URL path segments (GHSA-9855-9cch-x8mw / CVE-2026-66794, critical), managedcluster-import-controller CSR auto-approval misses signer name and undecoded PEM x509 so a spoke privileged SA can obtain hub admin credentials (GHSA-w9c6-w29v-4vp6 / CVE-2026-66795, critical), cluster-curator-controller naming-convention trigger creates a cluster-scoped ClusterRoleBinding (GHSA-h2w9-5qx3-frqq / CVE-2026-73269, critical) and CreateJob() accepts unvalidated spec.install.overrideJob raw extension running with controller privileges (GHSA-6c6p-j4gf-mj2c / CVE-2026-73268, critical), clusterclaims-controller ClusterClaim labels force a cluster into another tenant's ManagedClusterSet (GHSA-xp42-v53j-r9gh / CVE-2026-73266, high), provider-credential-controller copiedFrom label confusion intercepts rotated provider credentials (GHSA-3vwx-g7ch-f3wg / CVE-2026-19130, medium), and mce-operator-bundle build fetches and executes unpinned/unsigned remote scripts (GHSA-77qj-pc4h-hxwh / CVE-2026-75569, high); validated with a two-cluster disposable hub/spoke lab, fake managed clusters, synthetic curators/claims/CSR material, and patched Job/binding/rotation/forward sinks that record and deny. Same-wave records reviewed without publication (marked processed): libtiff tiffcrop process_command_opts RCE via crafted TIFF (GHSA-6qm2-q5vx-rh4c / CVE-2026-52490, single-tool RCE with no operator boundary beyond standard file handling), Scheidt & Bachmann entervo HMI kiosk PDF-viewer print escape (GHSA-vm55-rcv9-fvwj / CVE-2026-30512, physical-proximity niche HMI), SpaceDot AcubeSAT OBC COBS-decode DoS via UART (GHSA-fmcr-j4vv-2whw / CVE-2026-75371, physical access, DoS-only), AMD Zen local info disclosure (GHSA-5xgh-p4xm-3hc9 / CVE-2026-59131, sparse), plus the Chrome 152.0.7977.65 release batch (GHSA-76vf-r5wf-8fcx / CVE-2026-79090 Actor privilege, GHSA-69pv-4f4m-7rxv / CVE-2026-79134 GetUserMedia authz, GHSA-2j76-q5hv-3cpm / CVE-2026-79209 Animation type confusion, GHSA-q94c-5gw3-rwmg / CVE-2026-79219 Bluetooth UAF, GHSA-rwwx-mfv4-vprj / CVE-2026-79293 Animation info leak) and the iOS 18.7.10 Safari/privileged-network DoS pair (GHSA-xxww-wjfc-r8m2 / CVE-2026-43667, GHSA-mrh2-m3hr-6phv / CVE-2026-28984): https://github.com/advisories/GHSA-9855-9cch-x8mw, https://github.com/advisories/GHSA-w9c6-w29v-4vp6, https://github.com/advisories/GHSA-h2w9-5qx3-frqq, https://github.com/advisories/GHSA-6c6p-j4gf-mj2c, https://github.com/advisories/GHSA-xp42-v53j-r9gh, https://github.com/advisories/GHSA-3vwx-g7ch-f3wg, https://github.com/advisories/GHSA-77qj-pc4h-hxwh, https://github.com/advisories/GHSA-6qm2-q5vx-rh4c, https://github.com/advisories/GHSA-vm55-rcv9-fvwj, https://github.com/advisories/GHSA-fmcr-j4vv-2whw, https://github.com/advisories/GHSA-5xgh-p4xm-3hc9, https://github.com/advisories/GHSA-76vf-r5wf-8fcx, https://github.com/advisories/GHSA-69pv-4f4m-7rxv, https://github.com/advisories/GHSA-2j76-q5hv-3cpm, https://github.com/advisories/GHSA-q94c-5gw3-rwmg, https://github.com/advisories/GHSA-rwwx-mfv4-vprj, https://github.com/advisories/GHSA-xxww-wjfc-r8m2, https://github.com/advisories/GHSA-mrh2-m3hr-6phv

  • August 26 GitHub unreviewed advisory wave (published 2026-08-26 00:30-00:31 UTC, plus the 2026-08-25 21:31 UTC tail): five new operator-boundary pages. DB-GPT (new page, unauthenticated skill-upload path-to-write primitive): header-defaulted admin context + multipart filename joined into the skill upload root without containment, arbitrary file write as the server process user (CVE-2026-80104 / GHSA-x75h-xjfp-qrh8), proven with a synthetic canary at a synthetic path and no RCE claimed without an isolated import step. Apache Tomcat < 11.0.25 / 10.1.58 / 9.0.121 (new page, version-train cluster): security-constraint ordering bypass (CVE-2026-65182 / GHSA-gcx9-497g-6cp6), DataSourceRealm improper authentication (CVE-2026-68569 / GHSA-5q6q-ffrq-6xfc), FORM POST/GET method bypass (CVE-2026-68525 / GHSA-h3x4-894j-xpx5), security-role-ref Realm aliasing (CVE-2026-66422 / GHSA-w3xg-786f-g788), DIGEST capture-replay (CVE-2026-65905 / GHSA-9xv2-5v5q-p794), WebSocket session-persistence escape (CVE-2026-73180 / GHSA-wrvx-pxxf-g8fg), Unix-socket TOCTOU (CVE-2026-65183 / GHSA-h3mr-2w3q-jcv9), HTTP/2 backlog leak (CVE-2026-68763 / GHSA-82jr-6mfr-9vq5), rewrite off-by-one (CVE-2026-65927 / GHSA-g8qj-vp23-742m), and the incomplete-fix chain CVE-2026-65637 -> CVE-2026-32990 -> CVE-2025-66614 (GHSA-f525-44xv-f2qj) as the escalation hook. Spring Security (new page, DPoP proof cache-based replay): DPoPProofJwtDecoderFactory bounded jti replay cache -> attacker-driven eviction -> re-acceptance of an intercepted proof (CVE-2026-41707 / GHSA-3488-4mh8-47j4), cross-referenced to the April 29 Spring Security boundary page and the OAuth token-theft methodology. OpenStack Keystone < 29.0.3 (new page, delegated-auth scope-escape and credential-minting): scope not preserved on token-method reauth (CVE-2026-80184 / GHSA-x764-fvmq-4x2r) and new long-lived credential/delegation minted from a restricted delegated token (CVE-2026-80182 / GHSA-964p-6x56-c2xp). ClipBucket V5 + BlueZ (new page, paired primitives): unauthenticated installer php_cli_filepath -> shell execution as web server user (CVE-2026-80138 / GHSA-h7wf-mrfw-7fxq) and in-range crafted EIR -> bluetoothd stack overflow during discovery, DoS confirmed / RCE ceiling (CVE-2026-80186 / GHSA-f784-6479-v89p, plus local SDP type-confusion crash CVE-2026-80185 / GHSA-822r-m33h-gr5v). Reviewed without promotion (mark processed, no page): the TOTOLINK N600R pair (CVE-2026-79911/79912, GHSA-wgfc-85p2-7526, GHSA-7p5v-7f42-f3jj), the 2026-08-26 Drupal plugin forceful-browsing/XSS/brute-force wave (GHSA-xgjg-vwwh-m3x2, GHSA-qh47-px62-gxrg, GHSA-96v6-mjqx-wqv5, GHSA-prxm-c7p3-5gv7, GHSA-vqm5-mjxv-776v, GHSA-r289-9gv7-8c69, GHSA-jjcr-jhm4-rpqw, GHSA-x2xm-563p-wrqw, GHSA-4xq3-2cj5-gg62, GHSA-wq7x-7x4j-792v, GHSA-r78p-m3m3-cx34, GHSA-6fwm-vrgx-rjw7, GHSA-jw5p-wr38-7rv7, GHSA-v8xf-hg3w-8w7m, GHSA-9qmj-5rmh-j6x2, GHSA-pw57-w545-279f, GHSA-p748-p4j4-gpx6), the GazellePW 9-record product-specific wave (CVE-2026-38465..38474, GHSA-8mpw-m2qc-75vf, GHSA-vf9j-hvfg-gxxf, GHSA-f9g8-296p-xr94, GHSA-gx46-3fxf-m623, GHSA-mprr-9693-w55v, GHSA-24pg-74pv-r836, GHSA-v7wf-gpp7-vjcw, GHSA-723j-f577-m6gp, GHSA-55f9-r7cc-h5pv), the Chrome 152.0.7977.65 component wave (GHSA-w9r7-3q29-94ff and same-batch GHSA records), GIMP file-xwd (CVE-2026-80101 / GHSA-r338-8qhf-wvrr), transcribe-anything (CVE-2026-79792 / GHSA-2vwp-xrw2-3m34), and the two Perl Punk::Plugin::TOTP records (CVE-2026-78619/78655, GHSA-m82c-83jf-3j4v, GHSA-vwg8-cr9j-895f): https://github.com/advisories/GHSA-x75h-xjfp-qrh8, https://github.com/advisories/GHSA-gcx9-497g-6cp6, https://github.com/advisories/GHSA-5q6q-ffrq-6xfc, https://github.com/advisories/GHSA-h3x4-894j-xpx5, https://github.com/advisories/GHSA-w3xg-786f-g788, https://github.com/advisories/GHSA-9xv2-5v5q-p794, https://github.com/advisories/GHSA-wrvx-pxxf-g8fg, https://github.com/advisories/GHSA-h3mr-2w3q-jcv9, https://github.com/advisories/GHSA-82jr-6mfr-9vq5, https://github.com/advisories/GHSA-g8qj-vp23-742m, https://github.com/advisories/GHSA-f525-44xv-f2qj, https://github.com/advisories/GHSA-3488-4mh8-47j4, https://github.com/advisories/GHSA-x764-fvmq-4x2r, https://github.com/advisories/GHSA-964p-6x56-c2xp, https://github.com/advisories/GHSA-h7wf-mrfw-7fxq, and https://github.com/advisories/GHSA-f784-6479-v89p
  • August 25 Vue I18n / @intlify handleFlatJson prototype pollution follow-up (GHSA-p2ph-7g93-hw3m, no CVE assigned, upstream published 2025-03-07, vue-i18n/@intlify/core/@intlify/core-base/@intlify/message-resolver/@intlify/vue-i18n-core/petite-vue-i18n across 9/10/11.x): flat-JSON translation-catalog key resolution writes reserved prototype keys into the global prototype chain, a reusable i18n object-key-to-global-prototype trust boundary; folded into the i18n prototype and resource-boundary page with inert marker payloads and denied exec/eval/template sinks. Same-wave items reviewed without publication (mark processed, no page): Golang FIPS OpenSSL uninitialized-variable/HMAC/KDF zero-buffer behavior (GHSA-3h3x-2hwv-hr52, low crypto-integrity, no operator workflow), OpenStack Ironic PATCH volume-property unredacted iSCSI-credential return (GHSA-j4cw-mcg2-2q78, single info-disclosure), JustHTML deeply-nested recursion DoS (GHSA-v7cf-c9rm-wm3j, availability-only) and its withdrawn duplicate (GHSA-892m-gcq8-2468), Microweber cache_path_relative thumbnail path traversal (GHSA-vv4x-qcpq-wgrg), Subrion CMS block CSS-class XSS (GHSA-wrcg-234w-hfhq, low), plus four withdrawn duplicate OpenClaw/utcp records already covered by in-wiki primaries (GHSA-c85p-9pvr-f7f5, GHSA-ffhm-8fwq-7q27, GHSA-gwcq-453v-2frr, GHSA-vg9f-q4xh-62r4): https://github.com/advisories/GHSA-p2ph-7g93-hw3m, https://github.com/advisories/GHSA-3h3x-2hwv-hr52, https://github.com/advisories/GHSA-j4cw-mcg2-2q78, https://github.com/advisories/GHSA-v7cf-c9rm-wm3j, https://github.com/advisories/GHSA-892m-gcq8-2468, https://github.com/advisories/GHSA-vv4x-qcpq-wgrg, https://github.com/advisories/GHSA-wrcg-234w-hfhq, https://github.com/advisories/GHSA-c85p-9pvr-f7f5, https://github.com/advisories/GHSA-ffhm-8fwq-7q27, https://github.com/advisories/GHSA-gwcq-453v-2frr, and https://github.com/advisories/GHSA-vg9f-q4xh-62r4
  • August 25 GitHub unreviewed advisory wave: three new operator-boundary pages plus an NLTK follow-up, and a large WordPress/plugin theme batch reviewed without publication. GitPython < 3.1.59 (new page, GitPython unsafe-option & config-reserialization boundaries): config multi-line write reserialization to a live core.hooksPath directive (GHSA-9557-234j-7rv9, critical 9.8), .gitmodules [include] merge-includes file disclosure (GHSA-crmc-f4m7-33fj, high 8.4), --separate-git-dir clone metadata redirect (GHSA-7r39-6q8m-qw68, high 7.5), Repo.blame --contents/-S file read (GHSA-89ff-m8wv-p99r, high 6.5), and TagReference.create --file file read (GHSA-6rj2-96f5-chj9, high 6.5) — promoted as a git-CLI argv denylist + merge-include boundary check with instrumented git shims and denied hook/file sinks. Adminer < 5.4.3 (new page, Adminer DSN/ODBC & SQLite RCE boundaries): unauthenticated PDO/ODBC TraceFile DSN-injection RCE (GHSA-34q8-53jm-qc2r, critical 9.8), authenticated SQLite VACUUM INTO file-write RCE alongside the blocked ATTACH (GHSA-j4fh-9p52-f987, high 7.2), SQLite db-list arbitrary file deletion (GHSA-vfp8-hfj6-qmr2, high 8.1), XOR-split-publish + low-entropy + loose-== CSRF token (GHSA-wjcm-7h7g-36vh, medium 6.8), rogue-MySQL version-string script-tag break-out (GHSA-gx46-wch5-wp5p, medium 6.1), and untrusted X-Forwarded-Prefix redirect/cookie-path trust confusion (GHSA-fh9x-8h7v-rwhv, medium 4.7). Grav core < 2.0.16/3.9.2, Login plugin < 3.9.1/1.0.16, Email plugin < 4.2.2, API plugin < 1.0.16, Flex Objects 1.4.0–1.4.7 (new page, Grav sandbox-escape & privilege/host-origin boundaries): Email-plugin unsandboxed Twig page-editor content to OS command (GHSA-3625-697m-q29v, high 8.8), Twig sandbox config-secret read via config.get/toArray (GHSA-crrc-vpp2-f5x7) and dot-notation config arrays (GHSA-mw85-cjh9-8hp7), offsetGet/offsetexists User password/2FA field leak (GHSA-8vp7-8q4w-vv7m), login unlock row-action missing target-privilege check on admin.super (GHSA-qw9m-fc79-372g, critical 9.8), non-constant-time reset-token compare (GHSA-92vc-67q9-382j) and nonce compare (GHSA-px9v-979x-qmh9), registration email enumeration (GHSA-55hc-4r2f-h6wr), unanchored Referer prefix same-origin bypass (GHSA-qh7h-6c7g-x8m6), sendInvitationEmail untrusted Host link poisoning (GHSA-6c2c-797q-5r9x), MediaUploadTrait::deleteFile ../ traversal (GHSA-896w-cw95-xq7w), scheduler createLockFile symlink overwrite (GHSA-cpcf-vm8j-257x), webhook DNS-rebinding SSRF (GHSA-h2w4-jr6m-7c52), and Flex Objects shortcode authorization bypass (GHSA-f549-r4pw-jw3m). NLTK follow-up folded into the library-tenant-commerce-file-boundaries page: pathsec.urlopen proxy validation-to-connection drift (GHSA-crp9-r7rq-c8cg), Graphviz dot bare-name CWD/PATH resolution (GHSA-54xp-3ww7-6wjg), ElementTree DTD entity-expansion DoS (GHSA-jx89-3qg8-p2mr), and TransitionParser.parse WarningUnpickler unrestricted find_class pickle (GHSA-gx65-c5hj-vpv5, critical 9.6, <= 3.9.4). Reviewed without promotion (mark processed, no page): Checkmk missing authorization < 2.5.0p12/< 2.4.0p36/< 2.3.0p50/2.2.0 (GHSA-rjq7-c36f-2246), file-roller malicious 7z/RAR handling (GHSA-qgv9-pfrp-f7x5), five SKYSEA Client View / SKYMEC IT Manager records (GHSA-7xw9-h45h-hh7w, GHSA-g35g-c954-r7h2, GHSA-xfqq-c6x5-hw96, GHSA-qfm5-9x7m-99jm, GHSA-w323-mx8p-gxh5), and the remaining ~62 WordPress plugin/theme SQLi/XSS/LFI/privilege-escalation records of the same wave (sparse product-specific items with no reusable operator boundary beyond the standard WP plugin-input-to-sink checks): https://github.com/advisories/GHSA-9557-234j-7rv9, https://github.com/advisories/GHSA-crmc-f4m7-33fj, https://github.com/advisories/GHSA-7r39-6q8m-qw68, https://github.com/advisories/GHSA-89ff-m8wv-p99r, https://github.com/advisories/GHSA-6rj2-96f5-chj9, https://github.com/advisories/GHSA-34q8-53jm-qc2r, https://github.com/advisories/GHSA-j4fh-9p52-f987, https://github.com/advisories/GHSA-vfp8-hfj6-qmr2, https://github.com/advisories/GHSA-wjcm-7h7g-36vh, https://github.com/advisories/GHSA-gx46-wch5-wp5p, https://github.com/advisories/GHSA-fh9x-8h7v-rwhv, https://github.com/advisories/GHSA-3625-697m-q29v, https://github.com/advisories/GHSA-crrc-vpp2-f5x7, https://github.com/advisories/GHSA-mw85-cjh9-8hp7, https://github.com/advisories/GHSA-8vp7-8q4w-vv7m, https://github.com/advisories/GHSA-qw9m-fc79-372g, https://github.com/advisories/GHSA-92vc-67q9-382j, https://github.com/advisories/GHSA-px9v-979x-qmh9, https://github.com/advisories/GHSA-55hc-4r2f-h6wr, https://github.com/advisories/GHSA-qh7h-6c7g-x8m6, https://github.com/advisories/GHSA-6c2c-797q-5r9x, https://github.com/advisories/GHSA-896w-cw95-xq7w, https://github.com/advisories/GHSA-cpcf-vm8j-257x, https://github.com/advisories/GHSA-h2w4-jr6m-7c52, https://github.com/advisories/GHSA-f549-r4pw-jw3m, https://github.com/advisories/GHSA-crp9-r7rq-c8cg, https://github.com/advisories/GHSA-54xp-3ww7-6wjg, https://github.com/advisories/GHSA-jx89-3qg8-p2mr, https://github.com/advisories/GHSA-gx65-c5hj-vpv5, https://github.com/advisories/GHSA-rjq7-c36f-2246, https://github.com/advisories/GHSA-qgv9-pfrp-f7x5, https://github.com/advisories/GHSA-7xw9-h45h-hh7w, https://github.com/advisories/GHSA-g35g-c954-r7h2, https://github.com/advisories/GHSA-xfqq-c6x5-hw96, https://github.com/advisories/GHSA-qfm5-9x7m-99jm, and https://github.com/advisories/GHSA-w323-mx8p-gxh5
  • August 24 (third batch) 3X-UI authenticated arbitrary file write via database import / raw Xray config editor log-path confinement (GHSA-jm48-m3rr-9hgg / CVE-2026-55477, xrayTemplateConfig.log.access/log.error reaches Xray data-plane log write, fixed v3.3.1): promoted as a new page binding admin-configured log path -> import trust -> proxy-process file write, with a synthetic canary and the SSH-key step explicitly out of scope on live hosts; same-wave Mattermost federated shared-channel file-sync FileInfo.Name traversal (GHSA-8qq9-cqj8-82w4 / CVE-2026-6961, MMSA-2026-00661, fixed 11.6.2/11.5.5/10.11.17) folded into the Mattermost shared-channel/remote-cluster trust page, and Cloudreve v4 remote-download JoinRaw path-escape (GHSA-w8j7-39hp-8x59) plus context-hint share revocation/expiry bypass (GHSA-vx2m-jpxr-xv7w, no fixed release at scan time) folded into the Cloudreve boundary page; reviewed without promotion: vibeio-http chunked-parser DoS (GHSA-fx4f-mhw4-qm7j), Gorilla WebSocket weak mask-key PRNG (GHSA-w67g-5rqw-f597, fixed 1.5.3), and netfoil untrusted DoH response handling (GHSA-4ph6-mjv7-3fq6, low, fixed 0.5.0): https://github.com/advisories/GHSA-jm48-m3rr-9hgg, https://github.com/advisories/GHSA-w8j7-39hp-8x59, https://github.com/advisories/GHSA-vx2m-jpxr-xv7w, https://github.com/advisories/GHSA-8qq9-cqj8-82w4, https://github.com/advisories/GHSA-fx4f-mhw4-qm7j, https://github.com/advisories/GHSA-w67g-5rqw-f597, https://github.com/advisories/GHSA-4ph6-mjv7-3fq6, https://nvd.nist.gov/vuln/detail/CVE-2026-55477, and https://nvd.nist.gov/vuln/detail/CVE-2026-6961
  • August 24 (second batch) ChromaDB tenant-authorization wave (CVE-2026-45830 cross-tenant CRUD, CVE-2026-45832 V1 null-tenant context bypass, CVE-2026-45831 SimpleRBAC missing object scope, CVE-2026-45833 post-auth update_collection + trust_remote_code RCE, chromadb >= 0.4.17, <= 1.5.9, no fixed version published at scan time): promoted as a two-tenant lab workflow binding permission scope to the resolved collection UUID, with canary documents and a benign model repo; reviewed-but-not-promoted: django CMS plugin-move cyclic reparenting and cache-Vary differential are on their own page, Sakai profile-image IDOR (CVE-2026-54050) and Sakai Conversations stored XSS (CVE-2026-54049, unsafeHTML render of unsanitized message), and rust postgres-protocol/tokio-postgres malformed-row/hstore/SCRAM-iteration DoS advisories (malicious-server-to-client, no operator workflow): https://github.com/advisories/GHSA-36p7-vc44-83pf, https://github.com/advisories/GHSA-xph7-9rjv-w5fr, https://github.com/advisories/GHSA-2wm9-hf6c-p5cr, https://github.com/advisories/GHSA-x97m-f58v-9cwg, https://www.hiddenlayer.com/sai-security-advisory/2026-06-chromadb, https://nvd.nist.gov/vuln/detail/CVE-2026-45830, https://nvd.nist.gov/vuln/detail/CVE-2026-45831, https://nvd.nist.gov/vuln/detail/CVE-2026-45832, and https://nvd.nist.gov/vuln/detail/CVE-2026-45833
  • August 24 (second batch) django CMS 5.0.8 cache-key/Vary differential (CVE-2026-54625: unauthenticated anonymous-cache priming when a plugin implements get_vary_cache_on()) and move_plugin cyclic reparenting DoS (CVE-2026-54623: recursive CTEs with no cycle guard): promoted as a cache-differential + recursive-CTE guard testing workflow with canary variants and a disposable placeholder; https://github.com/advisories/GHSA-fwjf-m4qw-9f2x, https://nvd.nist.gov/vuln/detail/CVE-2026-54625, https://github.com/advisories/GHSA-8jj7-4v57-frf5, https://nvd.nist.gov/vuln/detail/CVE-2026-54623, and https://github.com/django-cms/django-cms/releases/tag/5.0.8
  • August 24 Oracle WebLogic Proxy Plug-in (Apache/IIS) improper-access-control KEV (CVE-2026-21962, CWE-284, CVSS 10.0, changed scope, unauthenticated): operator page added as a safe component-fingerprinting + plug-in-management/session access-control boundary-characterization workflow on authorized targets, using inert canaries and explicitly rejecting the publicly disputed "fake PoC" exploit repo; version-scoped to Oracle CPU Jan 2026 (12.2.1.4.0 / 14.1.1.0.0 / 14.1.2.0.0, IIS 12.2.1.4.0): https://www.cisa.gov/known-exploited-vulnerabilities-catalog, https://nvd.nist.gov/vuln/detail/CVE-2026-21962, and https://www.oracle.com/security-alerts/cpujan2026.html
  • August 23 Reverse::Proxy decoded-PATH_INFO CRLF request-smuggling framing seed folded into the HTTP desync research campaigns page, with a cross-reference from canonicalization differentials at security gates; same-wave DBD::Pg quote_float heap overflow (GHSA-6mq2-jf7v-pvjx), Dromara UJCMS template injection (GHSA-m2hx-w98g-mrrp), Apache::AppSamurai::Util predictable session keys (GHSA-hw54-jvwm-w52c), and the GNU gzip LZW/LZH shared-global-state re-review (GHSA-qxh4-rprf-2mmj) reviewed without publication: https://github.com/advisories/GHSA-5xq5-hx4g-f5v6, https://github.com/advisories/GHSA-6mq2-jf7v-pvjx, https://github.com/advisories/GHSA-m2hx-w98g-mrrp, https://github.com/advisories/GHSA-hw54-jvwm-w52c, and https://github.com/advisories/GHSA-qxh4-rprf-2mmj
  • August 23 GitLab package-registry path-traversal authenticated RCE (GHSA-2fpv-gqh2-qq5r, 18.8/19.1/19.2) and docker-socket-proxy /containers read-endpoint gating (GHSA-gxmj-gjp2-h2mv, archive/export file reads and filesystem tars); same-wave WordPress registration-role, permission-filter, publication-capability, AJAX-nonce, invoice-traversal, and PPWP object-injection records (GHSA-vmqg-pqj8-5w8h, GHSA-493r-g3qv-5457, GHSA-mfj2-2xr8-6w24, GHSA-jfpw-hmq2-3xwx, GHSA-7r74-667v-4q77, GHSA-fgg6-3rw5-h3j8) folded into the WordPress follow-up; StackGres tenant-to-admin escalation, Comfast/Tenda/CHIRP/MeTube/TaxHacker/Systerel/strongSwan product records and two CVE-rejected advisories reviewed without publication: https://github.com/advisories/GHSA-2fpv-gqh2-qq5r, https://github.com/advisories/GHSA-gxmj-gjp2-h2mv, https://github.com/advisories/GHSA-gf36-c938-gjrw, https://github.com/advisories/GHSA-j397-vxh8-xhw3, https://github.com/advisories/GHSA-x5qw-fmv8-fhx9, https://github.com/advisories/GHSA-6rmm-3cfr-7939, https://github.com/advisories/GHSA-hjhm-cmvf-w9vp, https://github.com/advisories/GHSA-c2p7-hcxm-xqhj, https://github.com/advisories/GHSA-hrrq-qh5p-23c2, https://github.com/advisories/GHSA-cq93-frxj-593v, https://github.com/advisories/GHSA-55p5-7gvc-767j, https://github.com/advisories/GHSA-fww7-qrfp-8vpv, and https://github.com/advisories/GHSA-p2fw-9cp5-8w2c
  • August 22 JSONata expression-sandbox-escape arbitrary-code-execution records (CVE-2026-77413/77414/77415) and Xinference Llama3 tool-call eval() RCE (CVE-2026-61539); GeoTools jsonArrayContains unauthenticated SQLi (CVE-2026-76904) and the 2026-08-21/22 WordPress/TRENDnet/Joomla/Linux-kernel/Spring/Esri/Craftplan/Kin-openapi waves reviewed without publication: https://github.com/advisories/GHSA-8gq3-vp5j-2grp, https://github.com/advisories/GHSA-2943-5xfg-gq5f, https://github.com/advisories/GHSA-66mm-25pp-rfff, https://github.com/advisories/GHSA-x2rj-828p-hx9m, https://github.com/advisories/GHSA-mqjf-5f49-2fjh, and https://github.com/xinference/Xinference
  • August 11 OpenSign/Attendize/CTI object and CSRF follow-ups; Prefect Git branch arguments; Portainer proxy normalization; authentik SCIM adoption; Windmill sibling routes; and OpenShift Console fetch/catalog records: https://github.com/advisories/GHSA-89m8-qpv9-7q8g, https://github.com/advisories/GHSA-5w47-3cxw-fxxf, https://github.com/advisories/GHSA-4vpg-x7mh-3947, https://github.com/advisories/GHSA-7j6v-hchx-rmq3, https://github.com/advisories/GHSA-8r4x-jw7g-pvfw, https://github.com/advisories/GHSA-pm9m-4jvw-f3q5, https://github.com/advisories/GHSA-rvg3-vfj6-mf9f, https://github.com/advisories/GHSA-75j5-9v4m-c666, https://github.com/advisories/GHSA-42fh-94w4-956q, https://github.com/advisories/GHSA-588v-59vc-3xh9, https://github.com/advisories/GHSA-f25x-j567-ffxh, https://github.com/advisories/GHSA-phh7-mppp-4jx8, https://github.com/advisories/GHSA-x2wj-mjf7-8rr5, https://github.com/advisories/GHSA-m628-hrwj-47mg, https://github.com/advisories/GHSA-6xgx-xx3m-pg85, https://github.com/advisories/GHSA-c4v8-c9cj-xrmr, and https://github.com/advisories/GHSA-5mvj-m7fw-m49w
  • August 11 CTI-Transmute MISP fetch, table/tag/MISP/chart/graph render, export, and reaction records; EAP/WildFly ORB/IIOP/PicketLink/AJP records; and MRTG PID-file ownership transfer: https://github.com/advisories/GHSA-x373-32xc-7gqv, https://github.com/advisories/GHSA-9p42-c923-p9c9, https://github.com/advisories/GHSA-3vx2-8r8r-pf7r, https://github.com/advisories/GHSA-j8cv-pjx7-pvqf, https://github.com/advisories/GHSA-fh4x-m2h5-c6vx, https://github.com/advisories/GHSA-fq55-48v3-mc95, https://github.com/advisories/GHSA-vrrh-vgmq-m54x, https://github.com/advisories/GHSA-rv36-q8cj-wgr9, https://github.com/advisories/GHSA-4238-grjh-g4xm, https://github.com/advisories/GHSA-259j-555g-mwrr, https://github.com/advisories/GHSA-vw9v-mpfh-qwg3, https://github.com/advisories/GHSA-wcq4-9xxp-5px6, https://github.com/advisories/GHSA-f478-cwfc-jqh3, and https://github.com/advisories/GHSA-pqrp-p4c6-2q4g

  • August 11 Crafty Controller import/upload traversal, Velociraptor upload-plugin network ACL, Axis Device Configuration/VAPIX/ACAP, mcp-grafana destination override, and OpenShift AI dashboard listener records: https://github.com/advisories/GHSA-2m7h-5589-9pp5, https://github.com/advisories/GHSA-qx94-26r3-gv6g, https://github.com/advisories/GHSA-wr2x-95cv-cwrg, https://github.com/advisories/GHSA-fxvq-h426-fg3c, https://github.com/advisories/GHSA-h429-j7q3-6227, https://github.com/advisories/GHSA-h4gf-wr33-6635, https://github.com/advisories/GHSA-xj6x-54xc-64j5, https://github.com/advisories/GHSA-fr94-7cqc-vjrq, and https://github.com/advisories/GHSA-h5q4-fjj4-4792

  • August 11 SAP Approuter header/session/login-CSRF/backend/mTLS/tenant/token/WebSocket records, BusinessObjects spreadsheet external-reference file reads, and MII alternate-route authorization: https://github.com/advisories/GHSA-h7cr-m88c-98m3, https://github.com/advisories/GHSA-2x68-8jqv-5gp3, https://github.com/advisories/GHSA-397p-hh8q-gwmh, https://github.com/advisories/GHSA-94ww-hmrp-6w4f, https://github.com/advisories/GHSA-x986-f697-6r4v, https://github.com/advisories/GHSA-w69g-xj7m-rmrv, https://github.com/advisories/GHSA-vhh6-v828-x62f, https://github.com/advisories/GHSA-pf62-cqrr-jr3r, https://github.com/advisories/GHSA-xpjj-rh44-8gf9, https://github.com/advisories/GHSA-jc2h-p8j7-x9g5, and https://github.com/advisories/GHSA-jggc-v6c7-qw59

  • August 10 Feast/OpenShift AI feature-store and cluster-control records, Airflow team-scoped secret-backend fallback, Flowise private Assistants-file download, Hugging Face Accelerate checkpoint-shard paths, and unearth archive traversal: https://github.com/advisories/GHSA-2xfw-wg76-86w9, https://github.com/advisories/GHSA-gg2p-37pv-v7fq, https://github.com/advisories/GHSA-55p8-2553-ch47, https://github.com/advisories/GHSA-mvxh-8c54-7fwx, https://github.com/advisories/GHSA-6vf6-rmwh-84qg, https://github.com/advisories/GHSA-w7qg-jg9c-w9mm, https://github.com/advisories/GHSA-g6qh-932v-chpq, https://github.com/advisories/GHSA-6wxg-hpw6-m2x7, https://github.com/advisories/GHSA-g68c-wmxr-x3rh, https://github.com/advisories/GHSA-qw34-v3jw-3crv, https://github.com/advisories/GHSA-7rjm-5cpg-vwpq, https://github.com/advisories/GHSA-335x-vvmj-55qx, https://github.com/advisories/GHSA-984p-rgj2-h89x, https://github.com/advisories/GHSA-6hj8-q7v2-996c, https://github.com/advisories/GHSA-qmrf-jrpr-rjx6, https://github.com/advisories/GHSA-mf39-7j64-g95c, https://github.com/advisories/GHSA-4j2p-28q2-5m79, and https://github.com/advisories/GHSA-2fcv-9f95-p67v

  • August 10 Apache Ranger JDBC, download API, log-token, Graal script, TLS hostname, SQL, URL-parameter privilege, and plugin class-instantiation records plus GNU cpio hard-link target traversal: https://github.com/advisories/GHSA-4rwg-mr3v-x763, https://github.com/advisories/GHSA-r575-fqmx-qqgc, https://github.com/advisories/GHSA-c3hc-q36q-95g4, https://github.com/advisories/GHSA-gh8f-2p9r-x68c, https://github.com/advisories/GHSA-qr4j-jp4m-6jhm, https://github.com/advisories/GHSA-8w96-gvmm-v92g, https://github.com/advisories/GHSA-8q3p-j6v6-5x63, https://github.com/advisories/GHSA-3236-74vm-475v, https://github.com/advisories/GHSA-rc3p-p5w3-fm9j, and https://cert.pl/en/posts/2026/08/CVE-2026-66484

  • August 10 WordPress authentication, reset-proof, fetch-relay, file, booking/OAuth, and commerce records: https://github.com/advisories/GHSA-c64r-rhpr-pqr5, https://github.com/advisories/GHSA-8r6g-r9rq-8jr8, https://github.com/advisories/GHSA-qvph-jjx5-pw4h, https://github.com/advisories/GHSA-53xf-4rjw-hxg5, https://github.com/advisories/GHSA-gxm4-76w3-xhp8, https://github.com/advisories/GHSA-77w2-vfvm-8c9g, https://github.com/advisories/GHSA-3w5j-v478-4p9q, https://github.com/advisories/GHSA-65rp-7r2j-rmm6, https://github.com/advisories/GHSA-fx75-97x2-v9j2, https://github.com/advisories/GHSA-76cm-vw34-ffw7, https://github.com/advisories/GHSA-qp64-vw92-jr32, https://github.com/advisories/GHSA-mr78-php7-96p9, https://github.com/advisories/GHSA-pf8j-pw7h-gqgp, https://github.com/advisories/GHSA-3hmc-2cg9-g3wx, https://github.com/advisories/GHSA-jf35-5rcj-7rqm, https://github.com/advisories/GHSA-9jp6-8vxq-2865, https://github.com/advisories/GHSA-645w-cxcg-9mjc, https://github.com/advisories/GHSA-3gq9-83xc-rrc7, https://github.com/advisories/GHSA-2jwj-8g7h-f5p5, and https://github.com/advisories/GHSA-vqh4-pqm8-4r46

  • August 10 MCP article/model/proxy fetch and document/image/session path records plus NLTK RFC 6598 validation: https://github.com/advisories/GHSA-wmf6-8cmx-6fp6, https://github.com/dmitriiweb/article-scraper-mcp/issues/3, https://github.com/advisories/GHSA-m2hf-r4mh-rrq8, https://github.com/PhialsBasement/KoboldCPP-MCP-Server/issues/3, https://github.com/advisories/GHSA-g33v-9g6g-xm9p, https://github.com/adafap/api-mcp/issues/4, https://github.com/advisories/GHSA-pxv6-pv74-gcg3, https://github.com/Handwriting-OCR/handwriting-ocr-mcp-server/issues/6, https://github.com/advisories/GHSA-g57q-682f-hr5f, https://github.com/Nikolaibibo/claude-comfyui-mcp/issues/3, https://github.com/advisories/GHSA-w5g7-c885-pm69, https://github.com/bartekke8it56w2/new-mcp/issues/10, https://github.com/advisories/GHSA-2jhm-w3mp-jcwr, and https://huntr.com/bounties/2911b643-571c-42e4-b0c2-9a1fa6f491db

  • August 9 LudusMCP range-config file/fetch, gemsuite-mcp provider-file, jira-mcp-server attachment-fetch, and image-gen-mcp output-path records: https://github.com/advisories/GHSA-hj87-3g9g-3832, https://github.com/NocteDefensor/LudusMCP/issues/5, https://github.com/advisories/GHSA-6fh8-4v8j-r4gw, https://github.com/NocteDefensor/LudusMCP/issues/6, https://github.com/advisories/GHSA-5r3x-hrv2-fg58, https://github.com/PV-Bhat/gemsuite-mcp/issues/3, https://github.com/advisories/GHSA-rmrp-j9qh-xwh9, https://github.com/KS-GEN-AI/jira-mcp-server/issues/6, https://github.com/advisories/GHSA-xm38-q6p9-jrgg, and https://github.com/Ichigo3766/image-gen-mcp/issues/6
  • August 9 MCPyATS output-path, ProjectHub-Mcp webhook-fetch, and Alibaba Cloud DataWorks MCP resource-fetch records: https://github.com/advisories/GHSA-q9qj-38cq-3792, https://github.com/automateyournetwork/MCPyATS/issues/22, https://github.com/advisories/GHSA-qp9j-gfjj-6h3v, https://github.com/anubissbe/ProjectHub-Mcp/issues/176, https://github.com/advisories/GHSA-jgm8-jqmm-5rc5, and https://github.com/aliyun/alibabacloud-dataworks-mcp-server/issues/27
  • August 9 MCP/agent path, process-wrapper, webpage-fetch, static-route, and WordPress authority records: https://github.com/advisories/GHSA-xgwr-j735-3wg4, https://github.com/Pimzino/spec-workflow-mcp/commit/9c7a7839e690bb4543f0e7481b5740d23808e5fe, https://github.com/advisories/GHSA-j882-vpg7-hqjh, https://github.com/advisories/GHSA-6p38-w68x-9w82, https://github.com/advisories/GHSA-rgqf-fgw4-cmhv, https://github.com/advisories/GHSA-xw8f-8xpv-55vg, https://github.com/advisories/GHSA-92x2-9gq9-2w2v, https://github.com/advisories/GHSA-pq7w-6xmw-3jgj, https://github.com/advisories/GHSA-5pgh-4pr5-mhm8, https://github.com/advisories/GHSA-jg2j-2qmx-58vq, https://github.com/adenot/mcp-google-search/commit/f071d491b685011ca04e8ab8d586fc65f86bcee1, https://github.com/advisories/GHSA-37c2-pxv8-c2mx, https://github.com/parisneo/lollms/commit/9bc6431ae7b708da76d51e7626a7cf48ff2b1d24, https://github.com/advisories/GHSA-m73c-99g6-hrp8, https://github.com/advisories/GHSA-66mx-cjh4-m7cx, https://github.com/advisories/GHSA-mcpf-p8j2-92hw, https://github.com/advisories/GHSA-chrp-6wq4-c4qg, https://github.com/advisories/GHSA-5r79-75x7-rrwq, and https://github.com/advisories/GHSA-39g4-r8qh-2jjf
  • August 9 local session/workspace/memory/callback/delete path records: https://github.com/advisories/GHSA-rm8c-j3vq-fv9j, https://github.com/abracadabra50/claude-sesh/commit/786c9d74800e6d0858b65778f31beb71b3983a50, https://github.com/advisories/GHSA-866p-rrc7-6r5x, https://github.com/aktsmm/skill-ninja-mcp-server/commit/855b46739e0f6e8388f17f9d0066ac4298a3965d, https://github.com/advisories/GHSA-46jg-c454-8hm3, https://github.com/IncomeStreamSurfer/roo-code-memory-bank-mcp-server/issues/7, https://github.com/advisories/GHSA-3r2r-p86c-vj94, https://github.com/HelloGGX/shadcn-vue-mcp/issues/14, https://github.com/advisories/GHSA-rhch-h3c6-w784, and https://github.com/Jevon-Zhong/Ai-doctor/issues/1
  • August 8 MCP memory/history/manifest path and project/Git process-wrapper records: https://github.com/advisories/GHSA-4297-h6wq-2qm5, https://github.com/aaronsb/memory-graph/issues/14, https://github.com/advisories/GHSA-6cmv-x2ph-3gc2, https://github.com/abrinsmead/mindpilot-mcp/issues/24, https://github.com/advisories/GHSA-4p6x-rj5h-hg93, https://github.com/astralisone/rive-mcp-server-core/issues/2, https://github.com/advisories/GHSA-745r-gxf5-fh45, https://github.com/MauricioMilano/coder-api/issues/9, https://github.com/advisories/GHSA-rrf2-j3h9-99wg, and https://github.com/andreahaku/llm_memory_mcp/issues/21
  • August 8 Calico tier-scoped DeleteCollection and shared pprof listener records plus local MCP PDF/chart wrapper records: https://github.com/advisories/GHSA-38w4-qxg9-xg36, https://www.tigera.io/security-bulletins/tta-2026-006, https://github.com/advisories/GHSA-h3h4-j2qv-pv4j, https://www.tigera.io/security-bulletins/tta-2026-004, https://github.com/advisories/GHSA-jgc6-5vgc-hvqg, and https://github.com/advisories/GHSA-wgq9-x672-9734
  • August 8 MCP process-wrapper/journey-path and WordPress file/API/workflow/commerce records: https://github.com/advisories/GHSA-fjwc-rc47-268g, https://github.com/advisories/GHSA-c8c4-xf97-vvc8, https://github.com/advisories/GHSA-8cv7-xjpc-f5hw, https://github.com/advisories/GHSA-h8jj-pqww-5m4w, https://github.com/advisories/GHSA-hgr8-39c9-344p, https://github.com/advisories/GHSA-rv7j-gq5m-787c, https://github.com/advisories/GHSA-jw73-w93j-56gr, https://github.com/advisories/GHSA-cgfm-pc65-3h3w, https://github.com/advisories/GHSA-hf26-5fpg-7r9w, https://github.com/advisories/GHSA-42rf-5p25-qxgw, https://github.com/advisories/GHSA-pxjh-xm4v-xwq9, https://github.com/advisories/GHSA-9qg2-vxvm-6fvv, https://github.com/advisories/GHSA-5mfh-c59g-8688, https://github.com/advisories/GHSA-jxc3-pfg8-hv86, https://github.com/advisories/GHSA-gjfv-xm8w-qq69, and https://github.com/advisories/GHSA-r9q4-xcm5-g5ww
  • August 8 WatchGuard Windows-client command/installation-directory and Fireware WebUI Host authority records: https://github.com/advisories/GHSA-m27x-m5c5-4g53, https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00008, https://github.com/advisories/GHSA-wwp5-7982-8x96, https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00004, https://github.com/advisories/GHSA-r5wr-v3gv-93m3, https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00005, https://github.com/advisories/GHSA-4h8g-6mc6-vxxj, and https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00003
  • August 7 Consul core file/session/custom-listener records, Nanobot shell/MCP/image-fetch records, Grav scheduler-webhook proof, and TestLink attachment scope: https://discuss.hashicorp.com/t/hcsec-2026-25-multiple-vulnerabilities-impacting-hashicorp-consul/77629, https://github.com/advisories/GHSA-jgv4-5fjv-3xp7, https://github.com/advisories/GHSA-7qhj-3fg3-mh5r, https://github.com/advisories/GHSA-h928-jqxm-5f3x, https://github.com/advisories/GHSA-m259-67hc-p7v5, https://github.com/HKUDS/nanobot/pull/4562, https://github.com/advisories/GHSA-hfxr-wggc-4cr6, https://github.com/HKUDS/nanobot/issues/4518, https://github.com/advisories/GHSA-qwp6-wxvx-2jc8, https://github.com/HKUDS/nanobot/pull/4436, https://github.com/advisories/GHSA-g4fw-p4hw-gq39, https://github.com/HKUDS/nanobot/pull/5095, https://github.com/advisories/GHSA-3m6r-m23g-m2w9, https://github.com/getgrav/grav/security/advisories/GHSA-xwv3-2mv2-w33x, and https://github.com/advisories/GHSA-wmvr-m7cj-9g8w
  • August 7 Keras safe-mode/pickle/Lambda, HDF5 VDS, and TAR-link records plus Showdown metadata-title and table-header-ID render records: https://github.com/advisories/GHSA-v2w2-w228-c444, https://github.com/advisories/GHSA-5gwj-m78q-7pq3, https://github.com/advisories/GHSA-26c4-7vv6-867j, https://github.com/advisories/GHSA-58hv-7753-xmfq, https://github.com/advisories/GHSA-cr32-g25g-vxjj, and https://github.com/advisories/GHSA-22g5-r2x5-97cx
  • August 7 Keras archive/layer-name final-path and Django cache/signed-cookie/domain-validator records: https://github.com/advisories/GHSA-hqp4-2352-xf5r, https://github.com/advisories/GHSA-gh82-f9x8-5frx, https://github.com/advisories/GHSA-qpc8-7fxc-cm4p, https://github.com/advisories/GHSA-8cjm-8mp7-r2xf, https://github.com/advisories/GHSA-923m-gv2p-w5qp, https://github.com/advisories/GHSA-3h9f-r86x-qvjx, https://github.com/advisories/GHSA-h7pc-vwp9-298g, and https://github.com/advisories/GHSA-8qcx-xf44-272x
  • August 7 Sonatype Nexus Repository lifecycle/render/DataStore/realm/onboarding/JEXL/task/privilege/format/SSRF records, ZenML shared-cloudpickle artifact materialization, Plesk XML-RPC/SQL boundaries, WGDashboard webhook/template/command paths, and Progress LoadMaster KEV: https://github.com/advisories/GHSA-9pmx-p77j-955r, https://github.com/advisories/GHSA-v8cg-rx44-f2ff, https://github.com/advisories/GHSA-65xx-g4qc-4g4m, https://github.com/advisories/GHSA-rw8g-2688-625j, https://github.com/advisories/GHSA-jffj-qrgg-8qm5, https://github.com/advisories/GHSA-5jh3-q5p5-fq9r, https://github.com/advisories/GHSA-m4g7-vv6g-5mpc, https://github.com/advisories/GHSA-fpjc-8wg6-ph5j, https://github.com/advisories/GHSA-9x3v-rxwx-3gx2, https://github.com/advisories/GHSA-prvc-9rv9-3f72, https://github.com/advisories/GHSA-ghg9-vwgf-3fv8, https://github.com/advisories/GHSA-p65j-fxc2-99ww, https://github.com/advisories/GHSA-27h3-c9gv-83jx, https://github.com/advisories/GHSA-j4xg-65wf-c7hr, https://github.com/advisories/GHSA-89hj-33q6-8644, https://github.com/advisories/GHSA-wx9m-5w28-64m2, https://github.com/advisories/GHSA-95wq-w6wp-f2w9, https://github.com/advisories/GHSA-57pc-jm9r-hgj4, https://community.progress.com/s/article/LoadMaster-Critical-Security-Bulletin-June-2026-CVE-2026-8037-CVE-2026-33691, and https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-8037
  • August 7 CodeIgniter upload validation, upload-path, batch-delete SQL-bind, and forwarded-HTTPS peer-trust records plus Hono SSR memo-lifetime and dynamic hop-by-hop response-header records: https://github.com/advisories/GHSA-mmj4-63m4-r6h5, https://github.com/advisories/GHSA-hhmc-q9hp-r662, https://github.com/advisories/GHSA-c9w5-rwh3-7pm9, https://github.com/advisories/GHSA-7wmf-pw8j-mc78, https://github.com/advisories/GHSA-f23p-vx2j-j53r, and https://github.com/advisories/GHSA-79qm-7rj5-m7r9
  • jsii-diff npm: package-specifier shell-injection advisory and fix: https://github.com/advisories/GHSA-wcx4-wpfv-mc5c, https://aws.amazon.com/security/security-bulletins/2026-057-aws, https://github.com/aws/jsii/releases/tag/v1.131.0, and https://github.com/aws/jsii/commit/9f42f274b23e80dd38dce51d0e8847149fcf2528
  • August 7 Astro ISR route override, API Platform relation-IRI type confusion, go-git reference/symlink final-path, Craft category-structure session grant, and Nuxt DevTools workspace metadata records: https://github.com/advisories/GHSA-x27w-589x-frm2, https://github.com/advisories/GHSA-9rjg-x2p2-h68h, https://github.com/advisories/GHSA-qgq7-7hm3-q39j, https://github.com/advisories/GHSA-hc8v-wwc9-vgxm, https://github.com/advisories/GHSA-xxpx-f366-4xpq, and https://github.com/advisories/GHSA-7c4v-fwgw-9rf7
  • August 7 Smarty nested-resource/symlink, Craft CMS passkey-replay, and TeamDavid Webbox file/UNC/header authority records: https://github.com/advisories/GHSA-rjhh-76wf-8xmw, https://github.com/advisories/GHSA-f6wf-28g6-769x, https://github.com/advisories/GHSA-wg23-69c2-gjc8, https://github.com/advisories/GHSA-92px-7r7f-w562, https://github.com/advisories/GHSA-9qx3-7v72-8555, https://github.com/advisories/GHSA-9r62-vc7q-pm8j, https://github.com/advisories/GHSA-8rv5-p2xx-4q2w, https://github.com/advisories/GHSA-ppvf-phq2-5chq, https://github.com/advisories/GHSA-8rw4-wgvv-9v82, https://github.com/advisories/GHSA-5g7h-mgc9-867w, https://github.com/advisories/GHSA-9q86-rqgf-5jcm, https://github.com/advisories/GHSA-xjch-93pr-7c7c, https://github.com/advisories/GHSA-pfmg-m2fv-v732, and https://github.com/advisories/GHSA-r8f9-gq2j-8hf4
  • August 7 NLTK shared-namespace package poisoning, Phoca Commander file-manager path confinement, WordPress payment-tuple binding, and Turnstile cache-key records: https://github.com/advisories/GHSA-ffj6-66c4-86gw, https://github.com/advisories/GHSA-fcf9-29pq-pgc6, https://github.com/advisories/GHSA-xj92-38c4-rf5r, https://github.com/advisories/GHSA-7c99-cx95-2fcq, https://github.com/advisories/GHSA-6g36-5qr8-2jpf, https://github.com/advisories/GHSA-p384-7c3j-gqm7, and https://github.com/advisories/GHSA-w6f5-3mw7-jjxq
  • WordPress August 7 integration, commerce, identity-proof, REST-route, file/query, and deserialization records: https://github.com/advisories/GHSA-m7vw-4232-p79x, https://github.com/advisories/GHSA-4vxc-ggfm-6c86, https://github.com/advisories/GHSA-xm6j-g6w8-55mf, https://github.com/advisories/GHSA-jqr2-6x6h-fvmp, https://github.com/advisories/GHSA-qhjm-7mgh-6mhm, https://github.com/advisories/GHSA-v8wm-6qmw-j72p, https://github.com/advisories/GHSA-gp8v-vc4r-wpf4, https://github.com/advisories/GHSA-qmm8-q2c2-c4m3, https://github.com/advisories/GHSA-wgmj-93jg-87w3, https://github.com/advisories/GHSA-9px3-jf5v-3473, https://github.com/advisories/GHSA-w2g6-85hw-mgcv, https://github.com/advisories/GHSA-5xp8-jj53-535m, https://github.com/advisories/GHSA-9p7q-wqgp-8mm8, https://github.com/advisories/GHSA-g634-mqw6-9p22, and https://github.com/advisories/GHSA-p847-q8vx-c3fg
  • PDF.js/ngx-extended-pdf-viewer document-script records, jsoup raw-text cleaner differential, League CommonMark control-byte URL normalization, and Craft CMS generic-save/config-merge/sandbox/sibling-route authority records: https://github.com/advisories/GHSA-hq66-cqwq-w95j, https://github.com/advisories/GHSA-w9hm-4m3m-fxmm, https://github.com/advisories/GHSA-pmhh-3w7g-xqp8, https://github.com/advisories/GHSA-29pj-957v-52mc, https://github.com/advisories/GHSA-p8x7-9vfw-p7vc, https://github.com/advisories/GHSA-265m-7826-wjqm, https://github.com/advisories/GHSA-f5wm-88jv-g5hx, and https://github.com/advisories/GHSA-9p7c-v5x3-rfx8
  • Nx remote-cache extraction, AWS CLI EMR SSH-wrapper, Contao attachment/crawler, Mermaid renderer-state, and Statamic identity/content-route records: https://github.com/advisories/GHSA-vp3h-ghgh-jr7g, https://github.com/advisories/GHSA-hqvf-45jj-mccq, https://github.com/advisories/GHSA-grm4-wm43-9jh5, https://github.com/advisories/GHSA-3mr9-p497-58f6, https://github.com/advisories/GHSA-c4c3-pg64-4m4v, https://github.com/advisories/GHSA-3rrr-jr9j-h3q3, https://github.com/advisories/GHSA-6x64-9x62-f2gx, https://github.com/advisories/GHSA-93qh-5269-9wcf, https://github.com/advisories/GHSA-qh8c-7588-qfrv, https://github.com/advisories/GHSA-qhr7-v3xp-vw9m, https://github.com/advisories/GHSA-j2vp-f2pv-5rj4, and https://github.com/advisories/GHSA-vx89-p3j7-8xqc
  • eScriptorium import, OCR-model, serializer/object, and WebSocket authorization records, plus html_sanitize_ex CSS/object/meta/form browser-context advisories: https://github.com/advisories/GHSA-cpqx-fhwg-cr7g, https://github.com/advisories/GHSA-w7gw-xhpj-265q, https://github.com/advisories/GHSA-4mrh-554p-w3v7, https://github.com/advisories/GHSA-vr95-3w53-6w94, https://github.com/advisories/GHSA-xg85-j7xm-gqc8, https://github.com/advisories/GHSA-g72r-5wgp-6532, https://github.com/advisories/GHSA-6g7x-33rf-28v3, https://github.com/advisories/GHSA-c486-5fvq-fp3v, and https://github.com/advisories/GHSA-r8xc-fmjg-37c5
  • LangGraph Postgres/SQLite namespace segment-matching advisory and fix: https://github.com/advisories/GHSA-47pj-3jcm-6whg, https://github.com/langchain-ai/langgraph/pull/8478, and https://github.com/langchain-ai/langgraph/commit/66ebe1a0da921e73f0f9f879ba105d314c079f7c
  • Traefik proxied CONNECT shared-backend-pool response poisoning and fixes: https://github.com/advisories/GHSA-3ccp-42pg-hgv6, https://github.com/traefik/traefik/pull/13542, https://github.com/traefik/traefik/pull/13543, and https://github.com/traefik/traefik/pull/13556
  • OpenChamber default-auth command and workspace-read records, plus LudusMCP credential-dialog, CLI-wrapper, and guide-path boundaries: https://github.com/advisories/GHSA-xj9x-9j3p-fff9, https://github.com/advisories/GHSA-9wgq-4cmq-jhvv, https://github.com/openchamber/openchamber/commit/f1b9506132faf6c564a2694c7f33b94421a49b4a, https://github.com/advisories/GHSA-5ccg-4qw3-g338, https://github.com/NocteDefensor/LudusMCP/issues/2, https://github.com/advisories/GHSA-grhp-mc55-jxg8, https://github.com/NocteDefensor/LudusMCP/issues/3, https://github.com/advisories/GHSA-6j8j-xrrf-px36, and https://github.com/NocteDefensor/LudusMCP/issues/4
  • Apache Answer single-object lifecycle/cleanup ownership and KubeVirt safepath final-syscall records: https://github.com/advisories/GHSA-x73g-vq9w-776v, https://github.com/advisories/GHSA-536r-pphc-ghq8, and https://github.com/advisories/GHSA-rcfc-7m3g-h5xh
  • Apache CXF OAuth/OIDC code, token, request-object, client-scope, and claim-validation records; imported WSDL/XSD XXE; and JMS ObjectMessage deserialization: https://github.com/advisories/GHSA-9rwm-8rh4-8q53, https://github.com/advisories/GHSA-7mxw-qv85-693m, https://github.com/advisories/GHSA-pwwh-3685-58r7, https://github.com/advisories/GHSA-5c8v-93q6-cjxj, https://github.com/advisories/GHSA-7hjx-472h-3f7q, https://github.com/advisories/GHSA-4qr2-3mpc-grqm, https://github.com/advisories/GHSA-jvhw-7q2c-2r65, https://github.com/advisories/GHSA-h8f8-97w2-2925, https://github.com/advisories/GHSA-gvw8-rcrx-9fxx, and the linked Apache security-list announcements
  • Assemblyline service-client server-supplied digest traversal advisory and fix: https://github.com/CybercentreCanada/assemblyline/security/advisories/GHSA-75jv-vfxf-3865 and https://github.com/CybercentreCanada/assemblyline-service-client/commit/351414e7e96cc1f5640ae71ae51b939e8ba30900
  • NanoClaw file-send, LettaBot management-route, Hermes memory-tool deny-policy, IronClaw/Mercury shell-approval, Mercury/CowAgent runtime tool-surface, LobsterAI artifact-file, JeecgBoot attachment-fetch, and super-agent-party file/fetch boundary records: https://github.com/advisories/GHSA-q94p-g4rh-r9rf, https://github.com/nanocoai/nanoclaw/issues/2760, https://github.com/advisories/GHSA-c8v3-2w4m-9q57, https://gist.github.com/YLChen-007/2ba2e586f3d16cb368c8dcd6ef680178, https://github.com/advisories/GHSA-6rr9-mpp7-j4mp, https://github.com/NousResearch/hermes-agent/issues/46171, https://github.com/NousResearch/hermes-agent/pull/46185, https://github.com/advisories/GHSA-cw23-qwr7-c655, https://github.com/nearai/ironclaw/issues/4861, https://github.com/nearai/ironclaw/pull/4869, https://github.com/advisories/GHSA-ccg4-hv3q-9622, https://github.com/cosmicstack-labs/mercury-agent/issues/72, https://github.com/advisories/GHSA-9hrj-55h5-5mr2, https://github.com/cosmicstack-labs/mercury-agent/issues/73, https://github.com/advisories/GHSA-7hmv-r6w5-pr73, https://github.com/cosmicstack-labs/mercury-agent/issues/74, https://github.com/advisories/GHSA-wjcq-xp37-c947, https://github.com/zhayujie/CowAgent/issues/2904, https://github.com/advisories/GHSA-7v78-v35x-cqg5, https://github.com/netease-youdao/LobsterAI/issues/2176, https://github.com/advisories/GHSA-wwv2-c3p6-cpr5, https://github.com/jeecgboot/JeecgBoot/issues/9672, https://github.com/advisories/GHSA-m39w-xf3h-v4h2, https://gist.github.com/YLChen-007/2f12ffb785d975b46b73896c0fb8cb5d, https://github.com/advisories/GHSA-fvhg-m33v-6wqx, and https://gist.github.com/YLChen-007/479bfabb441bd6cc5337db910b004841
  • Langflow August 5 validation, component-trust, knowledge-base, memory, and build-cache records: https://github.com/advisories/GHSA-994g-w9jv-hxcv, https://github.com/advisories/GHSA-x252-wm2h-6mf4, https://github.com/advisories/GHSA-wq52-m42w-xg45, https://github.com/advisories/GHSA-4q62-cj5w-qmfx, https://github.com/advisories/GHSA-7xr9-m7x2-5wqq, https://github.com/advisories/GHSA-vph6-jp7f-x3cx, and https://github.com/advisories/GHSA-f7wm-r5v3-mxr4
  • Gitea migration and OAuth fetch-policy advisory: https://github.com/go-gitea/gitea/security/advisories/GHSA-2wm4-vwp6-v7xc and https://github.com/advisories/GHSA-685p-fm6j-c445
  • ProjectDiscovery internal network scanning launch and agent workflow: https://projectdiscovery.io/blog/introducing-internal-network-scanning-see-your-network-the-way-an-attacker-inside-it-would
  • ProjectDiscovery rogue-agent benchmark trajectory case studies: https://projectdiscovery.io/blog/oh-my-rogue-agent
  • ProjectDiscovery offensive-agent behavioral audit and trajectory-integrity methodology: https://projectdiscovery.io/blog/watching-agents-work-a-behavioral-audit-of-offensive-security-llm-runs
  • TinyAGI message, prompt_file, and response-attachment records; NanoClaw child-agent creation; and openclaw-cn approval, sender, and symlink records: https://github.com/advisories/GHSA-w22m-c8rq-w42r, https://github.com/TinyAGI/tinyagi/issues/284, https://github.com/advisories/GHSA-2r4w-xxv7-6r74, https://github.com/TinyAGI/tinyagi/issues/283, https://github.com/advisories/GHSA-69rx-5vq2-c562, https://github.com/TinyAGI/tinyagi/issues/282, https://github.com/advisories/GHSA-grxx-9qr2-2q6v, https://github.com/nanocoai/nanoclaw/issues/2807, https://github.com/advisories/GHSA-p2px-f69r-9h28, https://github.com/mf-yang/openclaw-cn/issues/563, https://github.com/advisories/GHSA-f57q-9mhr-fhmm, https://github.com/mf-yang/openclaw-cn/issues/564, https://github.com/advisories/GHSA-2mj8-f2gc-5q5j, https://github.com/mf-yang/openclaw-cn/issues/565, and https://github.com/mf-yang/openclaw-cn/issues/566
  • Apache Polaris storage-location and WSO2 JWT/admin-token authority records: https://github.com/advisories/GHSA-62q9-5g2h-5gxp, https://lists.apache.org/thread/scd8p9wy8b9j3om5wohbotpfycnmmjl4, https://github.com/advisories/GHSA-j7vh-5w8q-4m4x, https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2026-5328, https://github.com/advisories/GHSA-88j3-cjwq-qqvv, and https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2026-5077
  • Keycloak SAML broker OneTimeUse replay record: https://github.com/advisories/GHSA-fghp-hcwh-75j2 and https://access.redhat.com/security/cve/CVE-2026-18967
  • PortSwigger HTTP Terminator desync-research campaign, protocol-ruler, deterministic evaluation, and discovery-cascade methodology: https://portswigger.net/research/http-terminator
  • TP-Link Aginet route, role, firmware-key, USB-path, and command-authority advisories: https://www.tp-link.com/us/support/faq/5239/, https://github.com/advisories/GHSA-gcr6-hgjr-2h8p, https://github.com/advisories/GHSA-vhwm-f68v-4vg9, https://github.com/advisories/GHSA-9f5f-7wxj-73g8, https://github.com/advisories/GHSA-8vgw-m5fh-hwg3, and https://github.com/advisories/GHSA-6v23-65fj-8g7c
  • Traefik CRD/Gateway namespace, rewrite, auth-header, forwarded-port, backend-filter, route-identity, and BasicAuth derived-key advisories: https://github.com/advisories/GHSA-42cj-m3vj-89wv, https://github.com/advisories/GHSA-qq9q-x9w4-chhj, https://github.com/advisories/GHSA-x677-9fxg-v5c5, https://github.com/advisories/GHSA-cxjq-mrr5-89rv, https://github.com/advisories/GHSA-8rxv-jg7p-wvg3, https://github.com/advisories/GHSA-6p8f-p8j2-rqmv, https://github.com/advisories/GHSA-62fc-8686-hfmq, https://github.com/advisories/GHSA-3q9r-p662-5j8m, https://github.com/advisories/GHSA-fgjj-px3w-67xx, and https://github.com/advisories/GHSA-6765-c87h-8mrf
  • Nuxt server-island template/component and DevTools RPC advisories: https://github.com/advisories/GHSA-9473-5f9j-94wq, https://github.com/advisories/GHSA-48hr-524c-v5w3, and https://github.com/advisories/GHSA-279x-mwfv-vcqv
  • Dompdf advisories/source: https://github.com/dompdf/dompdf/security/advisories and https://github.com/dompdf/dompdf
  • Andromeda bytecode C2 research framework: https://github.com/vyrus001/andromeda
  • badkeys weak-key checker and web service: https://github.com/badkeys/badkeys and https://badkeys.info/
  • GitHub Security Advisories: https://github.com/advisories
  • Electron context-bridge, child-window feature-option, protocol/CORS, iframe permission/UI/sandbox navigation, DevTools, redirect-to-local-loader, session/cache, extension, path-parser, parent-signing, and off-screen rendering advisories: https://github.com/advisories/GHSA-h7rp-cf8h-j98x, https://github.com/advisories/GHSA-v93f-fgjr-hjrj, https://github.com/advisories/GHSA-v3j7-r9gq-3gjw, https://github.com/advisories/GHSA-9pf5-hg6p-4pwp, https://github.com/advisories/GHSA-x8rc-wpg4-grpf, https://github.com/advisories/GHSA-v64r-4m7r-3mvq, https://github.com/advisories/GHSA-r4w5-6pfg-jxp5, https://github.com/advisories/GHSA-m55f-7gqj-fr98, https://github.com/advisories/GHSA-5c9j-mhmv-5xgx, https://github.com/advisories/GHSA-jm7p-cc5g-qwxx, https://github.com/advisories/GHSA-pfmc-3mgc-p6fp, https://github.com/advisories/GHSA-9f4c-93c8-jc8g, https://github.com/advisories/GHSA-p2rr-rvmm-c5fp, https://github.com/advisories/GHSA-4f78-qhmw-8j8m, https://github.com/advisories/GHSA-f2r8-jv7c-xqmp, and https://github.com/advisories/GHSA-ff2p-hmqr-hxm4
  • Mojarra/DjangoCRM/MacCMS10 template and signing-key, wp-downloadmanager upload, toner-management route, XWiki/Invoice Ninja render, and openHAB proxy records: https://github.com/advisories/GHSA-wrxx-w58g-3gqp, https://github.com/advisories/GHSA-qwf5-72hq-pg7x, https://github.com/advisories/GHSA-qc6p-hvpv-4f8h, https://github.com/advisories/GHSA-cv48-22qx-mpmx, https://github.com/advisories/GHSA-cc9f-29gq-5x7c, https://github.com/advisories/GHSA-c6wq-2527-5fpx, https://github.com/advisories/GHSA-h2xq-h7f9-vh6c, https://github.com/advisories/GHSA-84j5-x242-f7h8, and https://github.com/advisories/GHSA-v7gr-mqpj-wwh3
  • Eclipse Theia filesystem/token/plugin/preference, Firefly III/Pixelfed/MLflow/Mealie outbound-fetch, Paperless-ngx credential-relay, Akaunting/Crater/Documize/Documenso object-scope, Magistrala/backmeup/xidown interpreter/process, Mautic identifier-SQL, Grocy render, and art-template loader records: https://github.com/advisories/GHSA-xrrm-6636-87r2, https://github.com/advisories/GHSA-34gw-v4cc-pv7c, https://github.com/advisories/GHSA-2mw2-h8hj-xpjg, https://github.com/advisories/GHSA-5f8h-2xph-wwxv, https://github.com/advisories/GHSA-q8pq-98hq-mg7f, https://github.com/advisories/GHSA-5cfc-gvxj-5r55, https://github.com/advisories/GHSA-h7x2-h6g9-p789, https://github.com/advisories/GHSA-q2c2-jwjg-8cxx, https://github.com/advisories/GHSA-666w-8983-6664, https://github.com/advisories/GHSA-h26w-wq3x-9p76, https://github.com/advisories/GHSA-2467-45mc-2xp5, https://github.com/advisories/GHSA-4gcg-395p-mg6g, https://github.com/advisories/GHSA-v65x-57rf-cpg3, https://github.com/advisories/GHSA-vq5v-m87m-6pqm, https://github.com/advisories/GHSA-c6xg-rfqh-85cp, https://github.com/advisories/GHSA-f3j9-9qqv-p4r8, https://github.com/advisories/GHSA-rq57-g9hr-4f9r, https://github.com/advisories/GHSA-c924-wcfj-cr8j, and https://github.com/advisories/GHSA-mj55-6q5h-prw4
  • CPython archive relocation, Windows drive-path, and hardlink-filter advisories: https://github.com/advisories/GHSA-9mc4-rqmq-h467, https://github.com/advisories/GHSA-7r27-jhmm-vmp6, and https://github.com/advisories/GHSA-gf2w-jqmq-fcm8
  • LINE Android profile-template code-injection advisory: https://line.github.io/security-advisory-blog/CVE-2026-16881 and https://github.com/advisories/GHSA-86g4-8jpx-6pgq
  • Zyxel ZLD firewall configuration-file traversal advisory: https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-path-traversal-vulnerability-in-the-configuration-file-execution-cli-command-of-zld-firewalls-08-04-2026 and https://github.com/advisories/GHSA-75p7-jv3w-pjpc
  • ASUSTOR Backup Plan/EZSync privileged IPC advisory: https://www.asustor.com/security/security_advisory_detail?id=70 and https://github.com/advisories/GHSA-2p27-7hcf-mpp3
  • GeoVision Lighttpd static firmware-key records: https://github.com/advisories/GHSA-7p93-2qwj-4g34 and https://github.com/advisories/GHSA-qfjw-8qqh-5c6x
  • WordPress Dropbox, upload, log-token, subscription, template, RSVP, and alternate-dispatch boundary records: https://github.com/advisories/GHSA-g948-x7cf-x6p5, https://github.com/advisories/GHSA-62v2-7mcm-qpm4, https://github.com/advisories/GHSA-5v73-chf6-5qjj, https://github.com/advisories/GHSA-8hc5-48cx-v7wp, https://github.com/advisories/GHSA-w3xr-4xq6-f7jx, https://github.com/advisories/GHSA-32f3-4hg9-xrh4, and https://github.com/advisories/GHSA-rxcc-hfjf-j3mp
  • Flowise SQLite, prediction-context, mapped-address, CSV Agent, NodeVM, cross-type delete, MCP environment-policy, OAuth/credential, history, S3 loader, runtime-variable, Unicode-validator, subscription, TTS, execution-update, prefix-whitelist, Assistants, and document-store follow-up advisories: https://github.com/advisories/GHSA-x3hf-7cj6-3r4m, https://github.com/advisories/GHSA-6vh2-wg4h-4vwj, https://github.com/advisories/GHSA-c6xh-wv4j-ppv5, https://github.com/advisories/GHSA-x6vm-w76m-8j7g, https://github.com/advisories/GHSA-vmv7-4m6c-3cg5, https://github.com/advisories/GHSA-3769-jgqc-cxm7, https://github.com/advisories/GHSA-p5w8-m249-4r4v, https://github.com/advisories/GHSA-xc48-889x-5qmw, https://github.com/advisories/GHSA-wch5-xp77-fxg4, https://github.com/advisories/GHSA-rwrp-9823-p2xq, https://github.com/advisories/GHSA-fr6g-7cq8-fg82, https://github.com/advisories/GHSA-chm3-vqcf-52rx, https://github.com/advisories/GHSA-4j8x-x6v7-w9rq, https://github.com/advisories/GHSA-88pr-878c-24wf, https://github.com/advisories/GHSA-8r8h-6vcc-xhrv, https://github.com/advisories/GHSA-52fh-8v99-63c2, https://github.com/advisories/GHSA-qgvm-j2hm-6m38, https://github.com/advisories/GHSA-5xvg-pmgg-3mxr, https://github.com/advisories/GHSA-gmmw-qg98-6j6p, https://github.com/advisories/GHSA-8gj2-2cvc-6xx7, https://github.com/advisories/GHSA-fm2f-4339-4p2f, https://github.com/advisories/GHSA-rm9r-9424-cccf, https://github.com/advisories/GHSA-qvmw-v4w9-7c4j, and https://github.com/advisories/GHSA-7q53-9j99-gg5c
  • Open WebUI August 4 OAuth-client, terminal-preview, NAT64, Playwright-subresource, Vega, image-feature, channel-authorship, DNS-rebinding, direct-model knowledge, cleanup-parent, shared-folder, KaTeX fallback, tool-source, and WebSocket-role advisories: https://github.com/advisories/GHSA-rq84-p6rr-vf89, https://github.com/advisories/GHSA-3xpf-xq7r-v8c5, https://github.com/advisories/GHSA-8x5v-cpv7-8jjp, https://github.com/advisories/GHSA-w2rx-84hp-gg95, https://github.com/advisories/GHSA-rffm-9q57-q649, https://github.com/advisories/GHSA-g423-grf7-98rv, https://github.com/advisories/GHSA-mj5r-jf49-m3w7, https://github.com/advisories/GHSA-h6x2-583h-x99r, https://github.com/advisories/GHSA-6xhv-rxhv-pwm4, https://github.com/advisories/GHSA-jxc9-xmc4-gr23, https://github.com/advisories/GHSA-3cg5-48j3-v4gv, https://github.com/advisories/GHSA-pwxh-7358-jq2x, https://github.com/advisories/GHSA-3r7g-q6cg-q2vx, and https://github.com/advisories/GHSA-5gpj-vj23-vhhv
  • Ghost August 4 mapped-address fetch, object-storage upload type, Universal Import, offer-state, public-filter, caption-render, and feature-fetch advisories: https://github.com/advisories/GHSA-wvp2-4qqp-4h3r, https://github.com/advisories/GHSA-944x-pm95-3jpr, https://github.com/advisories/GHSA-2gx6-7gx2-wwcf, https://github.com/advisories/GHSA-4wx2-7gvj-qfq3, https://github.com/advisories/GHSA-jx35-x7fj-vgpr, https://github.com/advisories/GHSA-pr22-p9rp-2cqv, and https://github.com/advisories/GHSA-x5mm-wm4g-j5xv
  • Bedrock AgentCore crafted-content tool invocation, A2UI browser action, and OpenMeter stored-query records: https://aws.amazon.com/security/security-bulletins/2026-073-aws, https://nvd.nist.gov/vuln/detail/CVE-2026-18830, https://nvd.nist.gov/vuln/detail/CVE-2026-10032, and https://nvd.nist.gov/vuln/detail/CVE-2026-18801
  • marimo, Perspective, Eclipse Milo, and stunnel August 4 trust-boundary advisories: https://github.com/advisories/GHSA-v9v8-jp27-55gf, https://github.com/advisories/GHSA-pcjm-g28j-xmf9, https://github.com/advisories/GHSA-3jqr-28gj-8vq4, https://github.com/advisories/GHSA-jrjq-9cmf-3h6f, https://github.com/advisories/GHSA-xg6h-qgc7-qqr7, https://github.com/advisories/GHSA-978q-37g3-wq8g, https://github.com/advisories/GHSA-pvvm-cxq7-hrgr, and https://github.com/advisories/GHSA-2x69-8qrg-27gr
  • Google MCP Toolbox, yggdrasil-worker-package-manager, and Node.js permission-model boundary advisories: https://github.com/advisories/GHSA-656w-qf75-c5gf, https://github.com/advisories/GHSA-f8h2-c55w-8m5p, https://github.com/advisories/GHSA-24pp-m59v-92j8, https://github.com/advisories/GHSA-3x3x-8ffg-ghcv, https://github.com/advisories/GHSA-f9rr-qg3x-wq4m, and https://github.com/advisories/GHSA-4qw5-6jhx-9hfx
  • Keycloak July 31 identity-policy advisories: https://github.com/advisories/GHSA-6j79-4gfx-fm6f, https://github.com/advisories/GHSA-jg59-c35g-76r8, https://github.com/advisories/GHSA-v8h5-7wp9-qxxv, https://github.com/advisories/GHSA-wx5m-whr8-48h5, https://github.com/advisories/GHSA-vhxw-j6h3-48jm, https://github.com/advisories/GHSA-2w88-g477-cxmj, https://github.com/advisories/GHSA-82v3-6227-jc8x, https://github.com/advisories/GHSA-w32v-46r7-99r7, https://github.com/advisories/GHSA-c8xx-fr3x-6m5w, and https://github.com/advisories/GHSA-wmhp-w67v-6jm5
  • WordPress July 31 auth-proof, workflow, backup, and deserialization advisories: https://github.com/advisories/GHSA-2982-9p75-vfp8, https://github.com/advisories/GHSA-cfr3-ggcx-jjf3, https://github.com/advisories/GHSA-j2wf-m8xp-xm7q, https://github.com/advisories/GHSA-g4w8-444w-x9q8, https://github.com/advisories/GHSA-24j9-5c5r-9c88, https://github.com/advisories/GHSA-q89r-49r9-5hmx, and https://github.com/advisories/GHSA-rpvq-6gf9-58vg
  • Zeppelin, Kyuubi, 389 Directory Server, and RHACS July 31 boundary advisories: https://github.com/advisories/GHSA-5j5v-r5qf-p5c4, https://github.com/advisories/GHSA-pp6r-c7gq-g5pr, https://github.com/advisories/GHSA-r7mx-568f-jgg3, and https://github.com/advisories/GHSA-vq3f-pc8h-pv73
  • WordPress MailerPress/MailPress and Fluent Forms July 31 REST/object-proof advisories: https://github.com/advisories/GHSA-gjcp-gv56-hccw, https://github.com/advisories/GHSA-vfgx-g9m5-wfgv, and https://github.com/advisories/GHSA-gx6f-fm4p-x72r
  • WordPress WooCommerce Social Login, User Access Manager, and CubeWP August 2 identity/file-boundary advisories and source: https://github.com/advisories/GHSA-qwc9-q2f8-q72q, https://github.com/advisories/GHSA-mxw9-rxrv-85f3, https://plugins.svn.wordpress.org/user-access-manager/tags/2.3.14/, https://github.com/advisories/GHSA-2cff-wc4f-2m48, and https://plugins.svn.wordpress.org/cubewp-framework/tags/1.1.30/
  • Logging operator advisories/source: https://github.com/kube-logging/logging-operator/security/advisories and https://github.com/kube-logging/logging-operator
  • Active Record Tenanted advisories/source: https://github.com/basecamp/activerecord-tenanted/security/advisories and https://github.com/basecamp/activerecord-tenanted
  • proot-distro advisories/source: https://github.com/termux/proot-distro/security/advisories and https://github.com/termux/proot-distro
  • Easy!Appointments advisories/source: https://github.com/alextselegidis/easyappointments/security/advisories and https://github.com/alextselegidis/easyappointments
  • Spring LDAP, Framework WebSocket, and HATEOAS advisories/source: https://spring.io/security/, https://github.com/spring-projects/spring-ldap, https://github.com/spring-projects/spring-framework, and https://github.com/spring-projects/spring-hateoas
  • Google ADK confirmation, app-builder ZIP extraction, NASA AIT-GUI, Cisco Secure FMC, and Reactor Netty redirect control-boundary sources: https://github.com/google/adk-python/commit/c03f333769feaeaa9fe8910fbe95cb9f2d513f54, https://github.com/develar/app-builder/pull/163, https://www.kb.cert.org/vuls/id/293714, https://github.com/NASA-AMMOS/AIT-GUI/releases/tag/2.5.1, https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-static-cred-BET3Cjh, and https://spring.io/security/cve-2026-41715/
  • GitLab CI/import/AI authorization, Consul MCP session/authority, pip package-index path, V URL-parser, and Heimdall generated-config sources: https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-2-1-released/, https://discuss.hashicorp.com/t/hcsec-2026-24-multiple-vulnerabilities-impacting-hashicorp-consul-mcp-server/77612, https://mail.python.org/archives/list/security-announce@python.org/thread/L2BNQGGVQCEV7DROOORQ7WFKKFF2OOQX/, https://github.com/vlang/v/issues/27945, and https://www.zerodayinitiative.com/advisories/ZDI-26-447/
  • ZITADEL advisories/source: https://github.com/zitadel/zitadel/security/advisories and https://github.com/zitadel/zitadel
  • swagger-typescript-api advisories/source: https://github.com/acacode/swagger-typescript-api/security/advisories and https://github.com/acacode/swagger-typescript-api
  • veraPDF validation advisories/source: https://github.com/veraPDF/veraPDF-validation/security/advisories and https://github.com/veraPDF/veraPDF-validation
  • Quarkus HTTP path-policy advisory/source: https://github.com/advisories/GHSA-qcxp-gm7m-4j5v and https://github.com/quarkusio/quarkus
  • Prebid Server outbound-request advisory/source: https://github.com/prebid/prebid-server/security/advisories/GHSA-4p3g-4hcj-wpvx and https://github.com/prebid/prebid-server
  • Elixir Req multipart advisory/source: https://github.com/wojtekmach/req/security/advisories/GHSA-px9f-whj3-246m and https://github.com/wojtekmach/req
  • AWS AgentCore CLI import-codegen advisory/source: https://github.com/aws/agentcore-cli/security/advisories/GHSA-m4x6-gwgp-4pm7 and https://github.com/aws/agentcore-cli
  • Dynatrace MCP approval advisory/source: https://github.com/dynatrace-oss/dynatrace-mcp/security/advisories/GHSA-pc2w-4mq8-32qw and https://github.com/dynatrace-oss/dynatrace-mcp
  • Penelope and decompress archive advisories/source: https://github.com/brightio/penelope/security/advisories/GHSA-f42x-p2mx-hm8r, https://github.com/brightio/penelope, and https://github.com/advisories/GHSA-h39j-r5qq-r9mm
  • GNU Bison grammar-control research and fixes: https://cert.pl/en/posts/2026/07/CVE-2026-56389/, https://cgit.git.savannah.gnu.org/cgit/bison.git/commit/?id=3169c1e7a2c6acc4c59dfcf8b089896d6881925b, and https://cgit.git.savannah.gnu.org/cgit/bison.git/commit/?id=8d101c19d4d9aaedf83a448c925513742d4efcf0
  • Apache Kyuubi Engine UI proxy advisory/source: https://github.com/advisories/GHSA-qvj4-xxw2-22gf and https://github.com/apache/kyuubi/pull/7483
  • Apache Airflow FAB Azure AD token-verification advisory/source: https://github.com/advisories/GHSA-q5r3-w69r-hrfw and https://github.com/apache/airflow/pull/69374
  • Apache Atlas admin-authorization advisory: https://github.com/advisories/GHSA-w667-wgvw-q2hc
  • Pocket ID advisories/source: https://github.com/pocket-id/pocket-id/security/advisories and https://github.com/pocket-id/pocket-id
  • Novu advisories/source: https://github.com/novuhq/novu/security/advisories and https://github.com/novuhq/novu
  • WordPress Coding Standards advisories/source: https://github.com/WordPress/WordPress-Coding-Standards/security/advisories and https://github.com/WordPress/WordPress-Coding-Standards
  • Wakaru advisories/source: https://github.com/pionxzh/wakaru/security/advisories and https://github.com/pionxzh/wakaru
  • lettre advisories/source: https://github.com/lettre/lettre/security/advisories and https://github.com/lettre/lettre
  • Appium Java client advisories/source: https://github.com/appium/java-client/security/advisories and https://github.com/appium/java-client
  • nono registry-pack advisories/source: https://github.com/always-further/nono/security/advisories and https://github.com/nolabs-ai/nono
  • Pterodactyl Panel and Wings advisories/source: https://github.com/pterodactyl/panel/security/advisories, https://github.com/pterodactyl/panel, and https://github.com/pterodactyl/wings
  • pytonapi webhook advisories/source: https://github.com/nessshon/tonapi/security/advisories and https://github.com/nessshon/tonapi
  • Ruby OAuth and OAuth2 advisories/source: https://github.com/ruby-oauth/oauth/security/advisories, https://github.com/ruby-oauth/oauth2/security/advisories, https://github.com/ruby-oauth/oauth, and https://github.com/ruby-oauth/oauth2
  • GNOME librest PKCE issue/source: https://gitlab.gnome.org/GNOME/librest/-/issues/25 and https://gitlab.gnome.org/GNOME/librest
  • Poweradmin identity URL advisory/source: https://github.com/poweradmin/poweradmin/security/advisories/GHSA-3735-5339-xfwx and https://github.com/poweradmin/poweradmin
  • zip-lib extraction advisories/source: https://github.com/advisories?query=zip-lib and https://github.com/fpsqdb/zip-lib
  • Prompty advisories/source: https://github.com/microsoft/prompty/security/advisories and https://github.com/microsoft/prompty
  • mcp-memory-keeper advisories/source: https://github.com/mkreyman/mcp-memory-keeper/security/advisories and https://github.com/mkreyman/mcp-memory-keeper
  • Flask-Reuploaded advisories/source: https://github.com/advisories?query=Flask-Reuploaded and https://github.com/jugmac00/flask-reuploaded
  • uutils coreutils advisories/source: https://github.com/uutils/coreutils/security/advisories and https://github.com/uutils/coreutils
  • Trail of Bits Patch the Planet field reports: https://blog.trailofbits.com/2026/07/02/field-reports-from-patch-the-planet/
  • Trail of Bits goal-driven bug-hunting and variant-analysis workflow: https://blog.trailofbits.com/2026/07/28/how-we-use-goal-to-find-bugs-in-patch-the-planet/
  • Trail of Bits VM-containment-escape agent report (2026-08-26, promoted to the agent-guided fuzzing page as the August 26 follow-up): https://blog.trailofbits.com/2026/08/26/vms-wont-contain-cyber-capable-agents/
  • 2026-08-27 GitHub advisory wave promoted (Silverstripe email-field RCE cluster: GHSA-g8wr-r2v2-vqc6, GHSA-39mm-rwm3-29jp, GHSA-gvrw-qqp5-jgc5; Kyverno generator-apply cross-namespace: GHSA-79gf-7frw-68m9; file-write/install-path escape batch: GHSA-f63g-88cj-hjf9, GHSA-gmxc-r82q-347r, GHSA-q7m3-rhxg-7vxr, GHSA-mf7q-r4rv-jv94; Cloudreve WebDAV: GHSA-w5fv-7x5q-g8qp; Budibase attachment signed-URL: GHSA-6x9p-4r67-5gjx): see alerts/2026-08-27-silverstripe-email-field-code-execution-cluster-ghsa.md, alerts/2026-08-27-kyverno-generator-apply-cross-namespace-authority-ghsa.md, alerts/2026-08-27-file-write-and-install-path-escape-batch-ghsa.md
  • 2026-08-28 GitHub advisory wave promoted (SunEditor embed-plugin DOM XSS: GHSA-w93q-cq9w-58p7 / CVE-2026-54606 — see alerts/2026-08-28-suneditor-embed-plugin-dom-xss-ghsa-w93q-cq9w-58p7.md; WebOb leading C0/space redirect bypass: GHSA-6hx8-3wjj-gr8g / CVE-2026-54770 — folded into docs/alerts/2026-06-04-nuclio-betterauth-doorkeeper-webob-boundary-batch-ghsa.md; PyPI account-compromise supply chain: GHSA-93qj-5q5v-3c2h, pantheon-agents 0.6.1/0.6.2 trojanized wheels, PyPI-only compromise vs clean GitHub source — see docs/methodology/pypi-account-compromise-supply-chain-testing.md; syslog RFC 5424 frame forgery: GHSA-8h6h-x5pq-56fq / CVE-2026-54511, @logtape/syslog unescaped C0 controls in structured-data values plus unvalidated SD-NAME keys — see docs/methodology/syslog-rfc5424-frame-forging-testing.md)
  • Trail of Bits Mewt mutation-testing DAML support: https://blog.trailofbits.com/2026/07/08/mutation-testing-comes-to-daml/ and https://github.com/trailofbits/mewt
  • Trail of Bits Rust Testing Handbook update and rust-review plugin: https://blog.trailofbits.com/2026/07/13/rust-proof-your-code-with-our-new-testing-handbook-chapter/ and https://github.com/trailofbits/skills/tree/main/plugins/rust-review
  • Fission advisories/source: https://github.com/fission/fission/security/advisories and https://github.com/fission/fission
  • Cedar Express authorization middleware advisories/source: https://github.com/cedar-policy/authorization-for-expressjs/security/advisories and https://github.com/cedar-policy/authorization-for-expressjs
  • KubeVirt advisories/source: https://github.com/kubevirt/kubevirt/security/advisories and https://github.com/kubevirt/kubevirt
  • Apache Shiro advisories: https://shiro.apache.org/security-reports.html
  • Apache Syncope advisories: https://syncope.apache.org/security
  • Sigstore Java advisories/source: https://github.com/sigstore/sigstore-java/security/advisories and https://github.com/sigstore/sigstore-java
  • Model Context Protocol Java SDK advisories/source: https://github.com/modelcontextprotocol/java-sdk/security/advisories and https://github.com/modelcontextprotocol/java-sdk
  • Ray advisories/source: https://github.com/ray-project/ray/security/advisories and https://github.com/ray-project/ray
  • MetaGPT source/issues: https://github.com/FoundationAgents/MetaGPT and https://github.com/FoundationAgents/MetaGPT/issues
  • go-fastdfs-web advisories/research references: https://github.com/advisories/GHSA-6g49-gvr8-2cj2 and https://vuldb.com/vuln/369017
  • vertex-app Vertex source/fixes: https://github.com/vertex-app/vertex and https://github.com/vertex-app/vertex/commit/805d82e7100d49b79b3beb1b9420e8e458987198
  • clash-verge-service-ipc source/releases: https://github.com/clash-verge-rev/clash-verge-service-ipc and https://github.com/clash-verge-rev/clash-verge-service-ipc/releases/tag/v2.3.0
  • NLTK advisories/source: https://github.com/nltk/nltk/security/advisories and https://github.com/nltk/nltk
  • NiceGUI advisories/source: https://github.com/zauberzeug/nicegui/security/advisories and https://github.com/zauberzeug/nicegui
  • Picklescan advisories/source: https://github.com/mmaitre314/picklescan/security/advisories and https://github.com/mmaitre314/picklescan
  • rclone advisories/source, including translated-link, serve restic, metadata, and RC error-boundary records: https://github.com/rclone/rclone/security/advisories, https://github.com/advisories/GHSA-cf44-9pgv-m4xc, https://github.com/advisories/GHSA-45pq-889g-fcgh, https://github.com/advisories/GHSA-945v-v9p3-v5xw, https://github.com/advisories/GHSA-gwfq-86j8-7qhv, and https://github.com/rclone/rclone
  • Hugging Face Transformers advisories/source: https://github.com/huggingface/transformers/security/advisories and https://github.com/huggingface/transformers
  • ONNX source/issues: https://github.com/onnx/onnx and https://github.com/onnx/onnx/issues
  • Budibase advisories/source: https://github.com/Budibase/budibase/security/advisories and https://github.com/Budibase/budibase
  • Yii 2 advisories/source: https://github.com/yiisoft/yii2/security/advisories and https://github.com/yiisoft/yii2
  • OpenClaw advisories/source: https://github.com/openclaw/openclaw/security/advisories and https://github.com/openclaw/openclaw
  • openclaw-cn browser navigation policy issues/source: https://github.com/mf-yang/openclaw-cn/issues/561, https://github.com/mf-yang/openclaw-cn/issues/562, and https://github.com/mf-yang/openclaw-cn
  • SparkJava external static-file symlink issue/source: https://github.com/perwendel/spark/issues/1296 and https://github.com/perwendel/spark
  • Hermes SimpleX display-name authorization issues/source: https://github.com/NousResearch/hermes-agent/issues/44729, https://github.com/NousResearch/hermes-agent/issues/44730, and https://github.com/NousResearch/hermes-agent
  • Hermes todo snapshot/context-compression prompt-authority issue and fix: https://github.com/advisories/GHSA-xq8w-9jvx-gm3v, https://github.com/NousResearch/hermes-agent/issues/26979, and https://github.com/NousResearch/hermes-agent/pull/69860
  • NanoClaw approval callback and MCP payload issues/source: https://github.com/nanocoai/nanoclaw/issues/2761, https://github.com/nanocoai/nanoclaw/issues/2762, and https://github.com/nanocoai/nanoclaw
  • SiYuan Publish-to-MCP authorization advisory/source: https://github.com/siyuan-note/siyuan/security/advisories/GHSA-cvhv-7xhj-xjp8 and https://github.com/siyuan-note/siyuan
  • OpenRemote console-registration authorization advisory/source: https://github.com/openremote/openremote/security/advisories/GHSA-gpfc-h59v-63cv and https://github.com/openremote/openremote
  • datamodel-code-generator customBasePath code-generation validation/source: https://github.com/advisories/GHSA-7x49-hhjc-29rg and https://github.com/koxudaxi/datamodel-code-generator/commit/545a96c5
  • free5GC advisories/source: https://github.com/free5gc/free5gc/security/advisories and https://github.com/free5gc/free5gc
  • OpenStack Ironic advisories/source: https://security.openstack.org/ and https://opendev.org/openstack/ironic
  • BentoML advisories/source: https://github.com/bentoml/BentoML/security/advisories and https://github.com/bentoml/BentoML
  • Weblate advisories/source: https://github.com/WeblateOrg/weblate/security/advisories and https://github.com/WeblateOrg/weblate
  • vLLM advisories/source: https://github.com/vllm-project/vllm/security/advisories and https://github.com/vllm-project/vllm
  • Strawberry GraphQL advisories/source: https://github.com/strawberry-graphql/strawberry/security/advisories and https://github.com/strawberry-graphql/strawberry
  • lxml advisories/source: https://github.com/lxml/lxml/security/advisories and https://github.com/lxml/lxml
  • Waku advisories/source: https://github.com/wakujs/waku/security/advisories and https://github.com/wakujs/waku
  • Skipper advisories/source: https://github.com/zalando/skipper/security/advisories and https://github.com/zalando/skipper
  • CloudTAK advisories/source: https://github.com/dfpc-coe/CloudTAK/security/advisories and https://github.com/dfpc-coe/CloudTAK
  • AngleSharp advisories/source: https://github.com/AngleSharp/AngleSharp/security/advisories and https://github.com/AngleSharp/AngleSharp
  • LangChain advisories/source: https://github.com/langchain-ai/langchain/security/advisories and https://github.com/langchain-ai/langchain
  • LangGraph advisories/source: https://github.com/langchain-ai/langgraph/security/advisories and https://github.com/langchain-ai/langgraph
  • go-chi/chi advisories/source: https://github.com/go-chi/chi/security/advisories and https://github.com/go-chi/chi
  • Lemur advisories/source: https://github.com/Netflix/lemur/security/advisories and https://github.com/Netflix/lemur
  • Amazon Braket SDK advisories/source: https://github.com/amazon-braket/amazon-braket-sdk-python/security/advisories and https://github.com/amazon-braket/amazon-braket-sdk-python
  • Cisco Unified Communications advisories: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-ssrf-cXPnHcW
  • PTC security advisories: https://www.ptc.com/en/support/article/CS473270
  • MindsDB advisories/source: https://github.com/mindsdb/mindsdb/security/advisories and https://github.com/mindsdb/mindsdb
  • MindsDB file upload path traversal advisory: https://github.com/advisories/GHSA-4894-xqv6-vrfq
  • MONAI advisories/source: https://github.com/Project-MONAI/MONAI/security/advisories and https://github.com/Project-MONAI/MONAI
  • CISA Known Exploited Vulnerabilities catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog (JSON: https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json)
  • JetBrains TeamCity agent-polling deserialization records: https://www.jetbrains.com/privacy-security/issues-fixed/, https://nvd.nist.gov/vuln/detail/CVE-2026-63077, https://github.com/advisories/GHSA-94gx-v738-fx9w, and https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json
  • Zimbra ZCS 10.1.20 SNMP-notification SMTP command-injection records: https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories, https://blog.zimbra.com/2026/07/patch-release-update-zimbra-10-1-20/, https://nvd.nist.gov/vuln/detail/CVE-2026-73570, and https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json
  • Check Point SmartConsole application-token authentication bypass and Trusted Client documentation: https://support.checkpoint.com/results/sk/sk185169 and https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_SecurityManagement_AdminGuide/Content/Topics-SECMG/Defining-Trusted-Clients.htm
  • Shopper advisories/source: https://github.com/shopperlabs/shopper/security/advisories and https://github.com/shopperlabs/shopper
  • TinyMCE advisories/source: https://github.com/tinymce/tinymce/security/advisories and https://github.com/tinymce/tinymce
  • NASA AMMOS AIT-Core advisories/source: https://github.com/NASA-AMMOS/AIT-Core/security/advisories and https://github.com/NASA-AMMOS/AIT-Core
  • Gradio advisories/source: https://github.com/gradio-app/gradio/security/advisories and https://github.com/gradio-app/gradio
  • Hugging Face Diffusers advisories/source: https://github.com/huggingface/diffusers/security/advisories and https://github.com/huggingface/diffusers
  • Trail of Bits Fickling advisories/source: https://github.com/trailofbits/fickling/security/advisories and https://github.com/trailofbits/fickling
  • free5GC NRF source/advisories: https://github.com/free5gc/nrf and https://github.com/free5gc/free5gc/issues
  • JupyterHub LTI Authenticator advisories/source: https://github.com/jupyterhub/ltiauthenticator/security/advisories and https://github.com/jupyterhub/ltiauthenticator
  • NocoDB advisories and source: https://github.com/nocodb/nocodb/security/advisories and https://github.com/nocodb/nocodb
  • DbGate advisories/source: https://github.com/dbgate/dbgate/security/advisories and https://github.com/dbgate/dbgate
  • Sync-in Server advisories/source: https://github.com/Sync-in/server/security/advisories and https://github.com/Sync-in/server
  • Flux source-controller advisories/source: https://github.com/fluxcd/source-controller/security/advisories and https://github.com/fluxcd/source-controller
  • MCP Server Kubernetes advisories and source: https://github.com/Flux159/mcp-server-kubernetes/security/advisories and https://github.com/Flux159/mcp-server-kubernetes
  • Omni advisories and source: https://github.com/siderolabs/omni/security/advisories and https://github.com/siderolabs/omni
  • Authlib advisories and source: https://github.com/lepture/authlib/security/advisories and https://github.com/lepture/authlib
  • Wasmtime advisories and source: https://github.com/bytecodealliance/wasmtime/security/advisories and https://github.com/bytecodealliance/wasmtime
  • Crawl4AI advisories and source: https://github.com/unclecode/crawl4ai/security/advisories and https://github.com/unclecode/crawl4ai
  • changedetection.io advisories and source: https://github.com/dgtlmoon/changedetection.io/security/advisories and https://github.com/dgtlmoon/changedetection.io
  • Dagster advisories and source: https://github.com/dagster-io/dagster/security/advisories and https://github.com/dagster-io/dagster
  • Django security releases and advisories: https://docs.djangoproject.com/en/dev/releases/security/ and https://github.com/django/django/security/advisories
  • AgentScope advisories and source: https://github.com/modelscope/agentscope/security/advisories and https://github.com/modelscope/agentscope
  • Netavark / Podman networking advisories and fixes: https://github.com/containers/netavark, https://github.com/containers/netavark/security/advisories, https://github.com/containers/podman/issues
  • APScheduler advisories: https://github.com/agronholm/apscheduler/security/advisories
  • BillaBear advisories/project: https://github.com/billabear/billabear and https://github.com/advisories/GHSA-xp6r-8pcc-xv5p
  • MCP-for-Stata advisories: https://github.com/SepineTam/stata-mcp/security/advisories
  • Shopware advisories: https://github.com/shopware/shopware/security/advisories
  • AdGuard Home advisories: https://github.com/AdguardTeam/AdGuardHome/security/advisories
  • dnsproxy source/fixes: https://github.com/AdguardTeam/dnsproxy
  • Nuclio advisories: https://github.com/nuclio/nuclio/security/advisories
  • Better Auth advisories: https://github.com/better-auth/better-auth/security/advisories
  • Doorkeeper OpenID Connect advisories: https://github.com/doorkeeper-gem/doorkeeper-openid_connect/security/advisories
  • WebOb advisories: https://github.com/Pylons/webob/security/advisories
  • Axios advisories: https://github.com/axios/axios/security/advisories
  • Envoy Gateway advisories/source: https://github.com/envoyproxy/gateway/security/advisories and https://github.com/envoyproxy/gateway
  • Kuma advisories/source: https://github.com/kumahq/kuma/security/advisories and https://github.com/kumahq/kuma
  • MCP Python SDK advisories/source: https://github.com/modelcontextprotocol/python-sdk/security/advisories and https://github.com/modelcontextprotocol/python-sdk
  • Mirasvit Cache Warmer changelog: https://mirasvit.com/package/changelog/?package=mirasvit/module-cache-warmer
  • Sansec Mirasvit Cache Warmer object-injection research: https://sansec.io/research/mirasvit-cache-warmer-object-injection
  • ruby-jwt advisories: https://github.com/jwt/ruby-jwt/security/advisories
  • Starlette advisories: https://github.com/Kludex/starlette/security/advisories
  • Linux kernel source and fixes: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/
  • Apache ActiveMQ security advisories: https://activemq.apache.org/security-advisories
  • Oracle Critical Patch Updates: https://www.oracle.com/security-alerts/
  • Mattermost advisories: https://github.com/mattermost/mattermost/security/advisories
  • kas advisories: https://github.com/siemens/kas/security/advisories
  • rattler advisories: https://github.com/conda/rattler/security/advisories
  • Vitest advisories: https://github.com/vitest-dev/vitest/security/advisories
  • DOMPurify advisories: https://github.com/cure53/DOMPurify/security/advisories
  • Sentry Python SDK advisories: https://github.com/getsentry/sentry-python/security/advisories
  • Git LFS advisories: https://github.com/git-lfs/git-lfs/security/advisories
  • phpMyFAQ advisories: https://github.com/thorsten/phpMyFAQ/security/advisories
  • arnika advisories: https://github.com/arnika-project/arnika/security/advisories
  • PraisonAI advisories: https://github.com/MervinPraison/PraisonAI/security/advisories
  • Formie advisories: https://github.com/verbb/formie/security/advisories
  • authentik advisories: https://github.com/goauthentik/authentik/security/advisories
  • CC-Tweaked advisories: https://github.com/cc-tweaked/CC-Tweaked/security/advisories
  • Keras advisories: https://github.com/keras-team/keras/security/advisories
  • Admidio advisories: https://github.com/Admidio/admidio/security/advisories
  • OpenC3 COSMOS advisories: https://github.com/OpenC3/cosmos/security/advisories
  • YARD advisories: https://github.com/lsegal/yard/security/advisories
  • Ouroboros advisories: https://github.com/Q00/ouroboros/security/advisories
  • Stigmem advisories: https://github.com/eidetic-labs/stigmem/security/advisories
  • Koel advisories: https://github.com/koel/koel/security/advisories
  • LangBot advisories/source: https://github.com/RockChinQ/LangBot/security/advisories and https://github.com/RockChinQ/LangBot
  • Summarize advisories: https://github.com/steipete/summarize/security/advisories and https://www.vulncheck.com/advisories/
  • Amazon Redshift Python driver advisories: https://github.com/aws/amazon-redshift-python-driver/security/advisories
  • uv advisories: https://github.com/astral-sh/uv/security/advisories
  • russh advisories: https://github.com/Eugeny/russh/security/advisories
  • AgenticMail advisories: https://github.com/agenticmail/agenticmail/security/advisories
  • tar-rs advisories: https://github.com/composefs/tar-rs/security/advisories
  • Parse Server advisories: https://github.com/parse-community/parse-server/security/advisories
  • Palo Alto Networks PAN-OS advisories: https://security.paloaltonetworks.com/
  • vm2 advisories: https://github.com/patriksimek/vm2/security/advisories
  • Go-Guerrilla SMTP daemon advisories/source: https://github.com/flashmob/go-guerrilla/security/advisories and https://github.com/flashmob/go-guerrilla
  • Puma advisories/source: https://github.com/puma/puma/security/advisories and https://github.com/puma/puma
  • Arc advisories/source: https://github.com/basekick-labs/arc/security/advisories and https://github.com/basekick-labs/arc
  • 1Panel advisories/source: https://github.com/1Panel-dev/1Panel/security/advisories and https://github.com/1Panel-dev/1Panel
  • SGLang advisories: https://github.com/sgl-project/sglang/security/advisories
  • SGLang inference control-boundary advisories: https://github.com/advisories/GHSA-96j3-rjf9-2hxp, https://github.com/advisories/GHSA-vwmc-327h-6x3j, https://github.com/advisories/GHSA-r344-357p-w9pp, https://github.com/advisories/GHSA-x6x2-r266-cx9p, https://github.com/advisories/GHSA-359v-m36h-r94v, and https://github.com/advisories/GHSA-hg26-hr8r-fxc9
  • MeshCentral, SFTPGo, RapidRAW, and Red Hat Leapp controller/file-boundary advisories: https://github.com/advisories/GHSA-fcvp-v754-r7rh, https://github.com/advisories/GHSA-3964-29ff-vwff, https://github.com/advisories/GHSA-2jwx-hj3p-pj84, and https://github.com/advisories/GHSA-9hgq-3p3x-rvvw
  • OpenClaw transcript-to-dashboard rendering advisory: https://github.com/advisories/GHSA-hc44-65x2-rvc2
  • Apache Tika ISA-Tab and Leantime blueprint file-reference advisories: https://github.com/advisories/GHSA-vrmh-37mg-28h3 and https://github.com/advisories/GHSA-rfxf-9pcf-q3rq
  • Outstatic, Wolf CMS, Spikster, Juggle, and MikroTik control-plane advisories: https://github.com/advisories/GHSA-59rr-38mm-f3g9, https://github.com/advisories/GHSA-xv6g-v6rg-vw4p, https://github.com/advisories/GHSA-3pqf-wrr6-rf9m, https://github.com/advisories/GHSA-rg37-h5w6-fj69, https://github.com/advisories/GHSA-8rhq-39vx-cjqx, and https://github.com/advisories/GHSA-x9w7-jgwj-cp2f
  • ChromaDB advisories and research: https://github.com/chroma-core/chroma/security/advisories and https://www.hiddenlayer.com/research/chromatoast-served-pre-auth
  • ngrok npm wrapper advisory reference: https://gist.github.com/Dremig/90c2a0a2f85b0921f10e0bb3192a0c23
  • astral-tokio-tar advisories: https://github.com/astral-sh/tokio-tar/security/advisories
  • eZ Publish Legacy security advisories/labs: https://github.com/ezsystems/ezpublish-legacy/security/advisories and https://github.com/Goaterino/ezpublish-legacy-lab
  • Cluster API Provider Metal3 advisories: https://github.com/metal3-io/cluster-api-provider-metal3/security/advisories
  • python-tuf advisories: https://github.com/theupdateframework/python-tuf/security/advisories
  • Dulwich advisories: https://github.com/dulwich/dulwich/security/advisories
  • nono advisories: https://github.com/always-further/nono/security/advisories
  • local-deep-research advisories: https://github.com/LearningCircuit/local-deep-research/security/advisories
  • shamefile advisories: https://github.com/BKDDFS/shamefile/security/advisories
  • Symfony polyfill advisories: https://github.com/symfony/polyfill/security/advisories
  • mem0 advisories: https://github.com/mem0ai/mem0/security/advisories
  • compliance-trestle advisories: https://github.com/oscal-compass/compliance-trestle/security/advisories
  • Flask-HTTPAuth advisories: https://github.com/miguelgrinberg/Flask-HTTPAuth/security/advisories
  • league/commonmark advisories: https://github.com/thephpleague/commonmark/security/advisories
  • mamba / mamba-ssm advisories: https://github.com/state-spaces/mamba/security/advisories
  • Guardrails AI advisories: https://github.com/guardrails-ai/guardrails/security/advisories
  • Horovod project advisories: https://github.com/horovod/horovod/security/advisories
  • AsyncSSH advisories: https://github.com/ronf/asyncssh/security/advisories
  • Automad advisories: https://github.com/marcantondahmen/automad/security/advisories
  • Hapi content advisories: https://github.com/hapijs/content/security/advisories
  • Hapi wreck advisories: https://github.com/hapijs/wreck/security/advisories
  • Hapi inert advisories/source: https://github.com/hapijs/inert/security/advisories and https://github.com/hapijs/inert
  • Pimcore advisories: https://github.com/pimcore/pimcore/security/advisories
  • Symfony routing advisories: https://github.com/symfony/symfony/security/advisories
  • Symfony security-http advisories: https://github.com/symfony/symfony/security/advisories
  • Symfony HtmlSanitizer advisories: https://github.com/symfony/symfony/security/advisories
  • Capsule / Project Capsule advisories: https://github.com/projectcapsule/capsule/security/advisories
  • Symfony MonologBridge advisories: https://github.com/symfony/symfony/security/advisories
  • Symfony Cache advisories: https://github.com/symfony/symfony/security/advisories
  • Symfony Mailer advisories: https://github.com/symfony/symfony/security/advisories
  • Symfony Mime advisories: https://github.com/symfony/symfony/security/advisories
  • Symfony DomCrawler advisories: https://github.com/symfony/symfony/security/advisories
  • CrowdSec advisories: https://github.com/crowdsecurity/crowdsec/security/advisories
  • Deno advisories: https://github.com/denoland/deno/security/advisories
  • Langroid advisories: https://github.com/langroid/langroid/security/advisories
  • tmp / node-tmp advisories: https://github.com/raszi/node-tmp/security/advisories
  • Nezha Monitoring advisories: https://github.com/nezhahq/nezha/security/advisories
  • Arcane advisories: https://github.com/getarcaneapp/arcane/security/advisories
  • AstrBot advisories: https://github.com/AstrBotDevs/AstrBot/security/advisories
  • Beetl project issues/advisories: https://gitee.com/xiandafu/beetl/issues
  • instagrapi advisories: https://github.com/subzeroid/instagrapi/security/advisories
  • aiograpi advisories: https://github.com/subzeroid/aiograpi/security/advisories
  • Flask-Security advisories: https://github.com/pallets-eco/flask-security/security/advisories
  • FileBrowser Quantum advisories: https://github.com/gtsteffaniak/filebrowser/security/advisories
  • Drupal core security advisories: https://www.drupal.org/security
  • Prefect security advisories: https://github.com/PrefectHQ/prefect/security/advisories
  • Apache Camel security advisories: https://camel.apache.org/security/
  • Apache Airflow security advisories: https://github.com/apache/airflow/security/advisories
  • Fission security advisories: https://github.com/fission/fission/security/advisories
  • Kolibri advisories/source: https://github.com/learningequality/kolibri/security/advisories and https://github.com/learningequality/kolibri
  • Keycloak advisories/source: https://github.com/keycloak/keycloak/security/advisories and https://github.com/keycloak/keycloak
  • Boxlite security advisories: https://github.com/rapiz1/boxlite/security/advisories
  • containerd security advisories: https://github.com/containerd/containerd/security/advisories
  • Pydantic AI security advisories: https://github.com/pydantic/pydantic-ai/security/advisories
  • SQLAdmin security advisories: https://github.com/aminalaee/sqladmin/security/advisories
  • Twig security advisories: https://github.com/twigphp/Twig/security/advisories
  • Bugsink security advisories: https://github.com/bugsink/bugsink/security/advisories
  • Tekton Pipelines security advisories: https://github.com/tektoncd/pipeline/security/advisories
  • Apache Flink security advisories: https://flink.apache.org/what-is-flink/security/
  • YesWiki security advisories: https://github.com/YesWiki/yeswiki/security/advisories
  • Network-AI security advisories: https://github.com/Jovancoding/Network-AI/security/advisories
  • JavaScript Cookie security advisories: https://github.com/js-cookie/js-cookie/security/advisories
  • pyload-ng security advisories: https://github.com/pyload/pyload/security/advisories
  • Crawlee security advisories: https://github.com/apify/crawlee-python/security/advisories
  • Crabbox security advisories: https://github.com/openclaw/crabbox/security/advisories
  • Langflow security advisories: https://github.com/langflow-ai/langflow/security/advisories
  • samlify advisories: https://github.com/tngan/samlify/security/advisories
  • Windows-MCP advisories: https://github.com/CursorTouch/Windows-MCP/security/advisories
  • OpenMetadata advisories: https://github.com/open-metadata/OpenMetadata/security/advisories
  • sanitize-html advisories: https://github.com/apostrophecms/sanitize-html/security/advisories
  • SvelteKit advisories: https://github.com/sveltejs/kit/security/advisories
  • md-fileserver advisories: https://github.com/commenthol/md-fileserver/security/advisories
  • Amazon SageMaker Python SDK advisories: https://github.com/aws/sagemaker-python-sdk/security/advisories
  • LMDeploy advisories: https://github.com/InternLM/lmdeploy/security/advisories
  • Anyquery advisories/source: https://github.com/julien040/anyquery/security/advisories and https://github.com/julien040/anyquery
  • pip security advisories: https://github.com/pypa/pip/security/advisories
  • OpenClaude advisories: https://github.com/Gitlawb/openclaude/security/advisories
  • TeleJSON advisories: https://github.com/storybookjs/telejson/security/advisories
  • Apify MCP server advisories: https://github.com/apify/actors-mcp-server/security/advisories
  • protobufjs advisories: https://github.com/protobufjs/protobuf.js/security/advisories
  • Open WebUI advisories: https://github.com/open-webui/open-webui/security/advisories
  • OpenClaw advisories: https://github.com/openclaw/openclaw/security/advisories
  • HashiCorp Nomad advisories: https://github.com/hashicorp/nomad/security/advisories
  • go-git advisories: https://github.com/go-git/go-git/security/advisories
  • zrok advisories: https://github.com/openziti/zrok/security/advisories
  • Mailpit advisories: https://github.com/axllent/mailpit/security/advisories
  • Argo CD advisories: https://github.com/argoproj/argo-cd/security/advisories
  • Nuxt advisories: https://github.com/nuxt/nuxt/security/advisories
  • Gotenberg advisories: https://github.com/gotenberg/gotenberg/security/advisories
  • HAXcms / HAX advisories: https://github.com/haxtheweb/issues/security/advisories
  • Algernon advisories: https://github.com/xyproto/algernon/security/advisories
  • Scriban advisories: https://github.com/scriban/scriban/security/advisories
  • Nginx-UI advisories/source: https://github.com/0xJacky/nginx-ui/security/advisories and https://github.com/0xJacky/nginx-ui
  • OpenSearch JavaScript client advisories: https://github.com/opensearch-project/opensearch-js/security/advisories
  • Python idna advisories: https://github.com/kjd/idna/security/advisories
  • ApostropheCMS advisories: https://github.com/apostrophecms/apostrophe/security/advisories
  • Weblate advisories: https://github.com/WeblateOrg/weblate/security/advisories
  • Typebot advisories: https://github.com/baptisteArno/typebot.io/security/advisories
  • XWiki advisories: https://github.com/xwiki/xwiki-commons/security/advisories
  • CryptPad advisories: https://github.com/cryptpad/cryptpad/security/advisories
  • XWiki Platform advisories: https://github.com/xwiki/xwiki-platform/security/advisories
  • Yeoman environment advisories: https://github.com/yeoman/environment/security/advisories
  • Fedify advisories: https://github.com/fedify-dev/fedify/security/advisories
  • Yamcs advisories: https://github.com/yamcs/yamcs/security/advisories
  • FUXA advisories: https://github.com/frangoteam/FUXA/security/advisories
  • Kirby CMS advisories: https://github.com/getkirby/kirby/security/advisories
  • Kata Containers advisories: https://github.com/kata-containers/kata-containers/security/advisories
  • CarrierWave advisories: https://github.com/carrierwaveuploader/carrierwave/security/advisories
  • LiquidJS advisories: https://github.com/harttle/liquidjs/security/advisories
  • LiteSpeed cPanel plugin security updates: https://blog.litespeedtech.com/
  • Apache Tomcat security advisories: https://tomcat.apache.org/security.html
  • ImageMagick security policy and releases: https://imagemagick.org/script/security-policy.php
  • NiceGUI advisories: https://github.com/zauberzeug/nicegui/security/advisories
  • HAPI FHIR project: https://github.com/hapifhir/hapi-fhir
  • PyTorch Lightning project: https://github.com/Lightning-AI/pytorch-lightning
  • Snorkel project: https://github.com/snorkel-team/snorkel
  • PySyft project: https://github.com/OpenMined/PySyft
  • .NET security advisories: https://github.com/dotnet/announcements/issues
  • ASP.NET Core security advisories: https://github.com/dotnet/aspnetcore/security/advisories
  • ws WebSocket advisories: https://github.com/websockets/ws/security/advisories
  • AVideo advisories: https://github.com/WWBN/AVideo/security/advisories
  • pgAdmin security advisories: https://www.pgadmin.org/support/security/
  • Faraday project security advisories: https://github.com/lostisland/faraday/security/advisories
  • Docling project and advisories: https://github.com/docling-project/docling and https://github.com/docling-project/docling/security/advisories
  • Jupyter Enterprise Gateway advisories: https://github.com/jupyter-server/enterprise_gateway/security/advisories
  • browserstack-runner advisories: https://github.com/browserstack/browserstack-runner/security/advisories
  • AIOHTTP advisories: https://github.com/aio-libs/aiohttp/security/advisories
  • ModelScope advisories/project: https://github.com/modelscope/modelscope/security/advisories and https://github.com/modelscope/modelscope
  • Neotoma project: https://github.com/NeotomaDB/neotoma
  • Trail of Bits Blog: https://blog.trailofbits.com/ (RSS: https://blog.trailofbits.com/feed/)
  • Trail of Bits skill-distribution scanner-bypass research: https://blog.trailofbits.com/2026/06/03/the-sorry-state-of-skill-distribution/
  • PortSwigger Research: https://portswigger.net/research (RSS: https://portswigger.net/research/rss)
  • Hacktron AI Blog: https://www.hacktron.ai/blog/
  • ProjectDiscovery Blog: https://projectdiscovery.io/blog/
  • Brutecat Security articles: https://brutecat.com/articles/ (RSS: https://brutecat.com/rss.xml)
  • pretix advisories and releases: https://github.com/pretix/pretix/security/advisories and https://pretix.eu/about/en/blog/
  • Easy Digital Downloads import-upload advisory/source: https://github.com/advisories/GHSA-fcpv-9325-98hg and https://plugins.svn.wordpress.org/easy-digital-downloads/
  • Advanced Responsive Video Embedder compromised-release advisory/source: https://github.com/advisories/GHSA-45wh-rxq4-jqc6 and https://plugins.svn.wordpress.org/advanced-responsive-video-embedder/tags/10.8.7/
  • Eazy Plugin Manager and StoreGrowth source: https://plugins.svn.wordpress.org/plugins-on-steroids/ and https://plugins.svn.wordpress.org/storegrowth-sales-booster/
  • SICK PSIRT CSAF advisories: https://www.sick.com/.well-known/csaf/provider-metadata.json and https://www.sick.com/psirt
  • ProjectDiscovery Neo: https://neo.projectdiscovery.io/
  • ProjectDiscovery Neo black-box DAST benchmark notes: https://projectdiscovery.io/blog/neo-black-box-dast-capabilities
  • Argus validation benchmarks: https://github.com/pensarai/argus-validation-benchmarks
  • XBOW validation benchmarks: https://github.com/xbow-engineering/validation-benchmarks
  • Caddy security advisories: https://github.com/caddyserver/caddy/security/advisories
  • Spring AI MCP Security: https://github.com/spring-ai-community/mcp-security
  • webpack-dev-server advisories: https://github.com/webpack/webpack-dev-server/security/advisories
  • eduMFA advisories: https://github.com/eduMFA/eduMFA/security/advisories
  • Statamic CMS security advisories: https://github.com/statamic/cms/security/advisories
  • MLflow security advisories: https://github.com/mlflow/mlflow/security/advisories
  • Magick.NET/ImageMagick advisories: https://github.com/dlemstra/Magick.NET/security/advisories
  • flash-attention project: https://github.com/Dao-AILab/flash-attention
  • Zebra security advisories: https://github.com/ZcashFoundation/zebra/security/advisories
  • dynoxide project/advisories: https://github.com/wojciech-graj/dynoxide/security/advisories
  • Dozzle project/advisories: https://github.com/amir20/dozzle/security/advisories
  • Erlang cowlib advisories: https://github.com/ninenines/cowlib/security/advisories
  • LibreNMS advisories: https://github.com/librenms/librenms/security/advisories
  • CI4MS advisories: https://github.com/ci4-cms-erp/ci4ms/security/advisories
  • OpenTelemetry eBPF Instrumentation advisories: https://github.com/open-telemetry/opentelemetry-ebpf-instrumentation/security/advisories
  • Mistral AI package advisories: https://github.com/mistralai/client-python/security/advisories
  • Spring AI advisories: https://github.com/spring-projects/spring-ai/security/advisories
  • Docker/Moby security advisories: https://github.com/moby/moby/security/advisories
  • Budibase advisories: https://github.com/Budibase/budibase/security/advisories
  • n8n-MCP advisories: https://github.com/czlonkowski/n8n-mcp/security/advisories
  • multiparty advisories: https://github.com/pillarjs/multiparty/security/advisories
  • Coder advisories: https://github.com/coder/coder/security/advisories
  • 9router advisories/source: https://github.com/advisories?query=9router and https://github.com/9router/9router
  • Kong Ingress Controller advisories: https://github.com/Kong/kubernetes-ingress-controller/security/advisories
  • Bandit advisories: https://github.com/mtrudel/bandit/security/advisories
  • Cowboy advisories: https://github.com/ninenines/cowboy/security/advisories
  • MCP Gateway advisories: https://github.com/IBM/mcp-context-forge/security/advisories
  • MCP Atlassian advisories/source: https://github.com/sooperset/mcp-atlassian/security/advisories and https://github.com/sooperset/mcp-atlassian
  • SQLFluff advisories: https://github.com/sqlfluff/sqlfluff/security/advisories
  • libp2p JavaScript advisories: https://github.com/libp2p/js-libp2p/security/advisories
  • Kopia advisories: https://github.com/kopia/kopia/security/advisories
  • Angular security advisories: https://github.com/angular/angular/security/advisories
  • Caddy Defender advisories: https://github.com/JasonLovesDoggo/caddy-defender/security/advisories
  • Nautobot security advisories: https://github.com/nautobot/nautobot/security/advisories
  • Gradio advisories: https://github.com/gradio-app/gradio/security/advisories
  • Anchor framework advisories: https://github.com/coral-xyz/anchor/security/advisories
  • Keycloak security advisories: https://github.com/keycloak/keycloak/security/advisories
  • Eclipse Jetty security advisories: https://github.com/jetty/jetty.project/security/advisories
  • Axios advisories: https://github.com/axios/axios/security/advisories
  • Froxlor advisories: https://github.com/froxlor/Froxlor/security/advisories
  • GitHub CLI advisories: https://github.com/cli/cli/security/advisories
  • seroval advisories: https://github.com/lxsmnsyc/seroval/security/advisories
  • Databento DBN advisories: https://github.com/databento/dbn/security/advisories
  • Rclone advisories: https://github.com/rclone/rclone/security/advisories
  • Mako advisories: https://github.com/sqlalchemy/mako/security/advisories
  • Faraday advisories: https://github.com/lostisland/faraday/security/advisories
  • pm2 advisories: https://github.com/Unitech/pm2/security/advisories
  • Palo Alto Networks security advisories: https://security.paloaltonetworks.com/
  • phpMyFAQ advisories: https://github.com/thorsten/phpMyFAQ/security/advisories
  • NocoDB advisories: https://github.com/nocodb/nocodb/security/advisories
  • MCP Server Kubernetes advisories: https://github.com/Flux159/mcp-server-kubernetes/security/advisories
  • FlaskBB advisories: https://github.com/flaskbb/flaskbb/security/advisories
  • Knp Snappy advisories: https://github.com/KnpLabs/snappy/security/advisories
  • Flowise advisories: https://github.com/FlowiseAI/Flowise/security/advisories
  • wger advisories: https://github.com/wger-project/wger/security/advisories
  • setup-php advisories: https://github.com/shivammathur/setup-php/security/advisories
  • Hugging Face Diffusers advisories: https://github.com/huggingface/diffusers/security/advisories
  • OpenTofu advisories: https://github.com/opentofu/opentofu/security/advisories
  • Plug advisories: https://github.com/elixir-plug/plug/security/advisories
  • Craft CMS security advisories: https://github.com/craftcms/cms/security/advisories
  • MCP Registry advisories: https://github.com/modelcontextprotocol/registry/security/advisories
  • Hono advisories: https://github.com/honojs/hono/security/advisories
  • Nhost advisories: https://github.com/nhost/nhost/security/advisories
  • Singularity advisories: https://github.com/sylabs/singularity/security/advisories
  • AVideo advisories: https://github.com/WWBN/AVideo/security/advisories
  • OpenMeter advisories: https://github.com/openmeterio/openmeter/security/advisories
  • Spree advisories: https://github.com/spree/spree/security/advisories
  • Gogs advisories/source: https://github.com/gogs/gogs/security/advisories and https://github.com/gogs/gogs
  • OpenCTI advisories/source: https://github.com/OpenCTI-Platform/opencti/security/advisories and https://github.com/OpenCTI-Platform/opencti
  • motionEye advisories/source: https://github.com/motioneye-project/motioneye/security/advisories and https://github.com/motioneye-project/motioneye
  • Paymenter advisories/source: https://github.com/Paymenter/Paymenter/security/advisories and https://github.com/Paymenter/Paymenter
  • n8n advisories/source: https://github.com/n8n-io/n8n/security/advisories and https://github.com/n8n-io/n8n
  • Sigstore Fulcio advisories/source: https://github.com/sigstore/fulcio/security/advisories and https://github.com/sigstore/fulcio
  • CefSharp advisories/source: https://github.com/cefsharp/CefSharp/security/advisories and https://github.com/cefsharp/CefSharp
  • AdonisJS bodyparser advisories/source: https://github.com/adonisjs/bodyparser/security/advisories and https://github.com/adonisjs/bodyparser
  • Oban Web advisories/source: https://github.com/oban-bg/oban/security/advisories and https://github.com/oban-bg/oban
  • Probo advisories/source: https://github.com/probo/probo/security/advisories and https://github.com/probo/probo
  • ORAS Go advisories/source: https://github.com/oras-project/oras-go/security/advisories and https://github.com/oras-project/oras-go
  • Ghost security advisories/source: https://github.com/TryGhost/Ghost/security/advisories and https://github.com/TryGhost/Ghost
  • goshs advisories/source: https://github.com/patrickhener/goshs/security/advisories and https://github.com/patrickhener/goshs
  • Apache Ignite advisories/source: https://ignite.apache.org/security.html and https://github.com/apache/ignite
  • OnGres SCRAM project: https://github.com/ongres/scram
  • oasdiff advisories/source: https://github.com/oasdiff/oasdiff/security/advisories and https://github.com/oasdiff/oasdiff
  • KEDA advisories/source: https://github.com/kedacore/keda/security/advisories and https://github.com/kedacore/keda
  • Goploy advisories/source: https://github.com/zhenorzz/goploy/security/advisories and https://github.com/zhenorzz/goploy
  • ha-mcp advisories/source: https://github.com/homeassistant-ai/ha-mcp/security/advisories and https://github.com/homeassistant-ai/ha-mcp
  • aiosmtplib advisories/source: https://github.com/cole/aiosmtplib/security/advisories and https://github.com/cole/aiosmtplib
  • mariadb-connector-nodejs advisories/source: https://github.com/mariadb-corporation/mariadb-connector-nodejs/security/advisories and https://github.com/mariadb-corporation/mariadb-connector-nodejs
  • mariadb-java-client advisories/source: https://github.com/mariadb-corporation/mariadb-java-client/security/advisories and https://github.com/mariadb-corporation/mariadb-java-client
  • mariadb-connector-r2dbc advisories/source: https://github.com/mariadb-corporation/mariadb-connector-r2dbc/security/advisories and https://github.com/mariadb-corporation/mariadb-connector-r2dbc
  • Snipe-IT advisories/source: https://github.com/grokability/snipe-it/security/advisories and https://github.com/grokability/snipe-it
  • Kite advisories/source: https://github.com/zxh326/kite/security/advisories and https://github.com/zxh326/kite
  • Apache Fesod advisories/source: https://github.com/apache/fesod/security/advisories and https://github.com/apache/fesod
  • Kimai advisories/source: https://github.com/kimai/kimai/security/advisories and https://github.com/kimai/kimai
  • Gitea advisories/source: https://github.com/go-gitea/gitea/security/advisories and https://github.com/go-gitea/gitea
  • September 9 hourly KEV follow-up: Adobe Commerce/Magento template-engine RCE (CVE-2026-75650 / GHSA-fj37-xm58-mf28, KEV 2026-09-08, APSB26-146 hotfix) and the same-day Windows LPE tracked entries CVE-2026-85880 / CVE-2026-81963: https://helpx.adobe.com/security/products/magento/apsb26-146.html, https://github.com/advisories/GHSA-fj37-xm58-mf28, https://nvd.nist.gov/vuln/detail/CVE-2026-75650, https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-75650
  • GitPython advisories/source: https://github.com/gitpython-developers/GitPython/security/advisories and https://github.com/gitpython-developers/GitPython
  • SVGO advisories/source: https://github.com/svg/svgo/security/advisories and https://github.com/svg/svgo
  • Jackson Databind advisories/source: https://github.com/FasterXML/jackson-databind/security/advisories and https://github.com/FasterXML/jackson-databind
  • SharpCompress advisories/source: https://github.com/adamhathcock/sharpcompress/security/advisories and https://github.com/adamhathcock/sharpcompress
  • FrontMCP advisories/source: https://github.com/frontmcp/frontmcp/security/advisories and https://github.com/frontmcp/frontmcp
  • etcd advisories/source: https://github.com/etcd-io/etcd/security/advisories and https://github.com/etcd-io/etcd
  • Oh My Posh advisories/source: https://github.com/JanDeDobbeleer/oh-my-posh/security/advisories and https://github.com/JanDeDobbeleer/oh-my-posh
  • OpenList advisories/source: https://github.com/OpenListTeam/OpenList/security/advisories and https://github.com/OpenListTeam/OpenList
  • http4s blaze advisories/source: https://github.com/http4s/blaze/security/advisories and https://github.com/http4s/blaze
  • OmniFaces advisories/source: https://github.com/omnifaces/omnifaces/security/advisories and https://github.com/omnifaces/omnifaces
  • Shescape advisories/source: https://github.com/ericcornelissen/shescape/security/advisories and https://github.com/ericcornelissen/shescape
  • AWS API MCP Server advisories/source: https://github.com/awslabs/mcp/security/advisories and https://github.com/awslabs/mcp
  • Apache Traffic Server security announcements and source: https://trafficserver.apache.org/security/ and https://github.com/apache/trafficserver
  • Koollab LMS advisory cluster: https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-094
  • Postiz advisories/source: https://github.com/gitroomhq/postiz-app/security/advisories and https://github.com/gitroomhq/postiz-app
  • SuperTokens Core advisories/source: https://github.com/supertokens/supertokens-core/security/advisories and https://github.com/supertokens/supertokens-core
  • libvirt security/source: https://libvirt.org/securityprocess.html and https://gitlab.com/libvirt/libvirt
  • OPeNDAP Hyrax source/releases: https://github.com/OPENDAP/hyrax-docker and https://www.opendap.org/software/hyrax/
  • DOMPurify advisories/source: https://github.com/cure53/DOMPurify/security/advisories and https://github.com/cure53/DOMPurify

Network and service discovery

  • Nmap reference: https://nmap.org/book/man.html
  • Nmap NSE reference: https://nmap.org/nsedoc/
  • ProjectDiscovery httpx: https://github.com/projectdiscovery/httpx

DNS and subdomain enumeration

  • OWASP Amass: https://github.com/owasp-amass/amass
  • Subfinder: https://github.com/projectdiscovery/subfinder
  • PureDNS: https://github.com/d3mondev/puredns
  • MassDNS: https://github.com/blechschmidt/massdns
  • Gobuster: https://github.com/OJ/gobuster

Maintenance rules

  • Prefer official documentation, source repos, vendor advisories, and primary project docs.
  • Only convert advisory/news items into wiki content when they produce an offensive testing skill, replayable validation workflow, recon heuristic, or exploit-path lesson for authorized work.
  • Add a source here when a new skill depends on it repeatedly.
  • Remove links that stop being canonical.
  • September 16 fail-open/hardcoded-default wave: Central Dogma hardcoded ZK secret / SSH verifier / LDAP injection (CVE-2026-11746, CVE-2026-11745, CVE-2026-11748), mistral.rs media loader SSRF/file read, Pimcore Custom Reports SQLi (CVE-2026-55416), October CMS safe-mode sandbox/deserialization/scheme checks (CVE-2026-46696, CVE-2026-49400), Payload alt-text overrideAccess (CVE-2026-59965), Shopper Livewire authz (CVE-2026-56826 et al.): https://github.com/advisories/GHSA-2j95-gqxf-v3vg, https://github.com/advisories/GHSA-vjfw-cpmh-xwv3, https://github.com/advisories/GHSA-98q5-5qh2-7w75, https://github.com/advisories/GHSA-wfgq-w7cq-qj7j, https://github.com/advisories/GHSA-23rh-xw42-fq82, https://github.com/advisories/GHSA-xv9m-fm3w-8w5x, https://github.com/advisories/GHSA-2ff2-mx52-q8wp, https://github.com/advisories/GHSA-4qpv-39hg-f7fx, https://github.com/advisories/GHSA-f7h9-qv4x-9x57
  • September 16 Angular SSR follow-ups (CVE-2026-88056 URL trim divergence, CVE-2026-88060 template-fragment escaping, CVE-2026-88057 host-binding sanitizer context, CVE-2026-88059 withRequestsMadeViaParent cache leak): https://github.com/advisories/GHSA-f6mr-pjwc-34m4, https://github.com/advisories/GHSA-v3p8-whq6-r5jg, https://github.com/advisories/GHSA-hh8m-fm6v-7cvg, https://github.com/advisories/GHSA-p297-fm68-3q8c
  • September 16 rclone auth-proxy wave (CVE-2026-88018 SigV4 bypass, CVE-2026-88044 per-server proxyOpt drift, plus 7 adjacent): https://github.com/advisories/GHSA-xwwr-4h3p-r22c and https://github.com/advisories/GHSA-p569-5gjg-9cmj
  • September 16 Open WebUI Playwright loader DNS-rebinding confirmation (CVE-2026-87996): https://github.com/advisories/GHSA-4v28-j6q3-5m4r
  • September 16 late wave (published 2026-09-16T09:30Z): Pepperl+Fuchs ICE2-/ICE3- IODD web-UI cluster (certvde VDE-2026-014, firmware <1.7.4; CVE-2026-27546 auth bypass, CVE-2026-27565 unauth root RCE, CVE-2026-27557 SSH-key traversal, CVE-2026-27547..27564 injection/LFI set) + Arista EOS gRPC plane (CVE-2026-73447 Certz root command injection, CVE-2026-73464 gNMI root RCE, CVE-2026-73439 Pathz drift, CVE-2026-73461 AAA drift, CVE-2026-73454 Credentialz, CVE-2026-73463 Authz race, CVE-2026-2380 secret logging) + XikeStor unauth config download (CVE-2026-88263): https://www.certvde.com/en/advisories/VDE-2026-014, https://github.com/advisories/GHSA-pvrf-wj35-pxjx, https://github.com/advisories/GHSA-9q7j-q2f8-2hh2, https://github.com/advisories/GHSA-669f-m4vm-pcm2, https://github.com/advisories/GHSA-hhmm-qmjm-g2hp, https://github.com/advisories/GHSA-cppj-w9qw-f23c, https://github.com/advisories/GHSA-jxpm-cmg2-h9hw
  • September 16 CI/CD control-plane wave: GitLab protected-variable scope on policy-test pipelines (CVE-2026-79708), Octopus Server external-feed path traversal sa2026-09 (CVE-2026-92355), Ash calculation/aggregate filter oracle (CVE-2026-86338), ZenHive mpp recovery-id dedup bypass + cache-control overwrite (CVE-2026-88255, CVE-2026-89186): https://github.com/advisories/GHSA-4gg6-pm69-gwm2, https://advisories.octopus.com/post/2026/sa2026-09, https://github.com/advisories/GHSA-h9mg-hh48-hrwv, https://github.com/advisories/GHSA-p7v4-jpp9-2m3q
  • September 16 Airflow follow-ups on the June 30 page: Akeyless provider team-scope bypass via Execution API path-shaped Variable key (CVE-2026-86465), FAB session-invalidation string-vs-int comparison and admin-edit PATCH missing-helper route (CVE-2026-82311, CVE-2026-86462): https://github.com/advisories/GHSA-rmjj-53pr-xrwc, https://github.com/advisories/GHSA-gr7m-j34w-7qcm, https://github.com/advisories/GHSA-5j5v-7fmw-4hvh
  • September 16 WordPress follow-ups on the July 28 page: Appointment Hour Booking per-item capacity check (CVE-2026-86475), Eventin payment-to-order binding replay (CVE-2026-84906), Formidable Forms request-derived shortcode execution (CVE-2026-19857): https://github.com/advisories/GHSA-cqfw-wgfw-rqrw, https://github.com/advisories/GHSA-8p6x-g49r-wjj7, https://github.com/advisories/GHSA-hgfq-v6h8-89x5
  • September 16 realtime view-framework/state-binding wave: djust WebSocket update_model mass-assignment (CVE-2026-61598) + DEBUG-gated observability/eval endpoints with opt-in localhost middleware (CVE-2026-61590) + late follow-ups WS/SSE-only tenant-isolation fail-open (CVE-2026-61595) and csrf_exempt SSE transport CSRF (CVE-2026-61593) + late-night completion with mount-path __import__ of client-supplied module path before auth (CVE-2026-61599) and sibling set CVE-2026-61594/61592/61591/61589/61588/61596/61597: https://github.com/advisories/GHSA-cc7c-9jff-58wj, https://github.com/advisories/GHSA-8g2f-g3gq-5rjv, https://github.com/advisories/GHSA-3492-cvg7-9mr2, https://github.com/advisories/GHSA-pg97-jvmf-qfvc, https://github.com/advisories/GHSA-7prp-2623-8g45, https://github.com/advisories/GHSA-xhhm-f6hp-2qwj, https://github.com/advisories/GHSA-f795-p5jw-j6g2, https://github.com/advisories/GHSA-c67v-vqrp-m5wj, https://github.com/advisories/GHSA-v9rj-xjfv-xj9r, https://github.com/advisories/GHSA-pvg3-6q9j-mj3x, https://github.com/advisories/GHSA-c7c5-5j6r-q957, https://github.com/advisories/GHSA-4mf4-73j6-mvrw; OpenTelemetry.Resources.Host macOS bare-name PATH hijack (CVE-2026-81192, fix PR dotnet-contrib#4760, Go sibling GHSA-9h8m-3fm2-qjrq): https://github.com/advisories/GHSA-v8pv-4842-x354; @zereight/mcp-gitlab SSE-mode unauth chain via upload_markdown file read → PAT exfil (CVE-2026-61560, folded into Sept 15 MCP page): https://github.com/advisories/GHSA-cv3r-c5h8-f4g5
  • September 16 LMDeploy ZMQ RPC pickle-deserialization RCE follow-up (CVE-2025-59953, tcp://* bind + unpickled ZMQ messages, folded into May 21 LMDeploy page): https://github.com/advisories/GHSA-5h8j-6crg-7rmw
  • September 16 n8n Instance AI / Elasticsearch follow-ups (folded into June 24 n8n page; fixed n8n 2.37.7/2.38.2, LTS 1.123.76): credential-setup probe URL not origin-bound, Elasticsearch/ElasticSecurity REST-path identifier injection under stored credential, editor-only reserved-key guard bypassed via REST workflow POST, /rest/active-workflows + push events missing tenancy filter: https://github.com/advisories/GHSA-q5wm-mgqx-fv2f, https://github.com/advisories/GHSA-f2cp-m7mv-8jpv, https://github.com/advisories/GHSA-679f-58pq-4v2c, https://github.com/advisories/GHSA-65xw-2v52-jhxc
  • September 16 Traefik HTTP/3 response-timeout gap (folded into Sept 15 Http4s/Traefik page; respondingTimeouts.readTimeout unenforced on HTTP/3 since v2.8.2, fixes v2.11.56/v3.7.12): https://github.com/advisories/GHSA-7ghq-v6jf-g56c
  • September 16 19:15Z KEV reconciliation (folded into the Sept 15 KEV wave page; catalog 2026.09.16, 1712 entries): Cisco ISE/ISE-PIC unauthenticated API auth bypass CVE-2026-76460 (CVSS 10.0, CWE-648, no workarounds, first fixed 3.1 P12/3.2 P11/3.3 P12/3.4 P7/3.5 P4, IoC lives in ise-kong API-gateway access log) + Google Pixel modem authorization bypass CVE-2026-58704 (tracked, no operator workflow): https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ISE-ABP-VNSW7Tn5 , https://nvd.nist.gov/vuln/detail/CVE-2026-58704
  • September 17 00:31Z wave — Craft CMS cluster (new page): unbound cookie/redirect HMAC → unsandboxed Twig SSTI RCE (CVE-2026-92592, GHSA-24f9-r76v-62p8; CVE-2026-92593, GHSA-9v9g-4j69-p6q5 incomplete-fix + self-signing oracle), GraphQL draftCreator/revisionCreator field-auth PII leak (CVE-2026-92594, GHSA-f53v-9r85-mf77), DB-outage installer ${VAR} env disclosure (CVE-2026-92591, GHSA-fq6c-26cc-63cr), nested-elements reorder authz drift (CVE-2026-92589, GHSA-mhr8-6rjx-8fjw), Generated Fields stored XSS (CVE-2026-92590, GHSA-gjx7-qh8p-42m8): https://github.com/advisories/GHSA-24f9-r76v-62p8, https://github.com/advisories/GHSA-9v9g-4j69-p6q5, https://github.com/advisories/GHSA-f53v-9r85-mf77, https://github.com/advisories/GHSA-fq6c-26cc-63cr, https://github.com/advisories/GHSA-mhr8-6rjx-8fjw, https://github.com/advisories/GHSA-gjx7-qh8p-42m8
  • September 17 Nodemailer cluster (new page): RFC 5322 comment atom-concatenation domain bypass (CVE-2026-92597, GHSA-8pjj-q6q6-qm29), UTS-46 IDN Punycode divergence (CVE-2026-92598, GHSA-r7q5-h7cx-p54x), resolveContent legacy signature drops sandbox flags → file read/SSRF (CVE-2026-92595, GHSA-5635-p6jj-6g9p); tracked: addressparser quadratic DoS (GHSA-v554-hhrr-96v5), joi isoDate ReDoS (GHSA-mrx9-2rrp-rhpx): https://github.com/advisories/GHSA-8pjj-q6q6-qm29, https://github.com/advisories/GHSA-r7q5-h7cx-p54x, https://github.com/advisories/GHSA-5635-p6jj-6g9p
  • September 17 n8n follow-ups (folded into June 24 n8n page; fixed 1.123.76/2.37.7/2.38.2): Git node relative-URL validated-vs-git-resolved sandbox escape, source-control push trusts client-supplied paths/statuses → cross-project deletion (CVE-2026-92587, CVE-2026-92588): https://github.com/advisories/GHSA-f9wr-qmqc-cpw3, https://github.com/advisories/GHSA-cr47-hhfm-v884
  • September 17 AVideo wave (folded into Sept 5 AVideo page): CloneSite sshpass str_replace command injection via loopback-blind CSRF (CVE-2026-92580, residual sink of CVE-2026-41304), stored hash accepted as login password (CVE-2026-92578), autoCSRFGuard basename-collision exemption (CVE-2026-92579), enforceRateLimit race (CVE-2026-92583), get_api_video access control + siblings (CVE-2026-92577/92581/92582/92584/92585/92586): https://github.com/advisories/GHSA-c9w6-444r-27pj, https://github.com/advisories/GHSA-hxf8-887x-mx5m, https://github.com/advisories/GHSA-4687-wm68-8h9w, https://github.com/advisories/GHSA-52g5-jg96-428j, https://github.com/advisories/GHSA-q24m-x4jf-vhrw
  • September 17 tracked-only: HKUDS nanobot WebFetchTool SSRF (GHSA-mpqf-rmwr-h7wr), TCH QRing BLE firmware (GHSA-2xqr-38g6-4hhr), quay-builder-qemu (GHSA-8ghx-8455-hgv5), rejected CVE-2026-85789 (GHSA-9j56-wrh5-rq8w). KEV JSON unchanged (2026.09.16, 1713 entries, newest dateAdded 2026-09-16) as of the 02:20Z Sep 17 scan; all blog feeds (PortSwigger, ToB, ProjectDiscovery, Brutecat, disclosed.org, GitHub security blog) unchanged.
  • September 17 03:15Z run — Sept 16 21:32Z unreviewed wave (new page): Graylog outbound allow-list not re-validated after redirects (CVE-2026-92789, GHSA-pgwr-3c66-c473), Wiki.js Image Prefetch full-read SSRF + tagless GraphQL resolvers + no-separator START/END path rules (CVE-2026-92775/92774/92776, GHSA-7mqp-q79v-g27v/GHSA-69p6-97m5-6vpp/GHSA-mxgr-89mh-cjg6), Trigger.dev GitHub App installation squatting (CVE-2026-92773, GHSA-48fw-mh64-g6wf), Rundeck archive-import config authority (CVE-2026-92763, GHSA-9cq6-jmp6-5vf7), Empire C2 multipart filename traversal (CVE-2026-92748, GHSA-6h6w-7p6f-xrh3), Coze Studio plugin-URL SSRF + workflow table-name SQLi (CVE-2026-92795/92788, GHSA-mc6j-cg9w-v46r/GHSA-77xw-26q5-6wjg), decap-server sibling-prefix prefix-guard miss (CVE-2026-92812, GHSA-fjm6-6gxh-mvf2), OpenNHP evidence-selected FallbackVerifier (CVE-2026-92792, GHSA-wj5x-jrhc-mqcx). Folds: changedetection.io browser-step Goto SSRF (CVE-2026-92815, GHSA-4jg2-g9g4-7fpp) + browserless websocket file: non-enforcement (CVE-2026-92811, GHSA-w2m9-jxm7-c4jp) into the June 5 page; ComfyUI dataset-save folder_name arbitrary write (CVE-2026-92816, GHSA-xhvx-vf8p-rh4x) into the June 22 page; Feast JWT-signature-never-verified (CVE-2026-92787, GHSA-4rxv-8f9g-9h5w) into the Aug 10 page; Chroma tenant/database segment bypass through 1.5.9 (CVE-2026-92782, GHSA-j8fq-8cc8-m22c) into the Aug 24 page. Sparse authz/CSRF/DoS singles (Metabase 0.0.0.0, PrestaShop pair, phpList, Manticore, UVdesk, Docs websocket, Nango, cc-connect, LibreTranslate, Higress, GoAdmin, Kraken, Angel Kryo, LightGBM, refinedev, Builder.io pair, KnowStreaming, CMAK pair, ArcherySec, OpenCVE, Pelican, Harbor, Leantime, Twenty, Shlink, metasfresh, WebVirtCloud, SecObserve, Patrowl pair, BroadWorks, changedetection title-XSS) tracked, not published. Sources: https://github.com/advisories/GHSA-pgwr-3c66-c473, https://github.com/advisories/GHSA-7mqp-q79v-g27v, https://github.com/advisories/GHSA-48fw-mh64-g6wf, https://github.com/advisories/GHSA-9cq6-jmp6-5vf7, https://github.com/advisories/GHSA-4rxv-8f9g-9h5w
  • September 17 03:34Z wave (folded into the July 28 WordPress boundary page): All-in-One WP Migration through 7.110 unauthenticated admin_init handler writes attacker-supplied PHP_AUTH_USER/PHP_AUTH_PW to reversible base64 ai1wm_auth_header option with no auth-success confirmation → Application-Password/Basic credential vault + anonymous overwrite primitive (CVE-2026-89064, GHSA-w3hh-7qrr-242f). Tracked only, no durable operator workflow: Affinity by Canva document stack overflow (CVE-2026-81546), GeoVision GV-Remote DLL hijacking (CVE-2026-92838), Python zipfile attacker-sized pre-allocation DoS update (CVE-2026-15310). KEV CSV unchanged (1713 entries, newest dateAdded 2026-09-16) and all blog feeds (PortSwigger, ToB, ProjectDiscovery, Brutecat, disclosed.org) unchanged as of the 04:20Z Sep 17 scan: https://github.com/advisories/GHSA-w3hh-7qrr-242f
  • September 17 06:30Z WPScan wave (folded into the July 28 WordPress boundary page): issuance-provenance breaks matching any user-meta value (Login with QR CVE-2026-86710, Private Feed Key CVE-2026-86707), Pressengine session minted on failed authentication (CVE-2026-86709), PuppyFW request-derived capability check (CVE-2026-88904), wpShopGermany IT-RECHT KANZLEI requester-derived token created by its own validation check -> file write RCE (CVE-2026-88795), Newsletter low-entropy unkeyed tracking-link signature -> subscriber session token (CVE-2026-86824), Paid Downloads unauthenticated admin_request_handler via is_admin() on admin-post.php (CVE-2026-87935), Multi Uploader for Gravity Forms chunked-upload validation gap (CVE-2026-87796). Tracked only: Canva Desktop deeplink double-decode same-origin load (CVE-2026-92839), Qualcomm/aptx + Wi-Fi memory-safety/transient-DoS block, Acer NitroSense pairs (CVE-2026-50603/50604), GeoVision DLL hijack (CVE-2026-92838): https://github.com/advisories/GHSA-37px-v36p-7jmx, https://github.com/advisories/GHSA-3m5h-9m27-j5hm, https://github.com/advisories/GHSA-r5f2-c2h7-4jxh, https://github.com/advisories/GHSA-f6x2-w8q2-ff47, https://github.com/advisories/GHSA-xg7f-297r-82hv, https://github.com/advisories/GHSA-w6v2-ggcj-c4hg, https://github.com/advisories/GHSA-8qvx-4h8h-jjwf, https://github.com/advisories/GHSA-h7vp-g8q2-89c8
  • September 17 09:33Z wave (folded into the July 28 WordPress boundary page + June 12 developer-control page): To Do List Member standalone plugin upload endpoint with no WordPress bootstrap, name-only validation, plus list/delete of staged files (CVE-2026-86801, GHSA-347f-487h-46gq); Yo pre-bootstrap unescaped username SQLi (CVE-2026-87963, GHSA-vfmj-6hfh-5m4v); flatpak-builder use-git-am patch-source post-applypatch Git hook host execution (CVE-2026-86320, GHSA-rvpr-5p35-6vf8). Processed without publication: Checkout Field Manager WooCommerce attachment-delete ownership gap (CVE-2026-87829/87831). Tracked: Mitsubishi GX Works3 local block-password tamper (CVE-2026-15688), Acer System Monitoring singles (CVE-2026-50605..50610): https://github.com/advisories/GHSA-347f-487h-46gq, https://github.com/advisories/GHSA-vfmj-6hfh-5m4v, https://github.com/advisories/GHSA-rvpr-5p35-6vf8
  • September 17 12:32Z wave — Grav follow-ups on the Aug 25 page (unauthenticated Clockwork profiler history leak CVE-2026-92916/GHSA-q3g2-wjhw-4rmj, sandbox guard global-flag fail-open dump/serialize config dump CVE-2026-92917/GHSA-rv7g-323x-h2q2) + AVideo late wave on the Sept 5 page (uniqid-derived pairing codes + unauth microtime oracle + 1-year hash credential CVE-2026-92913/GHSA-cv5x-3jv8-pgmr, null==null PGP second-factor bypass CVE-2026-92914/GHSA-x8jv-qqwm-22fj, anonymous userVerifyEmail enumeration + recovery-token minting CVE-2026-92915/GHSA-wphj-4v3g-8q6c) + Snowflake CLI repo-config multi-statement SQL injection folded into the June 12 developer-control page (CVE-2026-92903/GHSA-p2xq-qfx5-xp6q) + FatPipe EOL-firmware management-plane preauth root pair published as new page (CVE-2026-90822/GHSA-h64v-87jf-gq9c xtremed AuthFormServlet command injection, CVE-2026-90823/GHSA-32q2-w7qg-44p8 auth_user_pass stack overflow): https://github.com/advisories/GHSA-q3g2-wjhw-4rmj, https://github.com/advisories/GHSA-rv7g-323x-h2q2, https://github.com/advisories/GHSA-cv5x-3jv8-pgmr, https://github.com/advisories/GHSA-x8jv-qqwm-22fj, https://github.com/advisories/GHSA-wphj-4v3g-8q6c, https://github.com/advisories/GHSA-p2xq-qfx5-xp6q, https://github.com/advisories/GHSA-h64v-87jf-gq9c, https://github.com/advisories/GHSA-32q2-w7qg-44p8
  • September 17 12:32Z tracked-only (no durable operator workflow): Dell OpenManage Server Administrator <11.1.0.3 memory-safety/hardcoded-credential block (CVE-2026-81438..81480, 66269), Redis cluster-bus PING/PONG/MEET null-termination OOB read (CVE-2026-92925, GHSA-3gvw-xg56-j2xm, requires cluster-bus access), Eclipse Ankaios LogRule first-wildcard deny-skip (CVE-2026-92611), foreman_ansible unscoped Host.where inventory/destroy (CVE-2026-92893/92894), CRI-O HOME-newline /etc/passwd injection incomplete-fix (CVE-2026-15809), Go x509 SAN quadratic VerifyHostname + url.Parse host validation + DNS excluded-name constraints (CVE-2026-27145/25679/33810), BIND non-IN-class assertion + TKEY GSS-API memory DoS (GHSA-cqgq-ff3f-rj7r/GHSA-p65f-mhrm-vhrc), Corosync totempg multicast heap overflow (CVE-2026-81665), sg3_utils sg_inq export leak, Linux kernel netfilter/SMB/xfrm singles, Pulse 6.0.4 quick-setup input validation (CVE-2026-92860), FluentAuth identity spoofing (CVE-2026-78296), rejected Red Hat CVEs (CVE-2026-53679, CVE-2026-11874). KEV CSV unchanged (sha256 dca46759a5bc74d5, 1713 entries, newest dateAdded 2026-09-16) and all blog feeds (PortSwigger, ToB, ProjectDiscovery, Brutecat, disclosed.org) unchanged as of the 13:15Z Sep 17 scan.
  • September 17 14:48–14:59Z wave (new page): TinaCMS isAuthorized caller-supplied clientID auth-relay break (CVE-2026-63506, GHSA-g74q-6g2f-874x), Vendure external-auth unverified-email ATO (CVE-2026-63472, GHSA-6j36-r6pr-59x4) + Shop API filterOperator: OR guard-composition bypass (CVE-2026-63461, GHSA-xf65-r35x-wmmv) + innerHTML/textContent fake-sanitizer stored XSS (CVE-2026-63459, GHSA-xhq9-whgq-49j5), Marten LINQ dictionary-key SQLi (CVE-2026-75513, GHSA-rfx3-98h7-v3xp), Nuxt OG Image blind-SSRF status oracle (CVE-2026-61793, GHSA-q8hw-4fvp-9rwv). Folds: Sanic chunked-trailer smuggling (CVE-2026-85078, GHSA-wmj6-g64g-j7q5) + oRPC reflected request Vary (CVE-2026-77360, GHSA-j9v4-rhgr-4m5f) into the Sept 15 parser/header page; LiteLLM nested user_config.api_base guard-depth SSRF (CVE-2026-59823, GHSA-hx8v-g79f-8w5f) into the June 8 LiteLLM page; Redocly CLI split traversal (CVE-2026-63225, GHSA-657c-g7qc-r9j2) + cyclonedx-npm Windows --workspace shell injection (CVE-2026-71538, GHSA-q69g-4hcv-6jg4) into the June 12 developer-control page. Tracked without publication (DoS/crash-only): Grav forged-ZIP decompression cap bypass (GHSA-8h9x-89f2-m7x3), AsyncSSH max-packet-0 loop freeze (GHSA-rw4j-r22c-9gc3), Wire decoder overflow (GHSA-9rm7-3qhh-h2mc), RabbitMQ frame-level OOM (GHSA-jh4v-gfqj-7rhx), PocketBase worker panic (GHSA-84vh-m24q-wjjx), Vendure regex-filter ReDoS (GHSA-jgm3-qmp2-c4p7). Sources: https://github.com/advisories/GHSA-g74q-6g2f-874x, https://github.com/advisories/GHSA-6j36-r6pr-59x4, https://github.com/advisories/GHSA-xf65-r35x-wmmv, https://github.com/advisories/GHSA-xhq9-whgq-49j5, https://github.com/advisories/GHSA-rfx3-98h7-v3xp, https://github.com/advisories/GHSA-q8hw-4fvp-9rwv, https://github.com/advisories/GHSA-wmj6-g64g-j7q5
  • September 17 16:29–17:15Z wave (new page + 4 folds): RestrictedPython sandbox escape via string.Formatter.get_field internal attribute/item traversal never routed through safer_getattr (GHSA-hp3v-5vw7-fx9w); Zope AccessControl str.format/format_map disclosure via real getattr/getitem with str-subclass mitigation miss (GHSA-pq59-9fq7-m886, fixed 7.4); Umbraco Delivery API reference-expansion authz gap — picker/MNTP/block-nested protected nodes serialized with no access check, direct 401 vs expanded 200, alias type-restrictions bypassed (GHSA-wr57-hqmp-fgvh, fixed 13.15.1/17.5.3/18.0.2); MariaDB Connector/J allowLocalInfile=false unenforced on server-initiated 0xfb, filename-constrained (GHSA-wxmm-q36w-r9xj). Folds: Grav Flex FlexDirectory::dynamicDataField() arbitrary-callable RCE as incomplete-fix bypass of GHSA-fj2p-qj2f-74v5 (handler-preference routes around patched dynamicData()) onto the Aug 25 Grav page (GHSA-c4wf-2xxc-68qm); Skipper truncated_body vendor mitigation fails open on oversized chunked/HTTP/2 (flag computed only with Content-Length) onto the Jul 17 Skipper page (GHSA-5gpm-rgj3-9q76); RabbitMQ amqp091-go readLongstr >0x7FFFFFFF silent-success cursor desync + TLS-path URI query-injection re-parse overwrite onto the Sept 15 parser page (GHSA-c5pq-fr2g-9jpf, GHSA-465g-fh3v-9jw4); Junrar LocalFolderExtractor intermediate-mkdir containment escape onto the archive-extraction page (GHSA-89m4-43j5-vhhx). Late 17:15-17:19Z wave folded into the same new page: Kestra unauthenticated Micronaut management port 8081 /env + /loggers (GHSA-hpj9-grjp-7vc7) + Pebble http() unauthenticated Flow-YAML SSRF (GHSA-r56g-q4p6-m3p6); AsyncHttpClient origin creds on plaintext CONNECT to proxy (GHSA-xr57-gcx8-52hf) + client-wide config-realm re-derivation across cross-origin redirects (GHSA-f8m2-889x-vw4x) + log-only SCRAM/Digest mutual-auth verification (GHSA-fj9w-c36g-h5x8); SSH.NET ScpClient default DoubleQuote transformation transparent to $()/backticks (GHSA-mggc-4xg6-vcxf); oras-go Link-header absolute-URL blind SSRF (GHSA-h7vf-4x9w-h99v) + lexical symlink-chain tar slip + root-level Lstat skip (GHSA-m37j-52j7-pjw7); Grav watermark() lexical .. traversal with public cached-image disclosure (GHSA-w3f4-8pj2-599w) onto the Aug 25 Grav page. Tracked without publication: ExifReader HEIC/AVIF iloc DoS (GHSA-pj96-35fp-cfcc), amqp091-go PLAIN exported-field credential retention + QoS cast + TLS-minimum + frame-size/length DoS siblings, AsyncHttpClient HTTP/1.1 unbounded decompression DoS (GHSA-7grg-jcf7-rpmx), vLLM PyNvVideoCodec VRAM-exhaustion DoS (GHSA-8pw2-6jv3-mj5j), Grav duplicate/re-surfacing records (GHSA-mmwh-j75q-gxp8, GHSA-vj8j-973f-r65j, GHSA-7pgq-cr25-xvc8). KEV CSV unchanged (sha256 dca46759a5bc74d5, 1713 entries, newest dateAdded 2026-09-16); all blog feeds (PortSwigger, ToB, ProjectDiscovery, Brutecat, disclosed.org) unchanged as of the 17:15Z Sep 17 scan: https://github.com/advisories/GHSA-hp3v-5vw7-fx9w, https://github.com/advisories/GHSA-pq59-9fq7-m886, https://github.com/advisories/GHSA-wr57-hqmp-fgvh, https://github.com/advisories/GHSA-wxmm-q36w-r9xj, https://github.com/advisories/GHSA-c4wf-2xxc-68qm, https://github.com/advisories/GHSA-5gpm-rgj3-9q76, https://github.com/advisories/GHSA-c5pq-fr2g-9jpf, https://github.com/advisories/GHSA-465g-fh3v-9jw4, https://github.com/advisories/GHSA-89m4-43j5-vhhx, https://github.com/advisories/GHSA-hpj9-grjp-7vc7, https://github.com/advisories/GHSA-r56g-q4p6-m3p6, https://github.com/advisories/GHSA-xr57-gcx8-52hf, https://github.com/advisories/GHSA-f8m2-889x-vw4x, https://github.com/advisories/GHSA-fj9w-c36g-h5x8, https://github.com/advisories/GHSA-mggc-4xg6-vcxf, https://github.com/advisories/GHSA-h7vf-4x9w-h99v, https://github.com/advisories/GHSA-m37j-52j7-pjw7, https://github.com/advisories/GHSA-w3f4-8pj2-599w
  • September 17 17:31-18:01Z wave (folds): Grav stored XSS via Markdown audio/video media <source> rawHtml sink — the fourth sibling miss in the media-parameter class; audit commit aba291a5 scoped itself to "sinks reaching the style attribute" and missed the URL concatenated unescaped into <source src> (quote-break + <svg onload> in the URL fragment, admin-session stored XSS, CVE-2026-75831/GHSA-6qw9-4vv5-jr97, dup GHSA-q8cg-5m48-5c25) onto the Aug 25 Grav page; libp2p @libp2p/peer-store consumePeerRecord verifies the RecordEnvelope signature but never binds envelope signer to payload peerId — attacker-signed envelope naming a victim peer ID stores attacker multiaddrs as certified victim addresses via gossipsub PX (expectedPeer derived from attacker wire pi.peerID), CVSS 8.2 (CVE-2026-86039/GHSA-vrf4-mx87-p53w) onto the Sept 17 attestation-verifier page as the signature-verified-but-identity-not-bound pattern. Tracked only: Steeltoe.Management.Endpoint HttpExchanges URI masking leaks query-string secrets (CVE-2026-75523/GHSA-8phw-xrj9-cpqp). KEV CSV unchanged (sha256 dca46759a5bc74d5, 1713 entries, newest dateAdded 2026-09-16) and all blog feeds (PortSwigger, ToB, ProjectDiscovery, Brutecat, disclosed.org) unchanged as of the 18:2xZ Sep 17 scan: https://github.com/advisories/GHSA-6qw9-4vv5-jr97, https://github.com/advisories/GHSA-vrf4-mx87-p53w, https://github.com/advisories/GHSA-8phw-xrj9-cpqp
  • September 17 18:32-19:05Z wave (new page + 1 fold): MISP events/contact form → background job dispatch passes user fields straight into CakePHP console argv, where ShellDispatcher::_parsePaths() scans all argv elements for path switches (-app/--app/-working/-root/-webroot) and uses the next element as app root — person=-app + message=phar://<uploaded archive> makes bootstrap include Config/core.php from the attacker archive = deterministic unauthenticated RCE as web user (GHSA-2q9g-8hcw-6c23); SAP @sap/cds-mtxs <1.18.4/2.x<2.7.7/3.x<3.9.7/4.0.1-4.0.2 unauthenticated crafted-request tenant-credential disclosure on extensibility-enabled CAP multitenant apps → tenant data replace/delete, CVSS critical, CVE-2026-76969/GHSA-955m-rr6m-2f9v (SAP note 3798315, resurfaced via updated feed 19:05Z); Verizon Cloud for Android <26.7.10 exported OneTouchUploadActivity/PrintShopCloudActivity ACTION_SEND _display_name path-traversal arbitrary file write from co-resident apps (GHSA-x3gc-cx3q-fw5m); MISP Overmind statistics donut-legend innerHTML stored XSS via user-controllable object names folded into the Sept 7 MISP page (GHSA-rfmv-f8jw-7mhw). Tracked only: fulgur HTML→PDF page-amplification DoS pair (CVE n/a, GHSA-4rf6-qx84-q9fv/GHSA-j5cx-ph8g-95v3, availability-only), SourceCodester/code-projects toy-app SQLi/infospec, SAP/IBM/Oracle hygiene updates. Linux-kernel GHSA sync wave and KEV unchanged (1713 entries, newest 2026-09-16); all blog feeds unchanged as of the 19:20Z Sep 17 scan.
  • September 17 20:23-20:59Z wave (folds, 18 GHSAs): Grav cluster onto the Aug 25 Grav page — four sandbox read primitives: system/site/theme raw config arrays carried into the sandboxed render bypass Twig SecurityPolicy entirely (policy gates object members only; config_access:false default irrelevant, CVE-2026-72698/GHSA-p597-crqc-m349), shipped config_denied_paths default omits system prefix (CVE-2026-76846/GHSA-xjw5-q542-3vmr), allow-listed offsetget/offsetexists on UserInterface unfiltered vs jsonSerialize redaction leaks hashed_password/2FA seeds (CVE-2026-76839/GHSA-3jhr-mxmx-38cx), allow-listed media_directory() skips stream check for plain paths + Medium.filepath allow-list contradicts its own comment = arbitrary dir enumerate/read of media-extension files (CVE-2026-72697/GHSA-47ch-6w46-6xm7); dynamic-data ladder to login-to-RCE: isSafeDynamicCall() allow/deny lists keyed on single-string callable name, [class,method] pair form skips both and reaches call_user_func_array -> Installer::unZip(user/media/evil.zip, docroot) PHP upload-to-RCE, with config-file-as-own-blueprint via Flex directories self-reference, CVSS 8.8 (CVE-2026-72819/GHSA-r94f-hx44-8jqf, dup GHSA-wvxr-6v52-gfmh); bare-function branch of same gate left on isDangerousFunction denylist which omits error_log/stream_socket_client/dl/mb_send_mail = arbitrary file append/SSRF (CVE-2026-75827/GHSA-f8wv-xp27-6gq7, critical); detectXss() all-six /u patterns silently return false on any invalid UTF-8 byte in subject, truthiness check collapses falseclean (CVE-2026-75834/GHSA-q2j8-x8hf-63ch); GHSA-269c quote-aware fix introduced unpaired-quote-in-unquoted-attribute tokenizer gap <img src=x" onerror=...> (CVE-2026-75828/GHSA-vfmf-q6x9-cw96); CVE-2026-42613 security@: admin.super guard missing on sibling group.yaml + check_authorize has zero PHP consumers (CVE-2026-75837/GHSA-xhfv-7758-r9hx, dup GHSA-m97h-2qj3-5773); pre-boot plugin-asset-map.php fast static server uses str_starts_with(realFile,realBase) sibling-prefix containment, zero auth where present (CVE-2026-74907/GHSA-4v9q-p283-qc2m); GHSA-jq29-c7v8-rg55/CVE-2026-72695 duplicate re-publication of deleteFile traversal tracked only. CoreDNS DoH/DoH3/DoQ/gRPC relay unsigned RFC 2136 UPDATEs that UDP/TCP reject pre-dispatch -> unauth dynamic DNS update if upstream trusts source (CVE-2026-86003/GHSA-9gm5-9rfh-m6vx) onto the April CoreDNS TSIG page (transport x policy decision table). @platejs/core < 53.3.11 deserializes untrusted HTML in the live document, parse-time attribute behavior fires before node conversion/sanitization (CVE-2026-88976/GHSA-qrfj-mgw8-j9c6) onto the Sept 16 sanitizer page. djust 1.1.1/1.1.2 template-layer fixes: six auto-escape parity defects (escape no-op makes |escape|safe|safe, safeseq string-input verbatim-under-safe-grant, render_slot raw emit, linebreaks forces |safe) + name-keyed context safety grants surviving with/for/include rebinding and per-view accumulation across WS renders (GHSA-9395-2g46-rj3f, GHSA-xjw9-38cr-6372) onto the Sept 16 djust page with the dual-engine differential-testing pattern. Tracked only: CakePHP FunctionsBuilder cast/extract/datePart/dateAdd SQLi (CVE-2026-79752/GHSA-vjqc-q4mp-2rvf), Chamilo LMS CStudio unauth RCE <=2.0.0 detail-free 9.8 (CVE-2026-45140/GHSA-g4c3-4g96-6g4m) revisit when detail lands, Jupyter Server 5xx logging Referer token leak (CVE-2026-86049), OTel-Go log exporter ignores env TLS pins (CVE-2026-81871), Steeltoe header-forwarded client-cert possession + Consul/Eureka parse-DoS pair, Soup Sieve ReDoS pair, HAPI FHIR SHCParser DEFLATE pair, react/http chunked DoS, CoreDNS custom-transport mem exhaustion, Svelte devalue DoS. KEV CSV unchanged (sha256 dca46759a5bc74d5, 1713 entries, newest dateAdded 2026-09-16); PortSwigger feed newest entry unchanged (What's in a tag name, already processed), ProjectDiscovery feed newest unchanged (VS Code extension analysis, already processed), ToB/Brutecat/disclosed.org unchanged as of the 21:0xZ Sep 17 scan.
  • September 17 21:31Z / September 18 00:31Z waves (new page + 2 folds): Grafana OSS/Enterprise plugin-archive extraction runs before signature verification — chained relative symlink entries escape the plugin install dir, arbitrary file write + executable backend binary running as the Grafana server process = RCE; a valid signature does not prevent the write; legit-appearing-plugin / grafana-cli / GF_INSTALL_PLUGINS / preinstall paths all exposed (CVE-2026-15815, GHSA-xp8x-3q7w-cpqr) — ordering-axis framing shared with the Sept 16 Nuclei mtime-cache item. SOGo <5.12.11 password-reset links built from the client-supplied Origin header → victim's own recovery email carries the token to attacker infrastructure → ATO (CVE-2026-93453, GHSA-gqgv-6fx9-g8mx) folded onto the May 19 Apostrophe Host-header reset page (Host+Origin decision-table probe rule). Amelia Premium ≤2.4.4 /users/customers/<id> missing ownership check → wpamelia-provider role reads/edits any customer incl. password reset → WordPress core ATO up to Editor (CVE-2026-14311, GHSA-g24p-55f9-p54c) + Motors ≤1.4.120 mvl_ajax_dealer_load_cars() unauthenticated draft/pending/private/future listing disclosure (CVE-2026-16750, GHSA-v742-3q56-7wc3) folded onto the July 28 WordPress page (plugin object stores as shadow credential vaults; status-state enumeration on admin-ajax). Tracked only: vLLM max_tokens=0 decode-worker exhaustion (CVE-2026-93436), libmongoc SCRAM nonce-mismatch proof leak (CVE-2026-93394), Aureus ERP stored XSS (CVE-2026-93454), Grafana Geomap MapLibre style-config XSS (CVE-2026-76154), Chrome 153 + Microsoft Patch-Tuesday GHSA sync waves, O-RAN-SC, HCL redaction miss, snappy-java/go-openapi-swag pair, HAPI FHIR SHC DEFLATE pair, Karaf ThreadLocal leak, MongoDB EF Core trio, mayfly-go pair.
  • September 18 03:30Z unreviewed wave (new page): Nextcloud app-layer authority drift — Circles remote-instance signature verification fetches the attacker-supplied keyId URL before trust establishment with local/private addresses explicitly allowed, bypassing core SSRF protections from unauthenticated POST /apps/circles/event/ + /apps/circles/incoming/ (CVE-2026-77164, GHSA-h4g5-x94v-qxqg); DAV lock/unlock resolves files from the absolute request URI without session-owner verification → cross-user locks + lock-token disclosure (CVE-2026-82980, GHSA-3vwx-p83m-w7p5); Deck board-scoped config API accepts arbitrary boardId without ownership check (CVE-2026-77170, GHSA-c82v-5g56-99px); Photos filter-based smart albums build listings from the viewer's photosSourceFolders instead of the owner's (CVE-2026-82985, GHSA-fp2m-3769-mjc9); Approval etag freshness check enforced only when the etag parameter is present (CVE-2026-82982, GHSA-w4mj-3r4x-wxm3); Team Folders + Workspace API/REST-only delegated admins bypass folder-level authorization (CVE-2026-77169, GHSA-v94x-5qwj-fqpj); yt-dlp-web-ui <=v4 download-API params command injection into yt-dlp argv, fix commit c7ad3bd replaces sanitizer with flag allowlist (CVE-2026-93371, GHSA-vppc-qfgr-6vg2) folded onto the Aug 5 command-wrapper audit. Tracked only: HGiga OAKlouds unauth deserialization RCE + path-traversal file read (CVE-2026-93467/93468), django-page-cms staff-readable pages + five CSRF-exempt admin mutation views (CVE-2026-93455/93456), NASA CryptoLib SDLS SPI-selected SA not verified against frame GVCID (CVE-2026-79954), Acronis backup-plugin insecure-permissions LPE trio (CVE-2026-87886), Microsoft/Azure Patch-Tuesday GHSA sync wave, snappy-java/go-openapi-swag/redis-parser parser pair set, Poppler/GPAC memory-safety singles, RT Mega Menu/Brizy stored-XSS singles. KEV CSV unchanged (sha256 dca46759a5bc74d5, 1713 entries, newest dateAdded 2026-09-16); reviewed GHSA feed, PortSwigger, ToB, ProjectDiscovery, Brutecat, and disclosed.org feeds unchanged as of the 05:2xZ Sep 18 scan: https://github.com/advisories/GHSA-h4g5-x94v-qxqg, https://github.com/advisories/GHSA-3vwx-p83m-w7p5, https://github.com/advisories/GHSA-c82v-5g56-99px, https://github.com/advisories/GHSA-fp2m-3769-mjc9, https://github.com/advisories/GHSA-w4mj-3r4x-wxm3, https://github.com/advisories/GHSA-v94x-5qwj-fqpj, https://github.com/advisories/GHSA-vppc-qfgr-6vg2
  • September 18 06:15Z scan (fold, 1 GHSA): libp2p @libp2p/gossipsub StrictSign RSA author spoof — validateToRawMessage binds msg.key to the claimed from peer ID only when fromPeerId.publicKey !== undefined; RSA peer IDs parsed from the wire multihash have no inlined key, so the binding check is silently skipped, the signature is verified against the attacker-supplied msg.key, and the message is accepted as victim-authored under the DEFAULT StrictSign policy and gossiped onward (fixed 16.0.5 by adding peerIdFromPublicKey(publicKey).equals(fromPeerId), CVSS 7.5, CVE-2026-86038/GHSA-c3gv-825q-fvmp) onto the Sept 17 attestation-verifier page as the second same-library instance of signature-verified-but-identity-not-bound, with the conditional-guard-on-optional-field fail-open rule and cross-key-type differential (Ed25519 fix proves nothing about RSA-style IDs). Tracked only: reviewed Sept 17 20:23-20:59Z head unchanged (all previously folded), unreviewed 06:15Z deltas were Poppler/GPAC/O-RAN/Chrome-153/MS-Patch-Tuesday/memory-safety/DoS singles with no reusable operator workflow, Nextcloud Circles membership-enum follow-up CVE-2026-68493 (CVSS 3.1, brute-force ID guess only), snappy-java/go-openapi overflow+parser singles. KEV CSV unchanged (1713 entries, newest dateAdded 2026-09-16) and all blog feeds (PortSwigger, ToB, ProjectDiscovery, Brutecat, disclosed.org) unchanged as of the 06:2xZ Sep 18 scan: https://github.com/advisories/GHSA-c3gv-825q-fvmp
  • September 18 06:31Z wave (new page + fold): WordPress core 7.1.1 security release — unauthenticated stored XSS in wpautop() reproducible on a default install (moderation off by default, previously-approved-commenter requirement bypassable, CVE-2026-93485/GHSA-2pgq-4jch-68j8), HTML API set_modifiable_text() comment breakout via abrupt-closing sequences, XML-RPC publishing customize_changeset posts bypassing edit_css (alternate-transport authorization parity), crafted-URL silent theme install/preview from WordPress.org, contributor+ arbitrary post overwrite, contributor draft/pending slug disclosure, attachment_submitbox_metadata() missing read_post leaking private parent titles, any-authenticated-user comment reparenting; sources: https://github.com/advisories/GHSA-2pgq-4jch-68j8, https://wordpress.org/news/2026/09/wordpress-7-1-1-maintenance-and-security-release/, https://wordpress.org/documentation/wordpress-version/version-7-1-1/, https://patchstack.com/database/wordpress/wordpress/wordpress/vulnerability/wordpress-wordpress-wordpress-7-1-cross-site-scripting-xss-vulnerability; plugin wave folded onto the July 28 WordPress page: Ai1wm export-disclosed installation-wide secret -> import -> admin (CVE-2026-81810), Easy Appointments hardcoded-salt+timestamp mail-link token (CVE-2026-87965) + unauthenticated reservation overwrite (CVE-2026-87966), Generate PDF for CF7 renderer-side image fetch returning responses through the generated PDF (CVE-2026-90984), VikBooking unauthenticated chat attachments -> admin-viewer sink (CVE-2026-85127), Filter Gallery nonce-verified-only-when-present (CVE-2026-90978); tracked not published: ManageEngine DataSecurity Plus agent auth bypass + technician Reports SQLi (CVE-2026-18911/18912), ShortPixel PHP object injection without local POP chain (CVE-2026-17086), HGiga OAKlouds pair still detail-free, django-page-cms pair, NASA CryptoLib TC auth downgrade, Poppler/GPAC/O-RAN DoS singles
  • September 18 09:31Z wave (fold, 77-advisory wave): WordPress plugin cluster folded onto the July 28 WordPress page — Booking Calendar wpbc_ajax_option_save name-keyed register_option_policy() registry returns empty policy for unregistered option names (bypasses can_save/force_mode/allowed_keys), Editor writes default_role=administrator+users_can_register=1 to admin, nonce value AND action both request-supplied (CVE-2026-92619/GHSA-jrfx-j7fq-9588); Hide My WP Ghost security plugin disables its own firewall/threat-detection/URL-hiding when an attacker-suppliable WooCommerce parameter is present (CVE-2026-86796/GHSA-5vw4-phcp-qmr8) or loopback-check verification value missing/wrong (CVE-2026-86800/GHSA-35qw-6f3x-m64f) = protection-layer inversion of the parameter-ABSENT axis; Auto Upload Images wp_remote_get + reject-own-hostname-only validate = loopback/link-local/private SSRF via <img src> ingestion (CVE-2026-12106/GHSA-7v2c-5xw3-f2hc); Clean Login CAPTCHA skipped when session CAPTCHA value empty (CVE-2026-90977/GHSA-whxq-7ph8-rv4q) + account creation without checking registration-enabled (CVE-2026-90976/GHSA-vm4x-47jq-gqcc); Apache Airflow asset queued-events DELETE gated on READ instead of EDIT, default RBAC shape is the precondition, fixed 3.3.2, verb-permission mismatch sweep folded onto the Sept 17 attestation-verifier page (CVE-2026-75157/GHSA-gmw9-258q-r8gm); tracked not published: Filter Gallery pair confirming nonce bypass requires omission not forgery (CVE-2026-89413/89138), Mapster WP Maps arbitrary user-meta write no nonce/capability/allowlist (CVE-2026-12954), Synology DSM cluster SCGI file r/w 9.8 + login entropy 9.8 + LDAP/CIFS set (CVE-2026-13684/13639/13673) detail-free, HCL BigFix Service Mgmt SQLi cross-tenant PII + search SSRF + low-priv admin screens (CVE-2026-67100/67101/67102) advisory-summary-only, TECHIN2B (CVE-2026-12384) detail-free, Netty StompSubframeDecoder/OCSP nextUpdate singles, Divi arbitrary shortcode execution, ~25 generic WP stored-XSS/SQLi/IDOR singles. KEV JSON unchanged (catalogVersion 2026.09.16, 1713 entries) and all blog feeds (PortSwigger, ToB, ProjectDiscovery, Brutecat, disclosed.org) unchanged as of the 10:1xZ Sep 18 scan: https://github.com/advisories/GHSA-jrfx-j7fq-9588, https://github.com/advisories/GHSA-5vw4-phcp-qmr8, https://github.com/advisories/GHSA-35qw-6f3x-m64f, https://github.com/advisories/GHSA-7v2c-5xw3-f2hc, https://github.com/advisories/GHSA-whxq-7ph8-rv4q, https://github.com/advisories/GHSA-vm4x-47jq-gqcc, https://github.com/advisories/GHSA-gmw9-258q-r8gm
  • September 18 11:15Z scan (new methodology page): Trail of Bits Auditing in the age of (good enough) AI (Miden zkVM core-library review) promoted as Agent-built Audit Tooling for Custom VMs — agent-built LSP/decompiler-IR/abstract-interpretation/Lean-model prep ladder for no-tooling bytecode targets; reusable vuln class: untrusted prover/witness operands coupled only by a reconstruction equation (validated quotient + unvalidated remainder in mod_12289 → wrong-remainder return → Falcon signature forge → account drain; generalized to (length,checksum)/(offset,size)/advice-pair sweeps at verify boundaries); failed-proof-missing-precondition bug oracle (rotr shift mod 32, wrapping_mul stack-drop). Tracked only: GHSA published/updated feeds unchanged beyond the processed 09:31Z wave, KEV JSON unchanged (catalogVersion 2026.09.16, 1713 entries), PortSwigger head whats-in-a-tag-name, PD head Aug-16, Brutecat f099b20d, disclosed cc969a5f unchanged. Note: ToB post URL fetch returned 404 via direct curl (Hugo trailing-slash page not resolving for plain requests); full text sourced from the feed item description. https://blog.trailofbits.com/2026-09-18/auditing-in-the-age-of-good-enough-ai/
  • September 18 13:11Z wave (new page + fold): Opencast Paella player stored XSS via WebVTT/DFXP caption cue text — captions canvas appends each cue with innerHTML += cue, any captions/* flavor media-package element served raw to anonymous viewers through /search/episode.json, Subtitles upload + caption plugins enabled by default, fast workflow caption processing cuts/tags but never sanitizes, no CSP; non-admin author roles (ROLE_API_EVENTS_CREATE/TRACK_EDIT/UI_TASKS_CREATE) → execution in every viewer session incl. anonymous + staff (CVE-2026-77615/GHSA-m6c8-jcw2-5r25, fixed 19.7) promoted as the media-auxiliary-asset stored-XSS carrier page. Caddy v2.11.3 replacer-layer trio folded onto the July 24 Caddy page: rewrite URI template with request-data placeholder + trailing ? feeds first-pass attacker bytes into buildQueryString second replacer pass → injected {env.*}/{file.*}/{vars.*} resolved, secrets into URL/access logs/reverse_proxy/{http.request.uri.query} (same gadget as patched vars_regexp CVE-2026-30852, fix unextended to siblings, no regression test carried); fileHidden() case-sensitive filepath.Match vs case-insensitive APFS/NTFS → .GIT/.ENV/SECRETS served despite hide rules; {http.request.body} placeholder needsEarly read bypasses request_body max_size → OOM (CVE-2026-77281/GHSA-j8px-rmrx-76h9, fixed 2.11.4). KEV JSON unchanged (sha256 72b4e3489021d2ad, catalogVersion 2026.09.16, 1713 entries, newest dateAdded 2026-09-16); PortSwigger head whats-in-a-tag-name (Aug 25, lastBuildDate churn only), ToB hash d5d2b5d0 head Sept-18 Miden post already processed, PD head Aug-16, Brutecat f099b20d, disclosed.org cc969a5f unchanged as of the 13:2xZ Sep 18 scan; updated-feed deltas were Grav duplicate-advisory markers. https://github.com/advisories/GHSA-m6c8-jcw2-5r25, https://github.com/advisories/GHSA-j8px-rmrx-76h9
  • September 18 15:05Z GHSA (fold, 1): XWiki xwiki-rendering-xml critical CVSS 9.9 (CVE-2025-53837/GHSA-26vp-8gxg-v4pg) — extension-point rendering output included as content of the enclosing {{html}} macro without escaping; tilde-escaped {{/html}} + {{groovy}} payload in a self-editable doc (own profile via XWiki.UIExtensionClass object, scope current user) reopens the executing syntax layer on ?sheet=CKEditor.ContentSheet&xpage=plain → programming-rights Groovy/Python RCE + full wiki read/write from any low-privilege editing user, exploitable since 3.3 M1, fixed 14.10.2/15.0 RC1, other known injection point org.xwiki.platform.search.ui.docdoesnotexist — folded onto the June 22 XWiki/wiki-macro page with the macro-close injection class, extension-point sink enumeration, and escaped-spelling validator-sweep rules. KEV JSON changed: catalogVersion 2026.09.18, 1715 entries, two new Linux-kernel local entries CVE-2025-39964 (af_alg concurrent writes) + CVE-2026-53266 (ebt SNAT ARP OOB write) tracked on the KEV page, no operator page. Opencast GHSA-m6c8-jcw2-5r25 + Caddy GHSA-j8px-rmrx-76h9 reappeared in published/updated feeds as already-published re-surfacing (13:11Z wave state lag). PortSwigger head whats-in-a-tag-name (Aug 25), ToB head Sept-18 Miden post, PD head Aug-16, Brutecat f099b20d, disclosed.org cc969a5f unchanged as of the 15:2xZ Sep 18 scan. https://github.com/advisories/GHSA-26vp-8gxg-v4pg
  • September 18 16:07Z GHSA (fold, 1): Semantic MediaWiki stored XSS CVSS 8.6 (CVE-2025-61682/GHSA-hg8h-557g-q8pp) folded onto the media client-side render sinks page — ext.smw.js JSON.parses element.dataset.subtab and concatenates into innerHTML for every .smw-subtab element; the wikitext sanitizer strips only its own reserved data- names, so {{#tag:div|class=smw-subtab|data-subtab=""<img …>""}} survives (.dataset re-decodes &quot;), giving any edit-right user stored execution against all readers; reusable axes: grep front-end bundles for dataset→JSON.parse→innerHTML chains, enumerate sanitizer reserved-attribute allowlists and test unregistered data-* names, quote-state craft for JSON-parsed attributes. Netty HAProxy/H2/Redis/DNS-bailiwick quintet in updated feed = already-tracked re-surfacing. KEV JSON unchanged (catalogVersion 2026.09.18, 1715 entries); GHSA published feed head = this advisory; PortSwigger (lastBuildDate churn only), ToB, PD, Brutecat, disclosed.org unchanged as of the 16:2xZ Sep 18 scan. https://github.com/advisories/GHSA-hg8h-557g-q8pp
  • September 18 16:40–17:14Z wave (new page + 2 folds): Semantic MediaWiki 10-GHSA server-side wave promoted as new page — api.php?action=smwtask no authorization check, anonymous +\ fixed CSRF token ≠ authorization, admin-only tasks (table-statistics/duplicate-lookup/insert-job/run-joblist) + entityIdDisposer disclosure→mutation bridge (GHSA-jr78-w6w5-m8f8); Special:Ask unsigned base64url-JSON cursor sort_prop/sort_order reflect via Query::addErrors()→Html::errorBox() raw (CVE-2026-77616/GHSA-cx86-7xwp-w9wf); format=debug DebugFormatter echoes query/prettifySQL()/EXPLAIN unescaped, _txt props ship on every install (CVE-2026-77610/GHSA-q5fm-9mx6-44f4); FacetedSearch cstate gate csum==crc32(q) or filtered=1 compute-and-bypass, {{{hidden}}} triple-brace mustache (GHSA-9rcc-pmj8-ffhr); URIResolver interwiki-prefix 303 open redirect, validate final target host+userinfo at sink (CVE-2026-77609/GHSA-hw3m-8j5x-94ff); sep/headers=plain/SearchByProperty reflected XSS siblings (CVE-2026-77607/77606/77608). LMDeploy trio folded onto May 21 AI-runtime page: DistServe POST /distserve/p2p_connect attacker-supplied zmq_address dials engine's PULL socket out to attacker pickle server, recv_pyobj() executes during deserialization, API-key off by default, unauth RCE >=0.9.2,<0.16.0 (CVE-2025-66455/GHSA-2vh9-42vm-xmv2, CVSS 9.8); eval(f'torch.{quant_dtype}') AWQ-branch unvalidated quant_dtype, sibling torch_dtype whitelist irrelevant, comma-tuple payload (CVE-2026-33625/GHSA-3hmm-rh5q-gwwr); \@ urlparse-vs-requests host differential defeats _is_safe_url getaddrinfo is_global check (GHSA-39wr-7q6h-cf68). Capsule trio folded onto May 28 Capsule page: ExactMatch case-insensitive sort + byte-order sort.SearchStrings misses literally-present mixed-case denylist keys → tenant sets forbidden labels/annotations (CVE-2026-61672/GHSA-gjw4-3v3v-rqxg); hostnameRegexHandler.OnUpdate swapped params validates OLD Tenant, malformed AllowedHostnames.Regex persists, MatchString error swallowed bricks tenant Ingress (CVE-2026-61795/GHSA-f94q-w3w8-cj67); annotations-regex loop compiles labels regex for both fields (CVE-2026-61794/GHSA-gxjc-74v5-3vx3). Tracked not published: RabbitMQ amqp091-go DoS/credential siblings (already-page items), Grav forged-ZIP decompression-cap + PocketBase panic + AsyncSSH max-packet-0 + Wire decoder overflow + RabbitMQ Java frame OOM DoS set, Redocly/cyclonedx/Grav/Sanic/oRPC/ LiteLLM/Vendure/Marten/Kestra/oras/Skipper/amqp091 core items all already on pages, duplicate Grav advisory markers GHSA-q8cg-5m48-5c25/GHSA-cgvr-f65r-pjv3/GHSA-pp9r-ppc4-25w4, old Python GHSA-4hg4-9mf5-wxxq re-surfacing. KEV JSON unchanged (catalogVersion 2026.09.18, 1715 entries) and all blog feeds (PortSwigger, ToB, PD, Brutecat, disclosed.org cc969a5f) unchanged as of the 17:2xZ Sep 18 scan. https://github.com/advisories/GHSA-jr78-w6w5-m8f8, https://github.com/advisories/GHSA-cx86-7xwp-w9wf, https://github.com/advisories/GHSA-2vh9-42vm-xmv2, https://github.com/advisories/GHSA-gjw4-3v3v-rqxg
  • September 18 17:15–17:59Z wave (new page + 2 folds): scope-parameters-accepted-but-never-enforced page — kcp front-proxy appends rather than replaces X-Remote-User/Group/Extra-* identity headers, client-supplied copies never stripped, shard trusts them over the mTLS leg → any credential asserts system:masters (CVSS 9.9, CVE-2026-61682/GHSA-c8w2-fgvx-vhv4; note CVE-2026-61682 collides with the SMW stored-XSS CVE — GitHub advisory duplicate assignment); Convoy FindSourceByID accepts projectID and never uses it, SQL has no project_id predicate, list endpoint scopes correctly but get-by-ID returns any project's Source with plaintext pub_sub broker credentials, no patch ≤v26.6.2 (CVE-2026-81505/GHSA-p5vg-v7mj-f6q4); Perses filesystem-DB list-query project=../ traversal skips body-only Flatten (CVE-2026-63445), ?project= query shadows the path-authorized project on all project-scoped reads (CVE-2026-63458), datasource proxy authorizes Datasource scope then decrypts any body-named Secret → plaintext secret oracle (CVE-2026-63199); Moquette Will-publish path fireWill/publishWill skips canWrite() unlike all QoS PUBLISH handlers, anonymous default, CONNECT Will Topic + TCP RST → ACL-restricted topic injection (CVE-2026-85058/GHSA-9jjc-fw8x-fmwx); Obot trio — unauthenticated DCR + unrestricted redirect + no-consent auto-complete + group-carrying token with issuer-checked/audience-ignored validation = one-click API-wide token theft (GHSA-xwmw-prc4-v3cr, 8.8), remote-MCP-URL auto-reconcile OAuth-metadata fetch non-blind SSRF reflecting body in errors + DisallowLocalhostMCP off-by-default/loopback-only/absent-from-metadata-path (GHSA-jgh3-fggc-mcpm, 7.6), default-allow authorizer fixed-prefix protected list misses /v0.1 registry mount (GHSA-pr6h-vr44-xq8j); AnyCable Pusher REST body_md5 in HMAC stringToSign never recomputed + no auth_timestamp staleness = indefinite body-substitution replay (CVE-2026-63405/GHSA-5p54-whvp-x327); zot bearer handler maps all non-GET/HEAD to "push" and bearer bypasses DistSpecAuthzHandler → push-scope token deletes manifests/blobs (CVE-2026-61833/GHSA-qg67-7m6v-qg25, 8.1). Folds: process-compose MCP SSE DNS rebinding — SSE default transport, X-PC-Token-Key middleware REST-only, MCP listener inherits nothing, control tools start/stop/scale/truncate (CVE-2026-77339/GHSA-5gm3-9crp-6g3v) + ToolHive default insecure_allow_all network profile → host.docker.internal reaches unauthenticated supervisor control plane + sibling proxies (CVE-2026-58197/GHSA-qg2g-g9w3-m5h8) onto the Sept 15 MCP page; md-editor-v3 highlight-callback language-string unescaped into unquoted attribute, XSSPlugin filters parser tokens only so renderer-built HTML invisible, ```x">
    executes with plugin enabled (CVE-2026-84992/GHSA-3rm2-h79c-8qw6) + File Viewer .doc escaped-but-no-scheme-allowlist links (CVE-2026-91127/GHSA-3753-m2x2-q623) onto the Sept 16 sanitizer page. Tracked only: Mnemosyne JWT decode-without-verify any-token auth (CVE-2026-59163/GHSA-xcw4-53cc-hv32, 9.1, existing JWT guidance covers), Paymenter doUpgrade unlocked-read race refund double-spend (CVE-2026-71537/GHSA-5gmm-hjfj-8ff7), AnyCable telemetry hardcoded token + raw os.Args (CVE-2026-63406), AnyIO extra_groups mix-up + IDNA2003 divergence, adm-zip declared-size DoS, Bouncy Castle lazy-ASN.1 nesting-guard reset (GHSA-qp49-qgx5-5m26). KEV JSON unchanged (catalogVersion 2026.09.18, 1715 entries); PortSwigger head whats-in-a-tag-name (Aug 25), ToB head Sept-18 Miden post, PD head Aug-16, Brutecat f099b20d, disclosed.org cc969a5f all unchanged as of the 18:4xZ Sep 18 scan. https://github.com/advisories/GHSA-c8w2-fgvx-vhv4, https://github.com/advisories/GHSA-p5vg-v7mj-f6q4, https://github.com/advisories/GHSA-vr5f-w35q-98jp, https://github.com/advisories/GHSA-cjgj-2fwf-4c2w, https://github.com/advisories/GHSA-4227-9989-jrhx, https://github.com/advisories/GHSA-9jjc-fw8x-fmwx, https://github.com/advisories/GHSA-xwmw-prc4-v3cr, https://github.com/advisories/GHSA-jgh3-fggc-mcpm, https://github.com/advisories/GHSA-5gm3-9crp-6g3v, https://github.com/advisories/GHSA-qg2g-g9w3-m5h8, https://github.com/advisories/GHSA-3rm2-h79c-8qw6
  • September 18 21:0xZ scan (fold, 1): React Router file-session storage unsigned-cookie path traversal folded onto the June 3 React Router boundary page — createFileSessionStorage() used without a cookie secret makes cookie contents fully attacker-controlled input used as a file-path component → traversal reads/writes outside the session dir bounded by server-process permissions; reads are format-gated (contents land in server-side session, not response — trace session-key reflection before claiming disclosure), destroy/rewrite writes are the concrete integrity axis; reusable axis: grep framework cookie/session factories for missing signing secret — an unsigned cookie is attacker-controlled input at every downstream sink. Fixed @react-router/node 7.9.4, @remix-run/* 2.17.2 (CVSS 9.1, CVE-2025-61686/GHSA-9583-h5hc-x8cw, re-surfaced via updated feed 21:03Z). Tracked only: Nuxt navigateTo/reloadNuxtApp URL-handling advisory re-surfacing (CVE-2026-56326, already processed), ImageMagick ConnectedComponentsImage CLI-controlled OOB (CVE-2026-56370, already processed). Published feed showed 0 advisories after the 17:59Z Obot wave. KEV JSON unchanged (sha256 7b770a6f5eb1d47a, catalogVersion 2026.09.18, 1716 entries); ToB head Sept-18 Miden post processed, PortSwigger head whats-in-a-tag-name (Aug 25), PD head Aug-16, Brutecat f099b20d, disclosed.org cc969a5f unchanged as of the 21:2xZ Sep 18 scan. https://github.com/advisories/GHSA-9583-h5hc-x8cw
  • September 18 18:31Z / 21:32Z / September 19 00:32Z waves (new page + 2 folds): Mongoid ORM cluster promoted — unsafe reflection of caller-supplied field names into internal method invocation on embedded-document query (CVE-2026-93762/GHSA-36hj-r7fq-q38m, 9.8, disclosure+record removal) and persistence paths (CVE-2026-93765/GHSA-8899-fxx7-fwx3, 9.1); string query criteria forwarded to MongoDB as server-side JavaScript (CVE-2026-93759/GHSA-vr6j-ghpr-hmgf, 8.6); unrestricted operators from caller-supplied filter data (CVE-2026-93760/GHSA-mm58-qxpf-v4c7, 8.2); nested-attributes IDOR with update+link-to-attacker persistence bridge (CVE-2026-93758/GHSA-7x44-w6qh-mj7w, 8.1); CSFLE schema generation omits embedded-model fields -> cleartext storage silently (CVE-2026-93763/93764, GHSA-5qw9-p5cj-5jx4/GHSA-p3g7-qcr8-3pgm). OpenStack Blazar authz-target keyword drift — policy wrapper loads lease under lease_id while wsme_pecan delivers id positionally, None lookup falls back to requester project -> cross-tenant lease PUT/DELETE (CVE-2026-93854/GHSA-4rvg-j972-3xw2) chained with unscoped GET /v2/leases ID source (CVE-2026-93852/GHSA-rf22-mxh9-4qvf), fixed 17.0.1. Cotonti md5(microtime()) recovery tokens precomputable from Date header -> admin ATO (CVE-2026-93868/GHSA-rw92-cwm5-wp25) + base64 cb param -> unserialize() without allowed_classes in comments EditAction (CVE-2026-93872/GHSA-3v3g-3pf9-fgcf). Azkaban ScheduleServlet fetchSchedule omits project permission check -> any-user reads any project schedule config incl. flow parameters (CVE-2026-93737/GHSA-wcv9-64xq-42pp). Folds: http-cache-semantics Vary byte-for-byte _varyMatches (CVE-2026-93750/GHSA-f27v-pv5m-c5g6) + client max-stale re-serves security-zeroed entries incl. Set-Cookie (CVE-2026-93748/GHSA-ch52-4w7c-c8xp) onto shared-http-cache-boundary-testing; LightLLM /pd_register unauthenticated WebSocket node registration -> prompt disclosure/node replacement/PD-Master SSRF (CVE-2026-93839/GHSA-644q-7756-5g89, 9.8) onto May 21 AI-runtime page. Tracked only: Netty malformed-TE + chunk-size whitespace smuggling pair (GHSA-c599-gp9v-cp79/GHSA-c9wq-39xx-437p, existing desync battery), Quarkus Qute {#eval} content-type drop (CVE-2026-93432), SiYuan Electron renderer stored-XSS trio (CVE-2026-93921/93922/93923), IBM Guardium 12.2 ~40-advisory wave headline CAS listener 16017 unauth deserialization (CVE-2026-82340, 9.8) + hardware_assess/obstore hardcoded master secrets (CVE-2026-84034, 8.8) summary-only, IBM Sterling File Gateway unvalidated SSO header session mint (CVE-2026-75878, 9.1, kcp identity-header class), IBM MQ/WebSphere/i patch singles, vLLM allowed_token_ids + Triton bincount (CVE-2026-93840/93841), SGLang OOM pair (CVE-2026-93838/93688), Totolink/cockpit/CM2507/PLANET/Bransys singles, Mongoid ReDoS (CVE-2026-93761). KEV JSON unchanged (sha256 7b770a6f5eb1d47a, catalogVersion 2026.09.18, 1716 entries, newest dateAdded 2026-09-16); PortSwigger head whats-in-a-tag-name (Aug 25), ToB d5d2b5d0 head Sept-18 Miden post, PD head Aug-16, Brutecat f099b20d, disclosed.org cc969a5f unchanged as of the 02:2xZ Sep 19 scan: https://github.com/advisories/GHSA-36hj-r7fq-q38m, https://github.com/advisories/GHSA-8899-fxx7-fwx3, https://github.com/advisories/GHSA-vr6j-ghpr-hmgf, https://github.com/advisories/GHSA-mm58-qxpf-v4c7, https://github.com/advisories/GHSA-7x44-w6qh-mj7w, https://github.com/advisories/GHSA-4rvg-j972-3xw2, https://github.com/advisories/GHSA-rf22-mxh9-4qvf, https://github.com/advisories/GHSA-rw92-cwm5-wp25, https://github.com/advisories/GHSA-wcv9-64xq-42pp, https://github.com/advisories/GHSA-f27v-pv5m-c5g6, https://github.com/advisories/GHSA-ch52-4w7c-c8xp, https://github.com/advisories/GHSA-644q-7756-5g89
  • September 19 03:32Z wave (new page + 2 folds): WordPress protective-transform-inverted page promoted — PDFCrowd Save-as-PDF server-encrypted attacker-chosen pdf_created_callback dispatched as PHP callable by the nopriv AJAX endpoint (CVE-2026-92807/GHSA-3fg9-62hh-37mh, 8.8); Gravity Forms hidden File Upload fields skip validation while upload_file() persists rejected state (CVE-2026-84434/GHSA-x9x4-5g6j-pvj3, 9.8); WP Recipe Maker do_shortcode() on approved-comment reviewBody before strip_shortcodes with JSON-LD disclosure (CVE-2026-89274/GHSA-x57m-9xmj-gh9p, 9.1) + Forminator unauth do_shortcode (CVE-2026-92229/GHSA-2vrv-wr6r-v79v, 9.1); Better Messages ai-chat-bot- prefix match on client-controlled X-Real-IP short-circuits room authz (CVE-2026-89093/GHSA-53vp-fjc5-cqj6). Folds: Divi Essential conditional-nonce full-DB reader (CVE-2026-15760) onto July 28 WP page; WPPA+ whole-command escapeshellcmd argument injection (CVE-2026-87909) onto Aug 5 command-wrapper page. Tracked: Tutor LMS trio, Better Messages default-open transcript, SEO Booster OAuth-callback option write, Pochipp/WP2Social/Asset CleanUp/WPComplete XSS singles, Totolink/Vinyl Cache/Edge singles. KEV unchanged (catalog 2026.09.18, 1716 entries); PortSwigger/ToB/PD/Brutecat/Disclosed unchanged.
  • September 19 09:32Z/12:32Z waves (2 new pages): WordPress alternate-surface authorization drift page promoted (17 durable GHSAs) — unauthenticated REST routes with no permission_callback (Botiga Pro arbitrary-options write + site-wide stored scripts + arbitrary post trashing GHSA-vc27-9g27-3cvj; Master Blocks unauth settings write to unescaped wp-admin output = admin-session stored XSS GHSA-4qrp-9fm8-gvg2; Mailchimp for WooCommerce admin endpoints GHSA-qc48-4x35-wh3c); MgoSync unauthenticated REST returns read/write WooCommerce consumer key+secret (GHSA-3j79-gfcw-gr26); AI booking-assistant unauth conversation-ID read+inject (GHSA-mj5r-8jcf-67xr); UsersWP social-login email-assertion ATO without provider ownership confirmation (GHSA-cg9c-x648-j6c7); WP Import Export Lite delegated-import cap reaches create_users/promote_users-equivalent import objects (GHSA-839q-664c-x9c5); Secure Custom Fields unbound form submission (GHSA-6w7q-74cq-4m3f); Custom Field Template current_user_can int-cast vs string SQL sink (GHSA-fv9m-mw9j-43cg); The Create order_by/order gated SQLi branches + publish_posts permission callback (GHSA-c79v-6v55-pvvh/GHSA-jhj7-pcmr-9q9p); The Welcomizer nonce-only savesection + eval() + public nonce-mint js.php (GHSA-fmwg-rf74-rjqj); Ultra Addons CF7 predictable-path arbitrary-extension upload, .phar RCE on Debian/Ubuntu Apache handler map (GHSA-cq73-82v9-gx86); JetFormBuilder validation-callback blocklist omits file-deletion function, executes at unauth submit (GHSA-mqwg-84ff-gqhv); Ultimate Member sanitize-then-entity-decode ordering (GHSA-w2mq-x7qr-mgcw); ProfilePress do_shortcode (GHSA-jvc3-5jgr-chw6), VikRentItems unauth SQLi, Wow Elements changelog SSRF, Nimble Page Builder subscriber draft disclosure, Unbounce subscriber proxy-target pivot. JS sandbox-validator page promoted — OpenPanel js-runtime webhook-template validator misses computed member access to constructor chains, project-write to worker RCE (CVE-2026-93985/GHSA-rqpr-2wvr-29pf, 9.9); OpenPanel ClickHouse filter-key SQLi tenant-isolation bypass (GHSA-fxfp-52cf-vm9r) + presence-only tracking secret (GHSA-2m8f-94rg-j65x) + MCP token-in-query log leak (GHSA-xvpp-2hfw-c93c); hono/jsx <4.13.7 async composition paths stringify-as-escaped (Suspense/ErrorBoundary/Context.Provider/renderToString/renderToReadableStream, GHSA-6623-4q32-82v8). Tracked: rclone serve docker volume-plugin traversal CVE-2026-93987/GHSA-jg5v-4p8w-hwm3 + listing-name CVE-2026-93986, Totolink formWlWds 10.0 (CVE-2026-93741, tracked product), Datalogics token deputy, Edge UAF, sparse WP singles. KEV JSON unchanged (sha256 7b770a6f5eb1d47a, catalogVersion 2026.09.18, 1716 entries, newest dateAdded 2026-09-16); PortSwigger/ToB/PD/Brutecat/Disclosed unchanged as of the 13:2xZ Sep 19 scan (PortSwigger feed requires browser-UA fetch; bare curl gets empty body).
  • September 19 15:31Z Keycloak triple (fold onto the June 11 Keycloak batch page): delegated-administration and lifecycle-state follow-up — Admin REST credential-deletion endpoint skips fine-grained reset-password permission (CVE-2026-94001/GHSA-p353-3p63-7h28); OIDC refresh restores audiences from stored client IDs without rechecking enabled state, refresh-token holder keeps minting tokens for a disabled client vs offline-JWT resource servers (CVE-2026-93999/GHSA-82wc-7jr6-wxgm); group-membership write skips the target group's admin-privilege class, minimal delegate self-adds to high-privilege group (CVE-2026-94000/GHSA-3g7j-6fqv-v2q4). Durable axes: verb-family permission diffing, disabled/revoked-state recheck on every mint/refresh/exchange path, privilege-class gates on membership writes. GHSA published feed showed nothing else after the 12:32Z wave; updated-feed deltas were already-processed re-surfacing. KEV JSON unchanged (sha256 7b770a6f5eb1d47a, catalogVersion 2026.09.18, 1716 entries, newest dateAdded 2026-09-16); PortSwigger 0ea006f4 head whats-in-a-tag-name (Aug 25) processed; ToB 25d2bbe head Sept-18 Miden post processed (5372af2); PD head Aug-16 Markdown Preview Extension processed; Brutecat f099b20d; disclosed.org cc969a5f unchanged as of the ~15:4xZ Sep 19 scan: https://github.com/advisories/GHSA-p353-3p63-7h28, https://github.com/advisories/GHSA-82wc-7jr6-wxgm, https://github.com/advisories/GHSA-3g7j-6fqv-v2q4
  • September 20 09:30Z wave (new page: WordPress validation-loop corruption, deserialization transports, assertion override): NextGEN Photo Gallery loop-counter-corrupted extension validator always-pass archive check (CVE-2026-81650/GHSA-j73p-vqpx-6v96) + gallery ownership/tenant quartet (CVE-2026-81651/81652/81653/81654); Forminator XML-RPC unrestricted deserialization (CVE-2026-87067/GHSA-h6cq-4ghp-3r32) + quiz-nested admin-granting registration form nesting-parity drift (CVE-2026-87068/GHSA-xq3c-rrxv-22rc); Unlimited Elements AJAX stored-data POI with partial-fix role-only differential (CVE-2026-85017/GHSA-3wpx-h7q2-mv8g); SAML SSO ignores configured linking criterion, binds login name (CVE-2026-82842/GHSA-c354-pg28-5955); TikTok callback redeems visitor-supplied code with site credentials (CVE-2026-92965/GHSA-774v-j88v-3m84); Meow Gallery unauth shortcode concatenation (CVE-2026-92422/GHSA-vwxr-fxpw-rxvm). Tracked: SmartLife CVE-2026-86554 twin (processed on Sept 20 app-auth page), Import/Export users promote_users pair (replay of Sept 19 deputy axis), SxDevOps six-GHSA cluster, SourceCodester SQLi trio, Kirki SVG, Master Slider no-fix XSS, Tripzzy pair, Sign-up Sheets CSRF, Meow Gallery disclosure. KEV JSON unchanged (sha256 7b770a6f5eb1d47a, catalog 2026.09.18, 1716 entries); PortSwigger 0ea006f4 head whats-in-a-tag-name Aug-25 processed; ToB 25d2bbee head Sept-18 Miden post processed (5372af2); PD 7c040f86 head Aug-16 processed; Brutecat f099b20d; disclosed cc969a5f unchanged as of the 10:2xZ Sep 20 scan: https://github.com/advisories/GHSA-j73p-vqpx-6v96, https://github.com/advisories/GHSA-h6cq-4ghp-3r32, https://github.com/advisories/GHSA-xq3c-rrxv-22rc, https://github.com/advisories/GHSA-3wpx-h7q2-mv8g, https://github.com/advisories/GHSA-c354-pg28-5955
  • September 20 15:30Z wave (new page + 2 folds): REDCap survey-passthrough route confusion to unauthenticated RCE (CVE-2026-90817/GHSA-hg88-qg2r-c8mx, 13.3.0+, Securifera advisory) promoted as its own page — public survey hash gates a passthrough router manipulated to an unintended controller route + crafted file-path/stream param in Data Import handling = unauth RCE preconditioned on a valid public survey hash; durable axes: public token authenticates a context not the internal route family, import-handler path/stream params are file sinks, hash enumerability is the precondition-collapse axis; dispatch-evidence-only validation scaffold for authorized assessments. Folds: nexus-mcp nexus_reauth child_process.exec tool-argument command injection (CVE-2026-94031/GHSA-c2f2-x95m-p9vw, exploit public) onto the Sept 15 MCP page (tool argument is shell input until argv-array proven); Mealie recipe action-trigger SSRF (CVE-2026-94028/GHSA-2g3w-vrh2-xg2p, fixed 3.26.0) onto the Aug 5 outbound-fetch page (enumerate every fetch-bearing feature after a patched loader). Tracked: itsourcecode Leave Management SQLi, SourceCodester Drug Recommendation trio, WatchDog Anti-Virus driver trio (IOCTL authz, quarantine link resolution, install-dir perms), SerenityOS BMP integer overflow (thin evidence per advisory), DedeCMS mytag follow-up. KEV JSON unchanged (sha256 7b770a6f5eb1d47a, catalog 2026.09.18, 1716 entries, newest dateAdded 2026-09-18); PortSwigger 0ea006f4 head whats-in-a-tag-name Aug-25 processed; ToB d5d2b5d0 head Sept-18 Miden post processed; PD 9f05346b/7c040f86 all 20 feed links already processed; Brutecat f099b20d; disclosed.org cc969a5f unchanged as of the 16:2xZ Sep 20 scan: https://github.com/advisories/GHSA-hg88-qg2r-c8mx, https://github.com/advisories/GHSA-c2f2-x95m-p9vw, https://github.com/advisories/GHSA-2g3w-vrh2-xg2p
  • September 20 18:31Z wave (fold, 4 GHSAs): OrdaSoft Joomla Gallery wave folded onto the July 8 Joomla page — unauthenticated UNION SQLi via $input->getVar() nonexistent-filter fail-open on the public search module (CVE-2026-88854/GHSA-w2hx-m888-mfj4); task=update_osgallery JSON method field called as live PHP function with package argument, no allowlist (CVE-2026-88856/GHSA-c6pf-wcwh-mw6r); saveWatermark() client-filename-verbatim copy to web dir = login-to-RCE (CVE-2026-88857/GHSA-7jj4-5xhm-pp7r); saveGallery() ARRAY/STRING-filter unparameterized SQL, component-scoped core.manage → full-DB read/write (CVE-2026-88855/GHSA-qjf3-rwvw-jv5p). Fixed 6.2.7. Tracked: D-Link DIR-X1860 /ubus routerd passwd_set local-net access control (CVE-2026-94036, existing router class), mcp-file-analyzer analyze_csv_data filename traversal low-sev (CVE-2026-94037, weak PoC, thin axis), TaxHacker/Restaurant-Management/Drug Recommendation/NonceGeek singles. KEV JSON unchanged (sha256 7b770a6f5eb1d47a, catalog 2026.09.18, 1716 entries, newest dateAdded 2026-09-18); PortSwigger 0ea006f4 head whats-in-a-tag-name Aug-25 processed; ToB head Sept-18 Miden post processed (feed hash churn); PD head Aug-16 processed; Brutecat f099b20d; disclosed.org unchanged as of the 19:2xZ Sep 20 scan: https://github.com/advisories/GHSA-w2hx-m888-mfj4, https://github.com/advisories/GHSA-c6pf-wcwh-mw6r, https://github.com/advisories/GHSA-7jj4-5xhm-pp7r, https://github.com/advisories/GHSA-qjf3-rwvw-jv5p
  • September 20 21:31Z wave (fold, 2 pages): MCP containment-root and image-guard folds — ACE-MCP get_file_snippet isPathInsideProjectRoot only constrains filePath relative to the caller-supplied projectRootPath, so root=/etc + path=hosts passes the guard (CVE-2026-94046/GHSA-8wj2-8g8v-vcxr, exploit public) folded onto the Sept 15 MCP page with same-wave MCP singles (03-lovepreetSingh create_file unsandboxed filePath write CVE-2026-94044/GHSA-wvg2-xpp5-j725; MCPHub importTemplate improper-privilege drift CVE-2026-94047/GHSA-2xcr-p42x-hfx6; cowork_bench pdf-tools-mcp pdf_file_path SSRF CVE-2026-94051/GHSA-6j48-ggfg-8xw2); newbee-mall ImageIO.read() format-agnostic image guard passes polyglot PNG+<img onerror> tail, attacker suffix + /upload/** static mapping = stored XSS (CVE-2026-94045/GHSA-92hr-qfch-w4h7) folded onto the Sept 20 media-pipeline page (validation/storage/delivery three-leg evidence). Tracked: D-Link DIR-868L /webfa_authentication.cgi strcpy overflow + DIR-X1860Z ubus wificfg info-disclosure (router class), slideshot renderer.ts path traversal low-sev, QR attendance role_id self-grant (thin), Free5GC AMF GMM race (5GC detail-sparse), TaxHacker/Restaurant-Management/Drug Recommendation/NonceGeek/QR singles. KEV JSON unchanged (sha256 7b770a6f5eb1d47a, catalog 2026.09.18, 1716 entries, newest dateAdded 2026-09-18); PortSwigger 0ea006f4 head whats-in-a-tag-name Aug-25 processed; ToB 25d2bbee head Sept-18 Miden post processed (5372af2); PD 7c040f86 head Aug-16 processed; Brutecat f099b20d; disclosed.org cc969a5f unchanged as of the 22:1xZ Sep 20 scan: https://github.com/advisories/GHSA-8wj2-8g8v-vcxr, https://github.com/advisories/GHSA-92hr-qfch-w4h7, https://github.com/advisories/GHSA-wvg2-xpp5-j725, https://github.com/advisories/GHSA-2xcr-p42x-hfx6, https://github.com/advisories/GHSA-6j48-ggfg-8xw2
  • September 21 09:31Z wave (fold, 3 pages): Keycloak 4-GHSA follow-up folded onto the June 11 Keycloak page — Admin REST resolves clients by UUID from a per-request in-memory cache without realm-path ownership verification → low-scope realm admin reads/patches master-realm client config incl. credentials + admin-login redirect poisoning (CVE-2026-94215/GHSA-v5q7-f26g-qxgh); Authorization Services policy-evaluation (dry-run) endpoint missing authorization checks → view-only delegate reads any realm user's full profile+roles (CVE-2026-94213/GHSA-7238-mjjf-8jj4); UMA permission tickets of same-named resources across different owners merged at the authorization-token endpoint → cross-owner scope grant (CVE-2026-94217/GHSA-2cpw-3v2x-mh42); client-policy-enforced 2FA-setup flow bypassed by visiting the session-restart link mid-login, clearing required-action markers (CVE-2026-94218/GHSA-rm49-qjx7-5qm5). Axes: cache key missing the route's scope dimension, test/evaluate/preview route families skip prod authz, name-keyed aggregation crosses owners, flow-restart affordances clear security-step state. WP 5-GHSA fold onto the Sept 19 alternate-surface page — PayPal for WooCommerce IPN verifies genuine transaction but not configured environment / own merchant account → unauth self-mark-paid via attacker-controlled sandbox transaction (CVE-2026-92400/GHSA-p33j-7gxx-7v4f); GiveWP one-pass shortcode-delimiter strip defeated by nesting (CVE-2026-85113/GHSA-4grg-xfv8-q8cj); To Do List Member unauth no-nonce import with caller-chosen fetch target (CVE-2026-86802/GHSA-p5g8-hwm5-93cc); RestroPress client-supplied add-on price unreblessed → zero-total orders (CVE-2026-85010/GHSA-xf2r-mj9x-vg5q); Web to Print unvalidated uploads + upload token handed to any visitor → unauth PHP RCE (CVE-2026-82187/GHSA-hcgg-qj5x-56wj); ScadaBR /export_project.htm createExportJSON info disclosure while import path already called Permissions.ensureAdmin() (CVE-2026-94148/GHSA-w3gv-q645-g39f) = mirror-leg gating asymmetry exemplar. CRI-O checkpoint-restore insufficient metadata validation → host filesystem operations from untrusted checkpoint archives when restore is enabled (CVE-2026-15801/GHSA-53fm-c92p-fxxw, 8.0) folded onto the June 19 containerd/checkpoint page. Tracked: Canva HarmonyOS privileged-WebView header leak (CVE-2026-90860), drogon makeCriteria filter SQLi (CVE-2026-94144), BioStar BSMEM64 IOCTL (CVE-2026-94146, driver class), Netty CompressionFilter decompression bomb (CVE-2026-47321, DoS-only), xxl-job/Omega Solution/HRM singles. KEV JSON unchanged (sha256 7b770a6f5eb1d47a, catalog 2026.09.18, 1716 entries); PortSwigger/PD/ToB/Brutecat/disclosed.org unchanged as of the 10:2xZ Sep 21 scan: https://github.com/advisories/GHSA-v5q7-f26g-qxgh, https://github.com/advisories/GHSA-p33j-7gxx-7v4f, https://github.com/advisories/GHSA-53fm-c92p-fxxw, https://github.com/advisories/GHSA-w3gv-q645-g39f
  • September 21 12:32Z wave (new page + 1 fold): Temporal/NooBaa internal-deputy page promoted — Temporal completion callbacks decide internal-vs-external from a caller-supplied source header, non-empty makes History re-target at the internal frontend client (authorizes every request as system admin, no auth), rewriting only scheme+host so caller path/query/body ride along → attacker-chosen admin-API POSTs cross-namespace (terminate foreign Workflows, register/modify/delete namespaces); precondition = services.internal-frontend.rpc.httpPort non-zero + per-namespace component.callbacks.allowedAddresses non-empty; 1.30+ any non-empty header suffices, 1.25.0-1.29.7 needs exact cluster-ID UUID match; HSM+CHASM both affected (CVE-2026-87858/GHSA-vrgw-vghm-5p74). Temporal Worker Controller subprocess compute provider takes program+argv from the caller's request and workercontroller.compute_providers.enabled allowlist check is skipped when unset (default) → namespace-write role → immediate execution-on-save RCE as the server account holding all-namespace persistence creds + cluster TLS, ships in official binaries/images (CVE-2026-89139/GHSA-w8cx-4cf2-9hvr, 1.31.0-1.31.2). NooBaa SigV4 presigned URLs drop unsigned x-amz- headers from the signature calculation instead of rejecting → add unsigned x-amz-copy-source to a valid presigned PUT = server-side CopyObject of anything the original signer can read, signature still verifies (CVE-2026-94368/GHSA-5p5f-qvx9-whpj, 7.1). Axes: caller-supplied headers selecting internal trust context, host-only allowlists make the internal service the destination and your input the command, first-party internal-client SSRF defeats egress controls, default-unset allowlists enforce nothing, config-in-request is code-in-request, presigned URL scope != granted operation (operation confusion at the signature boundary). Fold: CRI-O checkpoint restore retains checkpoint credentials/capabilities/no_new_privs/seccomp over the destination Pod securityContext → privilege across container boundary, CRI-O 1.34+/OCP 4.17+, fix unreleased at advisory time (CVE-2026-92574/GHSA-mhq8-392f-7m6m, 8.8) onto the June 19 container/checkpoint page. Tracked: Temporal DoS set (sqlparser deep-unary stack overflow by namespace-read CVE-2026-65651, Schedule unbounded search CVE-2026-16652, tchannel fragment panic CVE-2026-65653 + checksum-type CVE-2026-65652, ringpop SWIM labels CVE-2026-65654), Apache Neethi WS-Policy five-pack, Checkmk zlib amplification CVE-2026-77021, iceoryx2 safe-Rust &str UB CVE-2026-92612, MISP galaxy-name stored XSS CVE-2026-94277, Leantime Kanban XSS CVE-2026-94210, 1millionbot self-session XSS CVE-2026-91921. Updated feed after 13:10Z = 0 advisories. KEV JSON unchanged (catalog 2026.09.18, 1716 entries); ToB 68adb289 head Sept-21 SAML post already promoted (a993afa); PortSwigger head whats-in-a-tag-name Aug-25 processed (hash churn 7af2255e); PD head Aug-16 processed (hash churn 887e2e4a); Brutecat f099b20d; disclosed.org cc969a5f unchanged as of the 14:2xZ Sep 21 scan. https://github.com/advisories/GHSA-vrgw-vghm-5p74, https://github.com/advisories/GHSA-w8cx-4cf2-9hvr, https://github.com/advisories/GHSA-5p5f-qvx9-whpj, https://github.com/advisories/GHSA-mhq8-392f-7m6m
  • September 21 Red Hat enrichment wave (updated feed 12:32-12:33Z, new page + 2 folds): AAP Controller HashiCorp Vault plugin kubernetes_auth() exfiltrates the controller pod's own SA token to an attacker-chosen URL on credential Test (CVE-2026-12564/GHSA-p5f2-j2p5-7p7v, 9.6) + OpenShift Router FQDN-type EndpointSlice metadata SSRF bypassing IP validation (CVE-2026-42965/GHSA-76ww-43j5-78x5) + Quay GLOBAL_READONLY_SUPER_USERS foreign-repo robot-token disclosure (CVE-2026-18255/GHSA-x8x8-qp2x-c2mj) promoted as the automation-platform credential-test exfil page; sequoia-openpgp absent-Key-Flags back-signature bypass (CVE-2026-42784/GHSA-g33h-rrj9-75qv) folded onto the Bouncy Castle crypto-boundary page; RHOAI training-operator native-role aggregation + PodTemplateSpec passthrough (CVE-2026-18982/18951), DSPO weak-PRNG credential derivation (CVE-2026-18611), DSPO over-scoped ClusterRole (CVE-2026-18608) folded onto the Aug 10 AI control-plane page. Tracked: libaom quartet (56208/56209/56210/56211 — SVC crash-oracle RCE noted), xdgmime 16118, AAP passwd 2025-57847, ml-metadata 18618, submariner 66780 + multicloud-operators-subscription 66792 + global-hub 71576/71577 (already promoted Aug 26/May 7), observability-addon 89060, DSPO customExtraParams 18617 + setDefaultServiceAccount 18620 + TrustyAI 15467/15581 (already on Aug 10 page), Quay mirror 15927 (Aug 6 page). GHSA published sweep after 12:32:40Z = 0 advisories. KEV JSON unchanged (catalog 2026.09.18, 1716 entries); ToB 68adb289, PortSwigger, PD, Brutecat, disclosed feeds unchanged as of the 15:2xZ Sep 21 scan. https://github.com/advisories/GHSA-p5f2-j2p5-7p7v, https://github.com/advisories/GHSA-76ww-43j5-78x5, https://github.com/advisories/GHSA-x8x8-qp2x-c2mj, https://github.com/advisories/GHSA-g33h-rrj9-75qv, https://github.com/advisories/GHSA-v6pg-cp3x-x49r, https://github.com/advisories/GHSA-5qmg-pgg7-3rjj
  • September 21 15:31–15:47Z wave (new page): auth-method precedence / verb-allowlist / ACL tie-break page — Airflow bearer-vs-cookie precedence inversion with audit-log misattribution (CVE-2026-82355/GHSA-9x6g-jfj6-r3jg), logout revokes only the _token cookie leaving bearer tokens valid (CVE-2026-86473/GHSA-9cmm-29p3-73gr), /assets/events tenant-blind rows + count-query oracle (CVE-2026-75158/GHSA-pfr9-65p3-w9r9); MISP <2.5.47 octet: login POST/PUT-only verb allowlist skips bruteforce+OTP+logging (CVE-2026-94379/GHSA-3q8c-466v-vgx3), read-only API key permission restore (CVE-2026-94381/GHSA-mw89-3hh7-vfpg), EventReport save-without-unset-id reparenting (CVE-2026-94374/GHSA-qg5m-5m7w-mf5x), UUID reparent (CVE-2026-94393), reference event-vs-attribute scope gap (CVE-2026-94394), XML-import file/SSRF (CVE-2026-94401), attribute-edit CSRF (CVE-2026-94404), galaxy-name sprintf XSS (CVE-2026-94277); Dogtag pki-core lexicographic ACL tie-break (CVE-2026-80110/GHSA-c24q-2g88-pp57, 8.1); Hatchet empty-OAuth-state login-CSRF (CVE-2026-61687/GHSA-phg3-3g28-wq9v); Apache MINA fix-branch-only regression (CVE-2026-94301/GHSA-h355-27x9-rr7r, 9.8). Tracked: oc-mirror PGP verify-order bypass (CVE-2026-75939), NiFi Registry/NiFi three-pack re-surfacing (CVE-2026-87976/86089/81866), Tuleap cmdi sparse (CVE-2026-84285, revisit on detail), fetchmail/libX/coroutines memory-safety set, Thinkst Canary DoS, kernel wave.
  • September 21 18:32Z wave (new page + 3 folds): CuteNews 2.1.2 cluster promoted as the legacy-CMS internal-namespace injection page — cn_parse_url() deserializes base64 PHP-serialized __post_data merging caller keys into __-prefixed internal request variables incl. __referer (CVE-2026-36471/GHSA-mwgw-rr28-m856) with the msg_info javascript:-link render sink completing the blind-state-write→session-XSS loop (CVE-2026-36472/GHSA-9w6g-j664-2ggg); Media Manager upload_from_inet Upload-by-URL SSRF (CVE-2026-36469/GHSA-qqh7-w389-w2hg); unrestricted dangerous-type media-panel upload login-to-RCE (CVE-2026-36467/GHSA-2j38-m62m-3qch, 7.2); parameter-name reflected XSS (CVE-2026-36468/GHSA-qp92-vrxr-34w8) + Referer-on-POST reflection (CVE-2026-36470/GHSA-29r2-83fr-44fv). Folds: Concrete CMS ≤9.5.2 8-GHSA cluster onto the June 23 Concrete page — ValidatedRemoteUrl host-level pin reuse cross-port → DNS-rebinding import SSRF with saved-file response oracle (GHSA-fmfq-8qcq-wrx4), anonymous-minted user-selector token + empty-query match-all → unauth enumeration of all backend accounts (GHSA-7hmf-f7jv-m4xw), CSRF token bound to user+action not object → foreign Express form control edits + HTML-rendered control (GHSA-g5mv-jcqh-ch66), global access_sitemap permission only + no CSRF on reorder (GHSA-rvm5-mg98-27w7), source-side-only authz on Multilingual::assign (GHSA-hch9-r5fg-6p72), view-permission preset delete/edit IDOR (GHSA-7vc7-m9pm-w64f), duplicate-path check-echo → client innerHTML XSS (GHSA-994m-pc89-jhp9), custom date-format string XSS via CSRF-less auto-submit POST (GHSA-3mw6-rrq3-376v); Jenkins Script Security @Builder builderStrategy arbitrary-class member sandbox escape (CVE-2026-92126/GHSA-3xcj-rvrm-wg64, 8.5) onto the Aug 5 Jenkins page; Netty framing octet onto the June 11 Undertow/smuggling page — semicolon-gated strict chunk validator lets 0\rX (CVE-2026-93566/GHSA-9mrj-55p4-qwf4), split TE final-chunked-validation bypass (93573), post-digit chunk whitespace (93574), malformed TE (93562), RtspMethods trailing-control-byte trim unpatched sibling of the HttpMethod fix (93565), authority-form CONNECT Host-controlled H2 :authority (93567) + Extended CONNECT downgrade (93568); Quarkus security-matcher vs dispatcher path-normalization authz bypass (CVE-2026-87743/GHSA-pw2v-hfg7-72m6) onto the Sept 15 parser page. Tracked not published: Telegram Desktop HTML-exporter XSS (CVE via GHSA-58p4-4g24-j8vp), Perl Email::Sender::Transport::Sendmail Windows shell envelope cmdi (CVE-2026-93012, product-sparse), usbredir OOB write, SmallRye Fault Tolerance ApplyGuard leak OOM (CVE-2026-94449), quarkus-websockets-next unbounded-buffer OOM (CVE-2026-87742), Concrete emoji sidebar layout item, Redis cluster-bus length DoS, Corosync/WebKitGTK/Oracle/Firefox sync waves. KEV JSON unchanged (catalog 2026.09.18, 1716 entries); ToB 68adb289 head Sept-21 SAML post processed (a993afa); PortSwigger 7af2255e head whats-in-a-tag-name Aug-25 processed; PD 84342378 head Aug-16 processed; Brutecat f099b20d; disclosed.org sitemap now returns a 404 Next.js stub to plain fetch (hash 02a9effe; content unchanged previously). https://github.com/advisories/GHSA-mwgw-rr28-m856, https://github.com/advisories/GHSA-7hmf-f7jv-m4xw, https://github.com/advisories/GHSA-3xcj-rvrm-wg64, https://github.com/advisories/GHSA-9mrj-55p4-qwf4, https://github.com/advisories/GHSA-pw2v-hfg7-72m6
  • September 21 21:31Z + 21:47-21:54Z wave (new page + 1 fold): management-plane boundary page — nginx-ignition anonymous all-permission onboarding-finish TOCTOU race → unauth admin creation (CVE-2026-61628); OpenStack Octavia Amphora critical pair: validator-normalizes-vs-storage-keeps-raw HAProxy newline injection via L7 redirect_url (CVE-2026-94571) + verbatim tls_ciphers second-field (CVE-2026-94572); ZLMediaKit unauth setServerConfig ffmpeg.snap shell write executed by deferred getSnap (CVE-2026-67827); x-ui signed-cookie session with no DB revalidation → replay-after-password-rotation (CVE-2026-79317) + low-role xray template edit + restart rebinds mgmt gRPC off loopback (CVE-2026-79316); jshERP 3.6 nine-GHSA flat-authz ladder incl. type=UserRole self-grant (94411), resetPwd-any-user (94412), unsalted-MD5 /user/info (94413), cross-tenant /tenant/info key iteration (94494). Fold: nginx-ignition TOTP reuse via pquerna/otp no-consumption-tracking library default (CVE-2026-61630) onto the Sept 18 token-entropy page. Tracked not published: Proxmox PMG apt-get changelog arg injection (94588), nginx-ignition Accept-Language _-alias CPU amplification (61629, fix-covered-one-spelling family), FalkorDB memory-safety six-pack, Univer script-exec RCE pair (detail-free, revisit), nocobase SQLi/SSRF pair, Stencil scoped-slot textContent XSS, Dell/MTT/iGameCenter/SCSI-VPD local+driver singles, web2py traversal, k8saudit initContainer rule blindness (detection-evasion note). KEV unchanged (catalog 2026.09.21, 1717 entries); ToB 68adb289, PortSwigger 7af2255e, PD head Aug-16, Brutecat f099b20d, disclosed cc969a5f unchanged.
  • September 21 ~19:4xZ scan: KEV moved to catalog 2026.09.21 (1717 entries) with one new entry — CVE-2026-7273 Zyxel GS1900-48HPv2 management-CGI stack overflow, LAN-based unauthenticated → potential OS command execution via crafted HTTP, firmware through 2.90(ABTQ.1)C0, due 2026-09-24, forensic-triage flagged (GHSA-rrv4-8jq5-8j78, June 16 vendor advisory) — tracked on the KEV page (no public exploit detail; router/switch CGI-overflow precedent), with internal-recon fingerprint/pivot axes noted. GHSA published sweep after 18:35Z = 0 advisories; updated-feed sweep after 19:10Z = 0 advisories (18:32Z CuteNews wave already promoted in 2cd96c9). ToB 68adb289 head Sept-21 SAML post already promoted (a993afa); PortSwigger 7af2255e head whats-in-a-tag-name Aug-25 processed; PD b2224884 hash churn head Aug-16 processed; Brutecat f099b20d; disclosed cc969a5f unchanged. Strict build clean.
  • September 21 23:1xZ follow-up (fold onto the July 27 directory-boundaries page): Canonical ADSys ≤0.16.2 AD CS certificate auto-enrollment via the vendored Samba GPO script (gp_cert_auto_enroll_ext.py) fetches the CA cert with GetCACert over plaintext HTTP; unauthenticated on-path attacker supplies an arbitrary root CA installed into the OS trust store via update-ca-certificates → persistent host-wide TLS interception (CVE-2026-12249/GHSA-crm4-q7v4-c2r2, fixed 0.16.3). Axes: enrollment-agent trust-material fetch over http = trust-anchor injection, GPO-carried CA hostname = DNS-answer-controlled leg, trust-store poisoning = persistence. Tracked not published: Grafana June-22 quartet re-surfacing (23:0xZ updated feed), Canonical ADSys "Less Trusted Source" is the only new-content item in the 22:2xZ updated sweep; Chainlit/osmo/libxml2/Oracle/EdgeConnect/Firefox re-surfacing all already processed. GHSA published sweep after 21:54:42Z = 0. KEV unchanged (catalog 2026.09.21, 1717 entries, sha e0b2bc151428bddd); ToB 68adb289, PortSwigger 7af2255e, PD head Aug-16, Brutecat f099b20d, disclosed cc969a5f unchanged. https://github.com/advisories/GHSA-crm4-q7v4-c2r2
  • September 22 ~04:2xZ scan (new page + 1 fold): Sept 22 03:30Z GHSA wave promoted as Dancer2 guard-semantics page — four <2.2.0 GHSAs all spelling "guard verdict computed over a different copy of data than the sink consumes": header-name CRLF passthrough (value-stripped, name-not) CVE-2026-93711/GHSA-vp8p-vxw7-c877; dying before-hook refusal while route body runs when handler halts via keyword (CVE-2026-93710/GHSA-qp5m-r6hx-rjhj, response-vs-side-effect fidelity tables); AutoPage lexical guard vs canonicalizing lookup (CVE-2026-93709/GHSA-8fpv-59mj-6jfr); File handler uncollapsed-.. join, config-posture precondition (CVE-2026-93712/GHSA-fq22-f6q5-wv3x). Fold: stdlib tarfile data-filter None-verdict ignored on link-unsupported fallback branch (CVE-2026-87910/GHSA-rj44-3777-mh5x) onto May 6 extraction page. Tracked: SAP Fiori crafted-link content load (CVE-2026-76974, sparse), Telegram Desktop HTML-exporter XSS 8.2 (victim-export precondition, revisit for chain detail), Gigatech PDV5701 WS missing-auth + Yonyou U8cloud/KSOA sparse singles. GHSA published sweep after 00:31:00Z = this 03:30Z wave only; updated sweep after 00:35Z = this wave + tarfile re-surfacing (published 09-11) + already-processed 00:30Z wave. KEV unchanged (catalog 2026.09.21, 1717 entries, sha e0b2bc151428bddd); ToB 68adb289 head Sept-21 SAML post already promoted (a993afa); PortSwigger 7af2255e head whats-in-a-tag-name Aug-25 processed; PD 7a6a47d6 hash churn head Aug-16 processed; Brutecat f099b20d; disclosed cc969a5f unchanged. Homepage recent entries updated (cap-10, Sept 20 WP validation-loop line dropped) + alerts index highlight. Strict build clean.
  • September 22 ~00:5xZ scan (fold wave, 5 pages, no new page): Sept 22 00:30Z GHSA wave promoted as folds — (1) gray-matter all-versions front-matter eval() RCE via ---js language selector (CVE-2026-78847/GHSA-j9gx-vjm3-jpmm) onto the May 9 render/Markdown page (parser with language/engine selector = remote code dispatch; untrusted-document Markdown pipelines are pre-auth RCE candidates; no patched release exists); (2) Pagekit ≤1.0.18 unauth SQLi via array-shaped credentials on POST /user/authenticate (CVE-2026-88756/GHSA-38cq-4qpv-62wf) onto the Sept 18 ORM-query-grammar page (login-form fields are query-builder sinks — resubmit scalars as arrays/objects; archived CMS = severity multiplier); (3) Gladys Assistant <5.1.0 reset-link poisoning via client-supplied origin parameter (CVE-2026-93340/GHSA-47ff-wp9w-g26c) onto the Sept 18 SOGo-origin page (third spelling of token-link authority: Origin header/Host header/body param — sweep all + parameter-ABSENT control); (4) lamp-cloud ≤5.10.0 five-GHSA /anyone/ flat-authz cluster (94532/94533/94534/94535/94536) onto the Sept 21 management-plane page (route-prefix naming as recon oracle + authz confession; employeeId router-tree enum = pre-attack target map; national-ID PII legs report high read-only); (5) OctoPrint executeSystemCommand cmdi + Download _validate traversal with public exploits, unresponsive vendor (94490/94489) onto the June 23 OctoPrint page (three independently-broken file/exec legs). Tracked not published: vLLM NIXL/Mooncake/tp_size DoS quintet (94622-94627, DoS class per precedent), Redis cluster-bus null-termination OOB (92925), drogon orderBy/makeCriteria re-surfacing, Emacs elisp-completion-at-point macro-expansion RCE (CVE-2026-53920, user-interaction-dependent, revisit), DesktopSMS local unauthenticated service (94540), Moore Threads/xxl-job/Xiphos/Matter/Jazzware/DesktopSMS singles, Grafana June-22 quartet + Firefox sandbox trio re-surfacing. GHSA published sweep after 21:54:42Z = this 23-advisory 00:30Z wave only. KEV unchanged (catalog 2026.09.21, 1717 entries, sha e0b2bc151428bddd); ToB 68adb289 head Sept-21 SAML post already promoted (a993afa); PortSwigger 7af2255e head whats-in-a-tag-name Aug-25 processed; PD 7c5cf4ad hash churn head Aug-16 processed; Brutecat f099b20d; disclosed cc969a5f unchanged. Alerts index highlight added; fold-only wave leaves docs/index.md untouched (precedent 250974f). Strict build clean.
  • September 22 ~12:3xZ scan (fold wave, 2 pages + 1 Keycloak fold, no new page): Sept 22 09:31Z unreviewed GHSA wave (39 advisories) folded onto the Sept 19 WordPress alternate-surface page as a "second-wave follow-up" — durable axes: admin review UI is an XSS sink and admin export is a deserialization sink (Ninja Forms 3.15.3 trio: unauth submissions re-rendered unescaped in admin submission editor CVE-2026-92438/GHSA-x4cv-hqr7-5rcm + CVE-2026-94504/GHSA-9248-28p4-jpfp; deserialized during admin CSV export POI CVE-2026-91827/GHSA-jvgp-rj42-qjww); integration-credential parameters are options with blast radius (WP User Manager Connect::complete() on admin_init fires for Subscribers, Stripe-key swap CVE-2026-18345/GHSA-9596-j6mw-33fx; Handily unauth Stripe config CVE-2025-14487/GHSA-rqq6-mm6q-4qqx; Image Buzz/PixelPlay unauth API-key write/delete CVE-2025-14484/2025-14486); token-vs-target binding on recovery endpoints (recovery JWT unbound to usuariId CVE-2026-93556/GHSA-m39c-xj94-687f, fourth sibling of token-link authority family); deferred-validator two-step REST save→delete traversal with unvalidated second leg (CTX Feed CVE-2026-15095/GHSA-mmq2-8hq5-2c6q); float-cast validator keeps string tail (CVE-2026-93836); operator-precedence dead authz guard (CVE-2026-6922); serialized storage defeats wpses tag tokenization (CVE-2026-16778); parent-checked nested-ID-trusted builder (Tutor LMS CVE-2026-184); entity-decode-before-persist + kses-exempt column (TranslatePress CVE-2026-89412); public-inline-JS nonce = unauth LFI (HUSKY CVE-2026-92969); third-party platform ingest as unauth attacker channel (Yelp Slider CVE-2026-93778); BM Content Builder subscriber AJAX read/delete pair (CVE-2025-1280/1281). Fold: Keycloak Kerberos federation without SPNEGO never verifies KDC identity → on-path KDC spoof auth bypass (CVE-2026-95503/GHSA-35j3-ccrv-pgvj) onto the June 11 Keycloak boundary page. Tracked not published: CUPS lpadmin serial-backend root LPE (95511), libslirp DHCPv6/TFTP heap overflow non-default-MTU precondition (95508), Perl Net::IDN punycode memory-safety/DoS set (87078-87082, 74765/74766, 15059), VeloCloud VCO detail-free critical (93952), ThumbPress/RW Elephant/PixelPlay DoS-grade toggles, Magepeople Taxi sparse auth-bypass, Hostel/WPUM multisite admin-only XSS singles. KEV unchanged (catalog 2026.09.21, 1717 entries, sha e0b2bc15); ToB 68adb289 head Sept-21 SAML processed; PortSwigger 73d1204c head whats-in-a-tag-name Aug-25 processed; PD 7c040f86 head Aug-16 processed; Brutecat f099b20d; disclosed cc969a5f unchanged as of the 12:3xZ Sep 22 scan. Alerts index highlight added; fold-only wave leaves docs/index.md untouched (precedent 250974f). Strict build clean.
  • September 22 12:30Z wave (new page + 4 folds): ZenHive mpp micropayment two-GHSA pair promoted as the payment-credential challenge-binding page — accept_voucher amount-equality idempotency returns success without maybe_spend while replay store keys on rotating challenge id → unbounded free units (CVE-2026-89420/GHSA-96m7-5wfv-978m); Tempo KeyAuthorization signs chain/key/expiry/limits/scopes but not the challenge, activation dedup keys on challenge id → wallet re-charge per replay (CVE-2026-87119/GHSA-h97r-55w6-6rfg). Folds: Tauri HTTP plugin first-URL-only scope + reqwest internal redirect following (CVE-2026-95623/GHSA-5gm7-pf8v-vxwc) onto the Aug 5 outbound-fetch page; Open VSX deployment-level ACAO reflection + ACAC on /user/* incl /user/csrf → CSRF-defeat → /user/token/create publish-token theft, headers from CDN not app (CVE-2026-90882/GHSA-px7g-fw3g-w264) onto the June 10 MCP CORS page; Checkmk REST serves GUI-masked SNMP/IPMI secrets cleartext to config-viewers (CVE-2026-92882/GHSA-xwvr-5xw4-qv5w) + Livestatus filter newline header injection count-oracle cross-contact-group (CVE-2026-90990/GHSA-v742-5hjw-gqcp) onto the June 22 monitoring page; WP singles WP Travel Engine wte_get_template contributor LFI (9231), WP Ultimate Review do_shortcode subscriber shortcode exec (92235), wpForo email-knowledge guest-post takeover (91092), Custom Field Template attachment-ID-in-field-value site-wide attachment delete (12995), WP-CRM contact_id PII enum (9004), ThumbPress/RW-Elephant subscriber wp_ajax toggle handlers (7622/4123) onto the Sept 19 WP page. Tracked not published: ManageEngine ADSelfService Plus GINA client RCE pre-build-7001 detail-free (CVE-2026-74849, revisit on detail), LibreOffice parser memory-safety six-pack (63272-63276/63279) + env/INI-expanding URL construction leg (63278), Qualcomm May-2026 bulletin SocketIO/gRPC/ELF-bootloader/tempfile set detail-free, HashBar blind SQLi (94117), changedetection.io password-comparison timing oracle (95270), Magepeople Taxi Booking alt-path auth bypass sparse (93928), Hostel admin-only XSS config-gated (1645), CUPS/libslirp/Net::IDN/WP second-wave re-surfacing. KEV unchanged (catalog 2026.09.21, 1717 entries); ToB 68adb289 head Sept-21 SAML processed; PortSwigger 73d1204c head whats-in-a-tag-name Aug-25 processed; PD feeds /blog/rss hash churns per-scan but head = Sept 16 VS Code extension supply-chain post (rss.xml 488f9a46) — verify head not hash; Brutecat f099b20d; disclosed cc969a5f unchanged. https://github.com/advisories/GHSA-96m7-5wfv-978m, https://github.com/advisories/GHSA-h97r-55w6-6rfg, https://github.com/advisories/GHSA-5gm7-pf8v-vxwc, https://github.com/advisories/GHSA-px7g-fw3g-w264, https://github.com/advisories/GHSA-xwvr-5xw4-qv5w, https://github.com/advisories/GHSA-v742-5hjw-gqcp
  • September 22 ~17:2xZ scan (new page + 4 folds): Sept 22 ~14:51–15:00Z published wave (64 advisories) — promoted F5 BIG-IP APM access policy + OAuth profile unauthenticated data-plane RCE (CVE-2026-94127/GHSA-qppv-6jrg-hxq4, 9.8) as a composite-config perimeter validation page (config-intersection surfaces defeat version-only scans; federation endpoints are pre-auth parser surface; Appliance mode not a mitigation; no public PoC so scoping workflow only). Folds: 9Router X-9r-Real-Ip unauth LLM API + lockout rotation bypass (56681/56682) onto Aug 28 9router page; SGLang DiffusionServer unauth ZMQ ROUTER pickle RCE (93088) + NeMo pkl/model_config pack (65179/65178) onto Jul 30 SGLang page; MISP second wave (precedence-dead XML guard unauth SSRF 95679, unlockedActions CSRF-stripped executor 95658, tmp_name pre-is_uploaded_file oracle 95703, child-ACL-skipped enrichment 95683, POST-only authz vs POST+PUT 95671, JS-string quote contexts 95665/95682) onto Sept 21 page; MarketKing IDOR quad (93341–93344) onto Sept 19 WP page. Tracked: Check Point Mgmt Server traversal+upload unauth RCE (93616) zero-detail, FortiPAM extension frame injection (84388) detail-sparse, x-ui pair, webpy session expiration, ADSelfService Plus REST auth bypass still detail-free, NVIDIA Infra Controller + NeMo Speech packs (vendor-generic descriptions), D-Link/Karel/itsourcecode/changedetection singles. All 64 GHSAs + CVEs marked processed. KEV unchanged (2026.09.21, 1717); all blog feeds unchanged (ToB head Sept-21 SAML, PortSwigger whats-in-a-tag-name Aug-25, PD head Aug-16, Brutecat f099b20d, disclosed cc969a5f).
  • September 22 ~20:1xZ scan (new page + 7 folds): Sept 22 18:33–19:57Z GHSA waves promoted as the Lantronix SLC8000/EMG serial-console appliance primitive-cluster page (13 GHSAs: CVE-2026-80155 10.0 snprintf session-path truncation+traversal unauth RCE; 80154 model+1-second-clock deterministic tokens; 80148/80149/80150 shellinaboxd overlong-username truncation = unauth SSH/Telnet redirect SSRF; 80143/80144/80146/80147 undocumented mfc eeprom read/write stack overflow + system() root; 80145/80151 set cifs password / set nfs download cmdi; 80156 backslash-then-no-slash-check composite filename traversal; axes: fixed-buffer truncation as redirect primitive, token-derivation-input audit, undocumented-CLI enumeration, sanitizer combination tests). Folds: Virtualizor act=login+from_billing_module param-presence auth skip → billing_data unserialize uid→proc_open root RCE 9.8 (43641/43642/43643) onto Sept 21 management-plane page; Deepstream PATCH_MULTI unregistered action fail-open (63116) + MISP ACL typo theming_enabled* (95805) + Databasement validate-once invite token (95654) onto Sept 21 auth-precedence page; MISP phar wrapper zero-consumer (95806) onto Sept 17 MISP argv page; Kimi Code .mcp.json spawn-before-trust + plantable bare-name fd/stty (95660) onto Sept 15 MCP page; Tauri updater allowDowngrades-from-webview XSS→downgrade (95624) + microsandbox secrets in /proc/pid/cmdline (61670) onto Aug 5 page; Concrete CMS Community Store order-timestamp download tokens (95653) onto Sept 18 token-entropy page. KEV catalog 2026.09.22 (1721): CVE-2026-94127 F5 APM (page already live), 93616 Check Point Mgmt traversal, 85102 Check Point Quantum cert-validation VPN RCE 9.8 due 09-25, 93952 VeloCloud VCO — all updated on KEV page. Tracked: Adobe ACC ~12 pack, RTI Connext ~10 pack, glibc ld.so overflow+TOCTOU, OpenCVE webhook-test SSRF 62282, SIPGO/Dasel/psd-tools DoS, Avatica unsafe reflection 70410, webpy fixation/XSS, rpcbind, SSSD, MikroTik 93345, Aureus 95655, request-filtering-agent sync-throw crash 62985. GHSA published sweep after 16:34:18Z = this wave; updated sweep after 15:30Z = this wave + re-surfacing. ToB 68adb289, PortSwigger 73d1204c, PD head Aug-16, Brutecat f099b20d, disclosed cc969a5f unchanged. Strict build clean.

  • September 22 ~21:2xZ scan (new page + 7 folds): Sept 22 20:34–20:41Z GHSA sync wave (Jul-published advisories landing in the DB) promoted the mcp-atlassian 20-GHSA confused-deputy cluster as a new page — five broken gates (any-non-empty-token transport auth + off-by-default auth provider + from_env fallback = unauth operator-credential access; list-time-only tool/project filters; upload-attachment server-local file read oracle chained to unauth file read; validate_safe_path defaulting to os.getcwd()=/app self-overwrite RCE; 4-leg SSRF-guard bypass incl. urlparse \@ differential and unhooked-session auth branches). Folds: Nuclei 5-GHSA template-sandbox wave onto the Sept 16 Nuclei page (DAST signature bypass 76802, workflow file-gate 76804, MySQL allowAllFiles LFA bypass 76803, double-eval env disclosure 76805, Goja native RCE 76819); OpenBao trio onto May 28 page (recovery timing leak 63132, templated-policy wildcard 71543, LIST-deny 63131); Traefik singleflight oracle 88010 + Tinyauth case ACL 77560 onto Sept 15 parser page; Unleash missing-await 77426 + Gardener subject-kind gate 79767 + KubeEdge CRD shell injection 62371/62182 onto Sept 21 auth-precedence page; IPv6-transition wrappers Cloudreve 79913 + LightRAG 85740 onto July 7 CKAN page; Fabio Connection-header incomplete fix 62987 onto Aug 28 9router page; Home Assistant mDNS IPP SSRF 91129 onto Aug 5 outbound-fetch page. Tracked: HA XSS 91130, lightrag XSS/no-ratelimit, Nautobot self-approval, Spree cart IDOR, Novu, Graylog, MPXJ, Tinyauth singles, OpenBao agent stdout, wlc. KEV unchanged (catalog 2026.09.22, 1721, sha b912a7f9a4c46304); ToB 68adb289, PortSwigger 73d1204c, PD head Aug-16 (c7eeaffd hash churn), Brutecat f099b20d, disclosed cc969a5f unchanged. Strict build clean.

  • September 22 21:31Z wave (new page + 2 folds): GHES appliance-surface page (port-blind notebook-viewer SSRF with timing-as-extraction-oracle -> unauth appliance RCE CVE-2026-77987; sanitize-then-rewrite-quote Markdown XSS with CSP defeat via same-origin gadgets CVE-2026-77912; name-scoped PR diff-token collision IDOR CVE-2026-75101). Folds: Skipper truncated_body-mitigation third variant (CVE-2026-86043) onto July 8 integration page; Vaultwarden membership-status authz (CVE-2026-95814) onto Sept 21 auth-precedence page. Tracked: SolarWinds Observability 28324/28325, Rockwell ALE cluster, Unbound 81642, Emacs 96269, OpenClaw iOS 95815, Mattermost 96259, e621ng 95813, pH7 37604, Adobe pack. KEV unchanged (2026.09.22, 1721); feeds unchanged (ToB 68adb289, PortSwigger 73d1204c, PD head Aug-16, Brutecat f099b20d, disclosed cc969a5f). https://github.com/advisories/GHSA-5p5v-w43x-q8v7, https://github.com/advisories/GHSA-6293-4rx2-2p57, https://github.com/advisories/GHSA-843p-hf47-6r9f, https://github.com/advisories/GHSA-5gpm-rgj3-9q76, https://github.com/advisories/GHSA-hm7r-36jx-j25q

  • September 23 ~04:1xZ scan (fold wave, 3 pages, no new page): Sept 23 03:30Z GHSA wave folded — (1) Photoview ≤2.4.0 shareAlbum GraphQL mutation authz bypass (CVE-2026-96271/GHSA-r72q-r5vm-p79c) onto the Sept 18 ignored-scope page: read path checks album ownership, share-link minting checks only login → any authenticated user mints working tokens for victim albums (photos + sub-albums exposed to anyone-with-link; minter retains indefinite control of token settings). Durable axis: token/share/invite minting endpoints are authorization sinks independent of the read endpoint they gate — replay every share mutation with foreign object IDs even when read routes test clean; report audience unauthenticated third pares. (2) iFlytek astron-agent pair** onto the same page: klzzw:0984 UrlCheckTool.checkUrl endPoint SSRF (CVE-2026-95930/GHSA-v9wr-gmhf-jxmg — enumerate agent-platform tool/debug route families separately from chat/model APIs; every agent tool accepting a URL is an SSRF candidate outside the platform validators) + getBotList sortDirection MyBatis mapper-XML ${} SQLi (CVE-2026-95929/GHSA-v3xv-f287-j6jx — second spelling of sort-field-into-SQL after TDuckCloud concatOrderBy; sweep framework interceptor config AND per-query ${sortDirection} interpolation). (3) Perl Crypt::SelfCertificate 1.01–1.05 registry malware** (CVE-2026-95831/GHSAppr-x3mg-6jg2) onto the Feb 5 npm malware page: Python dropper as sample/validate.p12/cert7.pem, base64-obfuscated http C2, no-drop urllib→exec, no tests/build hooks; hunt axes: magic-byte-check package data dirs, missing-QA-scaffolding anomaly signal, advisory-published dropper SHA-256s for sweeps. (4) Dask from_npy_stack (95897) + recommenders mind_iterator pickle.load (95928) onto the June 30 stagnant-ML-loader page (public exploits, unresponsive vendors). Tracked not published: ClipBucket v5 unauth search-field time-based blind SQLi (96272), Fast FAC1203R discovery-service stack overflow (96257), Ghidra .gdb import lock-DoS (96273), Manalyze PE BlockSize underflow (95958), fetchmail NTLM re-surfacing (94184), SourceCodester/QR-attendance singles. GHSA published sweep after 00:31:15Z = this wave only. KEV unchanged (catalog 2026.09.22, 1721, sha b912a7f9a4c46304); ToB 68adb289, PortSwigger 73d1204c, PD hash churn head Aug-16, Brutecat f099b20d, disclosed cc969a5f unchanged. Alerts index highlight added; fold-only wave leaves docs/index.md untouched. Note: AGENTS.md memory write blocked (protected, non-interactive) — this entry carries the note. Strict build clean. Commit 7ca9e4a.

  • September 23 ~07:2xZ scan (new page + 2 folds): Sept 23 06:31Z GHSA wave (~50 advisories, WP-heavy) promoted as the WooCommerce payment-gateway webhook-branch + client-trusted-amount-integrity cluster page (Premium Packages signature-never-verified CVE-2026-93511; Paymob card-token unsigned webhook branch 87979 + contributor gateway-config wipe 87981; Payment Plugins conditional-ownership-check approved-uncaptured PayPal order capture 80342; Better Payment client-amount 77765; Points-and-Rewards claim handler 93510 — axes: per-branch signature coverage, skip-condition probing of if (state==X) verify(), server-vs-client amount derivation, id-as-credential enumerability). Folds: Sept 19 WP alternate-surface page gained WP OAuth Server last-authenticator OIDC assertion misbinding (82843, interleaved two-account grant battery), Directorist fix-history wave (incomplete fix of CVE-2023-1889 + 8.9.1 regression of fixed 8.8.1 endpoint — re-run old CVEs, bisect ranges), Easy Hide Login satellite-route slug leak (84168), YAHMAN remote-file-cache unauth PHP write (75799, sink on store leg), Forminator anonymous site-template mail-send with plugin-minted replayable token (87074), WC Fields Factory subscriber post-meta write incl. pricing (93508) + post-clone copy-exfil (93507), Booking Manager iCal-feed SQLi (91024); July 30 SGLang page gained LMDeploy load_image() VL SSRF with 0.0.0.0/auth-off default posture (CVE-2026-33626/GHSA-6w67-hwm5-92mq). Tracked: ABB Mint Workbench traversal detail-free, divi-dash IP-spoof limiter, Paid Membership unbound payment action, status-disclosure quartet (Motors axis), Social Commerce unauth REST config, XSS/enum singles, CVE-2022-4997 historical sync, Auktion NG XSS. KEV unchanged (catalog 2026.09.22, 1721, sha b912a7f9a4c46304); ToB head still Sept-21 SAML post (fea2d7b6 feed hash churn), PortSwigger 73d1204c, PD 7c040f86 head Aug-16, Brutecat f099b20d, disclosed cc969a5f unchanged. Alerts index + homepage recent entries (cap-10, Legacy-CMS CuteNews line dropped) updated. AGENTS.md memory write blocked (protected file, non-interactive) — this note carries the lesson.

  • September 23 ~11:1xZ scan (new page + 2 folds): Sept 23 09:30Z GHSA wave promoted the document-viewer + desktop-update surface cluster as a new page (docs/alerts/2026-09-23-document-viewer-and-desktop-update-surface-cluster-ghsa.md): ~40-GHSA Foxit pack distilled to durable axes — incremental-update signature badge over altered render (91814), secure-reading-mode missing prompt = PDF-triggered SMB NTLM hash leak (91796), PDF-JS cross-document same-process reads (91788), updater MITM cert-bypass (91812) + download/extract swap window (91813) + LPE trio, with a four-question updater audit checklist. Tauri updater unsigned-manifest downgrade (95625 — authenticate the descriptor not just the payload; companion to Sept-22 allowDowngrades 95624). Acer NitroSense localhost inventory: production Electron DevTools on TCP 9993 (50228) + unauth localhost MQTT WebSocket to ddsc RPC incl execSync (50227); CGServiSign web-content→local-service cmdi (15027). Folds: Apache Doris FE client-supplied-node-info auth unauth metadata read (31377) onto Sept 21 auth-precedence page; Rename wp-login time-based SQLi via log with core wp_unslash ordering inversion (93368) + Getwid block-frontend eval() XSS (5924) + ACF7 DB shortcode contributor read-all (6831) onto Sept 19 WP page. Tracked: Foxit memory-safety remainder (91801/91797 file-write traversals flagged), BuildStream tar symlink (82331), uniFLOW session retention (92378), ASR kernel (42801). KEV unchanged (catalog 2026.09.22, 1721, sha b912a7f9a4c46304); ToB 68adb289 head Sept-21 SAML processed; PortSwigger head Aug-25 processed; PD head Aug-16 processed; Brutecat f099b20d; disclosed cc969a5f unchanged.

  • September 23 ~13:1xZ scan (new page + 4 folds): Sept 23 12:31Z GHSA wave (~47 advisories) promoted the Tauri desktop IPC/CSP/scope cluster as a new page (docs/alerts/2026-09-23-tauri-desktop-ipc-csp-scope-and-webview-supply-chain-ghsa.md): CSP nonce hardening inert when script-src lists data:/blob: (95626), dialog-picker recursive scope escalation silent+permanent (95627), Pake wildcard remote.urls + ACL skips app commands → any HTTPS origin calls every native command (96454). Folds: Tomcat second train onto Aug 26 Tomcat page (WebSocket alternate-name bypass 76183, HTTP/2 smuggling regression-in-fix 86350, cross-stream trailer bleed 77762, permessage-deflate WS smuggling 87022, realm first-wins 75973, CLIENT_CERT soft-fail 86248, keystore CRL-skip 73581); Keycloak PAR request_uri reuse under prompt=none (96446) + Conditional OTP header-trusted 2FA skip (96445) onto June 11 identity page; ManageEngine OpManager 5-GHSA ladder (Configlet SSTI fleet-RCE 12370, Report Profile import→admin 84787, device-scope drift 84789/84791, traversal 15358, report SQLi 14913) onto Sept 21 mgmt-plane page; Reachy Mini unauth /apps/install HF-Space→pip build-code RCE + CORS-only fix + Bluetooth shared-auth flag (96455/96456) onto June 23 appliance page. Tracked: Emacs Flymake edit-time exec (96442), Doris JDBC-URL FE RCE (96443), Sling filter-shape pair + XXE (94243/94251/92001), Qt singles, WP singles (90950 absent-field reCAPTCHA skip, 87071/87070 Forminator, 86612 Ninja Tables), Paymob third leg 87978 (processed on Sept 23 payment page), Microweber upload pair. KEV unchanged (catalog 2026.09.22, 1721, sha b912a7f9a4c46304); ToB 68adb289 head Sept-21 SAML processed; PortSwigger 9220d9ae head Aug-25 processed; PD c99fb03e head Aug-16 processed (hash churn); Brutecat f099b20d; disclosed cc969a5f unchanged. Strict build clean.

  • September 23 ~14:3xZ scan (new methodology page + 2 folds): PortSwigger's first new research post since Aug-25 (Tom Stacey, "HTTP/3 in Burp Suite - it's time to find a bigger wordlist", 2026-09-23) promoted as docs/methodology/http3-turbo-intruder-race-and-downgrade-testing.md — durable playbook: QUIC single-datagram race attack + QPACK blocked-stream race orchestration (tightest grouping primitives; force gateMode for technique-vs-landing verdict tables); kettled HTTP/3 requests (^~ CRLF/^s space escapes) inject bytes materializing only after edge H3->HTTP/1.1 downgrade re-serialization (TE:chunked past pseudo-header validation) + :authority/:scheme override vs SNI = origin-routing tuple mismatch; HTTP/3 Adapter (X-Http3: 1 explicit mode) makes H3-only endpoints testable = per-route H3-vs-TCP behavior diff (transport-asymmetry security layers); SVCB/HTTPS + Alt-Svc fingerprinting; AUTO engine never for desync; Range: bytes=-1 minimization; 100k-180k RPS = availability not impact. Future HTTP/3/QUIC research/tooling belongs on this page beside the desync campaigns page. Folds: WPGraphQL 2.19.0 updatePost collection-level-only cap check (Contributor publishes w/o publish_posts; createPost sibling has the missing check; REST-403-vs-GraphQL-200 parity battery = finding + negative control, CVE-2026-88974) onto Sept 19 WP page; Plone plone.app.portlets Classic portlet TALES injection 9.9 (CVE-2026-57149, template/macro field interpolated into path() = full expression eval; default ManageOwnPortlets role map = any registered user's personal dashboard foothold; self-service default role maps as expression-engine footholds, inert python:/string: probes) onto Sept 20 media/template-RCE page. Tracked: REDAXO trio (unescaped filename/type-name stored XSS, CSRF addon update), Plug quadratic nested-param DoS, Zapros decompression DoS pair. KEV catalog moved to 2026.09.23, entry set unchanged (1721; Sept-22 four already on the KEV page). ToB head Sept-21 SAML processed (note: bare /feed/ now returns 'Redirecting to /index.xml' text without -L; use -L or /index.xml); PortSwigger 0e02... head now Sept-23 HTTP/3 post (processed this scan); PD head Aug-16 processed; Brutecat f099b20d; disclosed cc969a5f unchanged. GHSA published head 14:13:04Z. Strict build clean. AGENTS.md memory write blocked (protected file, non-interactive) - this note carries the lesson.

  • October 1 catch-up scan (2 new pages + 3 folds + KEV wave): closed the Sept 24–30 gap. New page 1: MCP gateway/session/client/browser-bridge/agent-prompt cluster (MetaMCP session-IDOR + stdio inspector RCE 79537/79538; mcp-remote server→client SSRF/RCE via WWW-Authenticate resource_metadata + getServerUrlHash 51994/51996; DBHub Origin==Host rebinding 61742; Obot /mcp-connect ACL skip 101084 + README quickstart unauth-admin docker.sock 101065; Decepticon ChatML role-forgery CVSS 10 61732; mcp-chrome-bridge origin bypass 102878; vm2 sibling-prefix resolver escape 100721; mcp-go allowedLocalRoots link escape 102242). New page 2: wireless management-plane pre-auth wave (HPE Instant ON 8-GHSA ladder 76721–76728; WatchGuard AP session-mint 101891 + internal-API cmdi 86102; Anjvision/Dbit singles tracked). Folds: PyJWT 2.13.0 7-GHSA guard-encoding sweep (gvp8/ffc3/9j54/w2cx/p4g4/r6x4/9v7f) onto JWT algorithm-confusion methodology; Fastify quartet (76169/84469/84428/84504) onto Feb 2 Fastify page; Contrast attestation relay 100835 onto Sept 17 attestation page. KEV catalog 2026.09.30 (1730): 88771/88772 NetScaler, 76504 SD-WAN Mgr hex-encoding, 87902 WP Core RFI, 65660 SharePoint, 67279 RouterOS, 5430 WSO2, 71362 Magento, 86950 Apple — all tracked detail-light. Blog feeds: ToB new head 2026-09-25 "Don't let TEEs break your MPC" (TEE+MPC trust-model clash, rollback-attack nonce-reuse class — folded as context on the Sept 17 attestation page; defensive-leaning crypto design post, no standalone page); PortSwigger head = Sept-23 HTTP/3 (already promoted); PD heads (MPE extension audit, behavioral LLM audit) already promoted on Aug 18/methodology pages; Brutecat f099b20d and Disclosed cc969a5f unchanged. Tracked big-packs not published: Chrome 154 + Firefox ESR memory-safety trains, ~20-item NetX/ThreadX embedded pack, iperf3 pre-auth BO (pwcx, revisit if weaponized), virtualenv seed-wheel pair, russh client pack, Astro pair, libsoup WS pack, TOTOLINK/Netcore/D-Link CGI class, Joomla/ordasoft/lomart/ServiceNow/GitLab singles, IBM Guardium CLI trio, OpenClaw iOS TLS-pin (9 x265).

  • October 1 ~06:1xZ scan (new page + 6 folds): Sept 30 14:46Z–23:54Z GHSA train promoted the axios 1.20 adapter guard-coverage wave as a new page (docs/alerts/2026-10-01-http-client-adapter-guard-coverage-drift-axios-1-20-wave-ghsa.md): h2 adapter drops lookup/agent/proxy (3pq3), fetch adapter ignores maxRedirects (r4gj), CIDR NO_PROXY ignored (44g4), createConnection socket-hijack gadget (m8m8), Location-ReDoS + dataURL ReDoS (mghh/c29m), h2 init crash (542g), header/toFormData/fetch PP gadgets (j8rh/4hqw/x97p/vh66/9fr6), Astro unanchored allowlist SSRF (4233). Folds: GitPython four-pack (239g git-dir shadow hook RCE CVE-2026-87817, whh4 --no-index oracle, 59cr .gitmodules path, g5vv author ReDoS) onto May 9 agent/git page; Tornado StaticFileHandler symlink (c2m8) + CurlAsyncHTTPClient bomb (chx6) onto July 26 page; LiteLLM denylist+credential relay (3cv6) onto June 8 page; grpc-js getAuthContext unauthorized-cert verdict object (m9gg) onto Sept 21 precedence page; PyJWT RecursionError pre-verification parse (42vr) + gvp8 options-mutation regression onto JWT methodology; next/og Node ImageResponse SVG RCE (vcvr) onto Sept 17 OG-image page. Tracked: commonmark DisallowedRawHtml 97jj, jackson pair cxp5/wv8q, DOMPurify p98j, serialize-js gfhx, russh pack remainder, virtualenv 94p9/9h9j, hono/jsx boundary XSS hxh3, Angular matrix-param DoS ff3f, urllib3 gh4c/vxq7, Astro qh8j, Tornado 3hv7, grpc f596, fastify 4mh8. KEV unchanged (catalog 2026.09.30, 1730, sha 41a998d171e4b29a); ToB head Sept-25 TEE/MPC processed, PortSwigger head Sept-23 HTTP/3 processed, PD head Aug-16 processed, Brutecat f099b20d, disclosed cc969a5f unchanged. Strict build clean.

  • October 1 ~16:1xZ scan (new page + 3 folds): Oct 1 15:15–15:46Z GHSA train promoted the vm2 seventeen-GHSA escape wave as a new page (docs/alerts/2026-10-01-vm2-sandbox-escape-wave-builtin-loader-allowlist-and-bridge-boundaries-ghsa.md): four classes — capability-bearing read-only builtins (h85j https.globalAgent token/TLS-socket leak, 98xx tls.setDefaultCACertificates host-trust replacement, 46pr crypto.setEngine native exec pre-validation, 6w8r node:sqlite loadExtension + node:node: double-prefix, qhwx node:test execArgv host spawn, jf8q unfiltered nodejs.stream symbols); allowlist grammar drift (6rh5 fs/promises subpath, 8686 node:-prefix deny miss, 7q3f prefix-sibling startsWith, c48m unanchored allowlist regex + custom-resolver host-context load); shape-typed guards + fix-site gates (8hr7 require:[] array nesting fail-open, 633r freeze accessor-descriptor bypass, 647f GHSA-m283-3h24-438v call/apply fix bypass, 27g9 Node-26 stale PromiseThenLookupChain escape unfixed, jxxv CLI zero-isolation host-realm require); Folds: JupyterLab trio (6966 clipboard trusted-flag XSS, 3jqq Plural-Forms new Function start-anchor-only, 3325 uninstall-side argument injection) onto June 19 JupyterLab page; SiYuan pair (hf8h getUniqueFilename anonymous whole-host existence oracle, 53fp getOutlineStorage read-lags-write authz) onto Sept 4 SiYuan page; devalue 4q55 null-prototype key coercion proto regression onto May 14 devalue page. Tracked: pypdf septet (102993-103000), jackson pair (7hhh/p6pp), devalue CPU singles (j22f/hx4r/mcm9/wf3x/x5rw), basic-ftp ReDoS (c475). KEV unchanged (catalog 2026.09.30, 1730, sha 41a998d171e4b29a); ToB fc79e024 head Sept-25 TEE/MPC processed; PortSwigger blog hash churn 54b4d591 head Aug-12 Kettle AI post processed (research feed unchanged); PD churn 42af1e66 head Aug-16 processed; Brutecat f099b20d; disclosed sitemap now serves a zero- shell, head cc969a5f unchanged. https://github.com/advisories/GHSA-h85j-hv3c-qfgq, https://github.com/advisories/GHSA-98xx-8mx4-x7cm, https://github.com/advisories/GHSA-46pr-c5wc-xffx, https://github.com/advisories/GHSA-6w8r-xxw2-g3hx, https://github.com/advisories/GHSA-qhwx-74w5-xhxq, https://github.com/advisories/GHSA-8hr7-r645-pc6w, https://github.com/advisories/GHSA-647f-g98j-qq25, https://github.com/advisories/GHSA-27g9-p43v-cw3v, https://github.com/advisories/GHSA-jxxv-8r27-vm4p, https://github.com/advisories/GHSA-6966-vjj6-99xv, https://github.com/advisories/GHSA-3jqq-pw4j-pqcj, https://github.com/advisories/GHSA-3325-v43h-43rv, https://github.com/advisories/GHSA-hf8h-97gm-4x2p, https://github.com/advisories/GHSA-53fp-9jmv-227g, https://github.com/advisories/GHSA-4q55-j62x-fr9h

  • October 1 ~17:1xZ scan (1 fold, no new page): Oct 1 16:23–16:29Z SiYuan trio folded onto the Sept 4 SiYuan page: getRefIDs tier-blind filter (vg99/CVE-2026-73606 — FilterRefDefsByPublishIgnore covers visibility tiers only, password tier structurally unchecked because the helper lacks the request context; full check ten lines away in the same file; filter presence ≠ filter coverage), getAttributeViewSearchTarget (9cqf, high, dev-branch only — route registered at router line 535 one day after commit 64c26e74b added CheckReadonly at line 536, fix-site adjacency drift), getBookmarkLabels (j4ph/CVE-2026-73609 — unguarded whole-workspace aggregate while detail sibling getBookmark filters and drops empty labels; aggregate-every-detail-endpoint's-filter heuristic). Tracked no-publish: vm2 updated-sweep duplicates only (all Oct 1 wave GHSAs had Duplicate Advisory twins, already processed). KEV unchanged (catalog 2026.09.30, 1730, sha 41a998d171e4b29a); ToB fc79e024, PortSwigger 6940c4db, PD head Aug-16 (lastBuildDate churn), Brutecat f099b20d, disclosed cc969a5f unchanged. Strict build clean. https://github.com/advisories/GHSA-vg99-7gj7-2fr5, https://github.com/advisories/GHSA-9cqf-hhrq-7v45, https://github.com/advisories/GHSA-j4ph-9xwf-wcj4

  • October 1 20:1xZ scan (KEV wave, 1 new page): CISA KEV catalog flipped to 2026.10.01 (1731, one net addition). CVE-2026-104286 Fortinet FortiMail path traversal + NULL-byte unauthenticated arbitrary file write (CVSS 9.8, exploited in the wild, added 10-01, due 10-04, FG-IR-26-175) promoted as a new operator page (docs/alerts/2026-10-01-fortimail-ibe-unauth-file-write-kev-cve-2026-104286.md): vendor workaround config system encryption ibe → disable names the exploited IBE pre-auth handler family (feature toggles as attack-surface maps); CWE-22+CWE-158 writer-pair sweep for upload/save-name parameters; vendor IoC set documented as a mail-appliance persistence-pattern reference (ld.so.preload rootkit, modified /bin/smit + httpd.conf, /data/bin drops, rogue archive-account exfil channel, cron/ui=(null) log anomalies). GHSA published+updated sweeps clean since the 18:3xZ head (only Geyser h77f dup re-touch); ToB fc79e024, PortSwigger 6940c4db, PD head Aug-16, Brutecat f099b20d, disclosed cc969a5f unchanged. Strict build clean. Commit 5c10a55.

  • October 1 22:1xZ scan (2 folds, no new page): two late updated-feed advisories promoted as folds. GHSA-86w9-cpqp-85rv / CVE-2026-85393 node-forge <=1.4.0 RSA PKCS#1 v1.5 nested DigestAlgorithm element-count forgery via low-exponent keys (incomplete fix for CVE-2026-33894, unfixed at scan time) folded onto the Aug 3 Bouncy Castle crypto-policy page as the October 1 follow-up: every SEQUENCE in the verified encoding is a slack container, "incomplete fix" labels are attack maps, re-run the historical bypass battery on just-patched crypto builds. GHSA-g9g6-gvq9-j4vp / CVE-2026-14802 react-dev-utils <=5.0.1 (CRA <=5.0.1) openBrowser macOS command injection (unfixed, exploit public, vendor unresponsive) folded onto the Feb 5 Metro dev-server page as the dev-tooling browser-launch-leg follow-up: browser opener helpers are command-execution sinks; unfixed EOL toolchain = standing local primitive on legacy CRA dev boxes. GHSA published sweep since 16:29Z SiYuan head = 0; updated sweep since 21:1xZ = these two advisories only. KEV unchanged (catalog 2026.10.01, 1731, sha 4e47d6936857ccf0). ToB fc79e024, PortSwigger 6940c4db, PD head Aug-16 (hash churn 696e500e), Brutecat f099b20d, disclosed cc969a5f unchanged. Strict build clean.

  • October 1 21:3xZ scan (eight folds, no new page): GHSA published feed head = the 21:32Z batch (~33 advisories) plus an updated-feed tail at 21:33Z carrying the second tier of the 18:32Z httpd train. httpd module-primitives tier (rewrite LA-U lookahead UAF f5cw, vhost_alias oversized-Host stack overflow f6c9, proxy_ftp PASV-reply third-party pivot 6wv6, proxy_uwsgi TE response smuggling 9fgx, userdir /./ cr6f, CGI redirect-target execution rxhx, .DAV dead-property read p249) folded on the Oct 1 httpd auth-state page. Seven more folds: DB-GPT python_file_upload traversal wmgw (Aug 26 DB-GPT page), Lektor admin zero-CSRF cross-origin write + rebinding exemplar 76hh (DNS-rebinding methodology), agent-zero FileBrowser host-root workspace j6rq (Sept 5 agent page), Authlib discovery-cache no issuer-origin binding 8wx9 (OAuth/MCP methodology), Laravel APP_DEBUG .env disclosure exemplar 2h69 (Aug 20 Laravel page), pgvector IVFFlat low-priv DDL to memory pw7q (June 15 DB-privilege page), FortiMail GHSA twin 6gxc + FLIR Aware2 four-pack (FortiMail page). DeepTutor ExecTool cmdi 23c2 folded on the Oct 1 MCP/agent cluster page. Tracked no-publish: Joyland AI Android TLS/Weex pack, Confluent Vault KMS cert-validation absence r743, Wormhole coturn open relay 7r4f, TP-Link TDDPv2 pair, Podgrab pair, PEA OOB, EasyIO/FLIR/CANopen/Kasa appliance-detail-light singles. KEV unchanged (2026.10.01, 1731, sha 4e47d6936857ccf0); ToB fc79e024, PortSwigger 6940c4db, PD head Aug-16, Brutecat f099b20d, disclosed cc969a5f unchanged.

  • October 2 ~01:1xZ scan (new page + 3 folds): Oct 2 00:31Z GHSA wave promoted the AI serving/RAG platform boundary wave as a new page (docs/alerts/2026-10-02-ai-serving-rag-stack-authz-and-path-wave-ghsa.md): Mooncake transfer engine unauthenticated TCP data-port SessionHeader addr/size memory read/write (CVE-2026-103764, KV cache/prompt disclosure) + unauthenticated /metadata descriptor poisoning to redirect KV transfers (CVE-2026-103765); RAGFlow six-GHSA tenant-blind route family across main/kb_app/connector_app/evaluation_app incl. get_dataset code-exec claim (CVE-2026-51897); Langflow /api/v1/validate/code server-side exec sink (CVE-2026-51886) + KB-creation arbitrary write (51888); Langchain-Chatchat triple upload-surface traversal incl. OpenAI-compat /v1/files (51882/51883/51884); Devika per-agent-role copy-pasted save_code_to_project traversal trio (51873/51874/51875). Folds: 389-ds-base StartTLS plaintext-buffer carryover + messageID-collision bind-result substitution (CVE-2026-86345) onto the Sept 20 grammar-desync page; PictShare raw-metadata info endpoint + rand() delete_code (104051/104356) onto the Sept 18 predictable-token page; DeepTutor Oct 2 siblings (WebSocket ExecTool, EditFileTool traversal, session/bot/book IDOR) + Office-PowerPoint-MCP output_path traversal (xpvr) onto the Oct 1 MCP cluster page. Tracked no-publish: ClipBucket SQLi, EasyIO/Neo appliance pack, 2009-era backfill batch, Mooncake DoS pair, 389-ds worker-pool DoS. KEV unchanged (2026.10.01, 1731, sha 4e47d6936857ccf0); ToB fc79e024, PortSwigger 6940c4db, PD head Aug-16, Brutecat f099b20d, disclosed cc969a5f unchanged. Strict build clean.

  • October 2 03:1xZ scan (2 folds, no new page): GHSA published-feed recheck of the Sept-30/Oct-01 train surfaced two unprocessed durable advisories. GHSA-9c5c-9qcx-q35q @nestjs/platform-fastify absolute-form request target (GET http://host/path HTTP/1.1) skips path-scoped Nest middleware (high, >=12.0.0 <12.0.2 and <11.2.4, fixed 12.0.2/11.2.4, no CVE at scan time) folded onto the July 18 Nest/Astro route-representation page — RFC 9110 request-target forms are a route-representation channel the middleware matcher never considers; Node accepts absolute-form natively; reverse-proxy normalization is the exposure boundary; sweep authority/asterisk forms + per-hop topology on owned apps. GHSA-j22f-vq7h-c4qm / CVE-2026-92708 devalue stringify/uneval serialize the backing ArrayBuffer of Node Buffer views → up to ~64 KB of process-shared pool (other requests' bodies/headers) shipped in SSR HTML, ~43,000x amplification (high, 5.1.0–5.9.2, fixed 5.9.3) folded onto the May 14 devalue page — parse-side guards never covered the serialize side; hunt SvelteKit/Nuxt load() returning raw Buffers with a two-connection marker-bleed check. Tracked no-publish: russh client-side channel-ID handler-firing + X25519 zero-point hybrid-KEX downgrade + auth-cap non-enforcement trio (47hw/w3jg/g6xm, protocol-parser detail-light), PyJWT is_pem_format ReDoS (jwrc), grpc-js getAuthContext presence-vs-verified already folded Sept 21 (m9gg), league/commonmark GFM-table quadratic DoS (3q6v), urllib3 proxy-TLS-context mixup (8988, config-confusion DoS-adjacent), jackson pair (cxp5/wv8q) + devalue DoS tails already tracked. Feeds all unchanged: KEV (2026.10.01, 1731, sha 4e47d6936857ccf0), ToB fc79e024, PortSwigger 6940c4db, PD head Aug-16 (rss hash churn only), Brutecat f099b20d, disclosed cc969a5f; updated-feed sweep since 22:00Z = 0. Strict build clean.

  • October 2 04:1xZ scan (2 folds, no new page): Oct 2 03:31Z GHSA wave (10 advisories) promoted two durable items. GHSA-v78q-44mm-wf7q / CVE-2026-104120 modelcontextprotocol/mcp-server-fetch + mcp-server-everything through 2026.6.4 fetch_url SSRF (medium, exploit public, fix PR awaits acceptance) folded onto the Sept 15 MCP page — the reference fetch tool ships an unguarded URL sink; reference-implementation audits generalize to every copied bespoke fetch tool, and a published CVE with an unmerged fix means version pinning proves nothing (test the live deployment, report final-destination guard coverage). GHSA-3q99-x36r-rchh / CVE-2026-104480 Discord libdave <1.2.0 MLS Welcome accepted with unrecognized roster participant (critical) folded onto the June 10 messaging-SDK page — signaling-path (voice-gateway) position adds an unauthorized member to the E2EE media session; E2EE guarantees do not extend to the signaling path, the missing check is a client-side membership-existence invariant, and accept-path fuzzing with rosters referencing unknown identities is the probe class. Tracked no-publish: cal.diy PBAC doesUserIdHaveAccessToBooking missing-auth public exploit (48q5, detail-light), Samsung ManagedProvisioning local ACL (crm9), Android hardcoded-key singles (mwfx/p7gq/qc9g), SourceCodester/itsourcecode SQLi singles (m6q3/4vh9/r4mc), GCC erase_if + GLib/GnuTLS/libaom/libtiff RHEL memory-safety re-surfacing wave. Feeds unchanged: KEV (2026.10.01, 1731, sha 4e47d6936857ccf0), ToB fc79e024, PortSwigger 6940c4db, PD head Aug-16 (rss hash churn only), Brutecat f099b20d, disclosed cc969a5f. Strict build clean (pre-existing Aug-05 anchor INFO only). Note: AGENTS.md memory write blocked (protected, non-interactive) — this line carries the note.

  • October 2 23:1xZ scan (new page + 4 folds): Oct 2 22:35–23:15Z GHSA wave + Aug-dated Airflow enrichment landing in the updated feed. New page Airflow 3.3.1 wave — deserializer gadgets, parser-discrepancy authz, masker shape gaps built from GHSA-8prw-8m6x-8w6f, GHSA-q4c3-7575-55j2, GHSA-2qjv-p2gc-mjg2, GHSA-fcmm-42r9-mmmm, GHSA-j4jc-cq9h-xrhr, GHSA-cjv4-7hp2-2x9h, GHSA-c56v-8w4g-3mfm, GHSA-f643-3rc2-j27w, GHSA-g4qj-5vxv-wggf, GHSA-75mg-c62r-v95g, GHSA-qmrf-jrpr-rjx6. Folds: Trigger.dev seven-GHSA second tier (GHSA-pqxw-g93w-hj9x, GHSA-gg6r-gp4c-89hp, GHSA-9q4r-4842-93vw, GHSA-4672-hwv6-gq62, GHSA-59h8-w5q6-mfmp, GHSA-fj2x-mqqp-3v2w) + Vibe-Trading trio (GHSA-v2f8-6655-7grj, GHSA-jqmf-mx4f-hfr6, GHSA-5rmq-chc7-m22f) + Headroom CSWSH GHSA-h46j-26q3-rggf onto the Oct 2 AI page; SiYuan GHSA-4vpg-gwqq-w44c/GHSA-3cc2-h3v6-rqpq onto the July 10 page; Xray-core GHSA-5wf9-h793-w73c onto the Oct 2 cert page. LESSON: Airflow advisories state their sibling-CVE relationships in the description ("different sink from CVE-XXXX", "deployments that upgraded remain affected") — when a batch names its predecessors, the fix-range differential is the operator map; grep predecessor CVE IDs to find live-on-patched deployments.

  • October 3 04:1xZ scan (2 folds, no new page): Oct 3 03:31Z GHSA wave (11 advisories). GHSA-6w7x-66x4-9w6v / CVE-2026-105080 ConvertX < 0.19.0 Calibre .recipe/.downloaded_recipe executable-format pass-through → converter RCE (9.9) + GHSA-9r9r-c7x8-qp3r / CVE-2026-105083 ImageMagick LoadPolicyCache alternate-DOCTYPE silent zero-policy fail-open folded onto the Sept 20 media-pipeline page (backend-engine format lists contain executable "document" formats; security-config parsers that fail to parse fail open silently — magick -list policy is the verification probe). GHSA-mx72-jqqr-rmpp / CVE-2026-93428 Ultimate Member ≤2.13.1 um_get_members nopriv AJAX returns privacy-restricted profile fields with a wp_localize_script-minted public nonce folded onto the Sept 19 WP alternate-surface page (field-level privacy models exist only in the render path; AJAX/REST siblings return raw objects). Tracked no-publish: UM form_id stored XSS, Beaver Builder contributor get_autosuggest_values SQLi with editor-minted nonce, SupportCandy SQLi/XSS pair, Ivory Search/Jeg Kit XSS singles, Formbricks Custom Head Scripts role-gate drift, OpenAPV heap overflow. Updated feed = same wave publication sync. KEV unchanged (catalog 2026.10.02, 1733, sha d2c8c6cb); ToB 9498f6e8, PortSwigger e2bf4e9b, PD churn head Aug-16, Brutecat f099b20d, disclosed cc969a5f unchanged.

  • October 4 04:1xZ scan note (AGENTS.md memory write blocked again — protected file, non-interactive): Promoted one fold, no new page: ezBookkeeping 1.2.0–<2.0.1 /api/v1/tokens/refresh.json where TokenRefreshHandler never checks token type — a short-lived/IP-restricted API token exchanges for a 30-day session token, escaping expiry and IP allowlist (GHSA-983g-gj75-pg7f / CVE-2026-105131) folded onto the Sept 18 token-entropy page as the credential-class uplift axis: refresh/exchange/renew/convert endpoints that accept one credential family and return another are type-confusion sinks; sweep every token-lifecycle sibling with each credential family through each one; restrictions live per-endpoint, not per-token. Tracked no-publish: CoinEx Crypto pair (v3m5/2j2j, EOL-product IDOR, sparse VulDB). All other sources unchanged (KEV catalog 2026.10.02, 1733, sha d2c8c6cb; ToB 9498f6e8; PortSwigger e2bf4e9b; PD head Aug-16 hash churn only; Brutecat f099b20d; disclosed cc969a5f). Strict build clean. Baseline bbdb1ce.

  • October 4 07:1xZ scan (fold, no new page): Promoted the NetScaler perimeter checklist as an October 4 follow-up on the Sept 15 KEV wave page: GHSA-56r3-m27m-8p62 / CVE-2026-88779 (CTX697174, CVSS 8.7, pre-auth memory-overflow DoS gated on SAML SP samlAction / SAML IdP samlIdPProfile config) + full CTX697096 eight-CVE precondition detail (per-CVE show config pattern mapping, DTLS default-on gate, 88773 smuggling + 88774 URL-normalization policy-bypass axes, exact-build fingerprinting 14.1-73.37 vs 14.1-73.41). Folded the pattern note on the KEV page. KEV catalog unchanged (2026.10.02, 1733, sha d2c8c6cb — 88779 not yet KEV'd). Tracked no-publish: CoinEx Crypto pair fhr8/h746 (EOL product, sparse VulDB). ToB 9498f6e8, PortSwigger e2bf4e9b, PD head Aug-16, Brutecat f099b20d, disclosed cc969a5f unchanged.

  • October 4 10:1xZ scan (fold, no new page, commit 234bb6e): Oct 4 09:30Z GHSA wave folded on the Sept 19 WP alternate-surface page: (1) CoCart ≤4.9.7 unscoped rest_authentication_errors-style filter disables WP core REST nonce protection for ALL routes → site-wide CSRF incl. core admin creation (GHSA-9p8w-fmwq-692f / CVE-2026-93549) — unscoped global REST filter = site-level authz multiplier, audit question flips to which global filters touch routes outside their namespace; (2) User Private Files <2.2.0 rewrite-rule access gate never reached on multisite → unauth private-file disclosure (GHSA-rgr9-g879-r5wm / CVE-2026-97332) — routing-layer protections are topology-dependent, re-probe rewrite-gated paths on multisite shapes; (3) Five Star Business Profile <2.4.0 unconstrained default-value resolver callback reads arbitrary options/user meta incl. password hashes to public output (GHSA-qpw5-3rj5-433c / CVE-2026-86817) — name-to-value resolver = datastore read oracle when name set unconstrained. Tracked no-publish: Ahsay AhsayCBS pair (mxj3 CVE-2026-105134 10.0 /rps/api/json/UpdateReceivers.do random arg OS cmdi + fp2j CVE-2026-105133 7.3 checkSysPwd improper auth — sparse VulDB detail-free, backup-product appliance, revisit if sink detail lands), MindSearch 4535 ExecutionAction.run code injection (Oct 2 AI tool-registry rule canonical), cognee xrgh hardcoded JWT secret (shipped-default class), Drogon Windows traversal, Laradock unsigned build download, Razorpay order-mod IDOR, UE rcjh blind SQLi, XSS singles. KEV unchanged (2026.10.02, 1733; CVE-2026-84411 RouterOS still not in KEV). ToB 25d2bbe (stub/empty feed response), PortSwigger e2bf4e9b, PD stub, Brutecat f099b20d, disclosed cc969a5f unchanged. Strict build clean. Baseline fbdb7bf -> 234bb6e.

  • October 4 13:1xZ scan (fold, no new page): Oct 4 12:32Z GHSA wave + updated-feed enrichment: Gitea GHSA-x77v-q46j-393g / CVE-2026-23603 blind SSRF via OIDC picture claim (UPDATE_AVATAR=true → bare http.Get in oauth2UpdateAvatarIfNeed, sibling paths use hostmatcher.NewDialContext) folded on the June 17 Gitea boundary page as the claim-provenance axis — user-editable IdP profile fields become RP-side fetch input; grep-for-the-hardened-sibling fingerprint; offline fake-OIDC PoC harness. Durable detail (code + PoC) landed via updated feed July-21 advisory. Tracked no-publish: Cost Calculator Builder r437 sensitive-data-in-output (sparse), Weaviate Verba 8456 get_environment info disclosure on generate_stream (env-reader class covered by Oct 2 AI page env-exfil legs, sparse), Discuz! admin-medal SQLi 4h38 (post-auth admin panel, sparse). KEV unchanged (2026.10.02, 1733, sha d2c8c6cb; CVE-2026-84411 RouterOS still not in KEV). ToB 9498f6e8, PortSwigger e2bf4e9b, PD head Aug-16, Brutecat f099b20d, disclosed cc969a5f unchanged. Strict build clean. Baseline 234bb6e.

  • October 4 16:1xZ scan (2 folds, no new page): Oct 4 15:30Z GHSA wave. ZITADEL Login V1/V2 ten-leg account-takeover cluster folded on the Sept 16 identity-provider authority page: identify-only session as privileged foothold (4727 authenticator enroll pre-primary-factor 7.5, j55w Login V1 2FA-enrollment handlers act on identify-only + phone overwrite + user-enum 8.2, 98x8 AddIDPLink binds attacker IdP identity to victim account without factor/permission 9.8), returnCode delivery type echoes OTP codes in server-action responses (mq63 8.1 critical admin ATO), account-squat via unverified IDPConfigID+ExternalUserID registration (639g 9.1), x-zitadel-orgid caller-org-vs-target-org authz split (hcch enrollment-code cross-org 9.6 + pmw5 authentication_methods cross-org read enum oracle), malleable unauthenticated IdP intent tokens + intent-ID race (xv85 7.7), deactivated-org login/refresh continues (3fc9 8.2 lifecycle-recheck), domain-verification SSRF via bare http.Get vs protected client (66r9, hardened-sibling-grep same-day sibling of Gitea x77v). Durable axes: session-state gating matrix sweep, delivery-mode decision table, target-scope audit on org-header writes, tenant-deactivation probe, intent-token tamper test, protected-client grep. SiYuan getDocInfo/getDocsInfo publish-mode refIDs/refCount disclosure from hidden blocks (9fqr/CVE-2026-105205) folded on the Sept 4 SiYuan page as the metadata-variant parity rule (sweep every route that mentions the relation: info/count/outline/graph). Tracked no-publish: R2R pair 2j4q/hw45 (sparse VulDB hardcoded-key + generation_config SSRF, Oct 2 AI page class), mooSocial 105149 rating SQLi sparse, DocSys/YzmCMS/Discuz singles. KEV unchanged (catalog 2026.10.02, 1733, sha d2c8c6cb; CVE-2026-84411 RouterOS still not in KEV). ToB 9498f6e8 head SequenceHash processed; PortSwigger head Aug-12 Can-AI-invent processed (feed rebuild hash churn); PD churn 74f8f5ba head Aug-16 processed; Brutecat f099b20d; disclosed cc969a5f unchanged. Strict build clean. Baseline 7b585e7.

  • October 4 19:1xZ scan (fold, no new page, commit 0dd9404): KEV catalog advanced 2026.10.02 -> 2026.10.04 (1734 entries, sha f51fed1c): sole addition CVE-2026-88779 Citrix NetScaler (SAML-gated pre-auth memory overflow, CTX697174 fast-follow) KEV'd <24h after publication despite "no in-the-wild activity yet reported" advisory line — due 10-07, forensic triage required, ransomware Unknown. Pattern note promoted on cisa-kev.md + Sept 15 wave page: KEV addition on an availability-classified CVE with forensic-triage demand = real impact chain exceeds the DoS label; SAML SP/IdP Gateways are actively-targeted pre-auth surface. CVE-2026-84411 RouterOS webfig underflow still NOT in KEV — head-start window open. GHSA published sweep after 15:30:26Z = 0 advisories; updated sweep max updated_at 12:10Z = 0. ToB 9498f6e8, PortSwigger e2bf4e9b, PD churn 1132deb1 head Aug-16, Brutecat f099b20d, disclosed cc969a5f unchanged. Strict build clean. Baseline 3f441f7 -> 0dd9404.

  • October 4 20:1xZ scan (3 folds, no new page): Oct 4 18:30Z GHSA wave (9 advisories). (1) Default-insecure TLS helper trio folded on the Oct 2 cert/wrong-predicate page: gopay <1.5.119 defaultClient() InsecureSkipVerify in pkg/xhttp/client.go — payment-API MITM reads merchant creds/signatures AND flips payment/refund/order-query responses (8f6w/CVE-2026-105218 critical); go-micro <6.0.0 shared TLS helper InsecureSkipVerify default across gRPC+HTTP+RabbitMQ+Consul/etcd planes — one default de-authenticates the whole service mesh (p6q5/CVE-2026-105216 critical); Cockpit CMS cron.php worker-restart outbound to config-stored site_url skips verification carrying the worker token = on-path token theft → worker start (7gf3/CVE-2026-105217). Rules: grep dependency source for InsecureSkipVerify/verify=False/rejectUnauthorized in defaultClient/shared helpers (invisible to app-config review); shared-helper blast-radius multiplier; token-in-unverified-outbound-request shape pairs with Xray empty-ServerName leg. (2) YesWiki valeur.php fetch-and-render pair folded on the Oct 2 YesWiki page as the fourth fetcher leg (render): 32r4/CVE-2026-104470 editor-url SSRF + unescaped remote HTML injection, 4jc3/CVE-2026-105224 same handler BAZ_fiche_titre img-onerror executes in every viewer — same-handler advisories split across days, grep siblings before closing. (3) AVideo critical XSS pair folded on the Sept 5 AVideo page: 6rvj/CVE-2026-105086 doubly-encoded title entities defeat safeString() because strip-runs-before-decode AND the sanitizer runs twice (setTitle+save) — probe with one encoding layer per sanitizer invocation, trace canary through full write lifecycle; m6h8/CVE-2026-105089 trailer1 URL unescaped in YouPHPFlix2/playlist onclick + iframe-src contexts — URL-validated field still untrusted per template context, enumerate theme/plugin template families. Tracked no-publish: Mammoth.js tokenizer ReDoS fp33 (ReDoS class), aiir 7x65 policy-gate signature bypass sparse/EOL, Mindio Magic MCP embedded-sensitive-data whv8 sparse. KEV unchanged (2026.10.04, 1734, sha f51fed1c; CVE-2026-84411 RouterOS still not in KEV). ToB 9498f6e8 head SequenceHash processed; PortSwigger churn 19f562d0 head processed; PD churn 4c574909 head Aug-16 processed; Brutecat f099b20d; disclosed cc969a5f unchanged. Strict build clean.

  • October 5 23:1xZ scan (new page + 4 folds): Oct 5 22:30-23:00Z GHSA wave. vm2 coordinated dump (~12 advisories, CVE-2026-92933-92959 + CVE-2026-100723, five CVSS 10.0) = new page docs/alerts/2026-10-05-vm2-coordinated-dump-incomplete-fix-family-and-default-config-escapes-ghsa.md — default-config escapes (Node-26 WASM compileStreaming Promise-species re-arming the May JSPI fix; README quick-start require.external root './' nested-VM RCE; console inherit EventEmitter.prototype.emit RCE defeating disallow-code-generation-from-strings); incomplete-fix genealogy as recon map (six legs name their bypassed GHSA; inventory-based intrinsic protection misses TypedArray/ArrayBuffer; AggregateError cycle-revisit returns raw host proxy; util.getCallSites bypasses stack redaction); shared Buffer-pool cross-realm memory read/write + zlib depool miss (depool invariant: byteOffset 0 and buffer.byteLength equals length); engine-scheduled-callback bypasses (FinalizationRegistry GC callback escapes timeout, Promise statics escape allowAsync false — keep-listening-after-the-call-returns rule); host error-stack recon free. Folds: May 29 vm2 page cross-ref; Langflow quad (WEBHOOK_AUTH_ENABLE default-off owner-context execution 8505; random.seed SECRET_KEY Fernet vault offline-decrypt + MCP-traversal key-source pairing 9205; validate-code exec runs decorators at def-time 51886; Smart Transform LLM-lambda eval 7700) on June 19 Langflow page; Capacitor path-blind nav guard to /capacitor_http_interceptor remote content at app origin + plugin-agnostic route fingerprint (103922) on June 12 Cordova page; LangGraph SDK auth decorator actions= decorative-filter selector (104873) on June 12 LangGraph page; fsspec ReferenceFileSystem unsandboxed Jinja SSTI via attacker references JSON (104851) + Scrapy Referrer-Policy response-header-to-import (105782) on June 30 model-parser page. Tracked no-publish: Tinypool PP-gadget pair (Piscina class), GraphQL Tools TLS-off legacy WS executor + mergeDeep PP, hickory-resolver DNSSEC-obscure/CNAME/TC-retry pack, Quart/Snowflake/otel-instrumentation secrets-to-logs, Vue SSR missing-CR XSS, ProseMirror paste XSS, busboy multipart CRLF, Angular SSR Windows CommonEngine traversal, python-jose DER alg-confusion, Nodemailer OAuth2 TLS, Docling ODT xlink-href file read, Spark History XSS retro. KEV unchanged (catalog 2026.10.04, 1734, sha f51fed1c; CVE-2026-84411 RouterOS still not in KEV). ToB feed currently returns stub body (fea2d7b6), head SequenceHash processed; PortSwigger churn cd88cdf9 head already promoted; PD head Aug-16; Brutecat f099b20d; disclosed cc969a5f unchanged. Strict build clean.

  • October 5 10:1xZ scan (3 folds, no new page): Oct 5 09:31Z GHSA wave (~71 advisories). (1) Perforce P4 Search seven-leg pack (fixed 2026.4.2) folded on the June 22 Glances/OpenDJ/Spinnaker control-plane page: container-image-shipped unauthenticated Java debug interface (9p2m/CVE-2026-100102), publicly-documented default service token (crr7/CVE-2026-100103), blank-token fail-open to highest privilege (rgmx/CVE-2026-103510), logging-config + extension-install arbitrary file writes (w4rv/103507 + 49f3/103511), client-supplied-address bypass of host-based ticket restrictions (mv4f/CVE-2026-103512) — container-image-listener fingerprinting rule + blank-credential decision-table row. (2) Papermerge 3.5.3 standard-user /api/documents/upload traversal → .pth into site-packages interpreter-start RCE (5557/CVE-2026-105314) folded on the June 10 PDM file-write page as the auto-loaded-path completion checklist. (3) Retro Perl YAML.pm tag gadgets (CVE-2017-20285 DESTROY/File::Temp::Dir tree-delete, CVE-2019-25777 perl/glob → $YAML::LoadCode process-global flip → perl/code eval RCE) folded on the June 30 model-parser page as the blessed-tag loader class + process-global-flag-flip rule. Tracked no-publish: Mitel MiVoice Office 400 DigitalCanion septet (484h/vr7j/g7mp/w6gr/vh23/qmqp + XSS pair — appliance traversal/predictable-.so/backup-TGZ-restore/WAV-upload classes already covered), NextChat x-base-url proxy SSRF (known proxy-fallback class), Shaarli admin SSRF, GROWI local-upload page-file read, StreamsHub Console SA-token exfil via CR kafka properties (already tracked July 31 page), Totolink/vgmstream/SourceCodester/itsourcecode singles, PowerPress SQL/XSS singles, WP missing-auth/XSS singles, pwhois IDNA A-label mismatch (tool-only, no library impact). Updated sweep = same-wave publication sync. KEV unchanged (catalog 2026.10.04, 1734, sha f51fed1c; CVE-2026-84411 RouterOS still not in KEV). ToB 9498f6e8 head SequenceHash processed; PortSwigger e2bf4e9b Sept-23 processed; PD churn ec87f565 head Aug-16 processed; Brutecat f099b20d; disclosed cc969a5f unchanged. Strict build clean.

  • October 5 07:1xZ scan (fold, no new page, commit 1e85769): Oct 5 06:30Z GHSA wave: Keycloak trio folded on the Sept 16 IdP authority page — q5jp/CVE-2026-105306 Dynamic Client Registration never filters security-sensitive client attributes → registered client bypasses introspection audience checks = cross-client token/claims/session reads from a low-tier Initial Access Token (client-attribute round-trip diff; lowest-tier-credential end-to-end unlock audit); hg66/CVE-2026-105301 X.509 client-cert authenticator fetches CRL-DP/OCSP URL embedded in the still-untrusted presented certificate before full validation = pre-trust network sink, blind SSRF family with jwks_uri legs; 3xph/CVE-2026-105302 User Session Note mapper lacks sensitive-key filtering → delegated client admin harvests users' upstream federated bearer tokens via a mapper on their own client (protocol mappers = session-store read primitives). Tracked no-publish: File Uploads Addon for WooCommerce pair cm5p/CVE-2026-78371 + 8493/CVE-2026-13607 (guessable-name disclosure + ineffective access restriction, class-covered), UPI QR Payment Gateway vjc6/CVE-2026-84169 unauth mark-order-paid (Razorpay order-mod IDOR class), litemall xf6v login rate-limit, food-waste 5-pack + itsourcecode/SourceCodester/osCommerce/HRM singles, MediaTek/Android 205xx re-listing. KEV unchanged (2026.10.04, 1734, sha f51fed1c; CVE-2026-84411 RouterOS still not in KEV). ToB 25d2bbeef7ae051c head SequenceHash processed; PortSwigger e2bf4e9b Sept-23 processed; PD churn 4dff729d head Aug-16 processed; Brutecat f099b20d; disclosed cc969a5f unchanged. Strict build clean. Baseline 4e233a2 -> 1e85769.

  • October 5 05:1xZ scan (2 folds, no new page): Oct 5 03:30Z GHSA wave (~49 advisories, MediaTek/Android memory-safety bulk + sparse CMS singles). (1) Renderer-XSS-escalation desktop pack folded on the Sept 23 desktop page: Legcord setConfig bridge any-key write → additionalArguments --proxy-server+--ignore-certificate-errors persistent Chromium downgrade (105294) + themes.IPC unvalidated-id traversal exedelete/write (105293); GitAhead unsigned updates + permanently-ignore-TLS-after-one-dialog (105295); Chaterm chaterm:// state-less login CSRF → forced-attacker-account + auto-sync exfil of hosts/passwords/keys (105292). (2) maclof kubernetes-client <0.32.0 folded on the Oct 2 cert page as the fifth default-insecure artifact shape: missing certificate-authority-data fails OPEN to no-verification and insecure-skip-tls-verify: false is parsed-but-unenforced (105223) — absence-of-trust-material fail-open + parse-vs-consume parity axes. Tracked no-publish: MediaTek/Android vendor bulk ~30 (local memory-safety), itsourcecode/SourceCodester/Jeebase/HRM sparse singles, Gerapy project_name traversal (disclosed PoC, known class), Legcord/Chaterm remainder. KEV unchanged (2026.10.04, 1734, sha f51fed1c; CVE-2026-84411 RouterOS still not in KEV). ToB 16cd79a8 head SequenceHash processed; PortSwigger e2bf4e9b Sept-23 processed; PD head Aug-16 processed; Brutecat f099b20d; disclosed sitemap unchanged stub. Strict build clean.

  • October 5 01:1xZ scan (2 folds, no new page, commit 1a64f40): Oct 5 00:30Z GHSA wave (12 advisories). (1) Shipped-config / gem-default TLS bypass pair folded on the Oct 2 cert/wrong-predicate page: alexpechkarev/google-maps Laravel through 12.16 bundled config stub ssl_verify_peer => FALSE → CURLOPT_SSL_VERIFYPEER — on-path steals the Maps API key from the query string and tampers with responses (mpgp/CVE-2026-105222 critical); gist RubyGem <6.1.0 http_connection sets VERIFY_NONE — GitHub OAuth token theft from any on-path cert (phqh/CVE-2026-105221 critical). Grep fingerprint extended to four artifact shapes: shared client helper, config-stored destination + unverified outbound, vendor config stubs, gem/package-internal HTTP builders; key-in-query-string + unverified transport = steal-once persistent-credential MITM. (2) Twine 2 desktop through 2.12.0 folded on the Sept 23 desktop/IPC page: importStories() executes imported story markup in the editor window → story script calls twineElectron openWithScratchFile IPC bridge to write-and-open a .bat → user-context RCE (qx8m/CVE-2026-105220, 7.8). Axes: enumerate IPC channels from app.asar, classify handlers combining write+open, treat imported-content XSS as RCE preamble. Tracked no-publish: NASA cFS CFE_FS_ParseInputFileNameEx OOB read (v57f), secrets-replicator external_id permission-assignment flaw (88p5, sparse), crossplane-runtime xpkg Get TOCTOU (92mr), kishor-23 food-waste 6-pack (sparse VulDB). KEV unchanged (catalog 2026.10.04, 1734, sha f51fed1c; CVE-2026-84411 RouterOS still not in KEV). ToB 9498f6e8 head SequenceHash processed; PortSwigger e2bf4e9b Sept-23 processed; PD churn fbe29821 head Aug-16 processed; Brutecat f099b20d; disclosed cc969a5f unchanged. Strict build clean. Baseline f082cf2 -> 1a64f40.

  • October 7 17:1xZ scan (1 new page + 4 folds): Oct 7 16:14–16:25Z GHSA wave. (1) Backstage seven-GHSA wave = new page docs/alerts/2026-10-07-backstage-techdocs-sanitizer-allowlist-and-scaffolder-order-oracle-wave-ghsa.md — TechDocs sanitizer allow-list misses proven from fix diffs a7d995f/017ace5 (extra_templates was ON ALLOWED_MKDOCS_KEYS; pymdownx.snippets whitelisted as string with config unscrubbed: base_path:/, restrict_base_path:false, url_download:true; old pymdown stays vulnerable post-sanitize) + Scaffolder order=asc:secrets oracle (fix e673a86, taskOrderFields set) + task-event/log secret reflection; ?order=asc:secrets 400-vs-200 = one-request patch probe. (2) Flowise pair (w7x8 CSV/Airtable 38-regex deny-list bypass inventory: pandas fetchers/importlib word-boundary/chr()/np.ctypeslib; 9gvv puppeteer executablePath spawn escape) folded Aug 4 Flowise page. (3) Quasar second wave (r5mf dev error page process.env dump + 0.0.0.0 bind + spelling-based </script> guard loses tokenizer grammar) folded June 9 Svelte page. (4) Payload MongoDB null-row field-write ACL bypass (4ww4, fixed 3.87.0, Drizzle unaffected) folded Oct 6 Payload page (row-element-type plane + adapter parity table). (5) Langflow XFF-local-only-gate bypass on MCP config-install route (4f6c, fixed 1.10.3, fixed-path config poisoning not arbitrary write, helper regression via d3d06be8e5) folded June 19 Langflow page. (6) LiquidJS ownPropertyOnly six-filter/loop disclosure bypass (fwxr, fixed 10.27.2) folded May 27 LiquidJS page (security options per-access-path, access-path battery rule). Tracked no-publish: Ghost trio (6q6j/354h/83rp known classes), RabbitMQ creds-in-exception h6w7, ImageSharp fax overflow pair, LZ4 length alloc pair, Twisted ReDoS, Quasar remaining legs noted inline. KEV unchanged (2026.10.04, 1734, sha f51fed1c). ToB 9498f6e8; PortSwigger 07adb06c; PD churn ad4ed620 head Aug-16; Brutecat f099b20d; disclosed DEAD. Strict build clean. Baseline 2ee5bb8.

  • October 7 20:1xZ scan (1 new page + 3 folds, no KEV move): Oct 7 18:32Z GHSA wave (35-item Cisco coordinated "internal review" dump + tail). (1) Cisco review dump = new page docs/alerts/2026-10-07-cisco-coordinated-review-dump-ngoam-management-plane-and-license-appliance-ghsa.md — four 9.8 NGOAM unauth root RCEs (VXLAN x3pw/cpwq, SRv6 vxhc, MPLS 74h7: crafted IP traffic to feature-enabled interfaces; show running-config | include oam|srv6|mpls surface fingerprint), NX-API root RCE cw8g/76471, License On-Prem CVSS 10.0 hg4w/76482 + unauth file write p5v8/76454 + password-reset v5w6/20328, NX-OS Python sandbox escape w5w6/20032 (lab only), review-dump handling rules (empty GHSA version fields → vendor advisories lookup; patch-skew License/Finesse vs NX-OS = engagement opening). (2) LMCache HTTP control-plane four-pack folded Oct 2 UTMStack page: /run_script guarded __import__ escape via injected FastAPI app → real __builtins__ (xgvf/107204 9.8), GET /env+/config unauth cred read + tenant-quota eviction (3m4j/107206 9.4), coordinator /instances|/quota|/events|/directory/keys (87j8/107205 8.6), attacker-writable proxy allowlist POST /api/proxies→/proxy SSRF (hrhp/107207 7.2). (3) Gophish five-leg wave folded Sept 21 mgmt-plane page: profile IDOR cred-read mw32/107270, import/site dialer deny-list SSRF 5724/107273, XFF-keyed limiter bypass hxwc/107271, bcrypt-timing username enum 7g89/107269, SMTP-error-text stored XSS→API-key theft 2424/107272. (4) DB-GPT pjc5/51862 third upload route + 6f6h/51869 sandbox silent LocalRuntime host fallback folded Aug 26 DB-GPT page. (5) OVH SPF rpc3/33586 default include:mx.ovh.com shared-authorization-pool fold on Sept 20 Exim page. Tracked no-publish: GIMP trio, WP Data Access SQLi 89mw + TEC 39v2/Unlimited Elements 5v8m deser, Jackrabbit 3mf8/f7m4, MISP fjjq OTP race + 3fqm sync-drop, Devolutions w745 write-on-read-perm, Kunstmaan/Ghost/WeasyPrint/vm2 18:05Z items already promoted 7c67efd. KEV unchanged (catalog 2026.10.04, 1734, sha f51fed1c; CVE-2026-84411 RouterOS still not in KEV). ToB 25d2bbee head SequenceHash processed; PortSwigger 07adb06c head Oct-6 processed; PD churn 7c040f86 head Aug-16; Brutecat f099b20d; disclosed DEAD. Strict build clean.

  • October 8 04:1xZ scan (1 new page + 1 fold): Oct 8 03:31Z GHSA wave. (1) Brocade Fabric OS SAN management-plane wave = new page docs/alerts/2026-10-08-brocade-fabric-os-san-fabric-management-plane-trust-wave-ghsa.md (~18 advisories, fixed 10.0.1): in-band FC vendor-unique CT peer-switch auth bypass (6h29/87659: compromised switch = unauthenticated admin channel — password reset/reboot/firmware download), AAA RADIUS-VSA/directory-claim root role binding (6chm/94578), RBAC non-standard-opcode misclassification read-only→admin (h7f4/87681), REST internal endpoints gated by client headers only (w843/87670) + Host-header-as-management-VLAN-trust IP-ACL bypass (3whm/87686), cross-logical-switch MAPS dump (f78x/87669), REST cmdi (v488/87680) + directory-account session-verification cmdi — compromised AD account = switch OS command exec (m36q/87682), unauthenticated SNMPv3 context-name overflow (jhmq/87684) + IKEv2 FCIP UDP/500 oversized-Nonce overflow (v6r4/87665) + web-daemon query-param OOB read (x2jf/87671), FA IdP-issuer directive injection via config import (2fjw/87678), SupportLink cleartext proxy creds in bundles (hrhr/87672), FCIP concurrent-request context crosstalk (gwmc/94583), admin-tier overflow pack (m9v3/fmmw/ph5j/rphp/7gvw). Rules: SAN fabric = forgotten second management network, in-band CT is credential-free admin bus; IdP-returned role attributes are authorization inputs; proprietary opcode space > RBAC classifier; support bundles = standing credential targets. (2) Octopus Server scoped-permission aggregation over-grant (w6j2/CVE-2026-102488, SA2026-12) folded on Sept 21 auth-precedence page — scope-combination matrix sweep rule, second Octopus authorization leg in two weeks (same-product re-sweep). Tracked no-publish: Uncanny Automator PHP object injection (subscriber gadget-chain, plugin-dependent), Ticket Ryutsu Center hardcoded creds + custom URL scheme (IoT/mobile thin), NXP NfcRdLib/MQX legacy, WSO2 SMS OTP no-expiry (known class), Firefox 157.0.1 mitigation bypass (detail-free), Chrome WebAPK confused deputy (pack already tracked), Impala/SSSD/Fanvil/ClearPass re-surfacing. KEV unchanged (catalog 2026.10.04, 1734, sha f51fed1c; CVE-2026-84411 RouterOS still not in KEV). ToB 9498f6e8 head SequenceHash processed; PortSwigger 07adb06c head Oct-6 model post processed; PD churn 36bc6ea3 head Aug-16 processed; Brutecat f099b20d; disclosed DEAD (rjewel stub). Strict build clean. Baseline 4b851cc/d0af308.

  • October 8 13:1xZ scan (1 new page + 1 fold): Oct 8 12:34Z GHSA wave. (1) hMailServer coordinated wave (~20 GHSAs, 6.0.0–6.3.5) = new page docs/alerts/2026-10-08-hmailserver-coordinated-wave-local-com-privesc-loopback-rebinding-and-mail-security-downgrade-ghsa.md — COM no-DCOM-ACL local privesc p223/104660 (any local login: service-account file RW + queue mail as any sender), loopback REST rebinding brute force 7264/104659 (no Host check + no local throttling), root update helper xp25/104658 (verifier program from service-writable file), junction/mount-point admin CLI f2xp/107578, installer folder perms 6v8h/107573, webmail decrypt-blob XSS xr9h/103647 + untrusted signer-cert reply encryption j6xf/107587, DANE fail-open m2j8/107584 + DANE-TA-only downgrade gv77/104704; tracked Blowfish overflows mgwr/46vr, detail-free hgvr/107510 9.1, 12-leg quadratic DoS pack as fuzzing map. (2) Eclipse Ditto Explorer split-authority OAuth fold g8w6/107503 on Sept 16 IdP page (genuine IdP login, code+PKCE verifier at attacker-chosen token endpoint, persisted config = standing implant; PKCE binds code-client not code-token-endpoint). WP singles tracked no-publish (TutorStarter registration bypass f66r, EDD m3v3, Wallet System xr88 re-listing, Airwallex wvf8); AKIN OctoCloud c42v/WOLVOX 6vq9 thin. Updated sweep = prior-wave sync + dracut m789 June re-surfacing (tracked). KEV unchanged (2026.10.04, 1734); ToB 25d2bbee; PortSwigger 07adb06c; PD 7c040f86 head Aug-16; Brutecat f099b20d; disclosed DEAD. Strict build clean. Baseline 454dd47.

  • October 8 16:1xZ scan (1 new page + 5 folds): Oct 8 15:33Z GHSA wave (~100+ items incl ~36 IBM DataPower). (1) IBM DataPower Gateway coordinated wave = new page docs/alerts/2026-10-08-ibm-datapower-gateway-coordinated-wave-preauth-parser-overflows-empty-password-ldap-and-signature-trust-ghsa.md — 4× 9.8 unauth RCE-class (7g2p/14269 heap overflow, 46h5/16340 RFC2047 encoded-word OOB write, jhg4/15762, 3m79/14992), empty-password LDAP admin bypass (r865/14502 9.8 — empty-password login test on any LDAP-federating appliance), XXE (3jq7/14905), WS-signature validation bypass (4cw5/14497), 10.6.0.x-gated unauth WebUI XSS (cmxx/14990) + 11.0-only key-derivation DoS (8qgv/14507) edition-band fingerprints, loc LPE (9pvw/14991); review-dump rules (thin IBM GHSAs → vendor bulletins), KEV watch. (2) 389 DS unauth extended-op pair** folded St 7 page: CleanAllRUV filter-injection boolean cnonfig oracle (r7mx/11770) + StartNSDS50ReplicationRequest pre-authtack overflow (5gg4/15722) — enumerate extended-operation OIDs separately. (3) Enswitch omitted-reset-param ATO** (qxpp/107640) + **mJobTime client-side-only sessiStorage auth SQL-exec PageMethods (fw9h/9209) folded Sept 21 precedence page — absent-value battery on security rams. (4) Ollama /api/pull digest traversal → /usr/lib/ollama writable-by-service → root RCE on reart (w8p2/103663, fixed 0.35.0) folded Oct 2 page. (5) SGLang ZMQ PickleWrapper pickle.loads fires with SGLANG_USE_PICK_IPC disabled** (w4hv/93034) folded July 30 SGLang page — unwrap-hook audit rule. (6) OpenShift console /locales/resource.json lng/ns traversal + dynamic-plugin backend pivot (v74g/75887) folded July 2 dashboard page. (7) Keycloak read-only-role client-secret read (ch4r/107604) + DCR silent revocation-setting disable via serialization omission (qxj8/107623) folded Sept 16 IdP page. Tracked no-publish: ImageMagick ~14-pack, TightVNC quintet, Dislocker pair, league-commonmark pair, EspoCRM trio, Jacamar CI, ILIAS arg-injection, Parse Server, Checkmk LPE, insights-operator RBAC overgrant, beam_mcp pair, moby/sys DoS, Chrome 155 re-sync, DolphinScheduler vpj2/g89m re-sync (Oct 8 09:3xZ folds). Updated sweep = same-wave sync + Chrome/kernel re-listings. KEV unchanged (catalog 2026.10.04, 1734, sha f51fed1c; CVE-2026-84411 RouterOS still not in KEV). ToB 9498f6e8 head SequenceHash processed; PortSwigger 07adb06c head Oct-6 processed; PD churn 3f45ebfe head Aug-16 processed; Brutecat f099b20d; disclosed DEAD (rjewel stub). Strict build clean.

  • October 8 17:1xZ scan (1 new page + 1 fold): Oct 8 16:08–16:50Z GHSA wave. (1) AsyncHttpClient coordinated wave (10 GHSAs, 3.0.x/2.16.x) = new page docs/alerts/2026-10-08-asynchttpclient-coordinated-wave-client-side-credential-crossing-replay-digest-downgrade-and-cookie-store-failures-ghsa.md — critical stale-target replay jmqq/107282 (ResponseFilter failover/retry writes original host's request+Authorization into another host's correctly-handshaked TLS tunnel; pool-key crossover; http→https replay with no SSL handler = cleartext creds); Digest-no-nonce→Basic cleartext downgrade rqf5/107231 (+3.0.12-only trailing-backslash realm trigger = version fingerprint); NTLM/SPNEGO pool-key incomplete-fix v2j5/107230 (unset principal default Kerberos, proxy realm unkeyed, CORP\alice==OTHER\alice); plaintext-HTTP Set-Cookie plants/overwrites/deletes Secure cookies p2jm/107226 (2.x never fixed); Domain= public-suffix residual of CVE-2026-55688 f9m8/107280; store replaces caller's explicit Cookie header 2jwh/107228 (CVE-2024-53990 fix bypass); ws:// CONNECT carries Proxy-Authorization to origin 3wp9/107285; ThreadLocalRandom cnonce mfj3/107283; ws deflate bomb x8v2 tracked. Rules: client-side bugs provable on own infra; fix-history differentials = headless-Java version fingerprint; cookie store storage-vs-retrieval two policy layers; trust-boolean sibling-branch sweep. (2) Pydantic AI IPv6 zone-id metadata blocklist bypass vmxc/107289 folded on that page (4th remediation of same fetch field: %251 zone hashes into IPv6Address set membership, ignored by connect path; blocklist = comparison-function property, replay historical spelling corpus). Fold: PraisonAI SECOND multi-leg wave ≤1.6.77→1.6.78 (7 legs) on May 29 page — approval cached by tool NAME only, reused with arbitrary args (write_file not exempt) 29r9/60087; SkillTools zero containment beside FileTools._validate_path c44f/61443 + YAML approve: pre-answers @require_approval; .praisonai/config.toml output_file repo-controlled write-outside-root qjw5/60089; FastContext abs/traversal reads 4xxv/61432; tools.py exec_module on string output_pydantic 4gfv/61437 + plugin auto-discovery exec m6wp/61446 (clone-and-run RCE); CodeAgent sandbox=True ignored, full os.environ to LLM code 2xv2/61447 critical; web_crawl rebinding qg25/61430. Third multi-leg wave in ten days = same-product re-sweep rule. Tracked no-publish: Excelize quintet (memory-safety/DoS class), Pydantic AI ReDoS/OTel-leak singles, moby DoS. Updated sweep = same-wave sync + duplicate-marker GHSAs. KEV unchanged (catalog 2026.10.04, 1734, sha f51fed1c; CVE-2026-84411 RouterOS still not in KEV). ToB 25d2bbee head SequenceHash processed; PortSwigger 07adb06c head Oct-6 processed; PD churn 7c040f86 head Aug-16 processed; Brutecat f099b20d; disclosed DEAD (rjewel stub). Strict build clean. Baseline 8dfbd8b.

  • October 8 18:1xZ scan (1 new page + 5 folds, KEV +5): Oct 8 17:40–17:58Z GHSA wave. (1) Handlebars triple (4.0.0–4.7.9 → 4.7.10) = new page docs/alerts/2026-10-08-handlebars-template-injection-triple-ast-validator-bypass-own-property-denylist-and-script-breakout-ghsa.md (9.8 AST validator bypass via blockParams.length; Function.prototype.constructor own-property deny-list bypass; precompile </script> inline breakout). Folds: Coraza second tier (6 parser-divergence legs) on the Oct 6 Coraza page; JHipster generator sort= R2DBC stacked-statement SQLi + Blob ContentType stored XSS on the Oct 2 UTMStack page; LangChain mongodb session-id operator injection on the Sept 18 query-grammar page; PraisonAI 3-leg continuation (context-gather reads, command @path reads, DDL dimension interpolation) on the May 29 page; Pydantic AI to_web Content-Type/Host legs on the Feb 6 page; datamodel-code-generator weak-import traversal into codegen-untrusted-specs. Tracked no-publish: msgpack5 septet, Coraza DoS trio, Pydantic AI DoS/telemetry legs, Excelize re-sync. KEV catalog 2026.10.08 (1739): CVE-2015-3306 ProFTPD, CVE-2015-5477 BIND, CVE-2016-3081 Struts, CVE-2021-3199 ONLYOFFICE, CVE-2023-22894 Strapi (legacy sweep items, no new pages).

  • October 8 19:1xZ scan (2 new pages + 5 folds): Oct 8 18:32Z GHSA wave (~41 items incl rejected-dup records). (1) OpenStack Mistral wave = new page docs/alerts/2026-10-08-openstack-mistral-orchestration-plane-built-in-exec-sharing-lifecycle-and-policy-free-maintenance-ghsa.md — std.sshroxied paramiko.ProxyCommanexecutor RCE default config (gxqc/93858), policy-free /v2/maintenance cross-tenant PAUSED (858j/93860), resolve-then-write + collision adoption (73hv/97147), owner-blind share re-grants (p254/93861). (2) Malcolm NSM wave = new page docs/alerts/2026-10-08-malcolm-nsm-stack-reverse-proxy-composition-wave-rbac-byte-vs-route-forged-identity-headers-and-fetch-anywhere-uploader-ghsa.md — Lua RBAC raw-vs-decoded URI (rgrh/107334), case fall-through unauth Arkime + X-Forwarded-User (c366/107336), kiosk script_call CSRF wipe (hfc4/107337), FilePond fetch-any-URL readback (6x93/107362), arkime-live 8005 forged identity + hardcoded Malcolm secret (9jvx/107361), single-stream decompress guard gap (ffq8/107335). (3) Folds: Zimbra trio (6c75/50054 loginAs self-grant, p88h/50055 Sieve notify, 7jfc/10631 EWS FindItem) on Aug 21 Zimbra page; FFmpeg RTSP redirect whitelist escape (jhxg/107698) on July 30 URL-policy page; Obsidian Reveal.js data-background-iframe + MathJax TAB-scheme pair (fj5r/104077, 4pcg/104078) on Sept 23 desktop page; go-getter S3/GCS traversal (86f4/19585) on June 19 IaC page; GnuTLS 3.8.13 CN-fallback bypass (2j2x/88647, 9mfx/95210) + wolfSSL name-constraint regression (vf9w/95208) on Oct 2 Bouncy Castle/cert page. Tracked no-publish: FFmpeg demuxer DoS/disclosure pack, QloApps id_hotel IDOR, HP Sure Click kernel overflow, MainWP Child object injection, gnutls reject-leg, rejected-duplicate CVEs. KEV unchanged (catalog 2026.10.08, 1739, sha1 4f643898); ToB 25d2bbee head SequenceHash processed; PortSwigger 07adb06c head processed; PD churn 7c040f86 head Aug-16 processed; Brutecat f099b20d; disclosed DEAD (rjewel stub). Baseline 768ee74.

  • October 8 20:1xZ scan (3 folds, no new page): Oct 8 19:36–19:43Z GHSA wave (~18 items, all new since 19:1xZ). (1) enshrined/svg-sanitize trio folded on the July 23 DOMPurify state/context page — DTD entity / HTML5 NCR collision stored XSS 9rjx/107380 (<!ENTITY Tab "#"> → sanitizer sees # fragment, saveXML re-emits entity ref, DOCTYPE stripped, browser resolves &Tab;AB → javascript: executes; 45M-download library, WP Safe SVG 1M+ installs), ca-sensitive XPath <use> selection vs later attribute normalization m9xh/107381 (xlink:HrEf skips nesting-DoS graph, mirror of CVE-2025-55166), DTD attr-decl crash v383/107379; entity-semantics battery + case-variant fix-history replay rules. (2) MariaDB Connector/Node.js three-leg wave folded on the pt 18 query-grammar page** — NO_BACKSLASH_ESCAPES flag declared-never-read placeholder SQLi r3rv/107385, permitSetMultiParamEntries key backtick SET-clause injection where escapeId exists-but-uncalled v6pj/107384, GeoJSON allocUnsafe heap-to-row disclosure 48qf/107383 (LineString sibling correct = parity rule). (3) PraisonAI codegen train continuation on the May 29 page — second raw field deploy.api.host into app.run(host=...) 79fv/61433 codegen + Host-header localhost auth gate 2gpf/61435 (Host-is-data family, July 8 page cross-ref) + 4r3p/60086 fj8f dup tracked. Tracked no-publish: music-metadata quintet, CairoSVG quadratic path DoS (operator scaling-measure note), amqp091-go pre-negotiation frame limit, ed25519 client-crash DoS cx2f/107382, Pydantic AI concurrency-slot leak 6fqq/107286. KEV unchanged (catalog 2026.10.08, 1739); ToB empty-body churn; PortSwigger head Oct-6 processed; PD empty stub head Aug-16; Brutecat f099b20d; disclosed DEAD. Baseline ad4103e.
  • October 8 22:1xZ scan (1 methodology fold + 3 folds + KEV note, no new page): Oct 8 21:57–22:10Z GHSA wave. (1) fast-jwt six-leg pack folded on the JWT algorithm-confusion methodology page — incomplete-patch non-whitespace-prefix RSA→HS256 re-enable ww5h/107722 9.8 (trim()-then-anchored-regex = PyJWT BOM leg in JS), falsy-key+explicit-algorithms skips signature verification entirely 8wpc/107720, raw JWK/JWKS JSON as HMAC secret g3jj/107724 (PyJWT container-wrapping mirror), array-payload skips ALL claim validators 5hjw/107723 (typeof []==='object', header check has Array guard, payload check doesn't), clockTolerance:Infinity disables exp+nbf + poisons verifier cache 687g/107721, expired-no-iat cache acceptance x937/107719 (cached-vs-cold parity invariant). Rollup: key-classification grammar sweep + degenerate-config battery + path-parity probes. (2) Mechanize meta-refresh/redirect credential-crossing pair folded on the Oct 8 AsyncHttpClient page — c6rp/107399 + 2mwr/107715: enumerate every navigation primitive (30x, meta-refresh, JS-refresh, form-autopost) as separate credential-crossing candidate; crawler header-capture via attacker page. (3) Hazelcast pair folded on the Sept 18 query-grammar page — Predicates API client-supplied compute RCE w294/107725 + low-priv client arbitrary member-memory read 6v25/107726 9.8 (heap/off-heap cross-tenant secrets; grid ports = compute-on-behalf-of-client model). (4) PraisonAI fifth batch on the May 29 page — middleware-registered-only-if-secret trio (6wjp AgentOS unauth system-prompt read + CORS*, 4w49 Jobs API rebinding webhook SSRF, hc5v MCP unauth tools/list + inputSchema-not-enforced), SecurityPolicy-never-read-by-SubprocessSandbox 5r6c/60085 (doc-claim-vs-code-path audit), find -exec {} + allowlist bypass cv3g/61434 (allowlist-embedded-runner question), AICoder root-container write/exec 9mp3/61445. Tracked no-publish: Indico four-pack (SSRF partial-check, legacy session-export IDOR, minutes/link XSS — known classes), banks symlink-prompt + prompt-as-privileged-message (repo-trust + message-forgery classes covered), AdonisJS route-param open redirect, Skyeye OnlyOffice-callback SSRF+file-overwrite trio (thin vuldb, callback-write class known), IBM Security Verify Access ~20-advisory dump (deser unauth RCE 78401/78406 + auth bypasses — detail-free vendor dump, fold-when-detail-lands per Cisco review-dump precedent), HPE iMC auth bypass + Guardium ~10-pack (detail-free appliance singles; Guardium edge-controller container-image exec 84272 worth revisit on detail), Tenable Identity Exposure AD-listener cmdi-to-PDCe (detail-free, shape notable), MIT krb5 NULL-deref pair, Poppler revision6Hash stack overflow, fast-jwt clockTolerance dup markers, rejected dups. KEV unchanged (catalog 2026.10.08, 1739, legacy backfill note added on cisa-kev.md; CVE-2026-84411 RouterOS still not KEV'd). ToB fea2d7b6 head SequenceHash processed; PortSwigger 07adb06c head Oct-6 processed; PD 7c040f86 head Aug-16; Brutecat f099b20d; disclosed DEAD (rjewel stub). Baseline f0fe2f0.
  • October 9 06:1xZ scan (1 fold, no new page): Oct 9 00:31Z GHSA publish = CNA-import wave, mostly republications already folded c5dd5c3 (Go stdlib CONNECT/state-smuggling, Go toolchain, ansible-galaxy, junction mkdir, Tapo trio, NetScaler 107406). One durable promotion: IBM Guardium Sniffer detail landed (vendor bulletin node/7291674) — folded on the Sept 18 Mongoid page: Sniffer-component wave in Guardium Data Protection 12.0-12.2 fixed by SqlGuard_12.0p4018_SnifferUpdate: path-traversal RCE 75875 9.8, unauthorized-SQL-execution 80381 9.8, unauthenticated SQLi-to-backend 81932 8.6, TDS PRELOGIN decoder overrun 84058 (reachable from the monitored network — passive-dissection appliance attack-surface rule), MongoDB SCRAM-username heap overflow 82335, five more BO-RCE legs. Rules: monitored-segment threat model for tap/spanned appliances, per-engine early-packet fuzz battery, appliance backend DB as crown-jewel recon target, FixCentral fix-ID band fingerprinting. Microsoft October Patch-Tuesday CRITICALs landed detail-free (Bookings 94510 9.9 user-controlled-key, App Service 77900 9.8 missing-auth RCE, Partner Center 96207 10.0 cert-validation, Dataverse 88131 9.8 unauth deser RCE, Azure SRE Agent 69435 9.6, API Center 83943, Event Grid 83947) — tracked fold-when-detail-lands; Guardium second pack (84249/84209/84057/84230/84247/84891/82900/87980 not in Sniffer bulletin) + Jivejdon octet, Satel Netco trio, eog/mitsubishi/libxml2 enrichment re-surfacings, Fanvil/Chrome 155 re-listings = tracked no-publish. KEV unchanged (catalog 2026.10.08, 1739, sha fb1621be; RouterOS 84411 still not KEV'd). ToB fea2d7b6; PortSwigger 07adb06c; PD 7c040f86 head Aug-16; Brutecat f099b20d; disclosed DEAD (rjewel stub). Baseline c5dd5c3.
  • October 9 07:1xZ scan (1 fold, no new page): Oct 9 06:31Z GHSA wave (15 items) + updated-feed enrichments. Promotion: FalkorDB seven-GHSA coordinated wave (fixed 4.20.0/4.18.x) folded on the Sept 21 auth-precedence page — Bolt auth gate delegates to empty Redis AUTH and admits on any error except WRONGPASS (LOADING/MASTERDOWN/OOM = unauthenticated graph queries, f2fq/107910 critical: backend-error-vocabulary sweep rule for delegated auth decisions), --bolt flag parsed on the Redis path even with BOLT_PORT disabled (g4x7/107911: feature-flag disables listener not parser — probe feature args on the primary port), four ASSERT()-only bounds legs compiled out in release (jpx9/107908, x67x/107909, RDB-decoder fmqx/fwp9/gxrc on passwordless replication channel — debug-vs-release differential testing rule, replication-stream = deserialization channel), 3-listener x 2-parser surface inventory. Second FalkorDB wave after Sept 21 six-pack = same-product re-sweep validated. Tracked no-publish: Ops Manager IDOR/invitation-disclosure/unthrottled-endpoints trio, Keycloak login-theme realm-admin stored XSS (gv8g/107889), Backdrop config-export, CUPS quad, GLib D-Bus cookie_context client-side file-read oracle (hmpf, Sept 15 parser page class), openvt stat-vs-fd-owner confusion, ansible.posix authorized_key chown-lchown LPE (July 28 zip-lib family), Mitsubishi GX Works3 local block-password bypass. KEV unchanged (catalog 2026.10.08, 1739, sha fb1621be; RouterOS 84411 still not KEV'd). ToB 9498f6e8; PortSwigger 07adb06c; PD churn 3c197950 head Aug-16 processed; Brutecat f099b20d; disclosed DEAD (rjewel stub).
  • October 9 10:1xZ scan (2 folds, no new page): Oct 9 09:31Z GHSA wave (~49 items, ~20 Linux kernel bpf/veth/netfilter memory-safety tracked). (1) Telerik Report Server rogue service-agent registration (mqv8/106145, high, fixed 12.2.26.1007) folded on the Oct 2 UTMStack transport page: guest/low-priv bearer token accepted on the service-agent SignalR hub; rogue agent waits for the server's own settings-sync push to receive storage settings + encryption private keys decrypt all stored data-source credeials; rules: human-token/machine-role crossover sweep on every WS/SignalR/SSE hub role assertion, sync/push events = standing secret delivery (induce sync with own dummy data source in lab), paired stored XSS via javascript:/vbscript: report navigation links (97qc/106155). (2) Code Snippets <3.10.0 multisite pair (x27w/106095 request-supplied snippet scope + no cap check = subsite admin toggles network-scoped code snippets; 6xh4/106097 import-endpoint UNION SQLi from subsite admin reaching shared network tables/password hashes) folded on the Sept 19 WP alternate-surface page: subsite-admin↔Super-Admin boundary unmodeled in plugin code, caller-selected scope fields, import/migration verb-family probe pass. Tracked no-publish: Dell SCG Policy Manager <5.34.00.16 eleven-GHSA vendor-dump (CWE-bulletin style, detail-free: untrusted-control-sphere RCE phc8 8.x, improper cert validation 4wmw, no-throttle auth 2fw7, missing-authz pg8v — fold-when-detail-lands per Cisco review-dump precedent; second SCG wave after the Oct 8 ASCG pack on the SAN page, same-product re-sweep watch), Kirki SSRF host-check + comment shortcode (known classes), WP Rocket pair, Redux/X2 Cart escalation (class-covered), OpenStack Ironic HTTP Basic creds-to-unexpected-host (mpf9, detail-free credential-crossing, AsyncHttpClient page class), Telerik XSS, Linux kernel wave, Ops Manager/Backdrop re-listings. KEV unchanged (catalog 2026.10.08, 1739; RouterOS 84411 still not KEV'd). ToB 25d2bbee head SequenceHash processed; PortSwigger 07adb06c head Oct-6 processed; PD churn 7c040f86 head Aug-16; Brutecat f099b20d; disclosed DEAD (rjewel stub). Strict build clean. Baseline 041a438.
  • October 9 13:1xZ scan (4 folds, no new page): Oct 9 12:31Z GHSA wave (~93 items, ~50 standard WP singles + second Dell SCG twelve-pack detail-free). (1) Apache CXF coordinated eleven-record wave (fixed 4.2.4/4.1.9/3.6.13) folded on the Aug 6 CXF page — STS token validation cache keyed by 32-bit Arrays.hashCode, collision auth bypass without password/signature/STS call (hw52/97468: non-crypto cache keys as auth bypass, grep-hashCo-cache sweep), SAML trust result stored in one object shared by all requests — forged untrusted-cert assertion reads a legit in-flight request's true (2rg8/97791, cross-request state contamination), JAX-RS XML Signature interceptors never bind app-visible XML to signed bytes — trusted-key-signed doc wrapped in unsigned content reads as signed (m89p/100227, XSW), Netty HTTP client transport never wired hostname verification even with disableCNCheckalse (vr34/107938, config-name-vs-implementation + transport-artifact fingerprint), JPA OAuth provider non-amic find-then-delete concurrent code redemption (4856/73179, provider-parity rule: run single-use fixture per backend), OIDC RP state param post-auth redirect target, direct-vs-double-encoded decode-branch parity (75qj/79650), max_age step-up dead via ms/s unit mismatch + inverted polarity (8ph71575, silently-inoperative step-up = behavior-probe not config-audit), CompressionUtils.inflate uncapped DEFLATE before JWE/SAML validation (m259/78384, parse-before-verify DoS + cap-property fingerprint). (2) gvproxy unauthenticated /services/forwarder/expose host arbitrary-file-delete folded on the May 19 Podman page (hp8g/107935 CVSS 9.3, fix PR 718 = os.Remove pre-listen on caller-supplied socket path; destructive-sink-from-unvalidated-path grep + container-network-helper admin-verb inventory). (3) Bouncy Castle Java LTS native one-shot CTR packet counter-wrap keystream reuse folded on the July 1 CTR page (qgfp/71884 fixed LTS 2.73.13; 13-15 byte IV + oversized input wraps mid-packet silently returning full length; implementation-path parity battery streaming-vs-portable-vs-native). (4) sequoia-openpgp missing-Key-Flags-subpacket inference -> back-signature bypass + arbitrary subkey bind + forgery folded on the Oct 2 BC field-identity page (g33h/42784; cross-verifier capability-inference differential, legacy-format fixture rule). Tracked no-publish: CXF MTOM folded-header/StaxUtils-unbounded/FIQL-CPU DoS trio, Dell SCG second detail-free wave (watch continues), Mistral policy-free /v2/maintenance re-listing (Oct 8 page), gnutls info-disclosure re-listing, ~50 WP wave (Traveler/AjaxSearchPro/JNews/tagDiv/WPLMS blind SQLi, Zombify unauth webshell upload, GiveWP/Forminator identity spoof, Vipps object injection, CF7 PDF traversal pair). KEV unchanged (catalog 2026.10.08, 1739; KEV-data repo path moved to known_exploited_vulnerabilities.json on main — cisagov/kev-data/main/known_exploited_vulnerabilities.json works, cisa.gov direct feed Akamai-denied again; RouterOS 84411 still not KEV'd). ToB 9498f6e8; PortSwigger 07adb06c; PD churn bbfca721 head Aug-16 processed; Brutecat f099b20d; disclosed DEAD (rjewel stub). Baseline 5099bb3.
  • October 9 14:1xZ scan (2 folds, no new page): Oct 9 14:07Z GHSA wave (Strawberry pair) + 22:10Z Oct-8 stragglers already promoted (fast-jwt pack, Hazelcast, Banks-class checked). (1) Strawberry GraphQL 0.217.0-0.326.0 permission fail-open (pfvf/CVE-2026-107728, high, fixed 0.326.1) folded on the Sept 21 auth-precedence page: PermissionExtension.resolve() dispatches sync/async on iscoroutinefunction declaration spelling, so a plain def has_permission() returning an awaitable hits the sync truthiness test -- coroutine-always-truthy = protected resolver runs; un-awaited-truthy sweep rule for security callbacks + GraphQL negative-control probe. (2) Banks pair (hmq2/556j, fixed 2.5.0/2.5.1) folded same page: Prompt.chat_messages() parses each rendered-template line as ChatMessage JSON with unconstrained role: str = rendered user text becomes privileged system/assistant/tool messages (pre-model chat role injection; structurize-after-render boundary + role:"system" JSON canary probe), plus DirectoryPromptRegistry symlinked .jinja/index.json read/write (metadata-file containment gap). Tracked no-publish: Strawberry graphql-ws completed-slot accounting DoS (m952, low, conditional), Indico SSRF-fix-gap + legacy session-export IDOR (thin singles), Indico minutes/link-field XSS pair, Pydantic AI OTel retry-content non-redaction (low), msgpack5/Excelize/music-metadata/memory-safety packs, MariaDB Connector/Node.js SQLi pair (client-expansion class, NO_BACKSLASH_ESCAPES + SET-object-keys; tracked, class on ORM grammar page), AdonisJS unencoded-route-param open redirect. Updated feed = Bootstrap CVE-2025-1647 popover/tooltip XSS re-surfacing (known class). KEV unchanged (catalog 2026.10.08, 1739, sha fb1621be). ToB 9498f6e8/fea2d7b6 churn head SequenceHash processed; PortSwigger 07adb06c; PD churn head Aug-16; Brutecat f099b20d; disclosed DEAD (rjewel stub). Strict build clean. Baseline 6758327.
  • October 14 20:1xZ scan (3 folds, no new page): GHSA published sweep after 18:38Z = 3 new items, all promoted as folds. (1) BBOT unarchive symlink-guard bypass (xpf3/CVE-2026-14966, low, bbot >=2.3.1 <3.0.0) folded on the July 28 extraction page — pre-extraction symlink check parses listing stdout, legacy p7zip DOS-attribute-prefixed mode column hides the link bit; rules: guard-input-grammar coupling (structured metadata vs subprocess-stdout grep), listing-dialect fixture battery, fingerprint host archive-tool builds in recon pipelines. (2) Metalama shared-temp sentinel DLL plant (m6wq/CVE-2026-62847, medium/v3 8.2, <2025.1.18/<2026.0.25/<2026.1.19) folded on the April 30 shared-temp page — predictable GetTempPath cache + .completed sentinel = integrity verdict, planted DLL executes inside compiler/MSBuild on next privileged build = cross-user LPE on shared POSIX CI; sentinel-as-trust grep fingerprint distinct from derived-path race, no race needed. (3) Ahsay AhsayCBS KEV chained pair (CVE-2026-105133 checkSysPwd random auth bypass + CVE-2026-105134 /rps/api/json/UpdateReceivers.do random OS cmdi, KEV'd 2026-10-14) folded on the Aug 31 PaperCut chained-KEV page — same parameter name across two components = chain seam, backup-appliance component-prefix route families, MSP backup servers default recon targets; lab-only for cmdi leg. KEV updated (catalog 2026.10.14, 1745, sha 47b463a1; Cisco SEG 76519 KEV-confirmed, framing already on Juniper page; PAN-OS 0322 authenticated root code injection detail-free, tracked fold-when-detail-lands). Tracked no-publish: Microsoft.OpenApi.YamlReader billion-laughs DoS (7pxr/CVE-2026-72923, availability-only, alias-expansion class known). Updated feed = flyto-core h9f9 already folded ac560ab. ToB 86a1faac head Oct-14 package-integrity already promoted; PortSwigger 8ae57e41 head Aug-12 processed; PD a9cf8195 head Aug-16; Brutecat f099b20d; disclosed DEAD (rjewel stub). Strict build clean.
  • October 15 01:1xZ scan (1 fold, no new page): ContextForge python_sandbox_server CVSS-10.0 escape (GHSA-xm98-3vcf-fph7 / CVE-2026-53710, <= 1.0.1 fixed 1.0.2, updated-feed enrichment landing 2026-10-15T01:07Z) folded onto the Aug 30 RestrictedPython page as third escape axis: embedding app puts raw getattr in safe_builtins (unmediated attribute access beside the _getattr_ hook), validate_code is a literal-text dunder deny-list bypassed by runtime-constructed names, and execute_code MCP tool exposed over unauthenticated HTTP/SSE; class-hierarchy walk to subprocess.Popen. Operator playbook added: three-layer sandbox triage (transport auth / exposed-builtins surface / static-validator spelling differential), mediation-parity invariant, safe_builtins grep fingerprint. Tracked no-publish: MS Oct-13 patch-day remainder (detail-free boilerplate precedent; 88092/70188 ASP.NET Core SFB 9.4/9.1, 5gjq QUIC 9.8, 96230 ASP.NET RCE — revisit on MSRC detail), 7pxr OpenApi.YamlReader billion-laughs DoS re-listing. KEV unchanged (catalog 2026.10.14, 1745, ids-sha febfaae5). ToB 86a1faac; PortSwigger 59b1ab6e; PD churn cf1c2eda head Aug-16; Brutecat f099b20d; disclosed DEAD (rjewel stub). Strict build clean. https://github.com/advisories/GHSA-xm98-3vcf-fph7