Actual impact on daily life and business
Organized medical appointments, cloud services, personal information, and money with sources. Unconfirmed loss amounts are not estimated.
Impact list →AI translation. Check versions, conditions and actions against the Japanese original and primary sources.
SECURITY REVIEW · 2026-10-28 13:18:44 JST / 2026-10-28 04:18:44 UTC
What needs urgent fixes and what has already disrupted daily life.
Known exploitation of Brotli and Commerce, follow-ups on GMO and @link, network equipment, browsers, and AI, authentication, and development infrastructure. Actual harm and possibilities can be checked in separate lists.
Target: 2026-10-28 13:18:44 JST / 2026-10-28 04:18:44 UTC. Change window: 10/27 18:47–10/28 13:18:44 JST.
Actual retrieval is of current revisions from 10/28 13:21 JST onward. Same-day follow-ups with dates only are in the reference section.
Quick overview: check only what you use.
Priority updates for public infrastructure
Confirmed KEV additions for Brotli and Commerce. Check whether fixes are applied in the products and release series actually running.
Exploitation confirmation and response →AI, authentication and development infrastructure
Check MLflow, MCP, Authlib, Better Auth, GitPython, and others against each advisory's affected scope.
Additional MCP configuration →Endpoints and networks
Inspect NetScaler, PAN-OS, WatchGuard, browsers, and email. Planned shipment and completed deployment are separate.
Endpoints and appliances →Database and advisory updates in the window · 62 groups
Organized by database inclusion/revision and advisory update times. These are not attack start times or counts of newly occurring harm.
10/28 00:19 JST status · Publication/update confirmed
Railway: new registrations remain suspended; next report scheduled after the cutoff
The status update at 10/27 15:19 UTC still reports suspension of new registrations, with no resumption date determined. Distinguish continued operation of existing deployments from build, dashboard, and other disruptions. Approximately 100,000 workspaces and up to 1.85% describe the potential scope of affected environment variables, not a confirmed number of people whose data leaked.
What to checkRevoke and reissue old secrets at their issuers and audit them. Do not treat the next scheduled event, 10/28 16:00 UTC, as recovery achieved by this cutoff.
10/28 00:30 JST update · Publication/update verified.
Studio: joint-report submissions planned for early 11
The update on the 28th at 00:30 says acceptance of joint reports to the Personal Information Protection Commission has not begun. Individual notification is not included in joint reporting. Reading of encryption keys and external accessibility were confirmed, but the number of records actually obtained remains undetermined.
What to checkInvestigate actual use of form data and separately decide individual notification. Revoke external API keys with their issuers. Key rotation does not eliminate the possibility of earlier acquisition.
Verified around 10/28 04:00 / report 13 at 11:00 JST · Publication/update verified.
GMO: perpetrator-site domain suspension and compensation guidance updates
Report 13 confirms suspension of the perpetrator site's domain around 04:00 on 10/28. Suspension does not mean recovery of information, deletion of copies, or completion of service restoration. The maximum special relief payment of 300 ten-thousand yen in report 12 is conditional, not the total loss or amount already paid. Report 12 has a discrepancy between 19:10 in the heading and 19:00 in the timeline.
What to checkAvoid perpetrator sites and leaked material; consult official individual communications, alternative environments, and compensation terms. Do not respond to opportunistic requests for credentials or fees.
10/28 04:00:02 JST catalog release · Publication/update confirmed
KEV: Brotli and Adobe Commerce added; reflect confirmed exploitation in priorities
CISA's 2026.10.27 edition contains 1,760 entries. CVE-2026-111497 and CVE-2026-48356 were newly added, with a 11/10 deadline. This confirms exploitation of the vulnerabilities; it does not mean every .NET or Node.js environment or merchant was compromised. Victim counts and actual losses are not provided.
What to checkCheck product-specific fixes such as Brotli 1.2.1 and Node.js 22.23.4 / 24.22.1 / 26.12.1. For Adobe, check the version-specific July cumulative update in APSB26-73. Do not treat KEV deadlines for US federal agencies as legal deadlines for all users.
Updated 10/28 12:30 JST · Publication/update confirmed
@link: beta testing at some medical institutions, not full resumption.
The 10/28 12:30 update describes the start of cloud beta testing at some medical institutions. Patient apps, web reservations, and external-system integrations remain suspended. Effects on medical institutions' reservation operations continue, and the number of records affected by leakage remains under investigation.
What to checkContact your medical institution directly about reservations or changes. Distinguish planned resumptions/refunds from completed actions, and check password reset guidance when service resumes.
GHSA published: 2026-10-27T13:27:58Z 〜 2026-10-27T13:27:58Z · Publication/update confirmed
ajenti: check published advisories and fix scope
Confirmed 1 advisory in this GHSA publication window. Refer to each developer's material for prerequisites involving features, inputs, privileges, and other conditions. Registration time is not the first shipment date or the time of actual attacks. This material alone does not establish the number of people or incidents actually affected.
What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.
By advisory: affected and fixed versions (1 entry)
GHSA-vcw3-r3fx-j444
Ajenti has potential Remote Code Execution
aj(pip): affected< 2.2.13→ fixed version2.2.13
GHSA publication: 2026-10-27T13:29:57Z – 2026-10-27T13:29:57Z · Disclosure and updates checked
dcmjs: published advisories and fix scope
Confirmed 1 advisory in this GHSA publication window. Refer to each developer's material for prerequisites involving features, inputs, privileges, and other conditions. Registration time is not the first shipment date or the time of actual attacks. This material alone does not establish the number of people or incidents actually affected.
What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.
By advisory: affected and fixed versions (1 entry)
GHSA-px68-xx5g-48q5
dcmjs: DS/IS VALUE REPRESENTATION INPUT VALIDATION BYPASS
dcmjs(npm): affected< 0.52.0→ fixed version0.52.0
GHSA publication: 2026-10-27T13:29:47Z – 2026-10-27T13:29:47Z · Publication/update verified
wails: published advisories and fix scope
Confirmed 1 advisory in this GHSA publication window. Refer to each developer's material for prerequisites involving features, inputs, privileges, and other conditions. Registration time is not the first shipment date or the time of actual attacks. This material alone does not establish the number of people or incidents actually affected.
What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.
By advisory: affected and fixed versions (1 entry)
GHSA-47hv-j4px-h3c9
Wails: wildcardPatternToRegex allows Origin bypass via suffix match in BindingsAllowedOrigins
github.com/wailsapp/wails/v2(go): affected>= 2.0.0, < 2.13.0→ fixed version2.13.0
GHSA published: 2026-10-27T13:29:25Z 〜 2026-10-27T13:29:25Z · Publication/update confirmed
dolibarr: check published advisories and fix scope
Confirmed 1 advisory in this GHSA publication window. Refer to each developer's material for prerequisites involving features, inputs, privileges, and other conditions. Registration time is not the first shipment date or the time of actual attacks. This material alone does not establish the number of people or incidents actually affected.
What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.
By advisory: affected and fixed versions (1 entry)
GHSA-v5fq-cf5m-vwv7
Dolibarr has SQL Injection in societe/class/societe.class.php via localtax1_value parameter
dolibarr/dolibarr(composer): affected<= 23.0.0→ fixed versionNo fixed version listed
GHSA publication: 2026-10-27T13:30:41Z – 2026-10-27T13:30:41Z · Disclosure and updates checked
agno: published advisories and fix scope
Confirmed 1 advisory in this GHSA publication window. Refer to each developer's material for prerequisites involving features, inputs, privileges, and other conditions. Registration time is not the first shipment date or the time of actual attacks. This material alone does not establish the number of people or incidents actually affected.
What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.
By advisory: affected and fixed versions (1 entry)
GHSA-m4w4-3r8h-jw98
Agno: Arbitrary code execution via `eval()` on `field_type` in `FunctionCall`
agno(pip): affected< 2.3.24→ fixed version2.3.24
GHSA publication: 2026-10-27T13:30:17Z – 2026-10-27T13:30:17Z · Publication/update verified
oauthlib: check public advisories and fix scope
Confirmed 1 advisory in this GHSA publication window. Refer to each developer's material for prerequisites involving features, inputs, privileges, and other conditions. Registration time is not the first shipment date or the time of actual attacks. This material alone does not establish the number of people or incidents actually affected.
What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.
By advisory: affected and fixed versions (1 entry)
GHSA-3jp2-3mrg-2vxc
OAuthLib: Bearer token can be retrieved as long as client knows a valid client ID for device workflow
oauthlib(pip): affected>= 3.3.0, < 4.0.0→ fixed version4.0.0
GHSA published: 2026-10-27T13:30:10Z 〜 2026-10-27T13:30:10Z · Publication/update confirmed
MONAI: check published advisories and fix scope
Confirmed 1 advisory in this GHSA publication window. Refer to each developer's material for prerequisites involving features, inputs, privileges, and other conditions. Registration time is not the first shipment date or the time of actual attacks. This material alone does not establish the number of people or incidents actually affected.
What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.
By advisory: affected and fixed versions (1 entry)
GHSA-6hp3-vr39-rqw8
MONAILabel Server Crash and Silent Inference Corruption via Crafted DICOM (pydicom DS/IS Validation Bypass)
monai(pip): affected< 1.6.1→ fixed version1.6.1
GHSA publication: 2026-10-27T14:27:53Z – 2026-10-27T14:27:53Z · Disclosure and updates checked
guava: published advisories and fix scope
Confirmed 1 advisory in this GHSA publication window. Refer to each developer's material for prerequisites involving features, inputs, privileges, and other conditions. Registration time is not the first shipment date or the time of actual attacks. This material alone does not establish the number of people or incidents actually affected.
What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.
By advisory: affected and fixed versions (1 entry)
GHSA-xxph-c9ww-hj94
Google Guava: CompactHashMap/CompactHashSet/MapMakerInternalMap deserialization triggers uncontrolled memory allocation
com.google.guava:guava(maven): affected>= 4.0, <= 33.7.1→ fixed version33.7.2
GHSA publication: 2026-10-27T14:43:57Z – 2026-10-27T14:43:57Z · Publication/update verified
siyuan: published advisories and fix scope
Confirmed 1 advisory in this GHSA publication window. Refer to each developer's material for prerequisites involving features, inputs, privileges, and other conditions. Registration time is not the first shipment date or the time of actual attacks. This material alone does not establish the number of people or incidents actually affected.
What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.
By advisory: affected and fixed versions (1 entry)
GHSA-c8r8-95hg-mp34
SiYuan: MCP file tool's blocklist is incomplete relative to the HTTP file API it claims to align with, exposing publish-mode passwords and other sensitive workspace files
github.com/siyuan-note/siyuan/kernel(go): affected< 0.0.0-20260808051406-3542530c505f→ fixed version0.0.0-20260808051406-3542530c505f
GHSA published: 2026-10-27T14:43:16Z 〜 2026-10-27T14:43:19Z · Publication/update confirmed
fpdf2: published advisories and fix scope
Confirmed 2 advisories in this GHSA publication window. Consult each developer's material for exploit conditions such as features, input, and privileges. Registration time is not the initial shipment date or an actual attack time. This material alone does not establish the number of actual victims or incidents.
What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.
By advisory: affected and fixed versions (2 advisories)
GHSA-wqw6-wpr3-45rh
fpdf2: Exponential SVG '<use>' expansion causes CPU and memory exhaustion in 'FPDF.image()'
fpdf2(pip): affected>= 2.5.0, < 2.8.8→ fixed version2.8.8
GHSA-rw7v-4hrq-x6r9
fpdf2 implicitly loads external URLs and local image paths when rendering attacker-controlled content
fpdf2(pip): affected<= 2.8.7→ fixed version2.8.8
GHSA publication: 2026-10-27T14:44:19Z – 2026-10-27T14:44:19Z · Disclosure and updates checked
Ghost: check published advisories and fix scope
Confirmed 1 advisory in this GHSA publication window. Refer to each developer's material for prerequisites involving features, inputs, privileges, and other conditions. Registration time is not the first shipment date or the time of actual attacks. This material alone does not establish the number of people or incidents actually affected.
What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.
By advisory: affected and fixed versions (1 entry)
GHSA-qrh6-cwg3-343x
Ghost: Authorization Bypass in Comment Like Feature
ghost(npm): affected>= 5.9.0, < 6.44.1→ fixed version6.44.1
GHSA publication: 2026-10-27T14:45:53Z – 2026-10-27T15:36:17Z · Publication/update verified
vLLM: model revision selection and P2P offloading
Distinguish execution through request mm_processor_kwargs.code_revision from socket exhaustion in a specific P2P secondary tier. Configurations do not all share the same prerequisites. These materials alone do not establish actual victim or incident counts.
What to checkCheck feature conditions in each advisory. Execution issues are fixed in 0.31.0 and P2P issues in 0.32.0. Restrict model retrieval and API access.
By advisory: affected and fixed versions (2 advisories)
GHSA-h3rc-6mm3-gc2m
vLLM: Request-controlled mm_processor_kwargs.code_revision allows remote code execution
vllm(pip): affected>= 0.7.3, < 0.31.0→ fixed version0.31.0
GHSA-frvg-qw88-hww9
vllm p2p never connected zmq_exhaustion
vllm(pip): affected< 0.32.0→ fixed version0.32.0
GHSA published: 2026-10-27T14:45:36Z 〜 2026-10-27T14:45:36Z · Publication/update confirmed
rembg: published advisories and fix scope
Confirmed 1 advisory in this GHSA publication window. Refer to each developer's material for prerequisites involving features, inputs, privileges, and other conditions. Registration time is not the first shipment date or the time of actual attacks. This material alone does not establish the number of people or incidents actually affected.
What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.
By advisory: affected and fixed versions (1 entry)
GHSA-qr6x-7v33-6qmg
Rembg: Unauthenticated SAM model injection permits local-file disclosure through malicious ONNX graphs
rembg(pip): affected< 2.0.82→ fixed version2.0.82
GHSA publication: 2026-10-27T14:45:29Z – 2026-10-27T14:45:29Z · Disclosure and updates checked
twisted: check published advisories and fix scope
Confirmed 1 advisory in this GHSA publication window. Refer to each developer's material for prerequisites involving features, inputs, privileges, and other conditions. Registration time is not the first shipment date or the time of actual attacks. This material alone does not establish the number of people or incidents actually affected.
What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.
By advisory: affected and fixed versions (1 entry)
GHSA-jj36-9pvh-vj5r
Twisted: DNS Response Spoofing in twisted.names Due to Missing Source Address Validation
Twisted(pip): affected<= 26.4.0→ fixed version26.10.0rc1
GHSA publication: 2026-10-27T14:46:51Z – 2026-10-27T14:46:51Z · Publication/update verified
pylint: check public advisories and fix scope
Confirmed 1 advisory in this GHSA publication window. Refer to each developer's material for prerequisites involving features, inputs, privileges, and other conditions. Registration time is not the first shipment date or the time of actual attacks. This material alone does not establish the number of people or incidents actually affected.
What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.
By advisory: affected and fixed versions (1 entry)
GHSA-22qq-2fwx-7p67
Pylint: Arbitrary code execution via pickle deserialization of the stats cache in PYLINT_HOME
pylint(pip): affected< 4.0.9→ fixed version4.0.9
GHSA published: 2026-10-27T14:46:43Z 〜 2026-10-27T14:46:43Z · Publication/update confirmed
Satori: insufficient escaping in generated SVG
Confirmed 1 advisory in this GHSA publication window. Refer to each developer's material for prerequisites involving features, inputs, privileges, and other conditions. Registration time is not the first shipment date or the time of actual attacks. This material alone does not establish the number of people or incidents actually affected.
What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.
By advisory: affected and fixed versions (1 entry)
GHSA-wx4j-mvgx-mqwp
Satori-generated SVG has improper escaping
satori(npm): affected>= 0.0.27, < 0.33.5→ fixed version0.33.5
GHSA publication: 2026-10-27T14:49:53Z – 2026-10-27T15:32:25Z · Disclosure and updates checked
Better Auth: OAuth state and proxy account boundaries
Includes OAuth Proxy, reuse of state for MagicLink, DB adapter rate limiting, and insufficient display of arbitrary device authorization. The device issue requires conditions such as an opt-in feature and user approval. This material alone does not establish the number of people or incidents actually affected.
What to checkCheck better-auth1.7.7 and the adapter in use. For device authorization, display the requesting client and permissions based on server-validated information.
By advisory: affected and fixed versions (4 entries)
GHSA-44jh-23m7-hpcf
@better-auth/drizzle-adapter: Concurrent requests can exceed rate limits on PostgreSQL
@better-auth/drizzle-adapter(npm): affected>= 1.6.17, < 1.7.7→ fixed version1.7.7@better-auth/kysely-adapter(npm): affected>= 1.6.17, < 1.7.0→ fixed version1.7.0better-auth(npm): affected>= 1.6.17, < 1.7.7→ fixed version1.7.7
GHSA-r4xp-prcw-77qf
better-auth: OAuth Proxy lets an attacker sign in as another user
better-auth(npm): affected>= 1.5.0-beta.12, < 1.7.7→ fixed version1.7.7
GHSA-965c-763c-88jm
better-auth: OAuth state can be used as a Magic Link to sign in as another user
better-auth(npm): affected>= 1.4.0-beta.18, < 1.7.7→ fixed version1.7.7
GHSA-q84f-53jg-9ppm
better-auth: Device login approval does not show the requesting client or permissions
better-auth(npm): affected>= 1.3.8-beta.3, < 1.7.0-rc.3→ fixed version1.7.0-rc.3
GHSA-44jh-23m7-hpcf / GHSA-r4xp-prcw-77qf / GHSA-965c-763c-88jm / GHSA-q84f-53jg-9ppm
GHSA publication: 2026-10-27T14:50:18Z – 2026-10-27T16:09:22Z · Publication/update verified
Authlib: validation boundaries for signatures, nonce, audience, and more.
Includes empty signatures, empty HMAC keys, algorithm confusion, and request_uri SSRF. 1.9.0 alone does not fully fix the empty HMAC key issue. This material alone does not establish the number of actual victims or incidents.
What to checkCheck 1.9.1 or later. Verify issuer/audience/nonce/allowed algorithms and key settings, and restrict request_uri retrieval destinations.
By advisory: affected and fixed versions (8 advisories)
GHSA-8m4g-j4wp-wgcg
Authlib accepts an empty HMAC key, allowing JWS/JWT signature forgery (HS256/HS384/HS512)
Authlib(pip): affected< 1.9.1→ fixed version1.9.1
GHSA-x4rv-c3wx-4cr8
Authlib: Unvalidated request_uri fetch in JWT-secured authorization request (JAR) leading to SSRF
authlib(pip): affected>= 1.6.0, < 1.9.0→ fixed version1.9.0
GHSA-c5mf-xmp2-59rc
Authlib: ID token can disable its own nonce validation via the nonce_supported claim
authlib(pip): affected<= 1.8.0→ fixed version1.9.0
GHSA-fch4-3c6x-j4gc
Authlib: Default JWT bearer grant accepts assertions for the wrong audience
authlib(pip): affected< 1.9.0→ fixed version1.9.0
GHSA-q686-2qmg-hqc7
Authlib: OpenID implicit grant checks raw scope instead of allowed scope before issuing ID tokens
authlib(pip): affected< 1.9.0→ fixed version1.9.0
GHSA-7vr2-2fgp-9w7p
Authlib incomplete algorithm-confusion fix permits HMAC forgery with prefixed public keys
authlib(pip): affected>= 1.3.1, <= 1.8.0→ fixed version1.9.0
GHSA-jj7h-c3hg-m23x
Authlib: is_secure_transport() loopback exemption can be bypassed with a userinfo component, allowing cleartext-HTTP URLs to non-loopback hosts
authlib(pip): affected<= 1.7.2→ fixed version1.8.0
GHSA-6v38-4h7w-rj9h
Authlib: empty signatures validation in JWS JSON deserialization
authlib(pip): affected<= 1.8.0→ fixed version1.9.0
GHSA-8m4g-j4wp-wgcg / GHSA-x4rv-c3wx-4cr8 / GHSA-c5mf-xmp2-59rc / GHSA-fch4-3c6x-j4gc / GHSA-q686-2qmg-hqc7 / GHSA-7vr2-2fgp-9w7p / GHSA-jj7h-c3hg-m23x / GHSA-6v38-4h7w-rj9h
GHSA published: 2026-10-27T14:50:30Z 〜 2026-10-27T14:50:30Z · Publication/update confirmed
nltk: published advisories and fix scope
Confirmed 1 advisory in this GHSA publication window. Refer to each developer's material for prerequisites involving features, inputs, privileges, and other conditions. Registration time is not the first shipment date or the time of actual attacks. This material alone does not establish the number of people or incidents actually affected.
What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.
By advisory: affected and fixed versions (1 entry)
GHSA-j456-xh4h-cpf2
NLTK: WekaClassifier passes an unvalidated caller-controlled model path to the weka JVM, bypassing nltk.pathsec containment
nltk(pip): affected<= 3.10.3→ fixed version3.10.4
GHSA publication: 2026-10-27T15:04:14Z – 2026-10-27T15:32:36Z · Disclosure and updates checked
LiteLLM: privilege escalation, file reads, and XSS.
These 3 advisories disclose product vulnerabilities. Treat them separately from the distribution-channel compromise incident. Escalation from internal_user to proxy_admin also depends on experimental settings in older branches. This material alone does not establish the number of actual victims or incidents.
What to checkFor privilege escalation, check the applicable release series, including 1.100.4 / 1.101.3 / 1.102.2 / 1.103.1 / 1.104.0rc2. The temporary EXPERIMENTAL_UI_LOGIN=false setting also disables CLI SSO and related features.
By advisory: affected and fixed versions (3 entries)
GHSA-g5ff-637f-6q2m
LiteLLM: internal_user_viewer arbitrary local file read via `vertex_ai_credentials`
litellm(pip): affected< 1.95.0→ fixed version1.95.0
GHSA-hhww-mrg2-969h
LiteLLM vulnerable to reflected XSS in /sso/debug/callback
litellm(pip): affected>= 1.65.5, < 1.85.0→ fixed version1.85.0
GHSA-7hp6-4w63-5g45
LiteLLM: Privilege Escalation to Proxy Admin via Cross-Domain Reuse of the Salt Key
litellm(pip): affected>= 1.91.0, < 1.100.4→ fixed version1.100.4litellm(pip): affected>= 1.101.0, < 1.101.3→ fixed version1.101.3litellm(pip): affected>= 1.102.0, < 1.102.2→ fixed version1.102.2litellm(pip): affected>= 1.103.0, < 1.103.1→ fixed version1.103.1litellm(pip): affected>= 1.104.0rc1, < 1.104.0rc2→ fixed version1.104.0rc2
GHSA-g5ff-637f-6q2m / GHSA-hhww-mrg2-969h / GHSA-7hp6-4w63-5g45
GHSA publication: 2026-10-27T15:04:33Z – 2026-10-27T15:04:39Z · Publication/update verified
nodemailer: check public advisories and fix scope
3 advisories were confirmed in this GHSA publication window. Consult each developer's materials for prerequisites involving features, inputs, permissions, and other conditions. Registration time is not the initial shipment date or actual attack time. These materials alone do not establish actual victim or incident counts.
What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.
By advisory: affected and fixed versions (3 entries)
GHSA-4ffr-jq9g-5ffx
Nodemailer: Quadratic backtracking in SMTP AUTH mechanism detection regexes allows pre-auth remote denial of service
nodemailer(npm): affected>= 3.0.0, <= 10.0.12→ fixed version10.0.13
GHSA-g73g-hqqh-jr95
Nodemailer: RFC 5322 comment inside an angle-bracket address is never stripped
nodemailer(npm): affected>= 3.0.0, <= 10.0.12→ fixed version10.0.13
GHSA-4g23-2xm8-66gc
Nodemailer: Quadratic (O(n^2)) SMTP client reply parsing lets a malicious server or MITM cause a pre-auth remote denial of service
nodemailer(npm): affected>= 3.0.0, <= 10.0.9→ fixed version10.0.10
GHSA-4ffr-jq9g-5ffx / GHSA-g73g-hqqh-jr95 / GHSA-4g23-2xm8-66gc
GHSA published: 2026-10-27T15:04:07Z 〜 2026-10-27T15:04:07Z · Publication/update confirmed
msgpack-python: check published advisories and fix scope
Confirmed 1 advisory in this GHSA publication window. Refer to each developer's material for prerequisites involving features, inputs, privileges, and other conditions. Registration time is not the first shipment date or the time of actual attacks. This material alone does not establish the number of people or incidents actually affected.
What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.
By advisory: affected and fixed versions (1 entry)
GHSA-j586-36cw-2gc2
MessagePack: Unbounded memory leak in msgpack C extension on strict_map_key validation failure
msgpack(pip): affected< 1.2.3→ fixed version1.2.3
GHSA publication: 2026-10-27T15:26:24Z – 2026-10-27T15:28:03Z · Disclosure and updates checked
GitPython: boundaries around untrusted repositories, refspecs, and submodules
6 advisories include file reads through branch names, submodule symlinks, unsafe pull options, and environment variable exposure. Exploit conditions vary, including normal Git transport restrictions. This material alone does not establish the number of actual victims or incidents.
What to checkUpdate to 3.2.0. Do not process untrusted repositories in CI environments containing secrets. Isolate them when necessary and inspect already exposed logs and credentials.
By advisory: affected and fixed versions (6 entries)
GHSA-23mf-xhv8-69c2
GitPython: arbitrary file read via attacker-controlled branch name in `Head.checkout()` (incomplete fix of CVE-2026-78679)
GitPython(pip): affected<= 3.1.62→ fixed version3.2.0
GHSA-gq48-pqfc-9p58
GitPython: Submodule.move() follows an attacker-committed intermediate symlink outside the worktree
GitPython(pip): affected< 3.2.0→ fixed version3.2.0
GHSA-f9j4-qggq-h239
GitPython Remote.pull() refspec bypasses the --upload-pack unsafe-option guard, enabling arbitrary command execution
GitPython(pip): affected>= 3.1.30, < 3.2.0→ fixed version3.2.0
GHSA-w8jc-g24h-crhw
GitPython command wrappers omit unsafe protocol and option checks
GitPython(pip): affected<= 3.1.62→ fixed version3.2.0
GHSA-fx3j-rwgx-fr94
GitPython: separate_git_dir leaks env vars via crafted .gitmodules submodule name
GitPython(pip): affected<= 3.1.62→ fixed version3.2.0
GHSA-m64x-33q8-m5h7
GitPython parse_actor_and_date() is vulnerable to quadratic backtracking on malformed identity lines
GitPython(pip): affected<= 3.1.62→ fixed version3.2.0
GHSA-23mf-xhv8-69c2 / GHSA-gq48-pqfc-9p58 / GHSA-f9j4-qggq-h239 / GHSA-w8jc-g24h-crhw / GHSA-fx3j-rwgx-fr94 / GHSA-m64x-33q8-m5h7
GHSA publication: 2026-10-27T15:32:45Z – 2026-10-27T15:32:45Z · Publication/update verified
flexible-graphrag: check published advisories and fix scope
Confirmed 1 advisory in this GHSA publication window. Refer to each developer's material for prerequisites involving features, inputs, privileges, and other conditions. Registration time is not the first shipment date or the time of actual attacks. This material alone does not establish the number of people or incidents actually affected.
What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.
By advisory: affected and fixed versions (1 entry)
GHSA-vqrg-773h-4wxc
Flexible GraphRAG: Cypher/Graph Injection via broken string-escaping in FalkorDB adapter (_escape()) - full graph wipe from ingested-document content
flexible-graphrag(pip): affected>= 0.6.0, < 0.8.2→ fixed version0.8.2
GHSA published: 2026-10-27T15:33:22Z 〜 2026-10-27T15:33:42Z · Publication/update confirmed
snappy-java: check published advisories and fix scope
3 advisories were confirmed in this GHSA publication window. Consult each developer's materials for prerequisites involving features, inputs, permissions, and other conditions. Registration time is not the initial shipment date or actual attack time. These materials alone do not establish actual victim or incident counts.
What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.
By advisory: affected and fixed versions (3 entries)
GHSA-gwq9-9ffj-mvrv
snappy-java: Heap buffer overflow in Snappy.uncompress*Array typed-array methods
org.xerial.snappy:snappy-java(maven): affected<= 1.1.10.8→ fixed version1.1.10.9
GHSA-xqrx-qh46-34m7
snappy-java: JVM crash from unchecked ranges in Snappy.arrayCopy and SnappyOutputStream.rawWrite
org.xerial.snappy:snappy-java(maven): affected<= 1.1.10.8→ fixed version1.1.10.9
GHSA-q233-g92q-qxp6
snappy-java: Unbounded memory allocation from attacker-declared uncompressed lengtha
org.xerial.snappy:snappy-java(maven): affected<= 1.1.10.8→ fixed version1.1.10.9
GHSA-gwq9-9ffj-mvrv / GHSA-xqrx-qh46-34m7 / GHSA-q233-g92q-qxp6
GHSA publication: 2026-10-27T15:34:28Z – 2026-10-27T15:34:33Z · Disclosure and updates checked
harness-sdk: check public advisories and fix scope
Confirmed 2 advisories in this GHSA publication window. Consult each developer's material for exploit conditions such as features, input, and privileges. Registration time is not the initial shipment date or an actual attack time. This material alone does not establish the number of actual victims or incidents.
What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.
By advisory: affected and fixed versions (2 advisories)
GHSA-3w55-933p-8pv5
Strands Agents: Local Privilege Escalation via Symlink Attack in Default Session File Storage
strands-agents(pip): affected< 1.48.0→ fixed version1.48.0
GHSA-763v-5pjm-fx36
Strands Agents: Default FileSessionManager storage is world-readable on shared systems
strands-agents(pip): affected< 1.48.0→ fixed version1.48.0
GHSA publication: 2026-10-27T15:36:35Z – 2026-10-27T15:36:35Z · Publication/update verified
mongo-python-driver: check public advisories and fix scope
Confirmed 1 advisory in this GHSA publication window. Refer to each developer's material for prerequisites involving features, inputs, privileges, and other conditions. Registration time is not the first shipment date or the time of actual attacks. This material alone does not establish the number of people or incidents actually affected.
What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.
By advisory: affected and fixed versions (1 entry)
GHSA-98qm-wvgf-w4cf
MongoDB Python Driver: Out-of-bounds read in BSON decoding via a malformed Regex element
pymongo(pip): affected>= 3.9.0, <= 4.18.2→ fixed version4.18.3
GHSA published: 2026-10-27T15:37:37Z 〜 2026-10-27T15:37:37Z · Publication/update confirmed
dnspython: verify published advisories and fix scope.
Confirmed 1 advisory in this GHSA publication window. Refer to each developer's material for prerequisites involving features, inputs, privileges, and other conditions. Registration time is not the first shipment date or the time of actual attacks. This material alone does not establish the number of people or incidents actually affected.
What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.
By advisory: affected and fixed versions (1 entry)
GHSA-45c3-73f7-pv4m
dnspython dns.name.from_wire_parser() excessive CPU use
dnspython(pip): affected< 2.9.0→ fixed version2.9.0
GHSA publication: 2026-10-27T15:37:24Z – 2026-10-27T15:37:31Z · Disclosure and updates checked
dd-trace-py: verify published advisories and fix scope.
Confirmed 2 advisories in this GHSA publication window. Consult each developer's material for exploit conditions such as features, input, and privileges. Registration time is not the initial shipment date or an actual attack time. This material alone does not establish the number of actual victims or incidents.
What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.
By advisory: affected and fixed versions (2 advisories)
GHSA-3633-r77q-h3v3
Datadog dd-trace-py: ReDoS in URL query string obfuscation
ddtrace(pip): affected>= 1.5.0, < 3.19.9→ fixed version3.19.9ddtrace(pip): affected>= 4.0.0, < 4.15.6→ fixed version4.15.6
GHSA-p3m5-h5v9-vqj6
Datadog dd-trace-py: IAST instrumentation can lead to application DOS
ddtrace(pip): affected>= 3.13.0, < 4.15.5→ fixed version4.15.5
GHSA publication: 2026-10-27T15:38:22Z – 2026-10-27T15:38:39Z · Publication/update verified
PhpSpreadsheet: XXE, external-image SSRF, and resource consumption.
Includes XML scanner bypass, repeated ODS rows, and allowlist bypass through image redirects. Affected scope depends on the reader and branch used. This material alone does not establish the number of actual victims or incidents.
What to checkCheck advisory-specific fixed versions such as 5.10.0 / 3.10.8 / 2.4.8 / 2.1.19 / 1.30.7. Isolate untrusted documents and restrict outbound communications.
By advisory: affected and fixed versions (4 entries)
GHSA-2phh-27fw-q4gc
PhpSpreadsheet: SSRF whitelist bypass via unre-validated HTTP redirect in Drawing::setPath external image loading
phpoffice/phpspreadsheet(composer): affected>= 4.0.0, <= 5.9.0→ fixed version5.10.0phpoffice/phpspreadsheet(composer): affected>= 3.3.0, <= 3.10.7→ fixed version3.10.8phpoffice/phpspreadsheet(composer): affected>= 2.2.0, <= 2.4.7→ fixed version2.4.8phpoffice/phpspreadsheet(composer): affected>= 2.0.0, <= 2.1.18→ fixed version2.1.19phpoffice/phpspreadsheet(composer): affected<= 1.30.6→ fixed version1.30.7
GHSA-j2w7-387v-m2rq
PhpSpreadsheet ODS Reader: Unbounded number-rows-repeated → CPU & Memory Exhaustion (DoS)
phpoffice/phpspreadsheet(composer): affected>= 4.0.0, <= 5.9.0→ fixed version5.10.0phpoffice/phpspreadsheet(composer): affected>= 3.3.0, <= 3.10.7→ fixed version3.10.8phpoffice/phpspreadsheet(composer): affected>= 2.2.0, <= 2.4.7→ fixed version2.4.8phpoffice/phpspreadsheet(composer): affected>= 2.0.0, <= 2.1.18→ fixed version2.1.19phpoffice/phpspreadsheet(composer): affected<= 1.30.6→ fixed version1.30.7
GHSA-3x94-m842-937c
PhpSpreadsheet: XmlScanner Bypass via ISO-2022 Escape Sequences Allows XXE and Denial of Service
phpoffice/phpspreadsheet(composer): affected>= 4.0.0, <= 5.9.0→ fixed version5.10.0phpoffice/phpspreadsheet(composer): affected>= 3.3.0, <= 3.10.7→ fixed version3.10.8phpoffice/phpspreadsheet(composer): affected>= 2.2.0, <= 2.4.7→ fixed version2.4.8phpoffice/phpspreadsheet(composer): affected>= 2.0.0, <= 2.1.18→ fixed version2.1.19phpoffice/phpspreadsheet(composer): affected<= 1.30.6→ fixed version1.30.7
GHSA-rxj4-h86g-25gc
PhpSpreadsheet: XmlScanner Bypass via Double-Encoded unentity() TOCTOU Allows XXE and Denial of Service
phpoffice/phpspreadsheet(composer): affected>= 4.0.0, <= 5.9.0→ fixed version5.10.0phpoffice/phpspreadsheet(composer): affected>= 3.3.0, <= 3.10.7→ fixed version3.10.8
GHSA-2phh-27fw-q4gc / GHSA-j2w7-387v-m2rq / GHSA-3x94-m842-937c / GHSA-rxj4-h86g-25gc
GHSA published: 2026-10-27T15:38:14Z 〜 2026-10-27T15:38:14Z · Publication/update confirmed
compress: published advisories and fix scope
Confirmed 1 advisory in this GHSA publication window. Refer to each developer's material for prerequisites involving features, inputs, privileges, and other conditions. Registration time is not the first shipment date or the time of actual attacks. This material alone does not establish the number of people or incidents actually affected.
What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.
By advisory: affected and fixed versions (1 entry)
GHSA-fpmh-frq8-7rj8
compress zstd: Panic on two-block frames
github.com/klauspost/compress/zstd(go): affected<= 1.20.1→ fixed version1.20.2
GHSA publication: 2026-10-27T16:08:36Z – 2026-10-27T16:08:59Z · Disclosure and updates checked
rustls: TLS secrets, ECH, and compression processing.
Distinguish secrets in Debug output, buffers on ECH rejection, key exchange state, and allocations for Brotli certificate decompression. This material alone does not establish the number of actual victims or incidents.
What to checkUpdate the stable branch to 0.23.46 and inspect Debug logs containing secrets. The 0.24 development branch is dev.2.
By advisory: affected and fixed versions (4 entries)
GHSA-vp88-798v-h67f
rustls: ECH rejection can expose buffered application data to authenticated outer server before `ech_required` alert
rustls(rust): affected>= 0.23.44, < 0.23.46→ fixed version0.23.46rustls(rust): affected>= 0.24.0-dev.1, < 0.24.0-dev.2→ fixed version0.24.0-dev.2
GHSA-w44r-93j7-qv28
rustls: An unauthenticated ServerHello poisons the per-name key-exchange record, so later ClientHellos carry only a classical X25519 share
rustls(rust): affected< 0.23.46→ fixed version0.23.46rustls(rust): affected>= 0.24.0-dev.1, < 0.24.0-dev.2→ fixed version0.24.0-dev.2
GHSA-c8m5-c952-6cm4
Rustls: Session Debug formatting exposes TLS master secrets and resumption PSKs
rustls(rust): affected< 0.23.46→ fixed version0.23.46rustls(rust): affected>= 0.24.0-dev.1, < 0.24.0-dev.2→ fixed version0.24.0-dev.2
GHSA-h2v8-394m-p7vv
Rustls: Brotli certificate decompression can allocate an attacker-controlled amount of memory up to 1 GiB before authentication.
rustls(rust): affected< 0.23.46→ fixed version0.23.46rustls(rust): affected>= 0.24.0-dev.1, < 0.24.0-dev.2→ fixed version0.24.0-dev.2
GHSA-vp88-798v-h67f / GHSA-w44r-93j7-qv28 / GHSA-c8m5-c952-6cm4 / GHSA-h2v8-394m-p7vv
GHSA publication: 2026-10-27T16:09:45Z – 2026-10-27T19:02:31Z · Publication/update verified
undici: TLS validation, cache boundaries, and DoS
Condition-specific issues involving TLS options propagation, cross-origin redirects and shared caches, WebSocket buffering, and other features. Do not treat Node.js built-in fetch and individual npm dependencies as the same deployed version. This material alone does not establish the number of people or incidents actually affected.
What to checkCheck the applicable series: 6.29.1 / 7.30.1 / 8.12.2. Update npm dependencies and embedded runtimes separately, and check cache sharing, redirects, and TLS settings.
By advisory: affected and fixed versions (6 entries)
GHSA-4w7w-5xrc-9h26
undici vulnerable to cache poisoning and cross-user disclosure via cross-origin redirects
undici(npm): affected>= 7.0.0, < 7.30.1→ fixed version7.30.1undici(npm): affected>= 8.0.0, < 8.12.2→ fixed version8.12.2
GHSA-2m5v-pch6-74hx
undici vulnerable to TLS certificate validation bypass via dropped tls options in Agent
undici(npm): affected>= 4.0.0, < 6.29.1→ fixed version6.29.1undici(npm): affected>= 7.0.0, < 7.30.1→ fixed version7.30.1undici(npm): affected>= 8.0.0, < 8.12.2→ fixed version8.12.2
GHSA-qrxm-fqhp-jwvm
undici vulnerable to Denial of Service via TLS 1.2 certificate-changing renegotiation
undici(npm): affected>= 4.2.1, < 6.29.1→ fixed version6.29.1undici(npm): affected>= 7.0.0, < 7.30.1→ fixed version7.30.1undici(npm): affected>= 8.0.0, < 8.12.2→ fixed version8.12.2
GHSA-9fm3-97px-rjf6
undici WebSocket client vulnerable to Denial of Service via unbounded automatic PONG buffering
undici(npm): affected>= 5.15.0, < 6.29.1→ fixed version6.29.1undici(npm): affected>= 7.0.0, < 7.30.1→ fixed version7.30.1undici(npm): affected>= 8.0.0, < 8.12.2→ fixed version8.12.2
GHSA-55wc-3pg8-jfw6
undici vulnerable to Denial of Service via unhandled exception in the decompress interceptor
undici(npm): affected>= 7.15.0, < 7.30.1→ fixed version7.30.1undici(npm): affected>= 8.0.0, < 8.12.2→ fixed version8.12.2
GHSA-qq8j-7v2v-3rwp
undici WebSocket client vulnerable to Denial of Service via failed HTTP/2 handshake
undici(npm): affected>= 8.11.0, < 8.11.2→ fixed version8.11.2
GHSA-4w7w-5xrc-9h26 / GHSA-2m5v-pch6-74hx / GHSA-qrxm-fqhp-jwvm / GHSA-9fm3-97px-rjf6 / GHSA-55wc-3pg8-jfw6 / GHSA-qq8j-7v2v-3rwp
GHSA published: 2026-10-27T16:10:55Z 〜 2026-10-27T16:10:55Z · Publication/update confirmed
qs: published advisories and fix scope
Confirmed 1 advisory in this GHSA publication window. Refer to each developer's material for prerequisites involving features, inputs, privileges, and other conditions. Registration time is not the first shipment date or the time of actual attacks. This material alone does not establish the number of people or incidents actually affected.
What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.
By advisory: affected and fixed versions (1 entry)
GHSA-6pq8-jhm2-2vcw
qs : qs.stringify with arrayFormat 'comma' throws an uncaught TypeError on array elements carrying a non-callable own toString (DoS)
qs(npm): affected>= 6.7.0, <= 6.16.0→ fixed version6.16.1
GHSA publication: 2026-10-27T17:08:41Z – 2026-10-27T17:08:41Z · Disclosure and updates checked
hydra: published advisories and fix scope
Confirmed 1 advisory in this GHSA publication window. Refer to each developer's material for prerequisites involving features, inputs, privileges, and other conditions. Registration time is not the first shipment date or the time of actual attacks. This material alone does not establish the number of people or incidents actually affected.
What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.
By advisory: affected and fixed versions (1 entry)
GHSA-wf6j-7hvr-gr93
Hydra legacy target blacklist permits unsafe PyYAML loading
hydra-core(pip): affected>= 1.3.6, < 1.3.8→ fixed version1.3.8hydra-core(pip): affected>= 1.4.0.dev9, < 1.4.0rc3→ fixed version1.4.0rc3
GHSA publication: 2026-10-27T19:00:50Z – 2026-10-27T19:00:50Z · Publication/update verified
terraform-provider-ctfd: verify published advisories and fix scope.
Confirmed 1 advisory in this GHSA publication window. Refer to each developer's material for prerequisites involving features, inputs, privileges, and other conditions. Registration time is not the first shipment date or the time of actual attacks. This material alone does not establish the number of people or incidents actually affected.
What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.
By advisory: affected and fixed versions (1 entry)
GHSA-vg84-c5mg-76xh
CTFer.io's CTFd Terraform Provider allows a local or remote attacker to read team passwords in state as non sensitive values
github.com/ctfer-io/terraform-provider-ctfd(go): affected>= 0.1.5, <= 1.1.0→ fixed versionNo fixed version listedgithub.com/ctfer-io/terraform-provider-ctfd/v2(go): affected< 2.8.2→ fixed version2.8.2
GHSA published: 2026-10-27T19:01:39Z 〜 2026-10-27T19:01:50Z · Publication/update confirmed
symfony: published advisories and fix scope
Confirmed 2 advisories in this GHSA publication window. Consult each developer's material for exploit conditions such as features, input, and privileges. Registration time is not the initial shipment date or an actual attack time. This material alone does not establish the number of actual victims or incidents.
What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.
By advisory: affected and fixed versions (2 advisories)
GHSA-2v3c-qxhr-7vpv
Symfony: Unbounded Recursion in the YAML Inline Lexer Lets a Single Document Crash the Process
symfony/symfony(composer): affected>= 2.0.0, < 5.4.54→ fixed version5.4.54symfony/symfony(composer): affected>= 6.0.0, < 6.4.45→ fixed version6.4.45symfony/symfony(composer): affected>= 7.0.0, < 7.4.18→ fixed version7.4.18symfony/symfony(composer): affected>= 8.0.0, < 8.1.6→ fixed version8.1.6symfony/yaml(composer): affected>= 2.0.0, < 5.4.54→ fixed version5.4.54symfony/yaml(composer): affected>= 6.0.0, < 6.4.45→ fixed version6.4.45symfony/yaml(composer): affected>= 7.0.0, < 7.4.18→ fixed version7.4.18symfony/yaml(composer): affected>= 8.0.0, < 8.1.6→ fixed version8.1.6
GHSA-r925-mgvr-h9cc
Symfony: ReDoS in HeaderUtils::split() Reachable Through the Cache-Control Request Header
symfony/http-foundation(composer): affected>= 6.0.1, < 6.4.46→ fixed version6.4.46symfony/http-foundation(composer): affected>= 7.0.0, < 7.4.19→ fixed version7.4.19symfony/http-foundation(composer): affected>= 8.0.0, < 8.1.7→ fixed version8.1.7symfony/symfony(composer): affected>= 6.0.1, < 6.4.46→ fixed version6.4.46symfony/symfony(composer): affected>= 7.0.0, < 7.4.19→ fixed version7.4.19symfony/symfony(composer): affected>= 8.0.0, < 8.1.7→ fixed version8.1.7symfony/http-foundation(composer): affected>= 4.1.0, < 5.4.54→ fixed version5.4.54symfony/symfony(composer): affected>= 4.1.0, < 5.4.54→ fixed version5.4.54
GHSA publication: 2026-10-27T19:01:30Z – 2026-10-27T19:01:30Z · Disclosure and updates checked
go-jose: check published advisories and fix scope
Confirmed 1 advisory in this GHSA publication window. Refer to each developer's material for prerequisites involving features, inputs, privileges, and other conditions. Registration time is not the first shipment date or the time of actual attacks. This material alone does not establish the number of people or incidents actually affected.
What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.
By advisory: affected and fixed versions (1 entry)
GHSA-mgcc-cww5-fp2q
Go JOSE: DoS when parsing JWKs that contain RSA keys
github.com/go-jose/go-jose/v4(go): affected<= 4.1.5→ fixed version4.1.6github.com/go-jose/go-jose/v3(go): affected<= 3.0.5→ fixed versionNo fixed version listed
GHSA publication: 2026-10-27T19:02:00Z – 2026-10-27T19:02:00Z · Publication/update verified
MCP TypeScript SDK: limits on HTTP bodies and batch lengths.
The HTTP transport/handler has resource-consumption issues involving oversized bodies and JSON-RPC batches. These materials alone do not establish actual victim or incident counts.
What to checkCheck actual packages such as sdk1.30.1, server/node2.1.0, and hono2.0.1, and set limits at the reverse proxy too.
By advisory: affected and fixed versions (1 entry)
GHSA-f897-62hf-6gxq
MCP TypeScript SDK: HTTP server transports and handlers did not limit request body size or JSON-RPC batch length
@modelcontextprotocol/sdk(npm): affected>= 1.10.0, < 1.30.1→ fixed version1.30.1@modelcontextprotocol/server(npm): affected>= 2.0.0, < 2.1.0→ fixed version2.1.0@modelcontextprotocol/node(npm): affected>= 2.0.0, < 2.1.0→ fixed version2.1.0@modelcontextprotocol/hono(npm): affected>= 2.0.0, < 2.0.1→ fixed version2.0.1
GHSA published: 2026-10-27T21:04:57Z 〜 2026-10-27T21:04:57Z · Publication/update confirmed
neko: published advisories and fix scope
Confirmed 1 advisory in this GHSA publication window. Refer to each developer's material for prerequisites involving features, inputs, privileges, and other conditions. Registration time is not the first shipment date or the time of actual attacks. This material alone does not establish the number of people or incidents actually affected.
What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.
By advisory: affected and fixed versions (1 entry)
GHSA-5cp7-fp4j-wwcv
Neko: Authorization bypass in legacy WebRTC input handling
github.com/m1k1o/neko/server(go): affected>= 0.0.0-20250401220545-fe94c999c6af, < 0.0.0-20260805142851-395ca1a6f62b→ fixed version0.0.0-20260805142851-395ca1a6f62b
GHSA publication: 2026-10-27T21:04:50Z – 2026-10-27T21:04:50Z · Disclosure and updates checked
Atlantis: workspace command injection during plan phase
The atlantis.yaml workspace in a PR where plan runs is the attack path. Exploitation may be possible without custom workflow or apply privileges. These materials alone do not establish actual victim or incident counts.
What to checkUpdate to 0.47.1. Restrict plan execution for untrusted PRs and inspect runner cloud/VCS permissions.
By advisory: affected and fixed versions (1 entry)
GHSA-rjh2-4xgw-p2hj
Atlantis: OS command injection through PR-controlled Terraform workspace enables RCE during plan
github.com/runatlantis/atlantis(go): affected>= 0.4.0, <= 0.47.0→ fixed version0.47.1
GHSA publication: 2026-10-27T21:04:40Z – 2026-10-27T21:04:40Z · Publication/update verified
filebrowser: check public advisories and fix scope
Confirmed 1 advisory in this GHSA publication window. Refer to each developer's material for prerequisites involving features, inputs, privileges, and other conditions. Registration time is not the first shipment date or the time of actual attacks. This material alone does not establish the number of people or incidents actually affected.
What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.
By advisory: affected and fixed versions (1 entry)
GHSA-mgqf-5mf5-prfj
FileBrowser: Symlink following escapes user scope allowing arbitrary file read outside the served directory
github.com/gtsteffaniak/filebrowser/backend(go): affected< 0.0.0-20260814233832-4126edeb07a0→ fixed version0.0.0-20260814233832-4126edeb07a0
GHSA published: 2026-10-27T21:05:29Z 〜 2026-10-27T21:06:59Z · Publication/update confirmed
MCP Python SDK: audience validation, redirects, and schema references.
Distinguish bearer token target resource validation, custom header/body forwarding on cross-origin redirects, and SSRF or outages through outputSchema external references. Do not describe this as leakage of a standalone Authorization header. This material alone does not establish the number of actual victims or incidents.
What to checkUpdate to 1.30.0 / 2.2.0 or later. Audience protection also requires validate_token_resource=True, resource_server_url, and returning AccessToken.resource. Updating alone does not enable validation.
By advisory: affected and fixed versions (3 entries)
GHSA-w4fh-qvv9-3v23
Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource server
mcp(pip): affected>= 2.0.0, < 2.2.0→ fixed version2.2.0mcp(pip): affected>= 1.10.0, < 1.30.0→ fixed version1.30.0
GHSA-5h93-6whr-6q8j
Model Context Protocol Python SDK: HTTP client transports followed cross-origin redirects carrying custom headers and bodies
mcp(pip): affected>= 2.0.0, < 2.2.0→ fixed version2.2.0mcp(pip): affected>= 1.8.0, < 1.30.0→ fixed version1.30.0
GHSA-rwrf-2pqf-9j8j
Model Context Protocol Python SDK: Client fetched server-chosen $ref URLs while validating tool results against output schemas
mcp(pip): affected>= 2.0.0, < 2.2.0→ fixed version2.2.0mcp(pip): affected>= 1.10.0, < 1.30.0→ fixed version1.30.0
GHSA-w4fh-qvv9-3v23 / GHSA-5h93-6whr-6q8j / GHSA-rwrf-2pqf-9j8j
GHSA publication: 2026-10-27T21:05:06Z – 2026-10-27T21:05:13Z · Disclosure and updates checked
ckeditor5: check published advisories and fix scope
Confirmed 2 advisories in this GHSA publication window. Consult each developer's material for exploit conditions such as features, input, and privileges. Registration time is not the initial shipment date or an actual attack time. This material alone does not establish the number of actual victims or incidents.
What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.
By advisory: affected and fixed versions (2 advisories)
GHSA-v6mg-96c6-gmpq
CKEditor: Cross-site scripting (XSS) in the engine package
ckeditor5(npm): affected>= 29.0.0, < 47.7.4→ fixed version47.7.4@ckeditor/ckeditor5-engine(npm): affected>= 29.0.0, < 47.7.4→ fixed version47.7.4ckeditor5(npm): affected>= 48.0.0, < 48.5.1→ fixed version48.5.1@ckeditor/ckeditor5-engine(npm): affected>= 48.0.0, < 48.5.1→ fixed version48.5.1
GHSA-rh54-vffm-5fvp
CKEditor: Cross-site scripting (XSS) in the engine package
ckeditor5(npm): affected>= 45.0.0, < 47.7.4→ fixed version47.7.4@ckeditor/ckeditor5-engine(npm): affected>= 45.0.0, < 47.7.4→ fixed version47.7.4ckeditor5(npm): affected>= 48.0.0, < 48.5.1→ fixed version48.5.1@ckeditor/ckeditor5-engine(npm): affected>= 48.0.0, < 48.5.1→ fixed version48.5.1
GHSA publication: 2026-10-27T21:06:54Z – 2026-10-27T21:06:54Z · Publication/update verified
opentelemetry-python: check public advisories and fix scope
Confirmed 1 advisory in this GHSA publication window. Refer to each developer's material for prerequisites involving features, inputs, privileges, and other conditions. Registration time is not the first shipment date or the time of actual attacks. This material alone does not establish the number of people or incidents actually affected.
What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.
By advisory: affected and fixed versions (1 entry)
GHSA-f5m9-jfrj-jjj7
OpenTelemetry Python: Unbounded memory allocation in Jaeger baggage propagation
opentelemetry-propagator-jaeger(pip): affected<= 1.44.0→ fixed version1.45.0
GHSA published: 2026-10-27T21:07:25Z 〜 2026-10-27T21:07:25Z · Publication/update confirmed
dd-trace-js: verify published advisories and fix scope.
Confirmed 1 advisory in this GHSA publication window. Refer to each developer's material for prerequisites involving features, inputs, privileges, and other conditions. Registration time is not the first shipment date or the time of actual attacks. This material alone does not establish the number of people or incidents actually affected.
What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.
By advisory: affected and fixed versions (1 entry)
GHSA-x94g-w73q-hpcw
dd-trace: ReDOS in URL query string obfuscation
dd-trace(npm): affected>= 2.0.0, < 5.131.1→ fixed version5.131.1dd-trace(npm): affected>= 6.0.0, < 6.20.1→ fixed version6.20.1
GHSA publication: 2026-10-27T21:07:12Z – 2026-10-27T21:07:12Z · Disclosure and updates checked
tinymce: check public advisories and fix scope
Confirmed 1 advisory in this GHSA publication window. Refer to each developer's material for prerequisites involving features, inputs, privileges, and other conditions. Registration time is not the first shipment date or the time of actual attacks. This material alone does not establish the number of people or incidents actually affected.
What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.
By advisory: affected and fixed versions (1 entry)
GHSA-mf2p-h6hf-fcwm
TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` serialization
tinymce(npm): affected>= 8.5.1, < 8.9.3→ fixed version8.9.3TinyMCE(nuget): affected>= 8.5.1, < 8.9.3→ fixed version8.9.3tinymce/tinymce(composer): affected>= 8.5.1, < 8.9.3→ fixed version8.9.3tinymce(npm): affected= 7.9.3→ fixed version7.9.4TinyMCE(nuget): affected= 7.9.3→ fixed version7.9.4tinymce/tinymce(composer): affected= 7.9.3→ fixed version7.9.4
GHSA publication: 2026-10-27T21:26:32Z – 2026-10-27T21:26:56Z · Publication/update verified
MLflow: file reads, scorer execution, and keys recorded in traces
Some issues affect low-privilege basic-auth users as well as unauthenticated servers. They include API keys recorded in CrewAI autolog traces. These materials alone do not establish actual victim or incident counts.
What to checkUpdate to 3.17.0. Restrict public access, inspect trace and OTLP destinations, and revoke exposed provider keys.
By advisory: affected and fixed versions (3 entries)
GHSA-m65p-9j7q-6w33
MLflow vulnerable to arbitrary file read on unauthenticated servers via prompt model version source
mlflow(pip): affected>= 3.10.0, < 3.17.0→ fixed version3.17.0
GHSA-j7qq-vr8c-xvw3
MLflow CrewAI autologging records LLM provider API keys in logged trace spans
mlflow(pip): affected>= 2.19.0, < 3.17.0→ fixed version3.17.0
GHSA-26p8-2jq9-3vq9
MLflow vulnerable to remote code execution on unauthenticated servers via third-party scorer deserialization importing caller-placed artifact modules
mlflow(pip): affected>= 3.12.0rc0, < 3.17.0→ fixed version3.17.0
GHSA-m65p-9j7q-6w33 / GHSA-j7qq-vr8c-xvw3 / GHSA-26p8-2jq9-3vq9
Updated 10/27 23:30 JST · Disclosure and updates checked
ConnectWise: phased recovery preparation complete; third-party validation pending
The update on the 27th at 14:30 UTC says preparations for phased recovery are complete and required third-party validation is pending. It does not announce the start of restore access or full recovery. The recovery of Axcient Legacy Portal on the 22nd is a separate PHP mitigation matter.
What to checkKeep affected connections disabled and await individual resumption guidance. Do not generalize the statement that there are no signs of compromise of encrypted backup archives into a claim that every Microsoft365 tenant is uncompromised.
10/27 23:45 JST revision · Publication/update verified.
Fireblocks mpc-lib: still no fix after assessment revision.
CERT VU701544 was revised on the 27th at 14:45 UTC. Descendant shares and chain codes may permit access to ancestor/root shares of the same MPC party, but this is not equivalent to obtaining a complete transfer key exceeding the threshold. Actual theft, amounts, and affected customer counts have not been disclosed.
What to checkTreat the fix as unavailable, protect chain codes as secrets, and investigate the entire hierarchy. Do not reuse Agent2.4.4 / SDK2.19.1 from the separate eMudhra incident as fixed versions for this vulnerability.
Official follow-up after previous cutoff · Publication/update confirmed
Citrix NetScaler: check PHP fixed versions for each release series
CTX697263 advises updating ADC/Gateway to 14.1-73.49, 13.1-64.32, 14.1-73.49 FIPS, or 13.1-FIPS/NDcPP 13.1.37.286 or later. Vendor-managed cloud is described as remediated, requiring no customer action.
What to checkCheck the versions of self-operated appliances by series. Do not judge whether fixes were backported from the upstream PHP version alone; restrict management interfaces and investigate compromise.
Current table from official 10/27 revision · Publication/update confirmed
PAN-OS: distinguish shipped versions from ETAs
The official table lists fixed versions such as 12.2.4-h1 / 12.1.7-h11 / 11.2.10-h16, while 11.2.13-h4 and 11.2.16-h1 still carry ETA labels. Do not assume shipment merely because an expected date has passed. This is a management-plane PHP issue; not all data-plane traffic has the same conditions.
What to checkCheck actual shipped versions by branch in the official AffectedVersions table and update. Restrict management interfaces to trusted sources and check compromise indicators separately from updating.
Disclosed 10/27 · Publication/update confirmed
WatchGuard: 18 advisories; check AD integration conditions and Windows clients
The official 10/27 list contains 17 Fireware advisories and 1 Windows Mobile VPN SSL advisory. The AD authentication heap overflow requires conditions such as AD configuration. Local communication interception in the VPN client also affects Windows. The vendor states in those advisories that it is unaware of actual exploitation.
What to checkUpdate by branch, including Fireware 2026.4 / 12.12.4 and 12.5.22 for T15/T35. For CVE-2026-115495, update the Windows VPN client to 2026.4; updating only the Firebox appliance is insufficient. Check the original for differences between the Solution section and product table.
10/27 publication · publication or update confirmed
Browsers and email: Firefox / ESR / Thunderbird / Chrome updates.
Mozilla released Firefox159, ESR153.6 / 115.44, and Thunderbird159 / 153.6 on 10/27. Chrome stable is rolling out Windows/Mac156.0.8078.73/.74 and Linux/Android156.0.8078.73. Advisory counts are not incident counts.
What to checkUpdate and restart. Check the supported series appropriate to the OS and corporate management policy, and do not add invented CVEs or zero-day designations for undisclosed Chrome details.
10/27 advisory · publication or update confirmed
Creative Cloud Windows: local privilege escalation fix.
APSB26-135 fixes a search-path issue affecting Windows versions 6.10 and earlier in 6.11. The vendor reports no known actual exploitation. This is not an announcement confirming user compromise.
What to checkUpdate Creative Cloud Desktop to 6.11 or later. Check actual versions on deployed devices.
10/27 official update · publication or update confirmed
Fortinet FIPS: 7.4 remediation build and inconsistent 7.2 notation
The technical article dated the 27 announces availability of FIPS hardening builds. For 7.4, this is FIPS-CC-74-15 b9481. For 7.2, b9883 in the text differs from b9893 in the download path. Extended support for 7.0FIPS has ended, with no build planned this time.
What to checkMatch models and builds against official ReadMe files and support downloads. Do not automatically apply an ambiguous 7.2 number. Do not reuse the GA hardening table as individual minimum fixed versions for an unretrieved PSIRT advisory.
This GHSA publication window / malware classification · Publication/update verified.
Malicious packages: separately check 27 GHSA malware-category advisories
Includes trajmetrics0.5.3, numprint1.2.0, and @azure-growth/signup-ux-components1.2.2/1.2.3. Ranges below are as specified in GitHub advisories. Do not infer that all legitimate packages with similar names were compromised. Do not count 27 advisories as 27 newly affected organizations.
What to checkCompare lockfiles and SBOMs with retrieval caches; do not verify suspicious artifacts by executing them. If installed or executed, isolate and rebuild the environment and revoke credentials that were reachable. Do not interpret an unspecified fixed version as meaning a safe version exists or that upgrading alone resolves the issue.
By advisory: affected and fixed versions (27 advisories)
GHSA-rm9p-x4m7-hxmp
Malicious code in trajmetrics (PyPI)
trajmetrics(pip): affected= 0.5.3→ fixed versionNo fixed version listed
GHSA-vc33-3x34-x6jm
Malware in glyphmatrix-fixture
glyphmatrix-fixture(npm): affected= 1.0.0→ fixed versionNo fixed version listedglyphmatrix-fixture(npm): affected= 1.0.1→ fixed versionNo fixed version listed
GHSA-ph3g-jrf5-8792
Malware in csec-form-validatorr
csec-form-validatorr(npm): affected>= 0→ fixed versionNo fixed version listed
GHSA-h5wr-j55v-8m79
Malware in ccsseecc-form-validator
ccsseecc-form-validator(npm): affected>= 0→ fixed versionNo fixed version listed
GHSA-v9xw-mxj4-fm5q
Malware in ccsseecc-crypto-toolkit
ccsseecc-crypto-toolkit(npm): affected>= 0→ fixed versionNo fixed version listed
GHSA-2732-c6cp-rx5v
Malware in ccsec-crypto-toolkit
ccsec-crypto-toolkit(npm): affected>= 0→ fixed versionNo fixed version listed
GHSA-r889-j2qv-2jv6
Malware in ccsec-form-validator
ccsec-form-validator(npm): affected>= 0→ fixed versionNo fixed version listed
GHSA-v383-2358-576w
Malware in csec-crypto-toolkit
csec-crypto-toolkit(npm): affected>= 0→ fixed versionNo fixed version listed
GHSA-wh86-6qm8-xgw2
Malware in csec-form-validator
csec-form-validator(npm): affected>= 0→ fixed versionNo fixed version listed
GHSA-7p7m-8jmq-qp93
Malware in agentenact
agentenact(npm): affected= 0.2.0→ fixed versionNo fixed version listed
GHSA-84fw-gj66-p5v3
Malware in dsh-vm-tester
dsh-vm-tester(npm): affected= 0.1.4→ fixed versionNo fixed version listeddsh-vm-tester(npm): affected= 0.1.2→ fixed versionNo fixed version listeddsh-vm-tester(npm): affected= 0.1.3→ fixed versionNo fixed version listed
GHSA-g9fj-q87h-6h4c
Malicious code in numprint (PyPI)
numprint(pip): affected= 1.2.0→ fixed versionNo fixed version listed
GHSA-r9qx-xcg2-7wcc
Malware in 6161test1234
6161test1234(npm): affected>= 0→ fixed versionNo fixed version listed
GHSA-r77r-rw3m-rjh5
Malware in adyen-web-v6
adyen-web-v6(npm): affected>= 0→ fixed versionNo fixed version listed
GHSA-6crh-vwr2-4qfp
Malware in buttoncontent
buttoncontent(npm): affected>= 0→ fixed versionNo fixed version listed
GHSA-wmfr-2pvv-wmf3
Malware in @tableau__catalog-messages/database_lower
@tableau__catalog-messages/database_lower(npm): affected>= 0→ fixed versionNo fixed version listed
GHSA-wfcx-722r-fg5h
Malware in string-target-mapper-hash
string-target-mapper-hash(npm): affected>= 0→ fixed versionNo fixed version listed
GHSA-hc8w-gq4q-fr74
Malware in @flexmr/survey-conversation
@flexmr/survey-conversation(npm): affected>= 0→ fixed versionNo fixed version listed
GHSA-hpc9-fxqh-hhf8
Malware in @flexmr/utils
@flexmr/utils(npm): affected>= 0→ fixed versionNo fixed version listed
GHSA-w9mp-cvjp-jfqp
Malware in fetch-hash-cache-atomic
fetch-hash-cache-atomic(npm): affected>= 0→ fixed versionNo fixed version listed
GHSA-rh7q-f888-q36c
Malware in @flexmr/survey-client
@flexmr/survey-client(npm): affected>= 0→ fixed versionNo fixed version listed
GHSA-32g3-f74c-pcxq
Malware in macro-kernel-record-reader
macro-kernel-record-reader(npm): affected>= 0→ fixed versionNo fixed version listed
GHSA-9mgv-25w8-jwhf
Malware in paychex-pdftron
paychex-pdftron(npm): affected>= 0→ fixed versionNo fixed version listed
GHSA-fxw2-4j5q-6hwg
Malware in sc-announcer
sc-announcer(npm): affected>= 0→ fixed versionNo fixed version listed
GHSA-hh3m-f424-g8v5
Malware in ccl-global-shopping
ccl-global-shopping(npm): affected>= 0→ fixed versionNo fixed version listed
GHSA-9gcx-88qx-rxch
Malware in sc-hydrate-carousel-price
sc-hydrate-carousel-price(npm): affected>= 0→ fixed versionNo fixed version listed
GHSA-m8mp-r4jx-43fw
Malicious code in @azure-growth/signup-ux-components (npm)
@azure-growth/signup-ux-components(npm): affected= 1.2.2→ fixed versionNo fixed version listed@azure-growth/signup-ux-components(npm): affected= 1.2.3→ fixed versionNo fixed version listed
GitHub malware advisory GHSA-rm9p-x4m7-hxmp / GitHub malware advisory GHSA-vc33-3x34-x6jm / GitHub malwareadvisory GHSA-ph3g-jrf5-8792 / GitHub malware advisory GHSA-h5wr-j55v-8m79 / GitHub malware advisory GHSA-v9xw-mxj4-fm5q / GitHub malwareadvisory GHSA-2732-c6cp-rx5v / GitHub malware advisory GHSA-r889-j2qv-2jv6 / GitHub malware advisory GHSA-v383-2358-576w / GitHub malwareadvisory GHSA-wh86-6qm8-xgw2 / GitHub malware advisory GHSA-7p7m-8jmq-qp93 / GitHub malware advisory GHSA-84fw-gj66-p5v3 / GitHub malwareadvisory GHSA-g9fj-q87h-6h4c / GitHub malware advisory GHSA-r9qx-xcg2-7wcc / GitHub malware advisory GHSA-r77r-rw3m-rjh5 / GitHub malwareadvisory GHSA-6crh-vwr2-4qfp / GitHub malware advisory GHSA-wmfr-2pvv-wmf3 / GitHub malware advisory GHSA-wfcx-722r-fg5h / GitHub malwareadvisory GHSA-hc8w-gq4q-fr74 / GitHub malware advisory GHSA-hpc9-fxqh-hhf8 / GitHub malware advisory GHSA-w9mp-cvjp-jfqp / GitHub malwareadvisory GHSA-rh7q-f888-q36c / GitHub malware advisory GHSA-32g3-f74c-pcxq / GitHub malware advisory GHSA-9mgv-25w8-jwhf / GitHub malwareadvisory GHSA-fxw2-4j5q-6hwg / GitHub malware advisory GHSA-hh3m-f424-g8v5 / GitHub malware advisory GHSA-9gcx-88qx-rxch / GitHub malwareadvisory GHSA-m8mp-r4jx-43fw
Mitigations and condition supplements for existing incidents · 3 groups
Supplementing conditions, fix/deployment methods, and operational impacts in previously published material. These are not recounted as new compromises during this period.
10/25 fix / continued checking of 10/26 Functions guidance · Publication/update confirmed
Brotli: distinguish availability of .NET fixes from deployment to user environments
.NET 8.0.33 / 9.0.22 / 10.0.14 / 11 RC3 are already available OOB fixes. .NET Framework is excluded. The official Azure Functions 10/26 notice describes an ongoing rollout and does not state that every running instance has been updated.
What to checkFor framework-dependent deployments, update the runtime and restart; for self-contained deployments, rebuild and republish; for containers, rebuild and redeploy. Check the actual running version for Functions.
Continued checking of bulletin dated 10/26 / tag dated 10/27 · Publication/update confirmed
Tailscale: minimum fixed version 1.104.4 for 4 official advisories
TS-2026-014–017 concern SSH Unix socket forwarding, SSH memory DoS, Serve Unix backends, and HTTP/2 capability confusion. The official bulletin specifies at least 1.104.4. A timing gap in changelog updates remains. Do not equate this with fixes for all 11 Tailworm items.
What to checkVerify 1.104.4 or later on production clients and check SSH/Serve usage conditions. To temporarily disable SSH forwarding, set TS_SSH_DISABLE_FORWARDING=1 and restart the daemon. Do not include headscale or experimental connectors in the same fix scope.
Official Security Bulletins / Official v1.104.4 / Conditions in the researcher report
Continued response to 10/21 incident / 10/23 analysis · Publication/update confirmed
LiteLLM: revoke keys and rebuild environments after distribution-path compromise.
Actual distribution of malicious 1.107.0 and containers was confirmed in the 10/21 incident. The attack-chain report on the 23rd explains the path from an unrevoked master key to publisher tokens and other access. Do not reuse victim counts from the separate March (month 3) incident here.
What to checkCheck installation and execution paths during the affected period. Before simply updating pip packages, isolate and rebuild the environment and revoke/replace keys that were reachable. Product GHSA fixed versions in this window are separate from post-compromise safety checks.
Official 10/21 incident report / Official attack-chain analysis
Reference: publication time unconfirmed despite same date · 0 groups
This is current content retrieved after the target time. The following information is excluded from confirmed changes before the cutoff.
Collection scope, overlap and limitations
626NVD new records
1,911NVD revisions
664GHSA publication window
70Verified saved and referenced responses
All 626 new NVD entries overlap the 1911 revisions. GHSA has 664 newly published advisories (unreviewed547, malware27) and 958 revisions. Distinguish reviewed, unreviewed, and malware, and check publication/revision overlap in the ledger. KEV is the 2026.10.27 edition with 1,760 entries; differences from the previously saved original: CVE-2026-111497 / CVE-2026-48356. Inclusion and differences between originals are separate from attack start times. Absence from the list is not proof of no exploitation. Of 70 responses, 21 reference previous originals to avoid duplicate storage.
- The cutoff is 2026-10-28 13:18:44 JST. Retrieved materials are current revisions after the cutoff, not a reconstruction of every earlier version.
- We check NVD publications/revisions, GHSA reviewed/unreviewed/malware, KEV, domestic and overseas official advisories, and follow-up reports on selected incidents. These are not comprehensive statistics for incidents worldwide.
- Publications and revisions overlap. Do not add vulnerabilities, advisories, packages, organizations, and affected people together as an incident count. Reviewed is a GitHub category, not confirmation of actual exploitation.
- This investigation data covers issues in selected follow-ups and advisories. It does not mean earlier unresolved incidents have disappeared; consult earlier ledgers too.
- KEV inclusion confirms exploitation of the vulnerability, not compromise of every product incorporating it. No in the forensic instructions field does not mean compromise investigation is unnecessary.
- Retrieval failures and challenge responses are retained in collected-original metadata. Do not count unavailable information as 0 updates.
- The latest Japanese ledger has been updated. Saved translations are archives displaying their original cutoff times and are not treated as completed translations of new information.
- The initial NVD revision retrieval timed out. Retrieving again in batches of 500 obtained all 1,911 entries. Preserve the initial failure too; do not confuse 0 retrieved entries with 0 updates.
data/2026-10-28-1318/incident-register.json / data/2026-10-28-1318/collection-summary.json / data/2026-10-28-1318-vendors/collection-summary.json / docs/research-collection-2026-10-28-1318.md / docs/research-2026-10-28-1318.md / data/latest.json