AI translation. Check versions, conditions and actions against the Japanese original and primary sources.

SECURITY REVIEW · 2026-10-29 14:01:25 JST / 2026-10-29 05:01:25 UTC

After fixing the entry point, check credentials and management systems.

Linux and ESX KEV additions, chaining from PHP to identity systems, GMO updates, the official So-net disclosure and UNM clinical recovery. Review new advisories separately from existing incident status.

Cutoff: 2026-10-29 14:01:25 JST / 2026-10-29 05:01:25 UTC. Window: 10/28 13:18:44–10/29 14:01:25 JST.
Current revisions were retrieved after 10/29 14:01 JST. Same-day updates without precise publication times remain reference material.

Quick overview →Database and advisory updates →Ongoing incident response →10/29: 6 motion diagrams →Chronological archive →

Quick overview: check only what you use.

Exploitation chains and investigation scope

Check the kernel, management servers and credentials as well as PHP.

Research and caveats →

Real impacts on daily life and work

Separate confirmed impacts, unknowns and actions for telecom disclosure and healthcare recovery.

Impact list →

Fixes differ by advisory

Check AI, identity, web and network components against their exposure conditions.

Research database →

Registrations and advisory updates in the window · 48 groups

Organized by database inclusion/revision and advisory update times. These are not attack start times or counts of newly occurring harm.

10/29 12:40 JST notice 15 · Publication/update confirmed

GMO: notice 15 concerns assessment of leads, without confirming restoration or arrests

Notice 15 at 12:40 on 10/29 says potentially useful identification leads are under assessment. The 270 submissions as of 11:30 are not a victim count. Work to limit dissemination described in notice 14 continues. Domain takedown, recovery of all information, service restoration and arrest are separate states.

What to checkAvoid perpetrator sites and leaked material; consult official individual communications, alternative environments, and compensation terms. Do not respond to opportunistic requests for credentials or fees.

GMO notice 15 / GMO notice 14

2026-10-29 / review · Publication/update confirmed

KEV: Linux privilege escalation and missing ESX logging added

KEV version 2026.10.28 contains 1,762 entries. CVE-2026-46300 describes chaining with the 2 PHP flaws; forensicTriage is Yes and the deadline is 10/31. CVE-2026-41709 concerns actions left unlogged after administrator access, with a deadline of 11/11. Addition dates are not attack start dates; deadlines are requirements for US federal agencies.

What to checkCheck kernel and embedded-product updates, including the running version after restart. Use the ESX vendor response matrix and treat missing logs as an investigation limitation.

CISA KEV

2026-10-29 / review · Publication/update confirmed

UNM Health: clinical and academic recovery, with a warning about follow-on scams

The official 10/28 update reports fully functional clinical operations and resumed classes and research. Ambulance diversion and interrupted outpatient surgery and appointments on 10/26 remain recorded as real impacts. The institution says some end-user devices were affected without penetration of core systems or servers. Attacker claims of stolen data or payment offers are not confirmed disclosure or compensation.

What to checkUse official hospital channels to check rescheduled appointments. Do not engage with purported attackers or compensation offers.

UNM HSC official update

2026-10-29 / review · Publication/update confirmed

Yamaha NWR100: unauthenticated command execution and CONFIG access

CVE-2026-97854 allows unauthenticated OS command execution, scored 9.8 in CVSS v3.1 and 9.3 in v4.0. CVE-2026-109822 concerns unauthenticated access to generated CONFIG files. Rev.26.00.07 and earlier are affected; Rev.26.00.08 is fixed. Potential impact is not a count of actual compromises.

What to checkUpdate firmware. If delayed, restrict devices and source IP addresses allowed to access the Web GUI.

JVN NWR100

2026-10-29 / review · Publication/update confirmed

Yamaha Windows products: separate installer and service-path fixes

LAN Monitor installers through Ver.1.9.3 have a DLL-loading issue, fixed in Ver.1.10.1; already installed software itself is unaffected by this installer issue. YMS-VPN8 / YMS-VPN8-CP through Ver.1.04.00 have unquoted service paths, fixed in Ver.1.07.00. The latter requires permission to write to the system drive.

What to checkUse the official fixed releases and avoid running installers beside untrusted DLLs. Review shared Windows access and write permissions.

JVN LAN Monitor / JVN VPN clients

2026-10-29 / review · Publication/update confirmed

Struts REST: any-setter requires configuration as well as an update

In Struts 2 versions 7.2.1–7.3.0, @StrutsParameter restrictions do not cover REST @JsonAnySetter members. JVN advises updating to 7.4.0 or later and using struts.rest.anySetter.requireAnnotations=true with @StrutsParameter(allowDynamicKeys = true). Conditions include REST use and any-setter declarations; this does not establish compromise of all Struts applications.

What to checkCheck the update, configuration and annotations together. Work around the issue by avoiding any-setter or validating values in the application before storage.

JVN Struts

2026-10-28 / 2026-10-29 GHSA publication window · Publication/update confirmed

tornado: check advisory-specific conditions and minimum fixes

tornado reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (3 entries)

GHSA-r4j5-9xpp-3985

Tornado: Event loop blocking and excess memory use from chunked bodies with many small chunks

tornado (pip): affected < 6.6 → fixed version 6.6

GHSA-pw9p-v7r6-gx4p

Tornado: Open redirect in RedirectHandler via protocol-relative URLs

tornado (pip): affected < 6.6 → fixed version 6.6

GHSA-pcg2-g6cj-q92c

Tornado: Quadratic CPU usage when parsing HTTP headers with line folding

tornado (pip): affected < 6.6 → fixed version 6.6

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window · Publication/update confirmed

crass: check advisory-specific conditions and minimum fixes

crass reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (1 entry)

GHSA-pq4g-8rxf-4g29

Crass: Incorrect tokenization of bad URLs enables CSS sanitizer bypass

crass (rubygems): affected <= 1.0.7 → fixed version 1.0.8

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window · Publication/update confirmed

systeminformation: check advisory-specific conditions and minimum fixes

systeminformation reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (3 entries)

GHSA-3f7j-7jwc-fxfj

systeminformation vulnerable to Windows command injection in services() through Unicode quotation marks

systeminformation (npm): affected < 5.33.16 → fixed version 5.33.16

GHSA-4vjg-vx72-qq4g

systeminformation has path traversal in Linux networkStats() that allows symlink-based file disclosure outside /sys/class/net

systeminformation (npm): affected < 5.33.14 → fixed version 5.33.14

GHSA-7648-jmwf-vw7j

systeminformation has prototype pollution in `networkStats()` via the interface name

systeminformation (npm): affected < 5.33.13 → fixed version 5.33.13

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window · Publication/update confirmed

@backstage/plugin-catalog-backend: check advisory-specific conditions and minimum fixes

@backstage/plugin-catalog-backend reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (1 entry)

GHSA-w658-mh9p-ww8f

Backstage catalog rules can be bypassed for URL locations using encoded path segments

@backstage/plugin-catalog-backend (npm): affected < 3.9.2 → fixed version 3.9.2
@backstage/plugin-catalog-backend (npm): affected >= 4.0.0, < 4.0.2 → fixed version 4.0.2

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window · Publication/update confirmed

electrum: check advisory-specific conditions and minimum fixes

electrum reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (1 entry)

GHSA-6jp4-8v48-cc5v

Electrum: Malicious server can replace a just-broadcast tx and try to trick user into RBF-ing it

electrum (pip): affected < 4.8.3 → fixed version 4.8.3

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window · Publication/update confirmed

knative.dev/pkg: check advisory-specific conditions and minimum fixes

knative.dev/pkg reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (1 entry)

GHSA-2hw4-c9m4-f2fj

knative.dev/pkg admission webhooks allow unbounded request-body memory exhaustion

knative.dev/pkg (go): affected < 0.0.0-20260531000007-52dbd5ece63f → fixed version 0.0.0-20260531000007-52dbd5ece63f

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window · Publication/update confirmed

@waline/vercel: check advisory-specific conditions and minimum fixes

@waline/vercel reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (1 entry)

GHSA-jf75-q64q-g65r

Waline login accepts a non-string email as a match-all MongoDB query

@waline/vercel (npm): affected <= 1.40.3 → fixed version 1.41.0

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window · Publication/update confirmed

seroval: check advisory-specific conditions and minimum fixes

seroval reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

Advisories: affected versions and fixes (5)

GHSA-f86p-h4j2-7qgj

Seroval: Code injection through a typed array's own constructor property

seroval (npm): affected >= 1.6.0, < 1.6.11 → fixed version 1.6.11

GHSA-9wx9-5pv9-3349

Seroval: Script injection through RegExp sources in serialized output

seroval (npm): affected >= 1.5.5, < 1.6.10 → fixed version 1.6.10
seroval (npm): affected < 1.0.0 → fixed version 1.0.0

GHSA-97r2-qh9m-474h

Seroval: fromJSON deserializer trusts node-supplied array length and sequence doneAt (unauthenticated event-loop DoS)

seroval (npm): affected <= 1.6.7 → fixed version 1.6.8

GHSA-wp97-x4hv-qvhp

Seroval `fromJSON`/`fromCrossJSON` denial of service via unvalidated array node length

seroval (npm): affected >= 1.4.1, <= 1.6.7 → fixed version 1.6.8

GHSA-7rv5-mrxv-xcr9

Seroval: Deserialization invokes attacker-chosen callables: AsyncIteratorFactoryInstance calls source.on(listener) without type check

seroval (npm): affected <= 1.6.7 → fixed version 1.6.8

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window · Publication/update confirmed

mem0ai: check advisory-specific conditions and minimum fixes

mem0ai reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (1 entry)

GHSA-5324-3w58-qpp2

Mem0: Cross-tenant conversation leak via unescaped delimiter collision in session-scope key (_build_session_scope)

mem0ai (pip): affected < 2.0.18 → fixed version 2.0.18
mem0ai (npm): affected < 3.1.6 → fixed version 3.1.6

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window · Publication/update confirmed

onnx: check advisory-specific conditions and minimum fixes

onnx reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (4 entries)

GHSA-6pwm-x34p-fvj2

ONNX: Out-of-bounds read in ConvTranspose shape inference via undersized weight rank

onnx (pip): affected >= 1.2.1, <= 1.21.0 → fixed version 1.22.0

GHSA-q69g-f4f5-v8m7

ONNX: Denial of service via unchecked expansion of packed sub-byte tensors in ONNX Python APIs

onnx (pip): affected <= 1.21.0 → fixed version 1.22.0

GHSA-m4pr-6v3c-6fgr

ONNX: Null Pointer Dereference in ScanInferenceFunction Due to Missing Required Attribute

onnx (pip): affected >= 1.4.0, <= 1.21.0 → fixed version 1.22.0

GHSA-48m4-24cq-37qf

ONNX: Out-of-Bounds Read in RNN/GRU/LSTM Shape Inference (Old Opsets, Missing Rank Check)

onnx (pip): affected <= 1.21.0 → fixed version 1.22.0

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window · Publication/update confirmed

vllm: check advisory-specific conditions and minimum fixes

vllm reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (8 advisories)

GHSA-vvpg-rrww-wpmh

vLLM: Permissive default CORS origins allow cross-origin requests to the vLLM HTTP server

vllm (pip): affected < 0.32.0 → fixed version 0.32.0

GHSA-8397-8qf6-f2gm

vLLM: Phi-4 multimodal audio encoder materializes and retains full attention matrices: a single max-length audio OOM-crashes the vLLM engine

vllm (pip): affected < 0.32.0 → fixed version 0.32.0

GHSA-gq5q-89c7-vhvx

vLLM DeepSeek-OCR image processing vulnerable to denial of service

vllm (pip): affected >= 0.11.1, < 0.32.0 → fixed version 0.32.0

GHSA-h3rc-j82p-2c3h

vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCE

vllm (pip): affected < 0.32.0 → fixed version 0.32.0

GHSA-6757-hggm-hp2w

vLLM: Public multimodal SHM handle forgery reaches worker-side `pickle.loads()` with insecure serialization disabled

vllm (pip): affected < 0.32.0 → fixed version 0.32.0

GHSA-q97c-p368-75c4

vLLM: Out-of-vocabulary prompt token id passes input validation and triggers a CUDA device-side assert (engine crash / DoS)

vllm (pip): affected < 0.32.0 → fixed version 0.32.0

GHSA-x567-49g5-p4cf

vLLM: Responses API bypasses trust_request_chat_template for chat_template_kwargs

vllm (pip): affected >= 0.16.0, < 0.32.0 → fixed version 0.32.0

GHSA-542m-9234-8gvf

vLLM: DoS via unbounded chat_template Jinja2 rendering exhausts the renderer thread pool

vllm (pip): affected >= 0.19.0, < 0.32.0 → fixed version 0.32.0

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window · Publication/update confirmed

wasmtime: check advisory-specific conditions and minimum fixes

wasmtime reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (1 entry)

GHSA-mghf-wjfp-p5xm

Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction

wasmtime (rust): affected < 36.0.19 → fixed version 36.0.19
wasmtime (rust): affected >= 37.0.0, < 48.0.7 → fixed version 48.0.7
wasmtime (rust): affected >= 49.0.0, < 49.0.4 → fixed version 49.0.4

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window · Publication/update confirmed

github.com/go-jose/go-jose/v4: check advisory-specific conditions and minimum fixes

github.com/go-jose/go-jose/v4 reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (2 advisories)

GHSA-vvm8-gf78-28g4

Go JOSE: Panics in JSON parsing

github.com/go-jose/go-jose/v4 (go): affected < 4.1.5 → fixed version 4.1.5
github.com/go-jose/go-jose/v3 (go): affected <= 3.0.5 → fixed version No fixed version listed

GHSA-4w3g-jfj2-cw2q

Go JOSE: Panic during CBC-HMAC processing

github.com/go-jose/go-jose/v4 (go): affected < 4.1.5 → fixed version 4.1.5
github.com/go-jose/go-jose/v3 (go): affected <= 3.0.5 → fixed version No fixed version listed

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window · Publication/update confirmed

langgraph-cli: check advisory-specific conditions and minimum fixes

langgraph-cli reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (1 entry)

GHSA-8prr-f582-jqq3

LangGraph CLI prints the registry push token in `langgraph deploy --verbose` output

langgraph-cli (pip): affected >= 0.4.15, <= 0.4.31 → fixed version 0.4.32

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window · Publication/update confirmed

graphql-scalars: check advisory-specific conditions and minimum fixes

graphql-scalars reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (1 entry)

GHSA-x8rm-f576-gq67

graphql-scalars PhoneNumber scalar is vulnerable to regular expression denial of service

graphql-scalars (npm): affected <= 2.0.0 → fixed version 2.0.1

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window · Publication/update confirmed

autobahn: check advisory-specific conditions and minimum fixes

autobahn reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (1 entry)

GHSA-pjh6-c8mg-3x7m

Autobahn Python: permessage-brotli inflates a whole frame before maxMessagePayloadSize is checked (incomplete fix of GHSA-hxp9-w8x3-p566)

autobahn (pip): affected >= 26.7.1, < 26.10.1 → fixed version 26.10.1

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window · Publication/update confirmed

i18next-http-backend: check advisory-specific conditions and minimum fixes

i18next-http-backend reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (2 advisories)

GHSA-3cmx-xjww-583x

i18next-http-backend: Query-parameter injection through & and = in lng when loadPath/addPath puts {{lng}} in the query string

i18next-http-backend (npm): affected < 4.0.4 → fixed version 4.0.4

GHSA-9jhj-wvmw-cfx5

i18next-http-backend: Namespace value starting with / forms a protocol-relative URL when loadPath/addPath places {{ns}} right after a / (bypass of the // check added for GHSA-xvq9-wjp8-hwqf)

i18next-http-backend (npm): affected < 4.0.3 → fixed version 4.0.3

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window · Publication/update confirmed

re2js: check advisory-specific conditions and minimum fixes

re2js reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (1 entry)

GHSA-gg6h-894w-4m9c

RE2JS: Quadratic-time denial of service in re2js lookbehind matching

re2js (npm): affected >= 2.2.0, < 2.8.7 → fixed version 2.8.7

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window · Publication/update confirmed

zip: check advisory-specific conditions and minimum fixes

zip reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (1 entry)

GHSA-m665-v7pm-7grj

zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite & RCE

zip (rust): affected <= 9.0.4 → fixed version 9.0.5

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window · Publication/update confirmed

langgraph-api: check advisory-specific conditions and minimum fixes

langgraph-api reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (1 entry)

GHSA-4hm6-w6qq-w73v

LangGraph JavaScript custom authentication may permit cross-user Store access

langgraph-api (pip): affected >= 0.1.2, < 0.15.0 → fixed version 0.15.0

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window · Publication/update confirmed

filelock: check advisory-specific conditions and minimum fixes

filelock reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

Advisories: affected versions and fixes (12)

GHSA-wfhq-q4j2-c37m

filelock: SoftReadWriteLock follows a lock tree swapped in after its first acquire and writes lock records into directories of the user running the lock

filelock (pip): affected >= 4.1.0, <= 4.2.0 → fixed version 4.2.1

GHSA-6627-m3xw-93mp

filelock: StrictSoftFileLock creates its claim directories without the lock mode, so another local user with a write bit on them can end a live hold

filelock (pip): affected >= 3.30.0, <= 4.2.0 → fixed version 4.2.1

GHSA-9c4x-gm8v-wgc4

filelock: StrictSoftFileLock and SoftReadWriteLock adopt a protocol directory another user created first, losing mutual exclusion

filelock (pip): affected >= 3.30.0, <= 4.2.0 → fixed version 4.2.1

GHSA-8mx5-7m5m-r77g

filelock: WindowsFileLock ignores mode: a 0o600 lock file and the ReadWriteLock database inherit the directory ACL

filelock (pip): affected >= 3.10.0, <= 4.2.0 → fixed version 4.2.1

GHSA-cwqr-hh33-gh44

filelock ReadWriteLock: a crafted lock database makes every acquire stall or hang regardless of timeout

filelock (pip): affected >= 3.20.4, <= 4.2.0 → fixed version 4.2.1

GHSA-rfpc-qcw5-3pc4

filelock: SoftFileLock removes a live holder's marker when another user forges the PID in a writable marker

filelock (pip): affected >= 3.22.0, <= 4.2.0 → fixed version 4.2.1

GHSA-9j6q-wvj5-jgjg

filelock: Symlink swap during SoftFileLock's writability check leaks whether a path exists and is writable by the lock taker

filelock (pip): affected >= 3.32.6, <= 4.2.0 → fixed version 4.2.1

GHSA-69hj-f68j-2879

filelock: UnixFileLock truncates and chmods any regular file another user renames or hard-links onto the lock path

filelock (pip): affected <= 4.2.0 → fixed version 4.2.1

GHSA-j8f7-rjxc-mr56

filelock: ReadWriteLock follows a symlink at the lock path into SQLite

filelock (pip): affected >= 3.20.4, <= 4.0.8 → fixed version 4.0.9

GHSA-m462-7rxw-wvpg

filelock: StrictSoftFileLock follows a symbolic link swapped in at <path>.filelock and creates claim files in a directory another local user chooses

filelock (pip): affected >= 3.30.0, <= 4.2.0 → fixed version 4.2.1

GHSA-fj95-fr6c-h845

filelock: SoftReadWriteLock holder refresh writes through a hard link and hangs on a named pipe that another local user renames over its record

filelock (pip): affected >= 4.0.0, <= 4.2.0 → fixed version 4.2.1

GHSA-fq56-3cx3-fjxp

filelock: SoftFileLock stale-lock break removes a live lock file on a reused inode number and admits two holders

filelock (pip): affected >= 3.22.0, <= 4.2.0 → fixed version 4.2.1

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window · Publication/update confirmed

io.opentelemetry:opentelemetry-api: check advisory-specific conditions and minimum fixes

io.opentelemetry:opentelemetry-api reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (1 entry)

GHSA-ccrj-gw8r-854m

opentelemetry-java: Quadratic CPU consumption in W3C tracestate parsing

io.opentelemetry:opentelemetry-api (maven): affected <= 1.66.0 → fixed version 1.67.0

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window · Publication/update confirmed

happy-dom: check advisory-specific conditions and minimum fixes

happy-dom reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (2 advisories)

GHSA-c8p4-j97h-3vg8

Happy DOM: SSRF via iframe and link stylesheet when parsing untrusted HTML

happy-dom (npm): affected <= 20.14.6 → fixed version 21.0.0

GHSA-5fpq-26gf-qwcr

Happy DOM has cookie scope forgery: no DNS-label boundary on Domain= matching , attacker origin sets victim cookies

happy-dom (npm): affected <= 20.14.5 → fixed version 20.14.6

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window · Publication/update confirmed

vue-i18n: check advisory-specific conditions and minimum fixes

vue-i18n reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (2 advisories)

GHSA-8rc2-428q-7ww3

Vue I18n: `escapeParameter` does not escape named values when the same call also passes a list

vue-i18n (npm): affected >= 9.0.0-beta.5, < 11.4.14 → fixed version 11.4.14
vue-i18n (npm): affected >= 12.0.0-alpha.1, < 12.0.0-alpha.5 → fixed version 12.0.0-alpha.5
@intlify/core (npm): affected >= 9.0.0-beta.10, < 11.4.14 → fixed version 11.4.14
@intlify/core (npm): affected >= 12.0.0-alpha.1, < 12.0.0-alpha.5 → fixed version 12.0.0-alpha.5
@intlify/core-base (npm): affected >= 9.0.0-beta.12, < 11.4.14 → fixed version 11.4.14
@intlify/core-base (npm): affected >= 12.0.0-alpha.1, < 12.0.0-alpha.5 → fixed version 12.0.0-alpha.5
petite-vue-i18n (npm): affected >= 9.2.0-alpha.7, < 11.4.14 → fixed version 11.4.14
petite-vue-i18n (npm): affected >= 12.0.0-alpha.1, < 12.0.0-alpha.5 → fixed version 12.0.0-alpha.5
@intlify/vue-i18n-core (npm): affected >= 9.2.0-alpha.7, < 11.4.14 → fixed version 11.4.14
@intlify/vue-i18n-core (npm): affected >= 12.0.0-alpha.1, < 12.0.0-alpha.5 → fixed version 12.0.0-alpha.5

GHSA-83rm-6c8r-g728

Vue I18n: escapeParameter does not prevent XSS through srcdoc in translation messages

vue-i18n (npm): affected = 9.14.5 → fixed version No fixed version listed
vue-i18n (npm): affected = 10.0.8 → fixed version No fixed version listed
vue-i18n (npm): affected >= 11.1.10, < 11.4.14 → fixed version 11.4.14
vue-i18n (npm): affected = 12.0.0-alpha.4 → fixed version 12.0.0-alpha.5
petite-vue-i18n (npm): affected = 9.14.5 → fixed version No fixed version listed
petite-vue-i18n (npm): affected = 10.0.8 → fixed version No fixed version listed
petite-vue-i18n (npm): affected >= 11.1.10, < 11.4.14 → fixed version 11.4.14
petite-vue-i18n (npm): affected = 12.0.0-alpha.4 → fixed version 12.0.0-alpha.5
@intlify/core-base (npm): affected = 9.14.5 → fixed version No fixed version listed
@intlify/core-base (npm): affected = 10.0.8 → fixed version No fixed version listed
@intlify/core-base (npm): affected >= 11.1.10, < 11.4.14 → fixed version 11.4.14
@intlify/core-base (npm): affected = 12.0.0-alpha.4 → fixed version 12.0.0-alpha.5
@intlify/core (npm): affected = 9.14.5 → fixed version No fixed version listed
@intlify/core (npm): affected = 10.0.8 → fixed version No fixed version listed
@intlify/core (npm): affected >= 11.1.10, < 11.4.14 → fixed version 11.4.14
@intlify/core (npm): affected = 12.0.0-alpha.4 → fixed version 12.0.0-alpha.5
@intlify/vue-i18n-core (npm): affected = 9.14.5 → fixed version No fixed version listed
@intlify/vue-i18n-core (npm): affected = 10.0.8 → fixed version No fixed version listed
@intlify/vue-i18n-core (npm): affected >= 11.1.10, < 11.4.14 → fixed version 11.4.14
@intlify/vue-i18n-core (npm): affected = 12.0.0-alpha.4 → fixed version 12.0.0-alpha.5
@intlify/shared (npm): affected = 9.14.5 → fixed version No fixed version listed
@intlify/shared (npm): affected = 10.0.8 → fixed version No fixed version listed
@intlify/shared (npm): affected >= 11.1.10, < 11.4.14 → fixed version 11.4.14
@intlify/shared (npm): affected = 12.0.0-alpha.4 → fixed version 12.0.0-alpha.5

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window · Publication/update confirmed

langgraph-sdk: check advisory-specific conditions and minimum fixes

langgraph-sdk reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (1 entry)

GHSA-3fx2-cqw9-xr3c

LangGraph: Unencoded identifiers in LangGraph SDK v3 streaming can redirect authenticated GET requests

langgraph-sdk (pip): affected >= 0.4.0, < 0.4.6 → fixed version 0.4.6
langgraph (pip): affected >= 1.2.3, < 1.2.14 → fixed version 1.2.14

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window · Publication/update confirmed

@graphql-tools/executor-legacy-ws: check advisory-specific conditions and minimum fixes

@graphql-tools/executor-legacy-ws reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (2 advisories)

GHSA-434m-5hcj-pxf3

GraphQL Tools: Per-request connection parameters persist into later users' WebSocket authentications

@graphql-tools/executor-legacy-ws (npm): affected <= 1.1.35 → fixed version 1.1.36

GHSA-mp66-8ww2-pcwm

GraphQL Tools: Shared legacy executor routes one subscription's results to a different caller

@graphql-tools/executor-legacy-ws (npm): affected <= 1.1.35 → fixed version 1.1.36

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window · Publication/update confirmed

@hono/node-server: check advisory-specific conditions and minimum fixes

@hono/node-server reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (1 entry)

GHSA-rmxm-3fg6-px4f

@hono/node-server: `serveStatic` decodes the request path a second time, leading to bypass of middleware on static paths

@hono/node-server (npm): affected >= 1.19.10, < 2.1.3 → fixed version 2.1.3

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window · Publication/update confirmed

github.com/labstack/echo/v5: check advisory-specific conditions and minimum fixes

github.com/labstack/echo/v5 reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

Advisories: affected versions and fixes (10)

GHSA-2ffq-g2xg-c22p

Echo: HTTPS Redirect and HSTS Bypass via Unconditional Trust of Forwarded Scheme Headers

github.com/labstack/echo/v5 (go): affected < 5.4.0 → fixed version 5.4.0
github.com/labstack/echo/v4 (go): affected < 4.16.0 → fixed version 4.16.0

GHSA-3pmx-cf9f-34xr

Echo static file middleware route protection bypass via encoded dot-dot traversal

github.com/labstack/echo/v5 (go): affected < 5.4.0 → fixed version 5.4.0
github.com/labstack/echo/v4 (go): affected < 4.16.0 → fixed version 4.16.0

GHSA-xwq5-6cqp-vx96

Echo has a Static Middleware Double-Unescape Path Traversal

github.com/labstack/echo/v5 (go): affected < 5.2.0 → fixed version 5.2.0
github.com/labstack/echo/v4 (go): affected < 4.15.3 → fixed version 4.15.3

GHSA-v753-g4cw-jm48

Echo has Open Redirect via Control-Character Prefix Defeating sanitizeURI

github.com/labstack/echo/v5 (go): affected < 5.4.0 → fixed version 5.4.0
github.com/labstack/echo/v4 (go): affected < 4.16.0 → fixed version 4.16.0

GHSA-23wf-92cp-8pcj

Echo has Arbitrary Scheme Injection in WWWRedirect/NonWWWRedirect Middlewares via X-Forwarded-Proto

github.com/labstack/echo/v5 (go): affected < 5.1.1 → fixed version 5.1.1
github.com/labstack/echo/v4 (go): affected < 4.15.2 → fixed version 4.15.2

GHSA-375p-5qhx-8wq4

Echo's middleware.Static: `%2F`-encoded path bypasses route/group middleware guarding a statically-served path

github.com/labstack/echo/v5 (go): affected < 5.4.0 → fixed version 5.4.0
github.com/labstack/echo/v4 (go): affected < 4.16.0 → fixed version 4.16.0

GHSA-h9g5-28mm-hx3g

Echo vulnerable to Reflected Cross-Site Scripting (XSS) via unsanitized JSONP callback in Context.JSONP / Context.JSONPBlob

github.com/labstack/echo/v5 (go): affected < 5.4.0 → fixed version 5.4.0
github.com/labstack/echo/v4 (go): affected < 4.16.0 → fixed version 4.16.0

GHSA-246p-cpwv-v3jq

Echo has Rate Limiter Bypass via Spoofed X-Forwarded-For Header in Default Configuration

github.com/labstack/echo/v5 (go): affected < 5.1.0 → fixed version 5.1.0
github.com/labstack/echo/v4 (go): affected >= 4.0.0, <= 4.16.2 → fixed version No fixed version listed

GHSA-r7w9-592q-9vg4

Echo has CSRF Protection Bypass via MethodOverride Rewriting POST to Safe Method

github.com/labstack/echo/v5 (go): affected >= 5.0.0, < 5.4.0 → fixed version 5.4.0
github.com/labstack/echo/v4 (go): affected < 4.16.0 → fixed version 4.16.0

GHSA-99jh-6h7p-pp36

Echo: Reverse Proxy Forwards Attacker-Supplied X-Real-IP to Upstream by Default

github.com/labstack/echo/v5 (go): affected < 5.4.0 → fixed version 5.4.0
github.com/labstack/echo/v4 (go): affected >= 4.0.0, <= 4.16.2 → fixed version No fixed version listed

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window · Publication/update confirmed

@highcharts/dashboards: check advisory-specific conditions and minimum fixes

@highcharts/dashboards reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (6 entries)

GHSA-6hgp-fmhr-mrg4

Highcharts Grid: `javascript:` URL in credits.href runs script on click

@highcharts/dashboards (npm): affected >= 3.2.0, <= 3.6.0 → fixed version 4.0.0
@highcharts/grid-pro (npm): affected >= 2.0.0, <= 3.1.0 → fixed version 3.2.0

GHSA-58g7-7f52-h92c

Highcharts Dashboards parses fullscreen labels as HTML

@highcharts/dashboards (npm): affected >= 1.0.0, < 4.2.3 → fixed version 4.2.3

GHSA-rcqf-f6h2-ccg9

Highcharts Dashboards parses sidebar component labels as HTML

@highcharts/dashboards (npm): affected >= 1.0.0, <= 4.2.2 → fixed version 4.2.3

GHSA-grj7-r4jv-pw9j

Highcharts Dashboards: `chartConstructor` is an unchecked lookup into the Highcharts namespace

@highcharts/dashboards (npm): affected >= 1.0.0, <= 4.2.1 → fixed version 4.2.2

GHSA-c75x-9x9h-28rm

Highcharts Dashboards / Grid Pro: `DataTable.setCell` and column writers treat `__proto__` as an existing column.

@highcharts/dashboards (npm): affected >= 1.0.0, <= 4.2.1 → fixed version 4.2.2
@highcharts/grid-pro (npm): affected >= 2.0.0, <= 3.1.0 → fixed version 3.2.0

GHSA-jqgh-w3cc-7jqw

Highcharts Dashboards: `__proto__` data table id writes sync listeners to `Object.prototype`

@highcharts/dashboards (npm): affected >= 1.0.0, <= 4.2.1 → fixed version 4.2.2

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window · Publication/update confirmed

@highcharts/grid-lite: check advisory-specific conditions and minimum fixes

@highcharts/grid-lite reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (2 advisories)

GHSA-r5wg-q8fc-p6w2

Highcharts Grid parses pagination language options as HTML

@highcharts/grid-lite (npm): affected >= 2.0.0, <= 3.1.0 → fixed version 3.2.0
@highcharts/grid-pro (npm): affected >= 2.0.0, <= 3.1.0 → fixed version 3.2.0

GHSA-6g3c-p4fg-xv47

Highcharts Grid: custom icon definition objects written with raw `setAttribute` on `<path>`

@highcharts/grid-lite (npm): affected >= 2.3.0, <= 3.1.0 → fixed version 3.2.0
@highcharts/grid-pro (npm): affected >= 2.3.0, <= 3.1.0 → fixed version 3.2.0

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window · Publication/update confirmed

highcharts: check advisory-specific conditions and minimum fixes

highcharts reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (6 entries)

GHSA-5793-x2q3-c3q7

Highcharts: `javascript:` URL in credits.href runs script on click

highcharts (npm): affected < 11.4.9 → fixed version 11.4.9
highcharts (npm): affected >= 12.0.0, < 12.6.1 → fixed version 12.6.1
highcharts (npm): affected >= 13.0.0, <= 13.0.2 → fixed version 13.1.0

GHSA-rmqc-xvr3-v46c

Highcharts: dotted series.keys paths write to Object.prototype

highcharts (npm): affected >= 12.0.0, < 12.6.1 → fixed version 12.6.1
highcharts (npm): affected >= 13.0.0, <= 13.0.2 → fixed version 13.1.0
highcharts (npm): affected >= 6.1.0, < 11.4.9 → fixed version 11.4.9

GHSA-gfvx-2c2g-38wq

Highcharts: series column construction writes to Object.prototype

highcharts (npm): affected >= 13.0.0, <= 13.0.2 → fixed version 13.1.0

GHSA-35rr-xwfh-x789

Highcharts Core: `breadcrumbs.style` keys become SVG event-handler attributes

highcharts (npm): affected >= 10.0.0, < 11.4.9 → fixed version 11.4.9
highcharts (npm): affected >= 12.0.0, < 12.6.1 → fixed version 12.6.1
highcharts (npm): affected >= 13.0.0, <= 13.0.2 → fixed version 13.1.0

GHSA-65hg-cf3f-5m39

Highcharts Core: HTML text parsing falls back to unfiltered `innerHTML` during printing

highcharts (npm): affected >= 12.0.0, < 12.6.1 → fixed version 12.6.1
highcharts (npm): affected >= 13.0.0, <= 13.0.2 → fixed version 13.1.0

GHSA-mw4f-gj5x-6xr4

Highcharts Core: `javascript:` URL in an `xlink:href` attribute survives text filtering and reaches exported charts

highcharts (npm): affected >= 10.3.2, < 11.4.9 → fixed version 11.4.9
highcharts (npm): affected >= 12.0.0, < 12.6.2 → fixed version 12.6.2
highcharts (npm): affected >= 13.0.0, <= 13.1.0 → fixed version 13.1.1

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window · Publication/update confirmed

@highcharts/grid-pro: check advisory-specific conditions and minimum fixes

@highcharts/grid-pro reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (1 entry)

GHSA-5ghw-9mgr-jvx2

Highcharts Grid Pro: cell-renderer `attributes` map written with raw `setAttribute`

@highcharts/grid-pro (npm): affected >= 2.0.0, <= 3.1.0 → fixed version 3.2.0
@highcharts/dashboards (npm): affected = 3.6.0 → fixed version 4.0.0

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window · Publication/update confirmed

mcp-sanitizer: check advisory-specific conditions and minimum fixes

mcp-sanitizer reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (2 advisories)

GHSA-4mfg-r38w-w8fg

mcp-sanitizer: URL sanitizer allows localhost/IPv6 loopback SSRF bypass via explicit port or bracketed IPv6

mcp-sanitizer (npm): affected < 1.4.0 → fixed version 1.4.0

GHSA-7w82-6f9j-v9jp

mcp-sanitizer: File Path Sanitizer Permits Arbitrary User-Home Absolute Paths

mcp-sanitizer (npm): affected < 1.4.0 → fixed version 1.4.0

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window · Publication/update confirmed

rucio: check advisory-specific conditions and minimum fixes

rucio reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (1 entry)

GHSA-5j9r-fx4x-rpvg

rucio has an Authorization Bypass on REST API endpoint for signing URLs

rucio (pip): affected >= 1.16.1, < 35.9.0 → fixed version 35.9.0
rucio (pip): affected >= 36.0.0rc1, < 38.6.0 → fixed version 38.6.0
rucio (pip): affected >= 39.0.0rc1, < 41.0.0rc1 → fixed version 41.0.0rc1

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window · Publication/update confirmed

MySqlConnector: check advisory-specific conditions and minimum fixes

MySqlConnector reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (1 entry)

GHSA-473q-m89c-ghf8

MySqlConnector: Account password disclosed to a man-in-the-middle in zero-configuration TLS mode (clear-text password sent before certificate is verified)

MySqlConnector (nuget): affected < 2.6.1 → fixed version 2.6.1

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window · Publication/update confirmed

github.com/caddyserver/caddy/v2: check advisory-specific conditions and minimum fixes

github.com/caddyserver/caddy/v2 reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (1 entry)

GHSA-8qx7-j2v2-x6q5

Caddy has an RFC 7230 §6.1 compliance issue / Hop-by-hop headers that leak through

github.com/caddyserver/caddy/v2 (go): affected <= 2.11.4 → fixed version 2.11.5

GitHub Advisory API

2026-10-29 / review · Publication/update confirmed

Malicious packages: distinguish listing from execution in your environment

Malware-classified advisories are preserved individually. Listing counts are not counts of affected organizations or executions. Where no fix is listed, an ordinary update alone does not establish safety.

What to checkCheck lockfiles, build history and artifacts. If executed, prioritize revoking exposed secrets and investigating the environment.

Advisories: affected versions and fixes (19)

GHSA-fw7x-6chc-4244

Malware in b20miner

b20miner (npm): affected = 0.3.1 → fixed version No fixed version listed

GHSA-ffq4-h5jm-8pqr

Malware in @zaip-ai/cli

@zaip-ai/cli (npm): affected = 6.4.0 → fixed version No fixed version listed
@zaip-ai/cli (npm): affected = 7.2.0 → fixed version No fixed version listed
@zaip-ai/cli (npm): affected = 6.5.0 → fixed version No fixed version listed
@zaip-ai/cli (npm): affected = 7.4.0 → fixed version No fixed version listed
@zaip-ai/cli (npm): affected = 7.1.0 → fixed version No fixed version listed
@zaip-ai/cli (npm): affected = 7.0.0 → fixed version No fixed version listed
@zaip-ai/cli (npm): affected = 7.3.0 → fixed version No fixed version listed

GHSA-9939-65w7-25v2

Malicious code in black-spindle (npm)

black-spindle (npm): affected = 999.0.0 → fixed version No fixed version listed

GHSA-x788-rmcm-4x49

Malware in itsa-utils

itsa-utils (npm): affected = 1.4.2 → fixed version No fixed version listed

GHSA-46r9-rx5f-hqqf

Malware in itsa-react-checkbox

itsa-react-checkbox (npm): affected = 16.0.5 → fixed version No fixed version listed

GHSA-p6gj-69gx-r376

Malware in @walknpm/todo-cli

@walknpm/todo-cli (npm): affected = 2.0.1 → fixed version No fixed version listed

GHSA-hw9g-f63g-4c8x

Malware in dsh-plugin-blender-3d

dsh-plugin-blender-3d (npm): affected = 0.2.1 → fixed version No fixed version listed

GHSA-357r-x5jp-3p8f

Malware in mock-transactions-sdk

mock-transactions-sdk (npm): affected >= 0 → fixed version No fixed version listed

GHSA-23j5-jj88-v9f3

Malware in transaction-info-generate-sdk

transaction-info-generate-sdk (npm): affected >= 0 → fixed version No fixed version listed

GHSA-39q9-338w-8vhv

Malware in my-empty-package

my-empty-package (npm): affected = 1.0.0 → fixed version No fixed version listed

GHSA-2j2p-88v8-7xrm

Malware in camelotlabs-utils

camelotlabs-utils (npm): affected >= 0 → fixed version No fixed version listed

GHSA-4mgg-vrvh-32xg

Malware in camelotlabs-worker

camelotlabs-worker (npm): affected >= 0 → fixed version No fixed version listed

GHSA-wx8x-c4rg-8rg7

Malware in camelotlabs-sdk

camelotlabs-sdk (npm): affected >= 0 → fixed version No fixed version listed

GHSA-7972-958m-rqjg

Malware in camelotlabs-config

camelotlabs-config (npm): affected >= 0 → fixed version No fixed version listed

GHSA-pf82-f9wr-54vx

Malware in camelotlabs-core

camelotlabs-core (npm): affected >= 0 → fixed version No fixed version listed

GHSA-65cr-mcfq-59hh

Malware in @atlisp/mcp

@atlisp/mcp (npm): affected = 1.12.14 → fixed version No fixed version listed

GHSA-4g45-28rv-vq9q

Malicious code in @testsecuiitytestme/cache-helper (npm)

@testsecuiitytestme/cache-helper (npm): affected = 1.0.1 → fixed version No fixed version listed
@testsecuiitytestme/cache-helper (npm): affected = 1.0.2 → fixed version No fixed version listed
@testsecuiitytestme/cache-helper (npm): affected = 1.0.3 → fixed version No fixed version listed

GHSA-mhx4-6f72-5vf7

Malicious code in csvflow-schema (npm)

csvflow-schema (npm): affected = 1.0.0 → fixed version No fixed version listed

GHSA-cmqx-q58q-9m8p

Malicious code in @webapp-shared/login-vmok (npm)

@webapp-shared/login-vmok (npm): affected = 1.0.0 → fixed version No fixed version listed
@webapp-shared/login-vmok (npm): affected = 1.0.1 → fixed version No fixed version listed
@webapp-shared/login-vmok (npm): affected = 1.1.0 → fixed version No fixed version listed
@webapp-shared/login-vmok (npm): affected = 2.0.1 → fixed version No fixed version listed
@webapp-shared/login-vmok (npm): affected = 3.0.0 → fixed version No fixed version listed
@webapp-shared/login-vmok (npm): affected = 99.0.1 → fixed version No fixed version listed

GitHub malware API

2026-10-28 / 2026-10-29 NVD publication window · Publication/update confirmed

Dell backup infrastructure: unauthenticated execution and credential exposure

DSA-2026-416 fixes command execution, authentication and other issues. The DD OS Feature line affects 7.7.1.0–8.8.0.0 and is remediated in 8.9.0.0 or later. Fixed LTS versions start at 7.13.1.90, 8.3.1.50 and 8.6.1.30. Protect the backup infrastructure and independently verify recovery copies.

What to checkMatch the device, enabled features and running version, and verify official remediation. Do not present exploitability as observed harm.

Primary advisory / CNA record

2026-10-28 / 2026-10-29 NVD publication window · Publication/update confirmed

FUXA: check the Node-RED authorization boundary

Talos reports authorization bypass and arbitrary code execution through /nodered in FUXA 1.3.2-2809. An earlier fix alone does not establish remediation. This review does not establish minimum fixed versions across release lines; prioritize management-interface isolation and supplier guidance.

What to checkMatch the device, enabled features and running version, and verify official remediation. Do not present exploitability as observed harm.

Primary advisory / CNA record

2026-10-28 / 2026-10-29 NVD publication window · Publication/update confirmed

Juniper management infrastructure: CNA records and unavailable vendor text

NVD CNA records describe root command execution in Session Smart Conductor and unauthenticated administrator access in Session Smart Router before onboarding. The latter is described as unexploitable after onboarding to Mist/Conductor. The vendor URL returned a Loading shell instead of advisory text, so this review does not establish minimum fixes.

What to checkMatch the device, enabled features and running version, and verify official remediation. Do not present exploitability as observed harm.

Primary advisory / CNA record

2026-10-28 / 2026-10-29 NVD publication window · Publication/update confirmed

Sophos UTM: CNA record calls for manual action on an EOL product

The NVD CNA record scores CVE-2026-118633 at CVSS v3.1 9.2 and describes unauthenticated root code execution when repeated attacks win a race while the mail proxy uses scanning. It states UTM is EOL and requires a manual patch. The official advisory timed out; this review has not verified its patch identifier or procedure.

What to checkMatch the device, enabled features and running version, and verify official remediation. Do not present exploitability as observed harm.

Primary advisory / CNA record

Response and condition supplements for existing cases · 67 groups

Supplementing conditions, fix/deployment methods, and operational impacts in previously published material. These are not recounted as new compromises during this period.

Updated 10/28 12:30 JST · Publication/update confirmed

@link: beta testing at some medical institutions, not full resumption.

The 10/28 12:30 update describes the start of cloud beta testing at some medical institutions. Patient apps, web reservations, and external-system integrations remain suspended. Effects on medical institutions' reservation operations continue, and the number of records affected by leakage remains under investigation.

What to checkContact your medical institution directly about reservations or changes. Distinguish planned resumptions/refunds from completed actions, and check password reset guidance when service resumes.

@link operating status / Medley

10/28 00:19 JST status · Publication/update confirmed

Railway: new registrations remain suspended; next report scheduled after the cutoff

The status update at 10/27 15:19 UTC still reports suspension of new registrations, with no resumption date determined. Distinguish continued operation of existing deployments from build, dashboard, and other disruptions. Approximately 100,000 workspaces and up to 1.85% describe the potential scope of affected environment variables, not a confirmed number of people whose data leaked.

What to checkRevoke and reissue old secrets at their issuers and audit them. Do not treat the next scheduled event, 10/28 16:00 UTC, as recovery achieved by this cutoff.

Railway status / Official preliminary report

10/28 00:30 JST update · Publication/update verified.

Studio: joint-report submissions planned for early 11

The update on the 28th at 00:30 says acceptance of joint reports to the Personal Information Protection Commission has not begun. Individual notification is not included in joint reporting. Reading of encryption keys and external accessibility were confirmed, but the number of records actually obtained remains undetermined.

What to checkInvestigate actual use of form data and separately decide individual notification. Revoke external API keys with their issuers. Key rotation does not eliminate the possibility of earlier acquisition.

Studio official portal

10/28 04:00:02 JST catalog release / prior context; prose not revalidated in this review · Publication/update confirmed

KEV: Brotli and Adobe Commerce added; reflect confirmed exploitation in priorities

CISA's 2026.10.27 edition contains 1,760 entries. CVE-2026-111497 and CVE-2026-48356 were newly added, with a 11/10 deadline. This confirms exploitation of the vulnerabilities; it does not mean every .NET or Node.js environment or merchant was compromised. Victim counts and actual losses are not provided.

What to checkCheck product-specific fixes such as Brotli 1.2.1 and Node.js 22.23.4 / 24.22.1 / 26.12.1. For Adobe, check the version-specific July cumulative update in APSB26-73. Do not treat KEV deadlines for US federal agencies as legal deadlines for all users.

CISA KEV / Google Brotli / Node.js / Adobe APSB26-73

10/25 fixes / continuing review of 10/26 Functions guidance / prior context; prose not revalidated in this review · Publication/update confirmed

Brotli: distinguish availability of .NET fixes from deployment to user environments

.NET 8.0.33 / 9.0.22 / 10.0.14 / 11 RC3 are already available OOB fixes. .NET Framework is excluded. The official Azure Functions 10/26 notice describes an ongoing rollout and does not state that every running instance has been updated.

What to checkFor framework-dependent deployments, update the runtime and restart; for self-contained deployments, rebuild and republish; for containers, rebuild and redeploy. Check the actual running version for Functions.

.NET OOB / Azure Functions

Official follow-up after the previous cutoff / prior context; prose not revalidated in this review · Publication/update confirmed

Citrix NetScaler: check PHP fixed versions for each release series

CTX697263 advises updating ADC/Gateway to 14.1-73.49, 13.1-64.32, 14.1-73.49 FIPS, or 13.1-FIPS/NDcPP 13.1.37.286 or later. Vendor-managed cloud is described as remediated, requiring no customer action.

What to checkCheck the versions of self-operated appliances by series. Do not judge whether fixes were backported from the upstream PHP version alone; restrict management interfaces and investigate compromise.

Citrix CTX697263

Current table from the 10/27 official revision / prior context; prose not revalidated in this review · Publication/update confirmed

PAN-OS: distinguish shipped versions from ETAs

The official table lists fixed versions such as 12.2.4-h1 / 12.1.7-h11 / 11.2.10-h16, while 11.2.13-h4 and 11.2.16-h1 still carry ETA labels. Do not assume shipment merely because an expected date has passed. This is a management-plane PHP issue; not all data-plane traffic has the same conditions.

What to checkCheck actual shipped versions by branch in the official AffectedVersions table and update. Restrict management interfaces to trusted sources and check compromise indicators separately from updating.

Palo Alto Networks

Published 10/27 / prior context; prose not revalidated in this review · Publication/update confirmed

WatchGuard: 18 advisories; check AD integration conditions and Windows clients

The official 10/27 list contains 17 Fireware advisories and 1 Windows Mobile VPN SSL advisory. The AD authentication heap overflow requires conditions such as AD configuration. Local communication interception in the VPN client also affects Windows. The vendor states in those advisories that it is unaware of actual exploitation.

What to checkUpdate by branch, including Fireware 2026.4 / 12.12.4 and 12.5.22 for T15/T35. For CVE-2026-115495, update the Windows VPN client to 2026.4; updating only the Firebox appliance is insufficient. Check the original for differences between the Solution section and product table.

WatchGuard PSIRT / AD authentication / Windows VPN

Published 10/27 / prior context; prose not revalidated in this review · Publication/update confirmed

Browsers and email: Firefox / ESR / Thunderbird / Chrome updates.

Mozilla released Firefox159, ESR153.6 / 115.44, and Thunderbird159 / 153.6 on 10/27. Chrome stable is rolling out Windows/Mac156.0.8078.73/.74 and Linux/Android156.0.8078.73. Advisory counts are not incident counts.

What to checkUpdate and restart. Check the supported series appropriate to the OS and corporate management policy, and do not add invented CVEs or zero-day designations for undisclosed Chrome details.

Mozilla / Firefox159 / Chrome releases

10/27 advisory / prior context; prose not revalidated in this review · Publication/update confirmed

Creative Cloud Windows: local privilege escalation fix.

APSB26-135 fixes a search-path issue affecting Windows versions 6.10 and earlier in 6.11. The vendor reports no known actual exploitation. This is not an announcement confirming user compromise.

What to checkUpdate Creative Cloud Desktop to 6.11 or later. Check actual versions on deployed devices.

Adobe APSB26-135

GHSA published:2026-10-27T21:26:32Z to 2026-10-27T21:26:56Z / prior context; prose not revalidated in this review · Publication/update confirmed

MLflow: file reads, scorer execution, and keys recorded in traces

Some issues affect low-privilege basic-auth users as well as unauthenticated servers. They include API keys recorded in CrewAI autolog traces. These materials alone do not establish actual victim or incident counts.

What to checkUpdate to 3.17.0. Restrict public access, inspect trace and OTLP destinations, and revoke exposed provider keys.

By advisory: affected and fixed versions (3 entries)

GHSA-m65p-9j7q-6w33

MLflow vulnerable to arbitrary file read on unauthenticated servers via prompt model version source

mlflow (pip): affected >= 3.10.0, < 3.17.0 → fixed version 3.17.0

GHSA-j7qq-vr8c-xvw3

MLflow CrewAI autologging records LLM provider API keys in logged trace spans

mlflow (pip): affected >= 2.19.0, < 3.17.0 → fixed version 3.17.0

GHSA-26p8-2jq9-3vq9

MLflow vulnerable to remote code execution on unauthenticated servers via third-party scorer deserialization importing caller-placed artifact modules

mlflow (pip): affected >= 3.12.0rc0, < 3.17.0 → fixed version 3.17.0

GHSA-m65p-9j7q-6w33 / GHSA-j7qq-vr8c-xvw3 / GHSA-26p8-2jq9-3vq9

GHSA published:2026-10-27T21:07:25Z to 2026-10-27T21:07:25Z / prior context; prose not revalidated in this review · Publication/update confirmed

dd-trace-js: verify published advisories and fix scope.

Confirmed 1 advisory in this GHSA publication window. Refer to each developer's material for prerequisites involving features, inputs, privileges, and other conditions. Registration time is not the first shipment date or the time of actual attacks. This material alone does not establish the number of people or incidents actually affected.

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (1 entry)

GHSA-x94g-w73q-hpcw

dd-trace: ReDOS in URL query string obfuscation

dd-trace (npm): affected >= 2.0.0, < 5.131.1 → fixed version 5.131.1
dd-trace (npm): affected >= 6.0.0, < 6.20.1 → fixed version 6.20.1

GHSA-x94g-w73q-hpcw

GHSA published:2026-10-27T21:07:12Z to 2026-10-27T21:07:12Z / prior context; prose not revalidated in this review · Publication/update confirmed

tinymce: check public advisories and fix scope

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (1 entry)

GHSA-mf2p-h6hf-fcwm

TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` serialization

tinymce (npm): affected >= 8.5.1, < 8.9.3 → fixed version 8.9.3
TinyMCE (nuget): affected >= 8.5.1, < 8.9.3 → fixed version 8.9.3
tinymce/tinymce (composer): affected >= 8.5.1, < 8.9.3 → fixed version 8.9.3
tinymce (npm): affected = 7.9.3 → fixed version 7.9.4
TinyMCE (nuget): affected = 7.9.3 → fixed version 7.9.4
tinymce/tinymce (composer): affected = 7.9.3 → fixed version 7.9.4

GHSA-mf2p-h6hf-fcwm

GHSA published:2026-10-27T21:05:29Z to 2026-10-27T21:06:59Z / prior context; prose not revalidated in this review · Publication/update confirmed

MCP Python SDK: audience validation, redirects, and schema references.

Distinguish bearer token target resource validation, custom header/body forwarding on cross-origin redirects, and SSRF or outages through outputSchema external references. Do not describe this as leakage of a standalone Authorization header. This material alone does not establish the number of actual victims or incidents.

What to checkUpdate to 1.30.0 / 2.2.0 or later. Audience protection also requires validate_token_resource=True, resource_server_url, and returning AccessToken.resource. Updating alone does not enable validation.

By advisory: affected and fixed versions (3 entries)

GHSA-w4fh-qvv9-3v23

Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource server

mcp (pip): affected >= 2.0.0, < 2.2.0 → fixed version 2.2.0
mcp (pip): affected >= 1.10.0, < 1.30.0 → fixed version 1.30.0

GHSA-5h93-6whr-6q8j

Model Context Protocol Python SDK: HTTP client transports followed cross-origin redirects carrying custom headers and bodies

mcp (pip): affected >= 2.0.0, < 2.2.0 → fixed version 2.2.0
mcp (pip): affected >= 1.8.0, < 1.30.0 → fixed version 1.30.0

GHSA-rwrf-2pqf-9j8j

Model Context Protocol Python SDK: Client fetched server-chosen $ref URLs while validating tool results against output schemas

mcp (pip): affected >= 2.0.0, < 2.2.0 → fixed version 2.2.0
mcp (pip): affected >= 1.10.0, < 1.30.0 → fixed version 1.30.0

GHSA-w4fh-qvv9-3v23 / GHSA-5h93-6whr-6q8j / GHSA-rwrf-2pqf-9j8j

GHSA published:2026-10-27T21:06:54Z to 2026-10-27T21:06:54Z / prior context; prose not revalidated in this review · Publication/update confirmed

opentelemetry-python: check public advisories and fix scope

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (1 entry)

GHSA-f5m9-jfrj-jjj7

OpenTelemetry Python: Unbounded memory allocation in Jaeger baggage propagation

opentelemetry-propagator-jaeger (pip): affected <= 1.44.0 → fixed version 1.45.0

GHSA-f5m9-jfrj-jjj7

GHSA published:2026-10-27T21:05:06Z to 2026-10-27T21:05:13Z / prior context; prose not revalidated in this review · Publication/update confirmed

ckeditor5: check published advisories and fix scope

Confirmed 2 advisories in this GHSA publication window. Consult each developer's material for exploit conditions such as features, input, and privileges. Registration time is not the initial shipment date or an actual attack time. This material alone does not establish the number of actual victims or incidents.

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (2 advisories)

GHSA-v6mg-96c6-gmpq

CKEditor: Cross-site scripting (XSS) in the engine package

ckeditor5 (npm): affected >= 29.0.0, < 47.7.4 → fixed version 47.7.4
@ckeditor/ckeditor5-engine (npm): affected >= 29.0.0, < 47.7.4 → fixed version 47.7.4
ckeditor5 (npm): affected >= 48.0.0, < 48.5.1 → fixed version 48.5.1
@ckeditor/ckeditor5-engine (npm): affected >= 48.0.0, < 48.5.1 → fixed version 48.5.1

GHSA-rh54-vffm-5fvp

CKEditor: Cross-site scripting (XSS) in the engine package

ckeditor5 (npm): affected >= 45.0.0, < 47.7.4 → fixed version 47.7.4
@ckeditor/ckeditor5-engine (npm): affected >= 45.0.0, < 47.7.4 → fixed version 47.7.4
ckeditor5 (npm): affected >= 48.0.0, < 48.5.1 → fixed version 48.5.1
@ckeditor/ckeditor5-engine (npm): affected >= 48.0.0, < 48.5.1 → fixed version 48.5.1

GHSA-v6mg-96c6-gmpq / GHSA-rh54-vffm-5fvp

GHSA published:2026-10-27T21:04:57Z to 2026-10-27T21:04:57Z / prior context; prose not revalidated in this review · Publication/update confirmed

neko: published advisories and fix scope

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (1 entry)

GHSA-5cp7-fp4j-wwcv

Neko: Authorization bypass in legacy WebRTC input handling

github.com/m1k1o/neko/server (go): affected >= 0.0.0-20250401220545-fe94c999c6af, < 0.0.0-20260805142851-395ca1a6f62b → fixed version 0.0.0-20260805142851-395ca1a6f62b

GHSA-5cp7-fp4j-wwcv

GHSA published:2026-10-27T21:04:50Z to 2026-10-27T21:04:50Z / prior context; prose not revalidated in this review · Publication/update confirmed

Atlantis: workspace command injection during plan phase

The atlantis.yaml workspace in a PR where plan runs is the attack path. Exploitation may be possible without custom workflow or apply privileges. These materials alone do not establish actual victim or incident counts.

What to checkUpdate to 0.47.1. Restrict plan execution for untrusted PRs and inspect runner cloud/VCS permissions.

By advisory: affected and fixed versions (1 entry)

GHSA-rjh2-4xgw-p2hj

Atlantis: OS command injection through PR-controlled Terraform workspace enables RCE during plan

github.com/runatlantis/atlantis (go): affected >= 0.4.0, <= 0.47.0 → fixed version 0.47.1

GHSA-rjh2-4xgw-p2hj

GHSA published:2026-10-27T21:04:40Z to 2026-10-27T21:04:40Z / prior context; prose not revalidated in this review · Publication/update confirmed

filebrowser: check public advisories and fix scope

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (1 entry)

GHSA-mgqf-5mf5-prfj

FileBrowser: Symlink following escapes user scope allowing arbitrary file read outside the served directory

github.com/gtsteffaniak/filebrowser/backend (go): affected < 0.0.0-20260814233832-4126edeb07a0 → fixed version 0.0.0-20260814233832-4126edeb07a0

GHSA-mgqf-5mf5-prfj

GHSA published:2026-10-27T16:09:45Z to 2026-10-27T19:02:31Z / prior context; prose not revalidated in this review · Publication/update confirmed

undici: TLS validation, cache boundaries, and DoS

Condition-specific issues involving TLS options propagation, cross-origin redirects and shared caches, WebSocket buffering, and other features. Do not treat Node.js built-in fetch and individual npm dependencies as the same deployed version. This material alone does not establish the number of people or incidents actually affected.

What to checkCheck the applicable series: 6.29.1 / 7.30.1 / 8.12.2. Update npm dependencies and embedded runtimes separately, and check cache sharing, redirects, and TLS settings.

By advisory: affected and fixed versions (6 entries)

GHSA-4w7w-5xrc-9h26

undici vulnerable to cache poisoning and cross-user disclosure via cross-origin redirects

undici (npm): affected >= 7.0.0, < 7.30.1 → fixed version 7.30.1
undici (npm): affected >= 8.0.0, < 8.12.2 → fixed version 8.12.2

GHSA-2m5v-pch6-74hx

undici vulnerable to TLS certificate validation bypass via dropped tls options in Agent

undici (npm): affected >= 4.0.0, < 6.29.1 → fixed version 6.29.1
undici (npm): affected >= 7.0.0, < 7.30.1 → fixed version 7.30.1
undici (npm): affected >= 8.0.0, < 8.12.2 → fixed version 8.12.2

GHSA-qrxm-fqhp-jwvm

undici vulnerable to Denial of Service via TLS 1.2 certificate-changing renegotiation

undici (npm): affected >= 4.2.1, < 6.29.1 → fixed version 6.29.1
undici (npm): affected >= 7.0.0, < 7.30.1 → fixed version 7.30.1
undici (npm): affected >= 8.0.0, < 8.12.2 → fixed version 8.12.2

GHSA-9fm3-97px-rjf6

undici WebSocket client vulnerable to Denial of Service via unbounded automatic PONG buffering

undici (npm): affected >= 5.15.0, < 6.29.1 → fixed version 6.29.1
undici (npm): affected >= 7.0.0, < 7.30.1 → fixed version 7.30.1
undici (npm): affected >= 8.0.0, < 8.12.2 → fixed version 8.12.2

GHSA-55wc-3pg8-jfw6

undici vulnerable to Denial of Service via unhandled exception in the decompress interceptor

undici (npm): affected >= 7.15.0, < 7.30.1 → fixed version 7.30.1
undici (npm): affected >= 8.0.0, < 8.12.2 → fixed version 8.12.2

GHSA-qq8j-7v2v-3rwp

undici WebSocket client vulnerable to Denial of Service via failed HTTP/2 handshake

undici (npm): affected >= 8.11.0, < 8.11.2 → fixed version 8.11.2

GHSA-4w7w-5xrc-9h26 / GHSA-2m5v-pch6-74hx / GHSA-qrxm-fqhp-jwvm / GHSA-9fm3-97px-rjf6 / GHSA-55wc-3pg8-jfw6 / GHSA-qq8j-7v2v-3rwp

GHSA published:2026-10-27T19:02:00Z to 2026-10-27T19:02:00Z / prior context; prose not revalidated in this review · Publication/update confirmed

MCP TypeScript SDK: limits on HTTP bodies and batch lengths.

The HTTP transport/handler has resource-consumption issues involving oversized bodies and JSON-RPC batches. These materials alone do not establish actual victim or incident counts.

What to checkCheck actual packages such as sdk1.30.1, server/node2.1.0, and hono2.0.1, and set limits at the reverse proxy too.

By advisory: affected and fixed versions (1 entry)

GHSA-f897-62hf-6gxq

MCP TypeScript SDK: HTTP server transports and handlers did not limit request body size or JSON-RPC batch length

@modelcontextprotocol/sdk (npm): affected >= 1.10.0, < 1.30.1 → fixed version 1.30.1
@modelcontextprotocol/server (npm): affected >= 2.0.0, < 2.1.0 → fixed version 2.1.0
@modelcontextprotocol/node (npm): affected >= 2.0.0, < 2.1.0 → fixed version 2.1.0
@modelcontextprotocol/hono (npm): affected >= 2.0.0, < 2.0.1 → fixed version 2.0.1

GHSA-f897-62hf-6gxq

GHSA published:2026-10-27T19:01:39Z to 2026-10-27T19:01:50Z / prior context; prose not revalidated in this review · Publication/update confirmed

symfony: published advisories and fix scope

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (2 advisories)

GHSA-2v3c-qxhr-7vpv

Symfony: Unbounded Recursion in the YAML Inline Lexer Lets a Single Document Crash the Process

symfony/symfony (composer): affected >= 2.0.0, < 5.4.54 → fixed version 5.4.54
symfony/symfony (composer): affected >= 6.0.0, < 6.4.45 → fixed version 6.4.45
symfony/symfony (composer): affected >= 7.0.0, < 7.4.18 → fixed version 7.4.18
symfony/symfony (composer): affected >= 8.0.0, < 8.1.6 → fixed version 8.1.6
symfony/yaml (composer): affected >= 2.0.0, < 5.4.54 → fixed version 5.4.54
symfony/yaml (composer): affected >= 6.0.0, < 6.4.45 → fixed version 6.4.45
symfony/yaml (composer): affected >= 7.0.0, < 7.4.18 → fixed version 7.4.18
symfony/yaml (composer): affected >= 8.0.0, < 8.1.6 → fixed version 8.1.6

GHSA-r925-mgvr-h9cc

Symfony: ReDoS in HeaderUtils::split() Reachable Through the Cache-Control Request Header

symfony/http-foundation (composer): affected >= 6.0.1, < 6.4.46 → fixed version 6.4.46
symfony/http-foundation (composer): affected >= 7.0.0, < 7.4.19 → fixed version 7.4.19
symfony/http-foundation (composer): affected >= 8.0.0, < 8.1.7 → fixed version 8.1.7
symfony/symfony (composer): affected >= 6.0.1, < 6.4.46 → fixed version 6.4.46
symfony/symfony (composer): affected >= 7.0.0, < 7.4.19 → fixed version 7.4.19
symfony/symfony (composer): affected >= 8.0.0, < 8.1.7 → fixed version 8.1.7
symfony/http-foundation (composer): affected >= 4.1.0, < 5.4.54 → fixed version 5.4.54
symfony/symfony (composer): affected >= 4.1.0, < 5.4.54 → fixed version 5.4.54

GHSA-2v3c-qxhr-7vpv / GHSA-r925-mgvr-h9cc

GHSA published:2026-10-27T19:01:30Z to 2026-10-27T19:01:30Z / prior context; prose not revalidated in this review · Publication/update confirmed

go-jose: check published advisories and fix scope

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (1 entry)

GHSA-mgcc-cww5-fp2q

Go JOSE: DoS when parsing JWKs that contain RSA keys

github.com/go-jose/go-jose/v4 (go): affected <= 4.1.5 → fixed version 4.1.6
github.com/go-jose/go-jose/v3 (go): affected <= 3.0.5 → fixed version No fixed version listed

GHSA-mgcc-cww5-fp2q

GHSA published:2026-10-27T19:00:50Z to 2026-10-27T19:00:50Z / prior context; prose not revalidated in this review · Publication/update confirmed

terraform-provider-ctfd: verify published advisories and fix scope.

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (1 entry)

GHSA-vg84-c5mg-76xh

CTFer.io's CTFd Terraform Provider allows a local or remote attacker to read team passwords in state as non sensitive values

github.com/ctfer-io/terraform-provider-ctfd (go): affected >= 0.1.5, <= 1.1.0 → fixed version No fixed version listed
github.com/ctfer-io/terraform-provider-ctfd/v2 (go): affected < 2.8.2 → fixed version 2.8.2

GHSA-vg84-c5mg-76xh

GHSA published:2026-10-27T17:08:41Z to 2026-10-27T17:08:41Z / prior context; prose not revalidated in this review · Publication/update confirmed

hydra: published advisories and fix scope

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (1 entry)

GHSA-wf6j-7hvr-gr93

Hydra legacy target blacklist permits unsafe PyYAML loading

hydra-core (pip): affected >= 1.3.6, < 1.3.8 → fixed version 1.3.8
hydra-core (pip): affected >= 1.4.0.dev9, < 1.4.0rc3 → fixed version 1.4.0rc3

GHSA-wf6j-7hvr-gr93

GHSA published:2026-10-27T16:10:55Z to 2026-10-27T16:10:55Z / prior context; prose not revalidated in this review · Publication/update confirmed

qs: published advisories and fix scope

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (1 entry)

GHSA-6pq8-jhm2-2vcw

qs : qs.stringify with arrayFormat 'comma' throws an uncaught TypeError on array elements carrying a non-callable own toString (DoS)

qs (npm): affected >= 6.7.0, <= 6.16.0 → fixed version 6.16.1

GHSA-6pq8-jhm2-2vcw

GHSA published:2026-10-27T14:50:18Z to 2026-10-27T16:09:22Z / prior context; prose not revalidated in this review · Publication/update confirmed

Authlib: validation boundaries for signatures, nonce, audience, and more.

Includes empty signatures, empty HMAC keys, algorithm confusion, and request_uri SSRF. 1.9.0 alone does not fully fix the empty HMAC key issue. This material alone does not establish the number of actual victims or incidents.

What to checkCheck 1.9.1 or later. Verify issuer/audience/nonce/allowed algorithms and key settings, and restrict request_uri retrieval destinations.

By advisory: affected and fixed versions (8 advisories)

GHSA-8m4g-j4wp-wgcg

Authlib accepts an empty HMAC key, allowing JWS/JWT signature forgery (HS256/HS384/HS512)

Authlib (pip): affected < 1.9.1 → fixed version 1.9.1

GHSA-x4rv-c3wx-4cr8

Authlib: Unvalidated request_uri fetch in JWT-secured authorization request (JAR) leading to SSRF

authlib (pip): affected >= 1.6.0, < 1.9.0 → fixed version 1.9.0

GHSA-c5mf-xmp2-59rc

Authlib: ID token can disable its own nonce validation via the nonce_supported claim

authlib (pip): affected <= 1.8.0 → fixed version 1.9.0

GHSA-fch4-3c6x-j4gc

Authlib: Default JWT bearer grant accepts assertions for the wrong audience

authlib (pip): affected < 1.9.0 → fixed version 1.9.0

GHSA-q686-2qmg-hqc7

Authlib: OpenID implicit grant checks raw scope instead of allowed scope before issuing ID tokens

authlib (pip): affected < 1.9.0 → fixed version 1.9.0

GHSA-7vr2-2fgp-9w7p

Authlib incomplete algorithm-confusion fix permits HMAC forgery with prefixed public keys

authlib (pip): affected >= 1.3.1, <= 1.8.0 → fixed version 1.9.0

GHSA-jj7h-c3hg-m23x

Authlib: is_secure_transport() loopback exemption can be bypassed with a userinfo component, allowing cleartext-HTTP URLs to non-loopback hosts

authlib (pip): affected <= 1.7.2 → fixed version 1.8.0

GHSA-6v38-4h7w-rj9h

Authlib: empty signatures validation in JWS JSON deserialization

authlib (pip): affected <= 1.8.0 → fixed version 1.9.0

GHSA-8m4g-j4wp-wgcg / GHSA-x4rv-c3wx-4cr8 / GHSA-c5mf-xmp2-59rc / GHSA-fch4-3c6x-j4gc / GHSA-q686-2qmg-hqc7 / GHSA-7vr2-2fgp-9w7p / GHSA-jj7h-c3hg-m23x / GHSA-6v38-4h7w-rj9h

GHSA published:2026-10-27T16:08:36Z to 2026-10-27T16:08:59Z / prior context; prose not revalidated in this review · Publication/update confirmed

rustls: TLS secrets, ECH, and compression processing.

Distinguish secrets in Debug output, buffers on ECH rejection, key exchange state, and allocations for Brotli certificate decompression. This material alone does not establish the number of actual victims or incidents.

What to checkUpdate the stable branch to 0.23.46 and inspect Debug logs containing secrets. The 0.24 development branch is dev.2.

By advisory: affected and fixed versions (4 entries)

GHSA-vp88-798v-h67f

rustls: ECH rejection can expose buffered application data to authenticated outer server before `ech_required` alert

rustls (rust): affected >= 0.23.44, < 0.23.46 → fixed version 0.23.46
rustls (rust): affected >= 0.24.0-dev.1, < 0.24.0-dev.2 → fixed version 0.24.0-dev.2

GHSA-w44r-93j7-qv28

rustls: An unauthenticated ServerHello poisons the per-name key-exchange record, so later ClientHellos carry only a classical X25519 share

rustls (rust): affected < 0.23.46 → fixed version 0.23.46
rustls (rust): affected >= 0.24.0-dev.1, < 0.24.0-dev.2 → fixed version 0.24.0-dev.2

GHSA-c8m5-c952-6cm4

Rustls: Session Debug formatting exposes TLS master secrets and resumption PSKs

rustls (rust): affected < 0.23.46 → fixed version 0.23.46
rustls (rust): affected >= 0.24.0-dev.1, < 0.24.0-dev.2 → fixed version 0.24.0-dev.2

GHSA-h2v8-394m-p7vv

Rustls: Brotli certificate decompression can allocate an attacker-controlled amount of memory up to 1 GiB before authentication.

rustls (rust): affected < 0.23.46 → fixed version 0.23.46
rustls (rust): affected >= 0.24.0-dev.1, < 0.24.0-dev.2 → fixed version 0.24.0-dev.2

GHSA-vp88-798v-h67f / GHSA-w44r-93j7-qv28 / GHSA-c8m5-c952-6cm4 / GHSA-h2v8-394m-p7vv

GHSA published:2026-10-27T15:38:22Z to 2026-10-27T15:38:39Z / prior context; prose not revalidated in this review · Publication/update confirmed

PhpSpreadsheet: XXE, external-image SSRF, and resource consumption.

Includes XML scanner bypass, repeated ODS rows, and allowlist bypass through image redirects. Affected scope depends on the reader and branch used. This material alone does not establish the number of actual victims or incidents.

What to checkCheck advisory-specific fixed versions such as 5.10.0 / 3.10.8 / 2.4.8 / 2.1.19 / 1.30.7. Isolate untrusted documents and restrict outbound communications.

By advisory: affected and fixed versions (4 entries)

GHSA-2phh-27fw-q4gc

PhpSpreadsheet: SSRF whitelist bypass via unre-validated HTTP redirect in Drawing::setPath external image loading

phpoffice/phpspreadsheet (composer): affected >= 4.0.0, <= 5.9.0 → fixed version 5.10.0
phpoffice/phpspreadsheet (composer): affected >= 3.3.0, <= 3.10.7 → fixed version 3.10.8
phpoffice/phpspreadsheet (composer): affected >= 2.2.0, <= 2.4.7 → fixed version 2.4.8
phpoffice/phpspreadsheet (composer): affected >= 2.0.0, <= 2.1.18 → fixed version 2.1.19
phpoffice/phpspreadsheet (composer): affected <= 1.30.6 → fixed version 1.30.7

GHSA-j2w7-387v-m2rq

PhpSpreadsheet ODS Reader: Unbounded number-rows-repeated → CPU & Memory Exhaustion (DoS)

phpoffice/phpspreadsheet (composer): affected >= 4.0.0, <= 5.9.0 → fixed version 5.10.0
phpoffice/phpspreadsheet (composer): affected >= 3.3.0, <= 3.10.7 → fixed version 3.10.8
phpoffice/phpspreadsheet (composer): affected >= 2.2.0, <= 2.4.7 → fixed version 2.4.8
phpoffice/phpspreadsheet (composer): affected >= 2.0.0, <= 2.1.18 → fixed version 2.1.19
phpoffice/phpspreadsheet (composer): affected <= 1.30.6 → fixed version 1.30.7

GHSA-3x94-m842-937c

PhpSpreadsheet: XmlScanner Bypass via ISO-2022 Escape Sequences Allows XXE and Denial of Service

phpoffice/phpspreadsheet (composer): affected >= 4.0.0, <= 5.9.0 → fixed version 5.10.0
phpoffice/phpspreadsheet (composer): affected >= 3.3.0, <= 3.10.7 → fixed version 3.10.8
phpoffice/phpspreadsheet (composer): affected >= 2.2.0, <= 2.4.7 → fixed version 2.4.8
phpoffice/phpspreadsheet (composer): affected >= 2.0.0, <= 2.1.18 → fixed version 2.1.19
phpoffice/phpspreadsheet (composer): affected <= 1.30.6 → fixed version 1.30.7

GHSA-rxj4-h86g-25gc

PhpSpreadsheet: XmlScanner Bypass via Double-Encoded unentity() TOCTOU Allows XXE and Denial of Service

phpoffice/phpspreadsheet (composer): affected >= 4.0.0, <= 5.9.0 → fixed version 5.10.0
phpoffice/phpspreadsheet (composer): affected >= 3.3.0, <= 3.10.7 → fixed version 3.10.8

GHSA-2phh-27fw-q4gc / GHSA-j2w7-387v-m2rq / GHSA-3x94-m842-937c / GHSA-rxj4-h86g-25gc

GHSA published:2026-10-27T15:38:14Z to 2026-10-27T15:38:14Z / prior context; prose not revalidated in this review · Publication/update confirmed

compress: published advisories and fix scope

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (1 entry)

GHSA-fpmh-frq8-7rj8

compress zstd: Panic on two-block frames

github.com/klauspost/compress/zstd (go): affected <= 1.20.1 → fixed version 1.20.2

GHSA-fpmh-frq8-7rj8

GHSA published:2026-10-27T15:37:37Z to 2026-10-27T15:37:37Z / prior context; prose not revalidated in this review · Publication/update confirmed

dnspython: verify published advisories and fix scope.

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (1 entry)

GHSA-45c3-73f7-pv4m

dnspython dns.name.from_wire_parser() excessive CPU use

dnspython (pip): affected < 2.9.0 → fixed version 2.9.0

GHSA-45c3-73f7-pv4m

GHSA published:2026-10-27T15:37:24Z to 2026-10-27T15:37:31Z / prior context; prose not revalidated in this review · Publication/update confirmed

dd-trace-py: verify published advisories and fix scope.

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (2 advisories)

GHSA-3633-r77q-h3v3

Datadog dd-trace-py: ReDoS in URL query string obfuscation

ddtrace (pip): affected >= 1.5.0, < 3.19.9 → fixed version 3.19.9
ddtrace (pip): affected >= 4.0.0, < 4.15.6 → fixed version 4.15.6

GHSA-p3m5-h5v9-vqj6

Datadog dd-trace-py: IAST instrumentation can lead to application DOS

ddtrace (pip): affected >= 3.13.0, < 4.15.5 → fixed version 4.15.5

GHSA-3633-r77q-h3v3 / GHSA-p3m5-h5v9-vqj6

GHSA published:2026-10-27T15:36:35Z to 2026-10-27T15:36:35Z / prior context; prose not revalidated in this review · Publication/update confirmed

mongo-python-driver: check public advisories and fix scope

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (1 entry)

GHSA-98qm-wvgf-w4cf

MongoDB Python Driver: Out-of-bounds read in BSON decoding via a malformed Regex element

pymongo (pip): affected >= 3.9.0, <= 4.18.2 → fixed version 4.18.3

GHSA-98qm-wvgf-w4cf

GHSA published:2026-10-27T14:45:53Z to 2026-10-27T15:36:17Z / prior context; prose not revalidated in this review · Publication/update confirmed

vLLM: model revision selection and P2P offloading

Distinguish execution through request mm_processor_kwargs.code_revision from socket exhaustion in a specific P2P secondary tier. Configurations do not all share the same prerequisites. These materials alone do not establish actual victim or incident counts.

What to checkCheck feature conditions in each advisory. Execution issues are fixed in 0.31.0 and P2P issues in 0.32.0. Restrict model retrieval and API access.

By advisory: affected and fixed versions (2 advisories)

GHSA-h3rc-6mm3-gc2m

vLLM: Request-controlled mm_processor_kwargs.code_revision allows remote code execution

vllm (pip): affected >= 0.7.3, < 0.31.0 → fixed version 0.31.0

GHSA-frvg-qw88-hww9

vllm p2p never connected zmq_exhaustion

vllm (pip): affected < 0.32.0 → fixed version 0.32.0

GHSA-h3rc-6mm3-gc2m / GHSA-frvg-qw88-hww9

GHSA published:2026-10-27T15:34:28Z to 2026-10-27T15:34:33Z / prior context; prose not revalidated in this review · Publication/update confirmed

harness-sdk: check public advisories and fix scope

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (2 advisories)

GHSA-3w55-933p-8pv5

Strands Agents: Local Privilege Escalation via Symlink Attack in Default Session File Storage

strands-agents (pip): affected < 1.48.0 → fixed version 1.48.0

GHSA-763v-5pjm-fx36

Strands Agents: Default FileSessionManager storage is world-readable on shared systems

strands-agents (pip): affected < 1.48.0 → fixed version 1.48.0

GHSA-3w55-933p-8pv5 / GHSA-763v-5pjm-fx36

GHSA published:2026-10-27T15:33:22Z to 2026-10-27T15:33:42Z / prior context; prose not revalidated in this review · Publication/update confirmed

snappy-java: check published advisories and fix scope

3 advisories were confirmed in this GHSA publication window. Consult each developer's materials for prerequisites involving features, inputs, permissions, and other conditions. Registration time is not the initial shipment date or actual attack time. These materials alone do not establish actual victim or incident counts.

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (3 entries)

GHSA-gwq9-9ffj-mvrv

snappy-java: Heap buffer overflow in Snappy.uncompress*Array typed-array methods

org.xerial.snappy:snappy-java (maven): affected <= 1.1.10.8 → fixed version 1.1.10.9

GHSA-xqrx-qh46-34m7

snappy-java: JVM crash from unchecked ranges in Snappy.arrayCopy and SnappyOutputStream.rawWrite

org.xerial.snappy:snappy-java (maven): affected <= 1.1.10.8 → fixed version 1.1.10.9

GHSA-q233-g92q-qxp6

snappy-java: Unbounded memory allocation from attacker-declared uncompressed lengtha

org.xerial.snappy:snappy-java (maven): affected <= 1.1.10.8 → fixed version 1.1.10.9

GHSA-gwq9-9ffj-mvrv / GHSA-xqrx-qh46-34m7 / GHSA-q233-g92q-qxp6

GHSA published:2026-10-27T15:32:45Z to 2026-10-27T15:32:45Z / prior context; prose not revalidated in this review · Publication/update confirmed

flexible-graphrag: check published advisories and fix scope

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (1 entry)

GHSA-vqrg-773h-4wxc

Flexible GraphRAG: Cypher/Graph Injection via broken string-escaping in FalkorDB adapter (_escape()) - full graph wipe from ingested-document content

flexible-graphrag (pip): affected >= 0.6.0, < 0.8.2 → fixed version 0.8.2

GHSA-vqrg-773h-4wxc

GHSA published:2026-10-27T15:04:14Z to 2026-10-27T15:32:36Z / prior context; prose not revalidated in this review · Publication/update confirmed

LiteLLM: privilege escalation, file reads, and XSS.

These 3 advisories disclose product vulnerabilities. Treat them separately from the distribution-channel compromise incident. Escalation from internal_user to proxy_admin also depends on experimental settings in older branches. This material alone does not establish the number of actual victims or incidents.

What to checkFor privilege escalation, check the applicable release series, including 1.100.4 / 1.101.3 / 1.102.2 / 1.103.1 / 1.104.0rc2. The temporary EXPERIMENTAL_UI_LOGIN=false setting also disables CLI SSO and related features.

By advisory: affected and fixed versions (3 entries)

GHSA-g5ff-637f-6q2m

LiteLLM: internal_user_viewer arbitrary local file read via `vertex_ai_credentials`

litellm (pip): affected < 1.95.0 → fixed version 1.95.0

GHSA-hhww-mrg2-969h

LiteLLM vulnerable to reflected XSS in /sso/debug/callback

litellm (pip): affected >= 1.65.5, < 1.85.0 → fixed version 1.85.0

GHSA-7hp6-4w63-5g45

LiteLLM: Privilege Escalation to Proxy Admin via Cross-Domain Reuse of the Salt Key

litellm (pip): affected >= 1.91.0, < 1.100.4 → fixed version 1.100.4
litellm (pip): affected >= 1.101.0, < 1.101.3 → fixed version 1.101.3
litellm (pip): affected >= 1.102.0, < 1.102.2 → fixed version 1.102.2
litellm (pip): affected >= 1.103.0, < 1.103.1 → fixed version 1.103.1
litellm (pip): affected >= 1.104.0rc1, < 1.104.0rc2 → fixed version 1.104.0rc2

GHSA-g5ff-637f-6q2m / GHSA-hhww-mrg2-969h / GHSA-7hp6-4w63-5g45

GHSA published:2026-10-27T14:49:53Z to 2026-10-27T15:32:25Z / prior context; prose not revalidated in this review · Publication/update confirmed

Better Auth: OAuth state and proxy account boundaries

Includes OAuth Proxy, reuse of state for MagicLink, DB adapter rate limiting, and insufficient display of arbitrary device authorization. The device issue requires conditions such as an opt-in feature and user approval. This material alone does not establish the number of people or incidents actually affected.

What to checkCheck better-auth1.7.7 and the adapter in use. For device authorization, display the requesting client and permissions based on server-validated information.

By advisory: affected and fixed versions (4 entries)

GHSA-44jh-23m7-hpcf

@better-auth/drizzle-adapter: Concurrent requests can exceed rate limits on PostgreSQL

@better-auth/drizzle-adapter (npm): affected >= 1.6.17, < 1.7.7 → fixed version 1.7.7
@better-auth/kysely-adapter (npm): affected >= 1.6.17, < 1.7.0 → fixed version 1.7.0
better-auth (npm): affected >= 1.6.17, < 1.7.7 → fixed version 1.7.7

GHSA-r4xp-prcw-77qf

better-auth: OAuth Proxy lets an attacker sign in as another user

better-auth (npm): affected >= 1.5.0-beta.12, < 1.7.7 → fixed version 1.7.7

GHSA-965c-763c-88jm

better-auth: OAuth state can be used as a Magic Link to sign in as another user

better-auth (npm): affected >= 1.4.0-beta.18, < 1.7.7 → fixed version 1.7.7

GHSA-q84f-53jg-9ppm

better-auth: Device login approval does not show the requesting client or permissions

better-auth (npm): affected >= 1.3.8-beta.3, < 1.7.0-rc.3 → fixed version 1.7.0-rc.3

GHSA-44jh-23m7-hpcf / GHSA-r4xp-prcw-77qf / GHSA-965c-763c-88jm / GHSA-q84f-53jg-9ppm

GHSA published:2026-10-27T15:26:24Z to 2026-10-27T15:28:03Z / prior context; prose not revalidated in this review · Publication/update confirmed

GitPython: boundaries around untrusted repositories, refspecs, and submodules

6 advisories include file reads through branch names, submodule symlinks, unsafe pull options, and environment variable exposure. Exploit conditions vary, including normal Git transport restrictions. This material alone does not establish the number of actual victims or incidents.

What to checkUpdate to 3.2.0. Do not process untrusted repositories in CI environments containing secrets. Isolate them when necessary and inspect already exposed logs and credentials.

By advisory: affected and fixed versions (6 entries)

GHSA-23mf-xhv8-69c2

GitPython: arbitrary file read via attacker-controlled branch name in `Head.checkout()` (incomplete fix of CVE-2026-78679)

GitPython (pip): affected <= 3.1.62 → fixed version 3.2.0

GHSA-gq48-pqfc-9p58

GitPython: Submodule.move() follows an attacker-committed intermediate symlink outside the worktree

GitPython (pip): affected < 3.2.0 → fixed version 3.2.0

GHSA-f9j4-qggq-h239

GitPython Remote.pull() refspec bypasses the --upload-pack unsafe-option guard, enabling arbitrary command execution

GitPython (pip): affected >= 3.1.30, < 3.2.0 → fixed version 3.2.0

GHSA-w8jc-g24h-crhw

GitPython command wrappers omit unsafe protocol and option checks

GitPython (pip): affected <= 3.1.62 → fixed version 3.2.0

GHSA-fx3j-rwgx-fr94

GitPython: separate_git_dir leaks env vars via crafted .gitmodules submodule name

GitPython (pip): affected <= 3.1.62 → fixed version 3.2.0

GHSA-m64x-33q8-m5h7

GitPython parse_actor_and_date() is vulnerable to quadratic backtracking on malformed identity lines

GitPython (pip): affected <= 3.1.62 → fixed version 3.2.0

GHSA-23mf-xhv8-69c2 / GHSA-gq48-pqfc-9p58 / GHSA-f9j4-qggq-h239 / GHSA-w8jc-g24h-crhw / GHSA-fx3j-rwgx-fr94 / GHSA-m64x-33q8-m5h7

GHSA published:2026-10-27T15:04:33Z to 2026-10-27T15:04:39Z / prior context; prose not revalidated in this review · Publication/update confirmed

nodemailer: check public advisories and fix scope

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (3 entries)

GHSA-4ffr-jq9g-5ffx

Nodemailer: Quadratic backtracking in SMTP AUTH mechanism detection regexes allows pre-auth remote denial of service

nodemailer (npm): affected >= 3.0.0, <= 10.0.12 → fixed version 10.0.13

GHSA-g73g-hqqh-jr95

Nodemailer: RFC 5322 comment inside an angle-bracket address is never stripped

nodemailer (npm): affected >= 3.0.0, <= 10.0.12 → fixed version 10.0.13

GHSA-4g23-2xm8-66gc

Nodemailer: Quadratic (O(n^2)) SMTP client reply parsing lets a malicious server or MITM cause a pre-auth remote denial of service

nodemailer (npm): affected >= 3.0.0, <= 10.0.9 → fixed version 10.0.10

GHSA-4ffr-jq9g-5ffx / GHSA-g73g-hqqh-jr95 / GHSA-4g23-2xm8-66gc

GHSA published:2026-10-27T15:04:07Z to 2026-10-27T15:04:07Z / prior context; prose not revalidated in this review · Publication/update confirmed

msgpack-python: check published advisories and fix scope

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (1 entry)

GHSA-j586-36cw-2gc2

MessagePack: Unbounded memory leak in msgpack C extension on strict_map_key validation failure

msgpack (pip): affected < 1.2.3 → fixed version 1.2.3

GHSA-j586-36cw-2gc2

GHSA published:2026-10-27T14:50:30Z to 2026-10-27T14:50:30Z / prior context; prose not revalidated in this review · Publication/update confirmed

nltk: published advisories and fix scope

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (1 entry)

GHSA-j456-xh4h-cpf2

NLTK: WekaClassifier passes an unvalidated caller-controlled model path to the weka JVM, bypassing nltk.pathsec containment

nltk (pip): affected <= 3.10.3 → fixed version 3.10.4

GHSA-j456-xh4h-cpf2

GHSA published:2026-10-27T14:46:51Z to 2026-10-27T14:46:51Z / prior context; prose not revalidated in this review · Publication/update confirmed

pylint: check public advisories and fix scope

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (1 entry)

GHSA-22qq-2fwx-7p67

Pylint: Arbitrary code execution via pickle deserialization of the stats cache in PYLINT_HOME

pylint (pip): affected < 4.0.9 → fixed version 4.0.9

GHSA-22qq-2fwx-7p67

GHSA published:2026-10-27T14:46:43Z to 2026-10-27T14:46:43Z / prior context; prose not revalidated in this review · Publication/update confirmed

Satori: insufficient escaping in generated SVG

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (1 entry)

GHSA-wx4j-mvgx-mqwp

Satori-generated SVG has improper escaping

satori (npm): affected >= 0.0.27, < 0.33.5 → fixed version 0.33.5

GHSA-wx4j-mvgx-mqwp

GHSA published:2026-10-27T14:45:36Z to 2026-10-27T14:45:36Z / prior context; prose not revalidated in this review · Publication/update confirmed

rembg: published advisories and fix scope

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (1 entry)

GHSA-qr6x-7v33-6qmg

Rembg: Unauthenticated SAM model injection permits local-file disclosure through malicious ONNX graphs

rembg (pip): affected < 2.0.82 → fixed version 2.0.82

GHSA-qr6x-7v33-6qmg

GHSA published:2026-10-27T14:45:29Z to 2026-10-27T14:45:29Z / prior context; prose not revalidated in this review · Publication/update confirmed

twisted: check published advisories and fix scope

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (1 entry)

GHSA-jj36-9pvh-vj5r

Twisted: DNS Response Spoofing in twisted.names Due to Missing Source Address Validation

Twisted (pip): affected <= 26.4.0 → fixed version 26.10.0rc1

GHSA-jj36-9pvh-vj5r

GHSA published:2026-10-27T14:44:19Z to 2026-10-27T14:44:19Z / prior context; prose not revalidated in this review · Publication/update confirmed

Ghost: check published advisories and fix scope

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (1 entry)

GHSA-qrh6-cwg3-343x

Ghost: Authorization Bypass in Comment Like Feature

ghost (npm): affected >= 5.9.0, < 6.44.1 → fixed version 6.44.1

GHSA-qrh6-cwg3-343x

GHSA published:2026-10-27T14:43:57Z to 2026-10-27T14:43:57Z / prior context; prose not revalidated in this review · Publication/update confirmed

siyuan: published advisories and fix scope

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (1 entry)

GHSA-c8r8-95hg-mp34

SiYuan: MCP file tool's blocklist is incomplete relative to the HTTP file API it claims to align with, exposing publish-mode passwords and other sensitive workspace files

github.com/siyuan-note/siyuan/kernel (go): affected < 0.0.0-20260808051406-3542530c505f → fixed version 0.0.0-20260808051406-3542530c505f

GHSA-c8r8-95hg-mp34

GHSA published:2026-10-27T14:43:16Z to 2026-10-27T14:43:19Z / prior context; prose not revalidated in this review · Publication/update confirmed

fpdf2: published advisories and fix scope

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (2 advisories)

GHSA-wqw6-wpr3-45rh

fpdf2: Exponential SVG '<use>' expansion causes CPU and memory exhaustion in 'FPDF.image()'

fpdf2 (pip): affected >= 2.5.0, < 2.8.8 → fixed version 2.8.8

GHSA-rw7v-4hrq-x6r9

fpdf2 implicitly loads external URLs and local image paths when rendering attacker-controlled content

fpdf2 (pip): affected <= 2.8.7 → fixed version 2.8.8

GHSA-wqw6-wpr3-45rh / GHSA-rw7v-4hrq-x6r9

GHSA published:2026-10-27T14:27:53Z to 2026-10-27T14:27:53Z / prior context; prose not revalidated in this review · Publication/update confirmed

guava: published advisories and fix scope

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (1 entry)

GHSA-xxph-c9ww-hj94

Google Guava: CompactHashMap/CompactHashSet/MapMakerInternalMap deserialization triggers uncontrolled memory allocation

com.google.guava:guava (maven): affected >= 4.0, <= 33.7.1 → fixed version 33.7.2

GHSA-xxph-c9ww-hj94

GHSA published:2026-10-27T13:30:41Z to 2026-10-27T13:30:41Z / prior context; prose not revalidated in this review · Publication/update confirmed

agno: published advisories and fix scope

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (1 entry)

GHSA-m4w4-3r8h-jw98

Agno: Arbitrary code execution via `eval()` on `field_type` in `FunctionCall`

agno (pip): affected < 2.3.24 → fixed version 2.3.24

GHSA-m4w4-3r8h-jw98

GHSA published:2026-10-27T13:30:17Z to 2026-10-27T13:30:17Z / prior context; prose not revalidated in this review · Publication/update confirmed

oauthlib: check public advisories and fix scope

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (1 entry)

GHSA-3jp2-3mrg-2vxc

OAuthLib: Bearer token can be retrieved as long as client knows a valid client ID for device workflow

oauthlib (pip): affected >= 3.3.0, < 4.0.0 → fixed version 4.0.0

GHSA-3jp2-3mrg-2vxc

GHSA published:2026-10-27T13:30:10Z to 2026-10-27T13:30:10Z / prior context; prose not revalidated in this review · Publication/update confirmed

MONAI: check published advisories and fix scope

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (1 entry)

GHSA-6hp3-vr39-rqw8

MONAILabel Server Crash and Silent Inference Corruption via Crafted DICOM (pydicom DS/IS Validation Bypass)

monai (pip): affected < 1.6.1 → fixed version 1.6.1

GHSA-6hp3-vr39-rqw8

GHSA published:2026-10-27T13:29:57Z to 2026-10-27T13:29:57Z / prior context; prose not revalidated in this review · Publication/update confirmed

dcmjs: published advisories and fix scope

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (1 entry)

GHSA-px68-xx5g-48q5

dcmjs: DS/IS VALUE REPRESENTATION INPUT VALIDATION BYPASS

dcmjs (npm): affected < 0.52.0 → fixed version 0.52.0

GHSA-px68-xx5g-48q5

GHSA published:2026-10-27T13:29:47Z to 2026-10-27T13:29:47Z / prior context; prose not revalidated in this review · Publication/update confirmed

wails: published advisories and fix scope

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (1 entry)

GHSA-47hv-j4px-h3c9

Wails: wildcardPatternToRegex allows Origin bypass via suffix match in BindingsAllowedOrigins

github.com/wailsapp/wails/v2 (go): affected >= 2.0.0, < 2.13.0 → fixed version 2.13.0

GHSA-47hv-j4px-h3c9

GHSA published:2026-10-27T13:29:25Z to 2026-10-27T13:29:25Z / prior context; prose not revalidated in this review · Publication/update confirmed

dolibarr: check published advisories and fix scope

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (1 entry)

GHSA-v5fq-cf5m-vwv7

Dolibarr has SQL Injection in societe/class/societe.class.php via localtax1_value parameter

dolibarr/dolibarr (composer): affected <= 23.0.0 → fixed version No fixed version listed

GHSA-v5fq-cf5m-vwv7

GHSA published:2026-10-27T13:27:58Z to 2026-10-27T13:27:58Z / prior context; prose not revalidated in this review · Publication/update confirmed

ajenti: check published advisories and fix scope

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (1 entry)

GHSA-vcw3-r3fx-j444

Ajenti has potential Remote Code Execution

aj (pip): affected < 2.2.13 → fixed version 2.2.13

GHSA-vcw3-r3fx-j444

Updated 10/27 23:30 JST / prior context; prose not revalidated in this review · Publication/update confirmed

ConnectWise: phased recovery preparation complete; third-party validation pending

The update on the 27th at 14:30 UTC says preparations for phased recovery are complete and required third-party validation is pending. It does not announce the start of restore access or full recovery. The recovery of Axcient Legacy Portal on the 22nd is a separate PHP mitigation matter.

What to checkKeep affected connections disabled and await individual resumption guidance. Do not generalize the statement that there are no signs of compromise of encrypted backup archives into a claim that every Microsoft365 tenant is uncompromised.

ConnectWise official statement

Continued review of the 10/26 bulletin and 10/27 tag / prior context; prose not revalidated in this review · Publication/update confirmed

Tailscale: minimum fixed version 1.104.4 for 4 official advisories

TS-2026-014–017 concern SSH Unix socket forwarding, SSH memory DoS, Serve Unix backends, and HTTP/2 capability confusion. The official bulletin specifies at least 1.104.4. A timing gap in changelog updates remains. Do not equate this with fixes for all 11 Tailworm items.

What to checkVerify 1.104.4 or later on production clients and check SSH/Serve usage conditions. To temporarily disable SSH forwarding, set TS_SSH_DISABLE_FORWARDING=1 and restart the daemon. Do not include headscale or experimental connectors in the same fix scope.

Official Security Bulletins / Official v1.104.4 / Conditions in the researcher report

Revised 10/27 23:45 JST / prior context; prose not revalidated in this review · Publication/update confirmed

Fireblocks mpc-lib: still no fix after assessment revision.

CERT VU701544 was revised on the 27th at 14:45 UTC. Descendant shares and chain codes may permit access to ancestor/root shares of the same MPC party, but this is not equivalent to obtaining a complete transfer key exceeding the threshold. Actual theft, amounts, and affected customer counts have not been disclosed.

What to checkTreat the fix as unavailable, protect chain codes as secrets, and investigate the entire hierarchy. Do not reuse Agent2.4.4 / SDK2.19.1 from the separate eMudhra incident as fixed versions for this vulnerability.

CERT VU701544

10/27 official update / prior context; prose not revalidated in this review · Publication/update confirmed

Fortinet FIPS: 7.4 remediation build and inconsistent 7.2 notation

The technical article dated the 27 announces availability of FIPS hardening builds. For 7.4, this is FIPS-CC-74-15 b9481. For 7.2, b9883 in the text differs from b9893 in the download path. Extended support for 7.0FIPS has ended, with no build planned this time.

What to checkMatch models and builds against official ReadMe files and support downloads. Do not automatically apply an ambiguous 7.2 number. Do not reuse the GA hardening table as individual minimum fixed versions for an unretrieved PSIRT advisory.

Fortinet technical article / Official hardening guidance

Continuing response to the 10/21 incident and 10/23 analysis / prior context; prose not revalidated in this review · Publication/update confirmed

LiteLLM: revoke keys and rebuild environments after distribution-path compromise.

Actual distribution of malicious 1.107.0 and containers was confirmed in the 10/21 incident. The attack-chain report on the 23rd explains the path from an unrevoked master key to publisher tokens and other access. Do not reuse victim counts from the separate March (month 3) incident here.

What to checkCheck installation and execution paths during the affected period. Before simply updating pip packages, isolate and rebuild the environment and revoke/replace keys that were reachable. Product GHSA fixed versions in this window are separate from post-compromise safety checks.

Official 10/21 incident report / Official attack-chain analysis

Current GHSA publication window / malware classification / prior context; prose not revalidated in this review · Publication/update confirmed

Malicious packages: separately check 27 GHSA malware-category advisories

Includes trajmetrics0.5.3, numprint1.2.0, and @azure-growth/signup-ux-components1.2.2/1.2.3. Ranges below are as specified in GitHub advisories. Do not infer that all legitimate packages with similar names were compromised. Do not count 27 advisories as 27 newly affected organizations.

What to checkCompare lockfiles and SBOMs with retrieval caches; do not verify suspicious artifacts by executing them. If installed or executed, isolate and rebuild the environment and revoke credentials that were reachable. Do not interpret an unspecified fixed version as meaning a safe version exists or that upgrading alone resolves the issue.

By advisory: affected and fixed versions (27 advisories)

GHSA-rm9p-x4m7-hxmp

Malicious code in trajmetrics (PyPI)

trajmetrics (pip): affected = 0.5.3 → fixed version No fixed version listed

GHSA-vc33-3x34-x6jm

Malware in glyphmatrix-fixture

glyphmatrix-fixture (npm): affected = 1.0.0 → fixed version No fixed version listed
glyphmatrix-fixture (npm): affected = 1.0.1 → fixed version No fixed version listed

GHSA-ph3g-jrf5-8792

Malware in csec-form-validatorr

csec-form-validatorr (npm): affected >= 0 → fixed version No fixed version listed

GHSA-h5wr-j55v-8m79

Malware in ccsseecc-form-validator

ccsseecc-form-validator (npm): affected >= 0 → fixed version No fixed version listed

GHSA-v9xw-mxj4-fm5q

Malware in ccsseecc-crypto-toolkit

ccsseecc-crypto-toolkit (npm): affected >= 0 → fixed version No fixed version listed

GHSA-2732-c6cp-rx5v

Malware in ccsec-crypto-toolkit

ccsec-crypto-toolkit (npm): affected >= 0 → fixed version No fixed version listed

GHSA-r889-j2qv-2jv6

Malware in ccsec-form-validator

ccsec-form-validator (npm): affected >= 0 → fixed version No fixed version listed

GHSA-v383-2358-576w

Malware in csec-crypto-toolkit

csec-crypto-toolkit (npm): affected >= 0 → fixed version No fixed version listed

GHSA-wh86-6qm8-xgw2

Malware in csec-form-validator

csec-form-validator (npm): affected >= 0 → fixed version No fixed version listed

GHSA-7p7m-8jmq-qp93

Malware in agentenact

agentenact (npm): affected = 0.2.0 → fixed version No fixed version listed

GHSA-84fw-gj66-p5v3

Malware in dsh-vm-tester

dsh-vm-tester (npm): affected = 0.1.4 → fixed version No fixed version listed
dsh-vm-tester (npm): affected = 0.1.2 → fixed version No fixed version listed
dsh-vm-tester (npm): affected = 0.1.3 → fixed version No fixed version listed

GHSA-g9fj-q87h-6h4c

Malicious code in numprint (PyPI)

numprint (pip): affected = 1.2.0 → fixed version No fixed version listed

GHSA-r9qx-xcg2-7wcc

Malware in 6161test1234

6161test1234 (npm): affected >= 0 → fixed version No fixed version listed

GHSA-r77r-rw3m-rjh5

Malware in adyen-web-v6

adyen-web-v6 (npm): affected >= 0 → fixed version No fixed version listed

GHSA-6crh-vwr2-4qfp

Malware in buttoncontent

buttoncontent (npm): affected >= 0 → fixed version No fixed version listed

GHSA-wmfr-2pvv-wmf3

Malware in @tableau__catalog-messages/database_lower

@tableau__catalog-messages/database_lower (npm): affected >= 0 → fixed version No fixed version listed

GHSA-wfcx-722r-fg5h

Malware in string-target-mapper-hash

string-target-mapper-hash (npm): affected >= 0 → fixed version No fixed version listed

GHSA-hc8w-gq4q-fr74

Malware in @flexmr/survey-conversation

@flexmr/survey-conversation (npm): affected >= 0 → fixed version No fixed version listed

GHSA-hpc9-fxqh-hhf8

Malware in @flexmr/utils

@flexmr/utils (npm): affected >= 0 → fixed version No fixed version listed

GHSA-w9mp-cvjp-jfqp

Malware in fetch-hash-cache-atomic

fetch-hash-cache-atomic (npm): affected >= 0 → fixed version No fixed version listed

GHSA-rh7q-f888-q36c

Malware in @flexmr/survey-client

@flexmr/survey-client (npm): affected >= 0 → fixed version No fixed version listed

GHSA-32g3-f74c-pcxq

Malware in macro-kernel-record-reader

macro-kernel-record-reader (npm): affected >= 0 → fixed version No fixed version listed

GHSA-9mgv-25w8-jwhf

Malware in paychex-pdftron

paychex-pdftron (npm): affected >= 0 → fixed version No fixed version listed

GHSA-fxw2-4j5q-6hwg

Malware in sc-announcer

sc-announcer (npm): affected >= 0 → fixed version No fixed version listed

GHSA-hh3m-f424-g8v5

Malware in ccl-global-shopping

ccl-global-shopping (npm): affected >= 0 → fixed version No fixed version listed

GHSA-9gcx-88qx-rxch

Malware in sc-hydrate-carousel-price

sc-hydrate-carousel-price (npm): affected >= 0 → fixed version No fixed version listed

GHSA-m8mp-r4jx-43fw

Malicious code in @azure-growth/signup-ux-components (npm)

@azure-growth/signup-ux-components (npm): affected = 1.2.2 → fixed version No fixed version listed
@azure-growth/signup-ux-components (npm): affected = 1.2.3 → fixed version No fixed version listed

2026-10-29 / review · Publication/update confirmed

From PHP to the kernel and identity systems: observed artifacts and uncertainty

Dream’s report dated 10/26 describes artifacts of PHP2Shell chained with CVE-2026-46300 to gain root on 25 servers: 24 firewalls and an additional management server. It reports decrypted LDAP credentials and enumeration, but explicitly cannot determine whether password spraying, backdoor account creation or SAML key extraction succeeded. These are researcher observations without independent victim confirmation; direct evidence of AI code generation is also absent.

What to checkRestrict exposed management interfaces and update. Where compromise is suspected, investigate management servers, LDAP credentials, tunnels and identity logs. Do not infer undisclosed product names or affected versions.

Dream Research / CISA KEV

2026-10-29 / review · Publication/update confirmed

So-net: member information and some email passwords exposed

The official 10/27 notice says access on 10/19 was detected on 23 and disclosure established on 24. It separately reports 2,141,986 So-net member records and 443,495 plala (S course) member records. Passwords for member records are distinct from email passwords in some mail services: the latter were exposed and reset on 27. The notice also reports 16 bank-account records and 7 notification records. Do not add these as a count of people.

What to checkReset affected email passwords using the official guidance and change reused passwords elsewhere. Do not infer exposure in other services such as NURO.

Sony Network Communications PDF

2026-10-29 / review · Publication/update confirmed

EDK II: distinguish PXE exposure from shipped firmware fixes

The official CVE-2026-97631 advisory describes pre-OS memory corruption by an attacker able to deliver ICMP errors during PXE boot. It identifies master as of 2026-09-14 and still lists Not patched currently. A fix PR does not prove a manufacturer has shipped a corrected BIOS or UEFI release.

What to checkDisable unnecessary network boot and restrict PXE paths. Check firmware releases and deployment with the hardware supplier.

TianoCore advisory

Reference: same day, but publication time undetermined · 1 group

This is current content retrieved after the target time. The following information is excluded from confirmed changes before the cutoff.

2026-10-28 / publication time unconfirmed · Publication/update confirmed

Silent Train: long-term monitoring of infrastructure serving communications, government and transport

Lumen Black Lotus Labs describes ephemeral relay chains tracked since 2023 and operations targeting management infrastructure. Victim notifications cover multiple years, rather than incidents newly occurring in this review. The report lists communications, government, defense, universities, water, energy and transport among targeted sectors without providing individual outage durations or financial losses.

What to checkReview exposed management interfaces, devices usable as relays and management-network telemetry. Do not rely solely on IP reputation.

Lumen Black Lotus Labs

Collection scope, overlap and limitations

772NVD new records

2,182NVD revisions

782GHSA publication window

70Verified saved and referenced responses

All 772 NVD publications overlap the 2182 modifications. GHSA has 782 publications (671 unreviewed, 19 malware) and 1136 modifications. Distinguish reviewed, unreviewed and malware entries, and check overlap in the register. KEV version 2026.10.28 has 1,762 entries, with changes from the previous saved response: CVE-2026-41709 / CVE-2026-46300. Inclusion and response differences are not attack start times. Absence does not prove no exploitation. Of 70 responses, 21 refer to prior originals to avoid duplicate storage.

The cutoff is 2026-10-29 14:01:25 JST. The full window since 2026-10-28 13:18:44 JST was collected. Responses are current revisions retrieved afterward, without reconstructing every historical version.
Prior topics and IDs are retained. Existing entries retain their stated source-date context and are not new incidents in this window. Apart from major monitored cases, their prose has not been fully revalidated in this review.
Do not add publications, revisions, CVEs, GHSAs, packages or affected people. Unscored NVD records were collected; unreviewed entries are not automatically promoted to confirmed impacts.
Failed retrievals, empty JavaScript shells and access restrictions are not successful body retrievals. No worldwide completeness or absence of unlisted incidents is claimed.
Researcher observations, victim confirmation, exploitation, restoration plans and completion are separate. Unknown losses, affected versions and people counts are not estimated.

data/20261029T050117Z-dbf8f2/incident-register.json / data/20261029T050117Z-dbf8f2/collection-summary.json / data/20261029T050117Z-dbf8f2-vendors/collection-summary.json / docs/research-collection-20261029T050117Z-dbf8f2.md / docs/research-20261029T050117Z-dbf8f2.md / data/latest.json

Previous record

Research record for 10/28 13:18

Quick overview: check only what you use.

Exploitation chains and investigation scope

Real impacts on daily life and work

Fixes differ by advisory

Registrations and advisory updates in the window · 48 groups

GMO: notice 15 concerns assessment of leads, without confirming restoration or arrests

KEV: Linux privilege escalation and missing ESX logging added

UNM Health: clinical and academic recovery, with a warning about follow-on scams

Yamaha NWR100: unauthenticated command execution and CONFIG access

Yamaha Windows products: separate installer and service-path fixes

Struts REST: any-setter requires configuration as well as an update

tornado: check advisory-specific conditions and minimum fixes

crass: check advisory-specific conditions and minimum fixes

systeminformation: check advisory-specific conditions and minimum fixes

@backstage/plugin-catalog-backend: check advisory-specific conditions and minimum fixes

electrum: check advisory-specific conditions and minimum fixes

knative.dev/pkg: check advisory-specific conditions and minimum fixes

@waline/vercel: check advisory-specific conditions and minimum fixes

seroval: check advisory-specific conditions and minimum fixes

mem0ai: check advisory-specific conditions and minimum fixes

social-auth-core: check advisory-specific conditions and minimum fixes

onnx: check advisory-specific conditions and minimum fixes

vllm: check advisory-specific conditions and minimum fixes

wasmtime: check advisory-specific conditions and minimum fixes

github.com/go-jose/go-jose/v4: check advisory-specific conditions and minimum fixes

langgraph-cli: check advisory-specific conditions and minimum fixes

graphql-scalars: check advisory-specific conditions and minimum fixes

autobahn: check advisory-specific conditions and minimum fixes

i18next-http-backend: check advisory-specific conditions and minimum fixes

re2js: check advisory-specific conditions and minimum fixes

zip: check advisory-specific conditions and minimum fixes

langgraph-api: check advisory-specific conditions and minimum fixes

filelock: check advisory-specific conditions and minimum fixes

io.opentelemetry:opentelemetry-api: check advisory-specific conditions and minimum fixes

happy-dom: check advisory-specific conditions and minimum fixes

vue-i18n: check advisory-specific conditions and minimum fixes

langgraph-sdk: check advisory-specific conditions and minimum fixes

@graphql-tools/executor-legacy-ws: check advisory-specific conditions and minimum fixes

@hono/node-server: check advisory-specific conditions and minimum fixes

github.com/labstack/echo/v5: check advisory-specific conditions and minimum fixes

@highcharts/dashboards: check advisory-specific conditions and minimum fixes

@highcharts/grid-lite: check advisory-specific conditions and minimum fixes

highcharts: check advisory-specific conditions and minimum fixes

@highcharts/grid-pro: check advisory-specific conditions and minimum fixes

mcp-sanitizer: check advisory-specific conditions and minimum fixes

rucio: check advisory-specific conditions and minimum fixes

MySqlConnector: check advisory-specific conditions and minimum fixes

github.com/caddyserver/caddy/v2: check advisory-specific conditions and minimum fixes

Malicious packages: distinguish listing from execution in your environment