AI translation. Check versions, conditions and actions against the Japanese original and primary sources.

SECURITY REVIEW · 2026-10-30 19:31:35 JST / 2026-10-30 10:31:35 UTC

An API key setting alone does not prove authentication is enforced.

New advisories cover MCP HTTP authentication, cert-manager DNS credentials, Keycloak authorization, ZIP extraction and malicious packages. Distinguish incident follow-ups from retained historical context.

Cutoff: 2026-10-30 19:31:35 JST / 2026-10-30 10:31:35 UTC. Delta window: 10/29 14:01:25–10/30 19:31:35 JST.
Current revisions were retrieved from 10/30 19:32 JST onward. Same-day follow-ups with dates only are reference material.

Quick overview →Database and advisory updates →Ongoing incident response →Read real-world impacts Chronological archive →

Quick overview: check only what you use.

Authentication and credential boundaries

Check configuration and actual enforcement for MCP, DNS and authorization.

New advisories and conditions →

Incident follow-ups

Distinguish recovery, payments and the start of procedures.

Impact list →

Check package dependencies

Review affected versions and execution history for each advisory.

Research database →

Database and advisory updates in the delta window · 21 groups

Organized by database inclusion/revision and advisory update times. These are not attack start times or counts of newly occurring harm.

10/30 00:45 JST status · Publication or update confirmed

Railway: 10/29 update keeps signups paused; reopening date unknown

The 10/29 15:45 UTC status update keeps signups paused with no reopening date, prioritizing existing-customer reliability. About 100,000workspaces and at most 1.85% describe potential environment-variable exposure, not confirmed affected people.

What to checkRevoke and reissue old secrets at their providers and audit usage. The next update scheduled for 10/30 at 16:00 UTC does not establish recovery at this cutoff.

Railway status / Official preliminary report

GHSA published: 2026-10-29T05:23:36Z to 2026-10-30T09:31:22Z · Publication or update confirmed

Malicious packages: compare advisories with dependencies

Preserve each newly published malware advisory and its packages. Similar names do not establish an organization infection or a shared campaign. An absent patched version does not establish that a safe release exists.

What to checkCheck dependency lockfiles and build history; isolate and remove matching packages. If executed, investigate credential exposure.

Affected and patched versions by advisory (46 entries)

GHSA-73xg-497j-5qqr

Malicious code in claims-acct-unlock (npm)

claims-acct-unlock (npm): affected = 25.2.1 → fixed version No fixed version listed

GHSA-9wjc-g5vf-3m22

Malicious code in test-01-rafamarrara-learning-dc (PyPI)

test-01-rafamarrara-learning-dc (pip): affected = 1.0.0 → fixed version No fixed version listed

GHSA-w3jr-q4jr-xq95

Malicious code in twitter-request-diagnostics (PyPI)

twitter-request-diagnostics (pip): affected = 1.0.0 → fixed version No fixed version listed

GHSA-cjmr-6xg2-vf8h

Malware in dowload_ebok_lolita_by_vladimir_nabokov_oy1gy

dowload_ebok_lolita_by_vladimir_nabokov_oy1gy (npm): affected >= 0 → fixed version No fixed version listed

GHSA-j272-m9j4-g3v9

Malware in dowload_ebok_el_piso_mil_el_piso_mil_1_by_katharine_mcgee_h1llc

dowload_ebok_el_piso_mil_el_piso_mil_1_by_katharine_mcgee_h1llc (npm): affected >= 0 → fixed version No fixed version listed

GHSA-5cmc-vx46-22wx

Malware in dowload_ebok_nur_mal_schnell_das_mammut_retten_by_knut_kruger_eva_schoffmann_davidov_ouz6t

dowload_ebok_nur_mal_schnell_das_mammut_retten_by_knut_kruger_eva_schoffmann_davidov_ouz6t (npm): affected >= 0 → fixed version No fixed version listed

GHSA-h86m-7gvf-j79h

Malware in dowload_ebok_reiki_sviluppa_e_usa_lenergia_reiki_by_matt_harvey_9q55p

dowload_ebok_reiki_sviluppa_e_usa_lenergia_reiki_by_matt_harvey_9q55p (npm): affected >= 0 → fixed version No fixed version listed

GHSA-p6mc-228w-6q75

Malware in dowload_ebok_armageddon_by_max_hastings_kv3s4

dowload_ebok_armageddon_by_max_hastings_kv3s4 (npm): affected >= 0 → fixed version No fixed version listed

GHSA-9r7r-h4fq-xj8p

Malicious code in bq-helix-recon-6ade983e (PyPI)

bq-helix-recon-6ade983e (pip): affected = 0.1.0 → fixed version No fixed version listed
bq-helix-recon-6ade983e (pip): affected = 0.1.2 → fixed version No fixed version listed

GHSA-526r-6j5j-v9pv

Malicious code in bq-helix-build-hook-6ade983e (PyPI)

bq-helix-build-hook-6ade983e (pip): affected = 0.1.0 → fixed version No fixed version listed

GHSA-w9pq-6r9f-pj96

Malware in orderbook-volt-plugin

orderbook-volt-plugin (npm): affected = 0.0.0-stage → fixed version No fixed version listed
orderbook-volt-plugin (npm): affected = 0.0.1 → fixed version No fixed version listed
orderbook-volt-plugin (npm): affected = 0.0.2 → fixed version No fixed version listed

GHSA-jp74-4rg3-7ppj

Malware in react-native-drago-callkit

react-native-drago-callkit (npm): affected = 0.0.0-stage → fixed version No fixed version listed
react-native-drago-callkit (npm): affected = 1.0.0 → fixed version No fixed version listed
react-native-drago-callkit (npm): affected = 1.0.1 → fixed version No fixed version listed
react-native-drago-callkit (npm): affected = 1.0.2 → fixed version No fixed version listed
react-native-drago-callkit (npm): affected = 1.0.15 → fixed version No fixed version listed
react-native-drago-callkit (npm): affected = 1.0.16 → fixed version No fixed version listed

GHSA-g6j7-j669-23g6

Malware in @chatunitycenter/baileys

@chatunitycenter/baileys (npm): affected >= 0 → fixed version No fixed version listed

GHSA-4rjq-j97h-cqxc

Malware in 789bet-vip-login

789bet-vip-login (npm): affected >= 0 → fixed version No fixed version listed

GHSA-f5mv-v4rc-qq2q

Malware in 789bet-vip-online-login

789bet-vip-online-login (npm): affected >= 0 → fixed version No fixed version listed

GHSA-wg3r-wqgc-7fgf

Malware in 789bet-login-th

789bet-login-th (npm): affected >= 0 → fixed version No fixed version listed

GHSA-6xqc-cfvp-q89v

Malware in 789bet-entrance

789bet-entrance (npm): affected >= 0 → fixed version No fixed version listed

GHSA-rvxc-82gp-xpr6

Malware in 789bet-vip

789bet-vip (npm): affected >= 0 → fixed version No fixed version listed

GHSA-q68g-454g-9qww

Malware in 789bet-slot

789bet-slot (npm): affected >= 0 → fixed version No fixed version listed

GHSA-gp92-xqcg-876c

Malware in m98vip

m98vip (npm): affected >= 0 → fixed version No fixed version listed

GHSA-cccw-qphx-7whg

Malware in 789bet

789bet (npm): affected >= 0 → fixed version No fixed version listed

GHSA-6ggw-hqvq-8wcm

Malware in m98bet

m98bet (npm): affected >= 0 → fixed version No fixed version listed

GHSA-x82c-crm3-jcwv

Malware in m98th

m98th (npm): affected >= 0 → fixed version No fixed version listed

GHSA-3jx4-3p7f-pv7p

Malicious code in siren-lament (npm)

siren-lament (npm): affected > 0 → fixed version No fixed version listed
siren-lament (npm): affected = 2.14.827 → fixed version No fixed version listed
siren-lament (npm): affected = 2.14.822 → fixed version No fixed version listed
siren-lament (npm): affected = 2.14.824 → fixed version No fixed version listed
siren-lament (npm): affected = 0.0.0-stage → fixed version No fixed version listed

GHSA-jpgq-34qx-jwwc

Malicious code in spectral-core (npm)

spectral-core (npm): affected = 3.0.6 → fixed version No fixed version listed
spectral-core (npm): affected = 3.0.4 → fixed version No fixed version listed
spectral-core (npm): affected = 3.0.10 → fixed version No fixed version listed
spectral-core (npm): affected = 3.0.5 → fixed version No fixed version listed
spectral-core (npm): affected = 3.0.3 → fixed version No fixed version listed
spectral-core (npm): affected = 3.0.11 → fixed version No fixed version listed
spectral-core (npm): affected = 3.0.7 → fixed version No fixed version listed
spectral-core (npm): affected = 3.0.12 → fixed version No fixed version listed
spectral-core (npm): affected = 3.0.9 → fixed version No fixed version listed
spectral-core (npm): affected = 3.0.2 → fixed version No fixed version listed

GHSA-prqg-vvv3-2xf8

Malicious code in @dmangal/curse-dependent-ecto (npm)

@dmangal/curse-dependent-ecto (npm): affected = 99999.0.2 → fixed version No fixed version listed
@dmangal/curse-dependent-ecto (npm): affected = 99999.0.1 → fixed version No fixed version listed
@dmangal/curse-dependent-ecto (npm): affected = 99999.0.0 → fixed version No fixed version listed

GHSA-h7h9-fmhv-56wh

Malicious code in poc-revshell (PyPI)

poc-revshell (pip): affected = 0.1.0 → fixed version No fixed version listed

GHSA-qcg8-4xw5-5ccq

Malicious code in black-spindle-2 (npm)

black-spindle-2 (npm): affected = 301.0.0 → fixed version No fixed version listed
black-spindle-2 (npm): affected = 100.0.0 → fixed version No fixed version listed

GHSA-j2r4-xxhh-xx58

Malware in tailwind-kinetic

tailwind-kinetic (npm): affected >= 0 → fixed version No fixed version listed

GHSA-w9j6-p46m-xvp4

Malware in tailwind-animate-kit

tailwind-animate-kit (npm): affected >= 0 → fixed version No fixed version listed

GHSA-88vx-c9pj-9527

Malware in @jasperquinn/postcss-motion-helpers

@jasperquinn/postcss-motion-helpers (npm): affected >= 0 → fixed version No fixed version listed

GHSA-vh6h-8m24-j9mj

Malware in tailwind-keyframes

tailwind-keyframes (npm): affected >= 0 → fixed version No fixed version listed

GHSA-7cm4-74gj-gfp2

Malware in tailwind-animationlab

tailwind-animationlab (npm): affected >= 0 → fixed version No fixed version listed

GHSA-4mf5-57pc-vj85

Malware in tailwindcss-animate-catalog

tailwindcss-animate-catalog (npm): affected >= 0 → fixed version No fixed version listed

GHSA-282x-w96h-wv7f

Malware in tailwindcss-keyframe-kit

tailwindcss-keyframe-kit (npm): affected >= 0 → fixed version No fixed version listed

GHSA-pr23-gvcv-c422

Malware in cjlowuxbnexkhgpzq

cjlowuxbnexkhgpzq (npm): affected >= 0 → fixed version No fixed version listed

GHSA-v78q-7787-v9rq

Malware in bcxhdh1kjlopsde

bcxhdh1kjlopsde (npm): affected >= 0 → fixed version No fixed version listed

GHSA-2hrq-h3vj-5wxm

Malicious code in identity-two-factor (npm)

identity-two-factor (npm): affected = 999.0.0 → fixed version No fixed version listed

GHSA-48mf-mvf8-x4v3

Malicious code in spectral-net-probe (npm)

spectral-net-probe (npm): affected = 1.0.1 → fixed version No fixed version listed
spectral-net-probe (npm): affected = 1.0.4 → fixed version No fixed version listed
spectral-net-probe (npm): affected = 1.0.10 → fixed version No fixed version listed

GHSA-j7r7-x5hv-p975

Malicious code in mw-test-utils (npm)

mw-test-utils (npm): affected = 1.0.0 → fixed version No fixed version listed
mw-test-utils (npm): affected = 10.0.0 → fixed version No fixed version listed
mw-test-utils (npm): affected = 10.0.1 → fixed version No fixed version listed

GHSA-g2vv-m33m-p9qf

Malicious code in @zmtcdn/ui (npm)

@zmtcdn/ui (npm): affected = 9999.0.0 → fixed version No fixed version listed
@zmtcdn/ui (npm): affected = 9999.0.7 → fixed version No fixed version listed

GHSA-98qv-v7qr-v3gx

Malicious code in mui-wrapper-x-date-pickers (npm)

mui-wrapper-x-date-pickers (npm): affected = 1.0.0 → fixed version No fixed version listed
mui-wrapper-x-date-pickers (npm): affected = 10.0.0 → fixed version No fixed version listed

GHSA-4h9g-fh86-j87q

Malicious code in mw-communication-client (npm)

mw-communication-client (npm): affected = 10.0.0 → fixed version No fixed version listed
mw-communication-client (npm): affected = 1.0.1 → fixed version No fixed version listed

GHSA-2pph-m662-c8hg

Malicious code in @zmtcdn/components (npm)

@zmtcdn/components (npm): affected = 9999.0.0 → fixed version No fixed version listed

GHSA-8hr2-m7vq-fhpg

Malware in dsh-volcengine-provider

dsh-volcengine-provider (npm): affected = 0.2.8 → fixed version No fixed version listed
dsh-volcengine-provider (npm): affected = 0.2.5 → fixed version No fixed version listed

GHSA-r4m9-8735-g966

Malware in dsh-redteam-mode

dsh-redteam-mode (npm): affected = 0.15.2 → fixed version No fixed version listed

GHSA-73xg-497j-5qqr / GHSA-9wjc-g5vf-3m22 / GHSA-w3jr-q4jr-xq95 / GHSA-cjmr-6xg2-vf8h / GHSA-j272-m9j4-g3v9 / GHSA-5cmc-vx46-22wx / GHSA-h86m-7gvf-j79h / GHSA-p6mc-228w-6q75 / GHSA-9r7r-h4fq-xj8p / GHSA-526r-6j5j-v9pv / GHSA-w9pq-6r9f-pj96 / GHSA-jp74-4rg3-7ppj / GHSA-g6j7-j669-23g6 / GHSA-4rjq-j97h-cqxc / GHSA-f5mv-v4rc-qq2q / GHSA-wg3r-wqgc-7fgf / GHSA-6xqc-cfvp-q89v / GHSA-rvxc-82gp-xpr6 / GHSA-q68g-454g-9qww / GHSA-gp92-xqcg-876c / GHSA-cccw-qphx-7whg / GHSA-6ggw-hqvq-8wcm / GHSA-x82c-crm3-jcwv / GHSA-3jx4-3p7f-pv7p / GHSA-jpgq-34qx-jwwc / GHSA-prqg-vvv3-2xf8 / GHSA-h7h9-fmhv-56wh / GHSA-qcg8-4xw5-5ccq / GHSA-j2r4-xxhh-xx58 / GHSA-w9j6-p46m-xvp4 / GHSA-88vx-c9pj-9527 / GHSA-vh6h-8m24-j9mj / GHSA-7cm4-74gj-gfp2 / GHSA-4mf5-57pc-vj85 / GHSA-282x-w96h-wv7f / GHSA-pr23-gvcv-c422 / GHSA-v78q-7787-v9rq / GHSA-2hrq-h3vj-5wxm / GHSA-48mf-mvf8-x4v3 / GHSA-j7r7-x5hv-p975 / GHSA-g2vv-m33m-p9qf / GHSA-98qv-v7qr-v3gx / GHSA-4h9g-fh86-j87q / GHSA-2pph-m662-c8hg / GHSA-8hr2-m7vq-fhpg / GHSA-r4m9-8735-g966

10/30 15:30 and 18:00 JST · Publication or update confirmed

GMO: individual contact begins for payments and alternatives; 428 tips

At 15:30 on 10/30, GMO announced that direct contact had begun about condolence-payment procedures and alternative services. Notice16 records 428 cumulative tips at 18:00 that day. Tips do not count victims or arrests; completed payments and service recovery remain unconfirmed.

What to checkUse official individual contact to confirm procedures, alternative services and compensation conditions. Reject opportunistic requests for credentials or fees.

GMO 10/30 customer notice / GMO notice16

GHSA published: 2026-10-29T16:32:58Z to 2026-10-29T16:32:58Z · Publication or update confirmed

PocketMine-MP: repeated packets during login

Repeated resource-pack completion packets can create multiple Player objects for one session, increasing memory use and outbound traffic.

What to checkPatched versions: 5.44.2. Match affected ranges, features and privileges to the advisories and restrict exposure.

By advisory: affected and fixed versions (1 entry)

GHSA-pg53-p7qp-65cv

PocketMine-MP has potential memory/network vulnerability from repeated ResourcePackClientResponsePacket packets

pocketmine/pocketmine-mp (composer): affected < 5.44.2 → fixed version 5.44.2

GHSA-pg53-p7qp-65cv

GHSA published: 2026-10-29T16:32:39Z to 2026-10-29T16:32:39Z · Publication or update confirmed

SilverStripe MFA: MFA bypass during password reset

The password reset flow can create a logged-in session before MFA completion. Exploitation requires access to the user email account.

What to checkPatched versions: 6.0.0. Match affected ranges, features and privileges to the advisories and restrict exposure.

By advisory: affected and fixed versions (1 entry)

GHSA-68wq-phq7-p2vg

MultiFactor Authentication for SilverStripe can bypass MFA during password reset flow

silverstripe/mfa (composer): affected < 6.0.0 → fixed version 6.0.0

GHSA-68wq-phq7-p2vg

GHSA published: 2026-10-29T16:33:48Z to 2026-10-29T16:33:48Z · Publication or update confirmed

Parse Server: stored XSS through malformed Content-Type

A user with upload permission can store malformed Content-Type values. Adapters serving those values can trigger browser MIME sniffing and script execution. Default GridFS is unaffected.

What to checkPatched versions: 8.6.84, 9.10.0-alpha.2. Match affected ranges, features and privileges to the advisories and restrict exposure.

By advisory: affected and fixed versions (1 entry)

GHSA-r899-h629-j84r

Parse Server vulnerable to stored XSS via malformed Content-Type bypassing file upload extension blocklist

parse-server (npm): affected >= 9.0.0, < 9.10.0-alpha.2 → fixed version 9.10.0-alpha.2
parse-server (npm): affected <= 8.6.83 → fixed version 8.6.84

GHSA-r899-h629-j84r

GHSA published: 2026-10-29T16:33:09Z to 2026-10-29T16:33:09Z · Publication or update confirmed

Daptin: CPU exhaustion through Accept-Language

Unfiltered Accept-Language input reaches the parser on unauthenticated requests. Underscore-separated input bypasses an existing hyphen-count guard. The current API lists no first patched version.

What to checkPatched versions: not listed in the current API. Match affected ranges, features and privileges to the advisories and restrict exposure.

By advisory: affected and fixed versions (1 entry)

GHSA-rhj7-vh3v-mcq6

Daptin: ParseAcceptLanguage `_` separator bypass enables >250x CPU amplification via Accept-Language header in LanguageMiddleware

github.com/daptin/daptin (go): affected <= 0.12.15 → fixed version No fixed version listed

GHSA-rhj7-vh3v-mcq6

GHSA published: 2026-10-29T16:34:35Z to 2026-10-29T16:34:35Z · Publication or update confirmed

PDF Reader MCP: missing API key enforcement over HTTP

With the optional HTTP transport enabled, setting MCP_API_KEY did not enforce header authentication. Reachable clients could invoke PDF tools within server filesystem and URL-fetch capabilities. Default stdio is unaffected.

What to checkPatched versions: 3.0.1. Match affected ranges, features and privileges to the advisories and restrict exposure.

By advisory: affected and fixed versions (1 entry)

GHSA-q344-5v34-gm84

@sylphx/pdf-reader-mcp: HTTP transport accepts unauthenticated requests despite a configured MCP_API_KEY

@sylphx/pdf-reader-mcp (npm): affected >= 2.2.0, < 3.0.1 → fixed version 3.0.1

GHSA-q344-5v34-gm84

GHSA published: 2026-10-29T16:34:26Z to 2026-10-29T16:34:26Z · Publication or update confirmed

PraisonAI: workflow AST sandbox bypass

When job workflows are explicitly enabled and untrusted YAML scripts are executed, the allowed os module permits commands with the process privileges.

What to checkPatched versions: 4.6.78. Match affected ranges, features and privileges to the advisories and restrict exposure.

By advisory: affected and fixed versions (1 entry)

GHSA-26mh-57q7-jfvr

PraisonAI vulnerable to Remote Code Execution via Broken AST Sandbox

praisonai (pip): affected < 4.6.78 → fixed version 4.6.78

GHSA-26mh-57q7-jfvr

GHSA published: 2026-10-29T16:35:48Z to 2026-10-29T16:35:48Z · Publication or update confirmed

Volto chatbot: unauthenticated proxy attaches Danswer credentials

The exposed middleware attaches server credentials to upstream Danswer calls without authorization, path or method restrictions. A reachable attacker can operate with the configured service account permissions.

What to checkPatched versions: 2.0.4. Match affected ranges, features and privileges to the advisories and restrict exposure.

By advisory: affected and fixed versions (1 entry)

GHSA-w9x9-j56r-h98r

@eeacms/volto-chatbot has Unauthenticated Danswer API Confused Deputy Proxy

@eeacms/volto-chatbot (npm): affected <= 2.0.3 → fixed version 2.0.4

GHSA-w9x9-j56r-h98r

GHSA published: 2026-10-29T16:35:16Z to 2026-10-29T16:35:29Z · Publication or update confirmed

Crass: CSS input causes CPU, recursion and memory exhaustion

Non-ASCII input, adjacent comments and deeply nested blocks or functions can cause excessive CPU, recursive failure or memory consumption. Check whether attacker-controlled CSS reaches the parser.

What to checkPatched versions: 1.0.7. Match affected ranges, features and privileges to the advisories and restrict exposure.

By advisory: affected and fixed versions (3 entries)

GHSA-8vfg-2r28-hvhj

Crass: Non-ASCII characters cause superlinear CPU consumption

crass (rubygems): affected < 1.0.7 → fixed version 1.0.7

GHSA-wwpr-jff3-395c

Crass: A large number of adjacent CSS comments can trigger a SystemStackError

crass (rubygems): affected < 1.0.7 → fixed version 1.0.7

GHSA-6jxj-px6v-747w

Crass: Deeply nested CSS blocks and functions can trigger a SystemStackError or excessive memory usage

crass (rubygems): affected < 1.0.7 → fixed version 1.0.7

GHSA-8vfg-2r28-hvhj / GHSA-wwpr-jff3-395c / GHSA-6jxj-px6v-747w

GHSA published: 2026-10-29T16:35:04Z to 2026-10-29T16:35:04Z · Publication or update confirmed

Cedar: invalid JSON template slot validation

Malformed JSON policy templates with incorrect slot identifiers in is in conditions can panic or change authorization decisions. Syntactically valid policies are outside this advisory scope.

What to checkPatched versions: 3.4.3, 4.11.1. Match affected ranges, features and privileges to the advisories and restrict exposure.

By advisory: affected and fixed versions (1 entry)

GHSA-c33x-vcv4-vg3g

Cedar: JSON template is in scope missing slot-id validation allows link panic and decision divergence

cedar-policy (rust): affected >= 4.0.0, < 4.11.1 → fixed version 4.11.1
cedar-policy (rust): affected >= 3.0.0, < 3.4.3 → fixed version 3.4.3
@cedar-policy/cedar-wasm (npm): affected >= 4.0.1, < 4.11.1 → fixed version 4.11.1
@cedar-policy/cedar-wasm (npm): affected >= 3.2.0, < 3.4.3 → fixed version 3.4.3

GHSA-c33x-vcv4-vg3g

GHSA published: 2026-10-29T16:36:21Z to 2026-10-29T16:39:03Z · Publication or update confirmed

Keycloak: URI comparison, UMA authorization and client re-enabling

Distinguish authenticated Policy Enforcer bypass, conditional UMA permission bypass, privileged URI XSS and path probing, and re-enabling disabled clients with an existing Registration Access Token. Required privileges differ.

What to checkPatched versions: 26.0.10, 26.6.4. Match affected ranges, features and privileges to the advisories and restrict exposure.

Advisories: affected versions and fixes (5)

GHSA-v3f7-2p4r-mwfw

Keycloak vulnerable to cross-site scripting (xss) via case-insensitive uri validation bypass

org.keycloak:keycloak-services (maven): affected < 26.6.4 → fixed version 26.6.4

GHSA-9jrw-8xf7-xqhq

Keycloak vulnerable to information disclosure through arbitrary filesystem path probing

org.keycloak:keycloak-services (maven): affected < 26.6.4 → fixed version 26.6.4

GHSA-w3p3-7cjg-vgfw

Keycloak allows unauthorized access to resources via uma permission ticket bypass

org.keycloak:keycloak-services (maven): affected < 26.6.4 → fixed version 26.6.4

GHSA-f5p5-6xmx-p252

Keycloak vulnerable to authorization bypass via incorrect uri comparison

org.keycloak:keycloak-services (maven): affected < 26.6.4 → fixed version 26.6.4
org.keycloak:keycloak-policy-enforcer (maven): affected < 26.0.10 → fixed version 26.0.10

GHSA-r7rc-c989-86g6

Keycloak: Attacker can re-enable and take over disabled clients via registration access token

org.keycloak:keycloak-services (maven): affected < 26.6.4 → fixed version 26.6.4

GHSA-v3f7-2p4r-mwfw / GHSA-9jrw-8xf7-xqhq / GHSA-w3p3-7cjg-vgfw / GHSA-f5p5-6xmx-p252 / GHSA-r7rc-c989-86g6

GHSA published: 2026-10-29T16:39:56Z to 2026-10-29T16:39:56Z · Publication or update confirmed

Vite: development server file-denial bypass

A network-exposed development server can return files inside its allow range despite matching deny patterns through query manipulation. Scope depends on the development server configuration.

What to checkPatched versions: 6.4.5. Match affected ranges, features and privileges to the advisories and restrict exposure.

By advisory: affected and fixed versions (1 entry)

GHSA-8g5g-mxqh-grgj

Vite: `server.fs.deny` bypassed with queries

vite (npm): affected = 6.4.4 → fixed version 6.4.5

GHSA-8g5g-mxqh-grgj

GHSA published: 2026-10-29T16:39:49Z to 2026-10-29T16:39:49Z · Publication or update confirmed

shopify_app: cross-shop context confusion

Apps using the query shop for authorization, tenant lookup or stored token selection after token exchange can confuse shop identities. The attacker needs a valid shop session token.

What to checkPatched versions: 23.0.3. Match affected ranges, features and privileges to the advisories and restrict exposure.

By advisory: affected and fixed versions (1 entry)

GHSA-6j52-38f8-qhxr

Shopify App: Token exchange shop context confusion may allow cross-shop authorization bypass in affected apps

shopify_app (rubygems): affected >= 22.1.0, < 23.0.3 → fixed version 23.0.3

GHSA-6j52-38f8-qhxr

GHSA published: 2026-10-29T16:39:41Z to 2026-10-29T16:39:41Z · Publication or update confirmed

cert-manager: direct Challenges misuse DNS credentials

A user able to create ACME Challenges in a namespace can reference a usable ClusterIssuer and bypass solver restrictions. Exposure depends on DNS credentials and controller settings. An acme-dns solver can send credential headers to an attacker host.

What to checkPatched versions: 1.19.6, 1.20.3. Match affected ranges, features and privileges to the advisories and restrict exposure.

By advisory: affected and fixed versions (1 entry)

GHSA-8rvj-mm4h-c258

cert-manager: Direct ACME Challenge resources can bypass Issuer DNS01 solver policy and use ClusterIssuer DNS credentials

github.com/cert-manager/cert-manager (go): affected >= 1.18.0, < 1.19.6 → fixed version 1.19.6
github.com/cert-manager/cert-manager (go): affected >= 1.20.0-alpha.0, < 1.20.3 → fixed version 1.20.3

GHSA-8rvj-mm4h-c258

GHSA published: 2026-10-29T16:40:01Z to 2026-10-29T16:40:19Z · Publication or update confirmed

Rust zip: extraction escape, authentication and resource consumption

Crafted ZIP files can escape the extraction directory through symlinks, bypass AES-entry HMAC checks at premature EOF, or terminate extraction through declared sizes. The escape needs knowledge of the destination path; legacy decoder issues require legacy-zip.

What to checkPatched versions: 9.0.0. Match affected ranges, features and privileges to the advisories and restrict exposure.

By advisory: affected and fixed versions (4 entries)

GHSA-9hj8-73fh-9963

zip: legacy Shrink/Reduce/Implode decoder: denial of service from attacker-controlled ZIP64 uncompressed size

zip (rust): affected >= 5.1.0, < 9.0.0 → fixed version 9.0.0

GHSA-hjqx-j4rw-g7xv

zip: Arbitrary file write outside the extraction directory, because ZipArchive::extract validates symlink targets lexically.

zip (rust): affected >= 7.2.0, < 9.0.0 → fixed version 9.0.0

GHSA-8hxf-qr8p-62x4

zip: AES Entry HMAC Authentication Bypass on Premature EOF

zip (rust): affected >= 0.6.0, < 9.0.0 → fixed version 9.0.0

GHSA-q7v9-x93c-xqv3

zip: Unbounded Symlink-Target Handling Can Abort Or Exhaust Memory During Extraction

zip (rust): affected >= 1.3.0, < 9.0.0 → fixed version 9.0.0

GHSA-9hj8-73fh-9963 / GHSA-hjqx-j4rw-g7xv / GHSA-8hxf-qr8p-62x4 / GHSA-q7v9-x93c-xqv3

GHSA published: 2026-10-29T16:41:28Z to 2026-10-29T16:41:28Z · Publication or update confirmed

decode-uri-component: CPU exhaustion from malformed input

Malformed percent-encoded input can consume excessive CPU. Applications decoding request bodies can be exposed despite normal URL length limits.

What to checkPatched versions: 0.5.1. Match affected ranges, features and privileges to the advisories and restrict exposure.

By advisory: affected and fixed versions (1 entry)

GHSA-qr28-fpjm-wq7f

decode-uri-component vulnerable to denial of service via quadratic replacement of percent-encoded runs

decode-uri-component (npm): affected <= 0.5.0 → fixed version 0.5.1

GHSA-qr28-fpjm-wq7f

GHSA published: 2026-10-29T16:41:06Z to 2026-10-29T16:41:06Z · Publication or update confirmed

Twisted: HTTP/2 Rapid Reset denial of service

Repeated stream resets on an unauthenticated HTTP/2 connection can exhaust server CPU. This advisory concerns availability, without data theft or code execution. The listed fix is a release candidate.

What to checkPatched versions: 26.10.0rc1. Match affected ranges, features and privileges to the advisories and restrict exposure.

By advisory: affected and fixed versions (1 entry)

GHSA-vpp8-g58w-m8mp

Twisted: Unauthenticated Remote Denial of Service in the Twisted HTTP/2 Server via Rapid Stream Reset

Twisted (pip): affected <= 26.4.0 → fixed version 26.10.0rc1

GHSA-vpp8-g58w-m8mp

KEV added: 2026-10-29 · Publication or update confirmed

GitLab: regular-expression issue added to KEV

CISA added unauthenticated code execution through a CI/CD regular-expression integer overflow to KEV. GitLab fixes are 19.2.8, 19.3.5 and 19.4.2. Check shared Ruby/Onigmo exposure and distinguish patching from compromise investigation.

What to checkCheck affected products and exposure, then follow vendor mitigations, fixed releases and investigation guidance. The KEV due date is 11/1.

CISA KEV catalog / GitLab patch release / Ruby regexp fixes

KEV added: 2026-10-29 · Publication or update confirmed

Cisco ASA/FTD: unexpected reload issue added to KEV

CISA added the ASA/FTD unexpected-reload denial of service to KEV, and Cisco confirms exploitation. It requires an SSL VPN tunnel group configured with secondary authentication. Fixes depend on the branch; FTD examples include 7.4.9 and 7.6.7. There is no complete workaround, and configuration mitigation can reduce security; check official conditions.

What to checkCheck affected products and exposure, then follow vendor mitigations, fixed releases and investigation guidance. The KEV due date is 11/1.

CISA KEV catalog / Cisco advisory

Response and condition supplements for existing incidents · 113 groups

Supplementing conditions, fix/deployment methods, and operational impacts in previously published material. These are not recounted as new compromises during this period.

Updated 10/28 12:30 JST / Rechecked; no newly dated source update · Publication or update confirmed

@link: beta testing at some medical institutions, not full resumption.

The 10/28 12:30 update describes the start of cloud beta testing at some medical institutions. Patient apps, web reservations, and external-system integrations remain suspended. Effects on medical institutions' reservation operations continue, and the number of records affected by leakage remains under investigation.

What to checkContact your medical institution directly about reservations or changes. Distinguish planned resumptions/refunds from completed actions, and check password reset guidance when service resumes.

@link operating status / Medley

Updated 10/28 00:30 JST / Rechecked; no newly dated source update · Publication or update confirmed

Studio: joint-report submissions planned for early 11

The update on the 28th at 00:30 says acceptance of joint reports to the Personal Information Protection Commission has not begun. Individual notification is not included in joint reporting. Reading of encryption keys and external accessibility were confirmed, but the number of records actually obtained remains undetermined.

What to checkInvestigate actual use of form data and separately decide individual notification. Revoke external API keys with their issuers. Key rotation does not eliminate the possibility of earlier acquisition.

Studio official portal

10/28 04:00:02 JST catalog release / prior context; prose not revalidated in this review / Text not revalidated in this update · Publication or update confirmed

KEV: Brotli and Adobe Commerce added; reflect confirmed exploitation in priorities

CISA's 2026.10.27 edition contains 1,760 entries. CVE-2026-111497 and CVE-2026-48356 were newly added, with a 11/10 deadline. This confirms exploitation of the vulnerabilities; it does not mean every .NET or Node.js environment or merchant was compromised. Victim counts and actual losses are not provided.

What to checkCheck product-specific fixes such as Brotli 1.2.1 and Node.js 22.23.4 / 24.22.1 / 26.12.1. For Adobe, check the version-specific July cumulative update in APSB26-73. Do not treat KEV deadlines for US federal agencies as legal deadlines for all users.

CISA KEV / Google Brotli / Node.js / Adobe APSB26-73

10/25 fixes / continuing review of 10/26 Functions guidance / prior context; prose not revalidated in this review / Text not revalidated in this update · Publication or update confirmed

Brotli: distinguish availability of .NET fixes from deployment to user environments

.NET 8.0.33 / 9.0.22 / 10.0.14 / 11 RC3 are already available OOB fixes. .NET Framework is excluded. The official Azure Functions 10/26 notice describes an ongoing rollout and does not state that every running instance has been updated.

What to checkFor framework-dependent deployments, update the runtime and restart; for self-contained deployments, rebuild and republish; for containers, rebuild and redeploy. Check the actual running version for Functions.

.NET OOB / Azure Functions

Official follow-up after the previous cutoff / prior context; prose not revalidated in this review / Text not revalidated in this update · Publication or update confirmed

Citrix NetScaler: check PHP fixed versions for each release series

CTX697263 advises updating ADC/Gateway to 14.1-73.49, 13.1-64.32, 14.1-73.49 FIPS, or 13.1-FIPS/NDcPP 13.1.37.286 or later. Vendor-managed cloud is described as remediated, requiring no customer action.

What to checkCheck the versions of self-operated appliances by series. Do not judge whether fixes were backported from the upstream PHP version alone; restrict management interfaces and investigate compromise.

Citrix CTX697263

Current table from the 10/27 official revision / prior context; prose not revalidated in this review / Text not revalidated in this update · Publication or update confirmed

PAN-OS: distinguish shipped versions from ETAs

The official table lists fixed versions such as 12.2.4-h1 / 12.1.7-h11 / 11.2.10-h16, while 11.2.13-h4 and 11.2.16-h1 still carry ETA labels. Do not assume shipment merely because an expected date has passed. This is a management-plane PHP issue; not all data-plane traffic has the same conditions.

What to checkCheck actual shipped versions by branch in the official AffectedVersions table and update. Restrict management interfaces to trusted sources and check compromise indicators separately from updating.

Palo Alto Networks

Published 10/27 / prior context; prose not revalidated in this review / Text not revalidated in this update · Publication or update confirmed

WatchGuard: 18 advisories; check AD integration conditions and Windows clients

The official 10/27 list contains 17 Fireware advisories and 1 Windows Mobile VPN SSL advisory. The AD authentication heap overflow requires conditions such as AD configuration. Local communication interception in the VPN client also affects Windows. The vendor states in those advisories that it is unaware of actual exploitation.

What to checkUpdate by branch, including Fireware 2026.4 / 12.12.4 and 12.5.22 for T15/T35. For CVE-2026-115495, update the Windows VPN client to 2026.4; updating only the Firebox appliance is insufficient. Check the original for differences between the Solution section and product table.

WatchGuard PSIRT / AD authentication / Windows VPN

Published 10/27 / prior context; prose not revalidated in this review / Text not revalidated in this update · Publication or update confirmed

Browsers and email: Firefox / ESR / Thunderbird / Chrome updates.

Mozilla released Firefox159, ESR153.6 / 115.44, and Thunderbird159 / 153.6 on 10/27. Chrome stable is rolling out Windows/Mac156.0.8078.73/.74 and Linux/Android156.0.8078.73. Advisory counts are not incident counts.

What to checkUpdate and restart. Check the supported series appropriate to the OS and corporate management policy, and do not add invented CVEs or zero-day designations for undisclosed Chrome details.

Mozilla / Firefox159 / Chrome releases

10/27 advisory / prior context; prose not revalidated in this review / Text not revalidated in this update · Publication or update confirmed

Creative Cloud Windows: local privilege escalation fix.

APSB26-135 fixes a search-path issue affecting Windows versions 6.10 and earlier in 6.11. The vendor reports no known actual exploitation. This is not an announcement confirming user compromise.

What to checkUpdate Creative Cloud Desktop to 6.11 or later. Check actual versions on deployed devices.

Adobe APSB26-135

GHSA published:2026-10-27T21:26:32Z to 2026-10-27T21:26:56Z / prior context; prose not revalidated in this review / Text not revalidated in this update · Publication or update confirmed

MLflow: file reads, scorer execution, and keys recorded in traces

Some issues affect low-privilege basic-auth users as well as unauthenticated servers. They include API keys recorded in CrewAI autolog traces. These materials alone do not establish actual victim or incident counts.

What to checkUpdate to 3.17.0. Restrict public access, inspect trace and OTLP destinations, and revoke exposed provider keys.

By advisory: affected and fixed versions (3 entries)

GHSA-m65p-9j7q-6w33

MLflow vulnerable to arbitrary file read on unauthenticated servers via prompt model version source

mlflow (pip): affected >= 3.10.0, < 3.17.0 → fixed version 3.17.0

GHSA-j7qq-vr8c-xvw3

MLflow CrewAI autologging records LLM provider API keys in logged trace spans

mlflow (pip): affected >= 2.19.0, < 3.17.0 → fixed version 3.17.0

GHSA-26p8-2jq9-3vq9

MLflow vulnerable to remote code execution on unauthenticated servers via third-party scorer deserialization importing caller-placed artifact modules

mlflow (pip): affected >= 3.12.0rc0, < 3.17.0 → fixed version 3.17.0

GHSA-m65p-9j7q-6w33 / GHSA-j7qq-vr8c-xvw3 / GHSA-26p8-2jq9-3vq9

GHSA published:2026-10-27T21:07:25Z to 2026-10-27T21:07:25Z / prior context; prose not revalidated in this review / Text not revalidated in this update · Publication or update confirmed

dd-trace-js: verify published advisories and fix scope.

Confirmed 1 advisory in this GHSA publication window. Refer to each developer's material for prerequisites involving features, inputs, privileges, and other conditions. Registration time is not the first shipment date or the time of actual attacks. This material alone does not establish the number of people or incidents actually affected.

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (1 entry)

GHSA-x94g-w73q-hpcw

dd-trace: ReDOS in URL query string obfuscation

dd-trace (npm): affected >= 2.0.0, < 5.131.1 → fixed version 5.131.1
dd-trace (npm): affected >= 6.0.0, < 6.20.1 → fixed version 6.20.1

GHSA-x94g-w73q-hpcw

GHSA published:2026-10-27T21:07:12Z to 2026-10-27T21:07:12Z / prior context; prose not revalidated in this review / Text not revalidated in this update · Publication or update confirmed

tinymce: check public advisories and fix scope

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (1 entry)

GHSA-mf2p-h6hf-fcwm

TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` serialization

tinymce (npm): affected >= 8.5.1, < 8.9.3 → fixed version 8.9.3
TinyMCE (nuget): affected >= 8.5.1, < 8.9.3 → fixed version 8.9.3
tinymce/tinymce (composer): affected >= 8.5.1, < 8.9.3 → fixed version 8.9.3
tinymce (npm): affected = 7.9.3 → fixed version 7.9.4
TinyMCE (nuget): affected = 7.9.3 → fixed version 7.9.4
tinymce/tinymce (composer): affected = 7.9.3 → fixed version 7.9.4

GHSA-mf2p-h6hf-fcwm

GHSA published:2026-10-27T21:05:29Z to 2026-10-27T21:06:59Z / prior context; prose not revalidated in this review / Text not revalidated in this update · Publication or update confirmed

MCP Python SDK: audience validation, redirects, and schema references.

Distinguish bearer token target resource validation, custom header/body forwarding on cross-origin redirects, and SSRF or outages through outputSchema external references. Do not describe this as leakage of a standalone Authorization header. This material alone does not establish the number of actual victims or incidents.

What to checkUpdate to 1.30.0 / 2.2.0 or later. Audience protection also requires validate_token_resource=True, resource_server_url, and returning AccessToken.resource. Updating alone does not enable validation.

By advisory: affected and fixed versions (3 entries)

GHSA-w4fh-qvv9-3v23

Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource server

mcp (pip): affected >= 2.0.0, < 2.2.0 → fixed version 2.2.0
mcp (pip): affected >= 1.10.0, < 1.30.0 → fixed version 1.30.0

GHSA-5h93-6whr-6q8j

Model Context Protocol Python SDK: HTTP client transports followed cross-origin redirects carrying custom headers and bodies

mcp (pip): affected >= 2.0.0, < 2.2.0 → fixed version 2.2.0
mcp (pip): affected >= 1.8.0, < 1.30.0 → fixed version 1.30.0

GHSA-rwrf-2pqf-9j8j

Model Context Protocol Python SDK: Client fetched server-chosen $ref URLs while validating tool results against output schemas

mcp (pip): affected >= 2.0.0, < 2.2.0 → fixed version 2.2.0
mcp (pip): affected >= 1.10.0, < 1.30.0 → fixed version 1.30.0

GHSA-w4fh-qvv9-3v23 / GHSA-5h93-6whr-6q8j / GHSA-rwrf-2pqf-9j8j

GHSA published:2026-10-27T21:06:54Z to 2026-10-27T21:06:54Z / prior context; prose not revalidated in this review / Text not revalidated in this update · Publication or update confirmed

opentelemetry-python: check public advisories and fix scope

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (1 entry)

GHSA-f5m9-jfrj-jjj7

OpenTelemetry Python: Unbounded memory allocation in Jaeger baggage propagation

opentelemetry-propagator-jaeger (pip): affected <= 1.44.0 → fixed version 1.45.0

GHSA-f5m9-jfrj-jjj7

GHSA published:2026-10-27T21:05:06Z to 2026-10-27T21:05:13Z / prior context; prose not revalidated in this review / Text not revalidated in this update · Publication or update confirmed

ckeditor5: check published advisories and fix scope

Confirmed 2 advisories in this GHSA publication window. Consult each developer's material for exploit conditions such as features, input, and privileges. Registration time is not the initial shipment date or an actual attack time. This material alone does not establish the number of actual victims or incidents.

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (2 advisories)

GHSA-v6mg-96c6-gmpq

CKEditor: Cross-site scripting (XSS) in the engine package

ckeditor5 (npm): affected >= 29.0.0, < 47.7.4 → fixed version 47.7.4
@ckeditor/ckeditor5-engine (npm): affected >= 29.0.0, < 47.7.4 → fixed version 47.7.4
ckeditor5 (npm): affected >= 48.0.0, < 48.5.1 → fixed version 48.5.1
@ckeditor/ckeditor5-engine (npm): affected >= 48.0.0, < 48.5.1 → fixed version 48.5.1

GHSA-rh54-vffm-5fvp

CKEditor: Cross-site scripting (XSS) in the engine package

ckeditor5 (npm): affected >= 45.0.0, < 47.7.4 → fixed version 47.7.4
@ckeditor/ckeditor5-engine (npm): affected >= 45.0.0, < 47.7.4 → fixed version 47.7.4
ckeditor5 (npm): affected >= 48.0.0, < 48.5.1 → fixed version 48.5.1
@ckeditor/ckeditor5-engine (npm): affected >= 48.0.0, < 48.5.1 → fixed version 48.5.1

GHSA-v6mg-96c6-gmpq / GHSA-rh54-vffm-5fvp

GHSA published:2026-10-27T21:04:57Z to 2026-10-27T21:04:57Z / prior context; prose not revalidated in this review / Text not revalidated in this update · Publication or update confirmed

neko: published advisories and fix scope

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (1 entry)

GHSA-5cp7-fp4j-wwcv

Neko: Authorization bypass in legacy WebRTC input handling

github.com/m1k1o/neko/server (go): affected >= 0.0.0-20250401220545-fe94c999c6af, < 0.0.0-20260805142851-395ca1a6f62b → fixed version 0.0.0-20260805142851-395ca1a6f62b

GHSA-5cp7-fp4j-wwcv

GHSA published:2026-10-27T21:04:50Z to 2026-10-27T21:04:50Z / prior context; prose not revalidated in this review / Text not revalidated in this update · Publication or update confirmed

Atlantis: workspace command injection during plan phase

The atlantis.yaml workspace in a PR where plan runs is the attack path. Exploitation may be possible without custom workflow or apply privileges. These materials alone do not establish actual victim or incident counts.

What to checkUpdate to 0.47.1. Restrict plan execution for untrusted PRs and inspect runner cloud/VCS permissions.

By advisory: affected and fixed versions (1 entry)

GHSA-rjh2-4xgw-p2hj

Atlantis: OS command injection through PR-controlled Terraform workspace enables RCE during plan

github.com/runatlantis/atlantis (go): affected >= 0.4.0, <= 0.47.0 → fixed version 0.47.1

GHSA-rjh2-4xgw-p2hj

GHSA published:2026-10-27T21:04:40Z to 2026-10-27T21:04:40Z / prior context; prose not revalidated in this review / Text not revalidated in this update · Publication or update confirmed

filebrowser: check public advisories and fix scope

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (1 entry)

GHSA-mgqf-5mf5-prfj

FileBrowser: Symlink following escapes user scope allowing arbitrary file read outside the served directory

github.com/gtsteffaniak/filebrowser/backend (go): affected < 0.0.0-20260814233832-4126edeb07a0 → fixed version 0.0.0-20260814233832-4126edeb07a0

GHSA-mgqf-5mf5-prfj

GHSA published:2026-10-27T16:09:45Z to 2026-10-27T19:02:31Z / prior context; prose not revalidated in this review / Text not revalidated in this update · Publication or update confirmed

undici: TLS validation, cache boundaries, and DoS

Condition-specific issues involving TLS options propagation, cross-origin redirects and shared caches, WebSocket buffering, and other features. Do not treat Node.js built-in fetch and individual npm dependencies as the same deployed version. This material alone does not establish the number of people or incidents actually affected.

What to checkCheck the applicable series: 6.29.1 / 7.30.1 / 8.12.2. Update npm dependencies and embedded runtimes separately, and check cache sharing, redirects, and TLS settings.

By advisory: affected and fixed versions (6 entries)

GHSA-4w7w-5xrc-9h26

undici vulnerable to cache poisoning and cross-user disclosure via cross-origin redirects

undici (npm): affected >= 7.0.0, < 7.30.1 → fixed version 7.30.1
undici (npm): affected >= 8.0.0, < 8.12.2 → fixed version 8.12.2

GHSA-2m5v-pch6-74hx

undici vulnerable to TLS certificate validation bypass via dropped tls options in Agent

undici (npm): affected >= 4.0.0, < 6.29.1 → fixed version 6.29.1
undici (npm): affected >= 7.0.0, < 7.30.1 → fixed version 7.30.1
undici (npm): affected >= 8.0.0, < 8.12.2 → fixed version 8.12.2

GHSA-qrxm-fqhp-jwvm

undici vulnerable to Denial of Service via TLS 1.2 certificate-changing renegotiation

undici (npm): affected >= 4.2.1, < 6.29.1 → fixed version 6.29.1
undici (npm): affected >= 7.0.0, < 7.30.1 → fixed version 7.30.1
undici (npm): affected >= 8.0.0, < 8.12.2 → fixed version 8.12.2

GHSA-9fm3-97px-rjf6

undici WebSocket client vulnerable to Denial of Service via unbounded automatic PONG buffering

undici (npm): affected >= 5.15.0, < 6.29.1 → fixed version 6.29.1
undici (npm): affected >= 7.0.0, < 7.30.1 → fixed version 7.30.1
undici (npm): affected >= 8.0.0, < 8.12.2 → fixed version 8.12.2

GHSA-55wc-3pg8-jfw6

undici vulnerable to Denial of Service via unhandled exception in the decompress interceptor

undici (npm): affected >= 7.15.0, < 7.30.1 → fixed version 7.30.1
undici (npm): affected >= 8.0.0, < 8.12.2 → fixed version 8.12.2

GHSA-qq8j-7v2v-3rwp

undici WebSocket client vulnerable to Denial of Service via failed HTTP/2 handshake

undici (npm): affected >= 8.11.0, < 8.11.2 → fixed version 8.11.2

GHSA-4w7w-5xrc-9h26 / GHSA-2m5v-pch6-74hx / GHSA-qrxm-fqhp-jwvm / GHSA-9fm3-97px-rjf6 / GHSA-55wc-3pg8-jfw6 / GHSA-qq8j-7v2v-3rwp

GHSA published:2026-10-27T19:02:00Z to 2026-10-27T19:02:00Z / prior context; prose not revalidated in this review / Text not revalidated in this update · Publication or update confirmed

MCP TypeScript SDK: limits on HTTP bodies and batch lengths.

The HTTP transport/handler has resource-consumption issues involving oversized bodies and JSON-RPC batches. These materials alone do not establish actual victim or incident counts.

What to checkCheck actual packages such as sdk1.30.1, server/node2.1.0, and hono2.0.1, and set limits at the reverse proxy too.

By advisory: affected and fixed versions (1 entry)

GHSA-f897-62hf-6gxq

MCP TypeScript SDK: HTTP server transports and handlers did not limit request body size or JSON-RPC batch length

@modelcontextprotocol/sdk (npm): affected >= 1.10.0, < 1.30.1 → fixed version 1.30.1
@modelcontextprotocol/server (npm): affected >= 2.0.0, < 2.1.0 → fixed version 2.1.0
@modelcontextprotocol/node (npm): affected >= 2.0.0, < 2.1.0 → fixed version 2.1.0
@modelcontextprotocol/hono (npm): affected >= 2.0.0, < 2.0.1 → fixed version 2.0.1

GHSA-f897-62hf-6gxq

GHSA published:2026-10-27T19:01:39Z to 2026-10-27T19:01:50Z / prior context; prose not revalidated in this review / Text not revalidated in this update · Publication or update confirmed

symfony: published advisories and fix scope

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (2 advisories)

GHSA-2v3c-qxhr-7vpv

Symfony: Unbounded Recursion in the YAML Inline Lexer Lets a Single Document Crash the Process

symfony/symfony (composer): affected >= 2.0.0, < 5.4.54 → fixed version 5.4.54
symfony/symfony (composer): affected >= 6.0.0, < 6.4.45 → fixed version 6.4.45
symfony/symfony (composer): affected >= 7.0.0, < 7.4.18 → fixed version 7.4.18
symfony/symfony (composer): affected >= 8.0.0, < 8.1.6 → fixed version 8.1.6
symfony/yaml (composer): affected >= 2.0.0, < 5.4.54 → fixed version 5.4.54
symfony/yaml (composer): affected >= 6.0.0, < 6.4.45 → fixed version 6.4.45
symfony/yaml (composer): affected >= 7.0.0, < 7.4.18 → fixed version 7.4.18
symfony/yaml (composer): affected >= 8.0.0, < 8.1.6 → fixed version 8.1.6

GHSA-r925-mgvr-h9cc

Symfony: ReDoS in HeaderUtils::split() Reachable Through the Cache-Control Request Header

symfony/http-foundation (composer): affected >= 6.0.1, < 6.4.46 → fixed version 6.4.46
symfony/http-foundation (composer): affected >= 7.0.0, < 7.4.19 → fixed version 7.4.19
symfony/http-foundation (composer): affected >= 8.0.0, < 8.1.7 → fixed version 8.1.7
symfony/symfony (composer): affected >= 6.0.1, < 6.4.46 → fixed version 6.4.46
symfony/symfony (composer): affected >= 7.0.0, < 7.4.19 → fixed version 7.4.19
symfony/symfony (composer): affected >= 8.0.0, < 8.1.7 → fixed version 8.1.7
symfony/http-foundation (composer): affected >= 4.1.0, < 5.4.54 → fixed version 5.4.54
symfony/symfony (composer): affected >= 4.1.0, < 5.4.54 → fixed version 5.4.54

GHSA-2v3c-qxhr-7vpv / GHSA-r925-mgvr-h9cc

GHSA published:2026-10-27T19:01:30Z to 2026-10-27T19:01:30Z / prior context; prose not revalidated in this review / Text not revalidated in this update · Publication or update confirmed

go-jose: check published advisories and fix scope

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (1 entry)

GHSA-mgcc-cww5-fp2q

Go JOSE: DoS when parsing JWKs that contain RSA keys

github.com/go-jose/go-jose/v4 (go): affected <= 4.1.5 → fixed version 4.1.6
github.com/go-jose/go-jose/v3 (go): affected <= 3.0.5 → fixed version No fixed version listed

GHSA-mgcc-cww5-fp2q

GHSA published:2026-10-27T19:00:50Z to 2026-10-27T19:00:50Z / prior context; prose not revalidated in this review / Text not revalidated in this update · Publication or update confirmed

terraform-provider-ctfd: verify published advisories and fix scope.

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (1 entry)

GHSA-vg84-c5mg-76xh

CTFer.io's CTFd Terraform Provider allows a local or remote attacker to read team passwords in state as non sensitive values

github.com/ctfer-io/terraform-provider-ctfd (go): affected >= 0.1.5, <= 1.1.0 → fixed version No fixed version listed
github.com/ctfer-io/terraform-provider-ctfd/v2 (go): affected < 2.8.2 → fixed version 2.8.2

GHSA-vg84-c5mg-76xh

GHSA published:2026-10-27T17:08:41Z to 2026-10-27T17:08:41Z / prior context; prose not revalidated in this review / Text not revalidated in this update · Publication or update confirmed

hydra: published advisories and fix scope

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (1 entry)

GHSA-wf6j-7hvr-gr93

Hydra legacy target blacklist permits unsafe PyYAML loading

hydra-core (pip): affected >= 1.3.6, < 1.3.8 → fixed version 1.3.8
hydra-core (pip): affected >= 1.4.0.dev9, < 1.4.0rc3 → fixed version 1.4.0rc3

GHSA-wf6j-7hvr-gr93

GHSA published:2026-10-27T16:10:55Z to 2026-10-27T16:10:55Z / prior context; prose not revalidated in this review / Text not revalidated in this update · Publication or update confirmed

qs: published advisories and fix scope

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (1 entry)

GHSA-6pq8-jhm2-2vcw

qs : qs.stringify with arrayFormat 'comma' throws an uncaught TypeError on array elements carrying a non-callable own toString (DoS)

qs (npm): affected >= 6.7.0, <= 6.16.0 → fixed version 6.16.1

GHSA-6pq8-jhm2-2vcw

GHSA published:2026-10-27T14:50:18Z to 2026-10-27T16:09:22Z / prior context; prose not revalidated in this review / Text not revalidated in this update · Publication or update confirmed

Authlib: validation boundaries for signatures, nonce, audience, and more.

Includes empty signatures, empty HMAC keys, algorithm confusion, and request_uri SSRF. 1.9.0 alone does not fully fix the empty HMAC key issue. This material alone does not establish the number of actual victims or incidents.

What to checkCheck 1.9.1 or later. Verify issuer/audience/nonce/allowed algorithms and key settings, and restrict request_uri retrieval destinations.

By advisory: affected and fixed versions (8 advisories)

GHSA-8m4g-j4wp-wgcg

Authlib accepts an empty HMAC key, allowing JWS/JWT signature forgery (HS256/HS384/HS512)

Authlib (pip): affected < 1.9.1 → fixed version 1.9.1

GHSA-x4rv-c3wx-4cr8

Authlib: Unvalidated request_uri fetch in JWT-secured authorization request (JAR) leading to SSRF

authlib (pip): affected >= 1.6.0, < 1.9.0 → fixed version 1.9.0

GHSA-c5mf-xmp2-59rc

Authlib: ID token can disable its own nonce validation via the nonce_supported claim

authlib (pip): affected <= 1.8.0 → fixed version 1.9.0

GHSA-fch4-3c6x-j4gc

Authlib: Default JWT bearer grant accepts assertions for the wrong audience

authlib (pip): affected < 1.9.0 → fixed version 1.9.0

GHSA-q686-2qmg-hqc7

Authlib: OpenID implicit grant checks raw scope instead of allowed scope before issuing ID tokens

authlib (pip): affected < 1.9.0 → fixed version 1.9.0

GHSA-7vr2-2fgp-9w7p

Authlib incomplete algorithm-confusion fix permits HMAC forgery with prefixed public keys

authlib (pip): affected >= 1.3.1, <= 1.8.0 → fixed version 1.9.0

GHSA-jj7h-c3hg-m23x

Authlib: is_secure_transport() loopback exemption can be bypassed with a userinfo component, allowing cleartext-HTTP URLs to non-loopback hosts

authlib (pip): affected <= 1.7.2 → fixed version 1.8.0

GHSA-6v38-4h7w-rj9h

Authlib: empty signatures validation in JWS JSON deserialization

authlib (pip): affected <= 1.8.0 → fixed version 1.9.0

GHSA-8m4g-j4wp-wgcg / GHSA-x4rv-c3wx-4cr8 / GHSA-c5mf-xmp2-59rc / GHSA-fch4-3c6x-j4gc / GHSA-q686-2qmg-hqc7 / GHSA-7vr2-2fgp-9w7p / GHSA-jj7h-c3hg-m23x / GHSA-6v38-4h7w-rj9h

GHSA published:2026-10-27T16:08:36Z to 2026-10-27T16:08:59Z / prior context; prose not revalidated in this review / Text not revalidated in this update · Publication or update confirmed

rustls: TLS secrets, ECH, and compression processing.

Distinguish secrets in Debug output, buffers on ECH rejection, key exchange state, and allocations for Brotli certificate decompression. This material alone does not establish the number of actual victims or incidents.

What to checkUpdate the stable branch to 0.23.46 and inspect Debug logs containing secrets. The 0.24 development branch is dev.2.

By advisory: affected and fixed versions (4 entries)

GHSA-vp88-798v-h67f

rustls: ECH rejection can expose buffered application data to authenticated outer server before `ech_required` alert

rustls (rust): affected >= 0.23.44, < 0.23.46 → fixed version 0.23.46
rustls (rust): affected >= 0.24.0-dev.1, < 0.24.0-dev.2 → fixed version 0.24.0-dev.2

GHSA-w44r-93j7-qv28

rustls: An unauthenticated ServerHello poisons the per-name key-exchange record, so later ClientHellos carry only a classical X25519 share

rustls (rust): affected < 0.23.46 → fixed version 0.23.46
rustls (rust): affected >= 0.24.0-dev.1, < 0.24.0-dev.2 → fixed version 0.24.0-dev.2

GHSA-c8m5-c952-6cm4

Rustls: Session Debug formatting exposes TLS master secrets and resumption PSKs

rustls (rust): affected < 0.23.46 → fixed version 0.23.46
rustls (rust): affected >= 0.24.0-dev.1, < 0.24.0-dev.2 → fixed version 0.24.0-dev.2

GHSA-h2v8-394m-p7vv

Rustls: Brotli certificate decompression can allocate an attacker-controlled amount of memory up to 1 GiB before authentication.

rustls (rust): affected < 0.23.46 → fixed version 0.23.46
rustls (rust): affected >= 0.24.0-dev.1, < 0.24.0-dev.2 → fixed version 0.24.0-dev.2

GHSA-vp88-798v-h67f / GHSA-w44r-93j7-qv28 / GHSA-c8m5-c952-6cm4 / GHSA-h2v8-394m-p7vv

GHSA published:2026-10-27T15:38:22Z to 2026-10-27T15:38:39Z / prior context; prose not revalidated in this review / Text not revalidated in this update · Publication or update confirmed

PhpSpreadsheet: XXE, external-image SSRF, and resource consumption.

Includes XML scanner bypass, repeated ODS rows, and allowlist bypass through image redirects. Affected scope depends on the reader and branch used. This material alone does not establish the number of actual victims or incidents.

What to checkCheck advisory-specific fixed versions such as 5.10.0 / 3.10.8 / 2.4.8 / 2.1.19 / 1.30.7. Isolate untrusted documents and restrict outbound communications.

By advisory: affected and fixed versions (4 entries)

GHSA-2phh-27fw-q4gc

PhpSpreadsheet: SSRF whitelist bypass via unre-validated HTTP redirect in Drawing::setPath external image loading

phpoffice/phpspreadsheet (composer): affected >= 4.0.0, <= 5.9.0 → fixed version 5.10.0
phpoffice/phpspreadsheet (composer): affected >= 3.3.0, <= 3.10.7 → fixed version 3.10.8
phpoffice/phpspreadsheet (composer): affected >= 2.2.0, <= 2.4.7 → fixed version 2.4.8
phpoffice/phpspreadsheet (composer): affected >= 2.0.0, <= 2.1.18 → fixed version 2.1.19
phpoffice/phpspreadsheet (composer): affected <= 1.30.6 → fixed version 1.30.7

GHSA-j2w7-387v-m2rq

PhpSpreadsheet ODS Reader: Unbounded number-rows-repeated → CPU & Memory Exhaustion (DoS)

phpoffice/phpspreadsheet (composer): affected >= 4.0.0, <= 5.9.0 → fixed version 5.10.0
phpoffice/phpspreadsheet (composer): affected >= 3.3.0, <= 3.10.7 → fixed version 3.10.8
phpoffice/phpspreadsheet (composer): affected >= 2.2.0, <= 2.4.7 → fixed version 2.4.8
phpoffice/phpspreadsheet (composer): affected >= 2.0.0, <= 2.1.18 → fixed version 2.1.19
phpoffice/phpspreadsheet (composer): affected <= 1.30.6 → fixed version 1.30.7

GHSA-3x94-m842-937c

PhpSpreadsheet: XmlScanner Bypass via ISO-2022 Escape Sequences Allows XXE and Denial of Service

phpoffice/phpspreadsheet (composer): affected >= 4.0.0, <= 5.9.0 → fixed version 5.10.0
phpoffice/phpspreadsheet (composer): affected >= 3.3.0, <= 3.10.7 → fixed version 3.10.8
phpoffice/phpspreadsheet (composer): affected >= 2.2.0, <= 2.4.7 → fixed version 2.4.8
phpoffice/phpspreadsheet (composer): affected >= 2.0.0, <= 2.1.18 → fixed version 2.1.19
phpoffice/phpspreadsheet (composer): affected <= 1.30.6 → fixed version 1.30.7

GHSA-rxj4-h86g-25gc

PhpSpreadsheet: XmlScanner Bypass via Double-Encoded unentity() TOCTOU Allows XXE and Denial of Service

phpoffice/phpspreadsheet (composer): affected >= 4.0.0, <= 5.9.0 → fixed version 5.10.0
phpoffice/phpspreadsheet (composer): affected >= 3.3.0, <= 3.10.7 → fixed version 3.10.8

GHSA-2phh-27fw-q4gc / GHSA-j2w7-387v-m2rq / GHSA-3x94-m842-937c / GHSA-rxj4-h86g-25gc

GHSA published:2026-10-27T15:38:14Z to 2026-10-27T15:38:14Z / prior context; prose not revalidated in this review / Text not revalidated in this update · Publication or update confirmed

compress: published advisories and fix scope

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (1 entry)

GHSA-fpmh-frq8-7rj8

compress zstd: Panic on two-block frames

github.com/klauspost/compress/zstd (go): affected <= 1.20.1 → fixed version 1.20.2

GHSA-fpmh-frq8-7rj8

GHSA published:2026-10-27T15:37:37Z to 2026-10-27T15:37:37Z / prior context; prose not revalidated in this review / Text not revalidated in this update · Publication or update confirmed

dnspython: verify published advisories and fix scope.

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (1 entry)

GHSA-45c3-73f7-pv4m

dnspython dns.name.from_wire_parser() excessive CPU use

dnspython (pip): affected < 2.9.0 → fixed version 2.9.0

GHSA-45c3-73f7-pv4m

GHSA published:2026-10-27T15:37:24Z to 2026-10-27T15:37:31Z / prior context; prose not revalidated in this review / Text not revalidated in this update · Publication or update confirmed

dd-trace-py: verify published advisories and fix scope.

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (2 advisories)

GHSA-3633-r77q-h3v3

Datadog dd-trace-py: ReDoS in URL query string obfuscation

ddtrace (pip): affected >= 1.5.0, < 3.19.9 → fixed version 3.19.9
ddtrace (pip): affected >= 4.0.0, < 4.15.6 → fixed version 4.15.6

GHSA-p3m5-h5v9-vqj6

Datadog dd-trace-py: IAST instrumentation can lead to application DOS

ddtrace (pip): affected >= 3.13.0, < 4.15.5 → fixed version 4.15.5

GHSA-3633-r77q-h3v3 / GHSA-p3m5-h5v9-vqj6

GHSA published:2026-10-27T15:36:35Z to 2026-10-27T15:36:35Z / prior context; prose not revalidated in this review / Text not revalidated in this update · Publication or update confirmed

mongo-python-driver: check public advisories and fix scope

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (1 entry)

GHSA-98qm-wvgf-w4cf

MongoDB Python Driver: Out-of-bounds read in BSON decoding via a malformed Regex element

pymongo (pip): affected >= 3.9.0, <= 4.18.2 → fixed version 4.18.3

GHSA-98qm-wvgf-w4cf

GHSA published:2026-10-27T14:45:53Z to 2026-10-27T15:36:17Z / prior context; prose not revalidated in this review / Text not revalidated in this update · Publication or update confirmed

vLLM: model revision selection and P2P offloading

Distinguish execution through request mm_processor_kwargs.code_revision from socket exhaustion in a specific P2P secondary tier. Configurations do not all share the same prerequisites. These materials alone do not establish actual victim or incident counts.

What to checkCheck feature conditions in each advisory. Execution issues are fixed in 0.31.0 and P2P issues in 0.32.0. Restrict model retrieval and API access.

By advisory: affected and fixed versions (2 advisories)

GHSA-h3rc-6mm3-gc2m

vLLM: Request-controlled mm_processor_kwargs.code_revision allows remote code execution

vllm (pip): affected >= 0.7.3, < 0.31.0 → fixed version 0.31.0

GHSA-frvg-qw88-hww9

vllm p2p never connected zmq_exhaustion

vllm (pip): affected < 0.32.0 → fixed version 0.32.0

GHSA-h3rc-6mm3-gc2m / GHSA-frvg-qw88-hww9

GHSA published:2026-10-27T15:34:28Z to 2026-10-27T15:34:33Z / prior context; prose not revalidated in this review / Text not revalidated in this update · Publication or update confirmed

harness-sdk: check public advisories and fix scope

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (2 advisories)

GHSA-3w55-933p-8pv5

Strands Agents: Local Privilege Escalation via Symlink Attack in Default Session File Storage

strands-agents (pip): affected < 1.48.0 → fixed version 1.48.0

GHSA-763v-5pjm-fx36

Strands Agents: Default FileSessionManager storage is world-readable on shared systems

strands-agents (pip): affected < 1.48.0 → fixed version 1.48.0

GHSA-3w55-933p-8pv5 / GHSA-763v-5pjm-fx36

GHSA published:2026-10-27T15:33:22Z to 2026-10-27T15:33:42Z / prior context; prose not revalidated in this review / Text not revalidated in this update · Publication or update confirmed

snappy-java: check published advisories and fix scope

3 advisories were confirmed in this GHSA publication window. Consult each developer's materials for prerequisites involving features, inputs, permissions, and other conditions. Registration time is not the initial shipment date or actual attack time. These materials alone do not establish actual victim or incident counts.

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (3 entries)

GHSA-gwq9-9ffj-mvrv

snappy-java: Heap buffer overflow in Snappy.uncompress*Array typed-array methods

org.xerial.snappy:snappy-java (maven): affected <= 1.1.10.8 → fixed version 1.1.10.9

GHSA-xqrx-qh46-34m7

snappy-java: JVM crash from unchecked ranges in Snappy.arrayCopy and SnappyOutputStream.rawWrite

org.xerial.snappy:snappy-java (maven): affected <= 1.1.10.8 → fixed version 1.1.10.9

GHSA-q233-g92q-qxp6

snappy-java: Unbounded memory allocation from attacker-declared uncompressed lengtha

org.xerial.snappy:snappy-java (maven): affected <= 1.1.10.8 → fixed version 1.1.10.9

GHSA-gwq9-9ffj-mvrv / GHSA-xqrx-qh46-34m7 / GHSA-q233-g92q-qxp6

GHSA published:2026-10-27T15:32:45Z to 2026-10-27T15:32:45Z / prior context; prose not revalidated in this review / Text not revalidated in this update · Publication or update confirmed

flexible-graphrag: check published advisories and fix scope

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (1 entry)

GHSA-vqrg-773h-4wxc

Flexible GraphRAG: Cypher/Graph Injection via broken string-escaping in FalkorDB adapter (_escape()) - full graph wipe from ingested-document content

flexible-graphrag (pip): affected >= 0.6.0, < 0.8.2 → fixed version 0.8.2

GHSA-vqrg-773h-4wxc

GHSA published:2026-10-27T15:04:14Z to 2026-10-27T15:32:36Z / prior context; prose not revalidated in this review / Text not revalidated in this update · Publication or update confirmed

LiteLLM: privilege escalation, file reads, and XSS.

These 3 advisories disclose product vulnerabilities. Treat them separately from the distribution-channel compromise incident. Escalation from internal_user to proxy_admin also depends on experimental settings in older branches. This material alone does not establish the number of actual victims or incidents.

What to checkFor privilege escalation, check the applicable release series, including 1.100.4 / 1.101.3 / 1.102.2 / 1.103.1 / 1.104.0rc2. The temporary EXPERIMENTAL_UI_LOGIN=false setting also disables CLI SSO and related features.

By advisory: affected and fixed versions (3 entries)

GHSA-g5ff-637f-6q2m

LiteLLM: internal_user_viewer arbitrary local file read via `vertex_ai_credentials`

litellm (pip): affected < 1.95.0 → fixed version 1.95.0

GHSA-hhww-mrg2-969h

LiteLLM vulnerable to reflected XSS in /sso/debug/callback

litellm (pip): affected >= 1.65.5, < 1.85.0 → fixed version 1.85.0

GHSA-7hp6-4w63-5g45

LiteLLM: Privilege Escalation to Proxy Admin via Cross-Domain Reuse of the Salt Key

litellm (pip): affected >= 1.91.0, < 1.100.4 → fixed version 1.100.4
litellm (pip): affected >= 1.101.0, < 1.101.3 → fixed version 1.101.3
litellm (pip): affected >= 1.102.0, < 1.102.2 → fixed version 1.102.2
litellm (pip): affected >= 1.103.0, < 1.103.1 → fixed version 1.103.1
litellm (pip): affected >= 1.104.0rc1, < 1.104.0rc2 → fixed version 1.104.0rc2

GHSA-g5ff-637f-6q2m / GHSA-hhww-mrg2-969h / GHSA-7hp6-4w63-5g45

GHSA published:2026-10-27T14:49:53Z to 2026-10-27T15:32:25Z / prior context; prose not revalidated in this review / Text not revalidated in this update · Publication or update confirmed

Better Auth: OAuth state and proxy account boundaries

Includes OAuth Proxy, reuse of state for MagicLink, DB adapter rate limiting, and insufficient display of arbitrary device authorization. The device issue requires conditions such as an opt-in feature and user approval. This material alone does not establish the number of people or incidents actually affected.

What to checkCheck better-auth1.7.7 and the adapter in use. For device authorization, display the requesting client and permissions based on server-validated information.

By advisory: affected and fixed versions (4 entries)

GHSA-44jh-23m7-hpcf

@better-auth/drizzle-adapter: Concurrent requests can exceed rate limits on PostgreSQL

@better-auth/drizzle-adapter (npm): affected >= 1.6.17, < 1.7.7 → fixed version 1.7.7
@better-auth/kysely-adapter (npm): affected >= 1.6.17, < 1.7.0 → fixed version 1.7.0
better-auth (npm): affected >= 1.6.17, < 1.7.7 → fixed version 1.7.7

GHSA-r4xp-prcw-77qf

better-auth: OAuth Proxy lets an attacker sign in as another user

better-auth (npm): affected >= 1.5.0-beta.12, < 1.7.7 → fixed version 1.7.7

GHSA-965c-763c-88jm

better-auth: OAuth state can be used as a Magic Link to sign in as another user

better-auth (npm): affected >= 1.4.0-beta.18, < 1.7.7 → fixed version 1.7.7

GHSA-q84f-53jg-9ppm

better-auth: Device login approval does not show the requesting client or permissions

better-auth (npm): affected >= 1.3.8-beta.3, < 1.7.0-rc.3 → fixed version 1.7.0-rc.3

GHSA-44jh-23m7-hpcf / GHSA-r4xp-prcw-77qf / GHSA-965c-763c-88jm / GHSA-q84f-53jg-9ppm

GHSA published:2026-10-27T15:26:24Z to 2026-10-27T15:28:03Z / prior context; prose not revalidated in this review / Text not revalidated in this update · Publication or update confirmed

GitPython: boundaries around untrusted repositories, refspecs, and submodules

6 advisories include file reads through branch names, submodule symlinks, unsafe pull options, and environment variable exposure. Exploit conditions vary, including normal Git transport restrictions. This material alone does not establish the number of actual victims or incidents.

What to checkUpdate to 3.2.0. Do not process untrusted repositories in CI environments containing secrets. Isolate them when necessary and inspect already exposed logs and credentials.

By advisory: affected and fixed versions (6 entries)

GHSA-23mf-xhv8-69c2

GitPython: arbitrary file read via attacker-controlled branch name in `Head.checkout()` (incomplete fix of CVE-2026-78679)

GitPython (pip): affected <= 3.1.62 → fixed version 3.2.0

GHSA-gq48-pqfc-9p58

GitPython: Submodule.move() follows an attacker-committed intermediate symlink outside the worktree

GitPython (pip): affected < 3.2.0 → fixed version 3.2.0

GHSA-f9j4-qggq-h239

GitPython Remote.pull() refspec bypasses the --upload-pack unsafe-option guard, enabling arbitrary command execution

GitPython (pip): affected >= 3.1.30, < 3.2.0 → fixed version 3.2.0

GHSA-w8jc-g24h-crhw

GitPython command wrappers omit unsafe protocol and option checks

GitPython (pip): affected <= 3.1.62 → fixed version 3.2.0

GHSA-fx3j-rwgx-fr94

GitPython: separate_git_dir leaks env vars via crafted .gitmodules submodule name

GitPython (pip): affected <= 3.1.62 → fixed version 3.2.0

GHSA-m64x-33q8-m5h7

GitPython parse_actor_and_date() is vulnerable to quadratic backtracking on malformed identity lines

GitPython (pip): affected <= 3.1.62 → fixed version 3.2.0

GHSA-23mf-xhv8-69c2 / GHSA-gq48-pqfc-9p58 / GHSA-f9j4-qggq-h239 / GHSA-w8jc-g24h-crhw / GHSA-fx3j-rwgx-fr94 / GHSA-m64x-33q8-m5h7

GHSA published:2026-10-27T15:04:33Z to 2026-10-27T15:04:39Z / prior context; prose not revalidated in this review / Text not revalidated in this update · Publication or update confirmed

nodemailer: check public advisories and fix scope

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (3 entries)

GHSA-4ffr-jq9g-5ffx

Nodemailer: Quadratic backtracking in SMTP AUTH mechanism detection regexes allows pre-auth remote denial of service

nodemailer (npm): affected >= 3.0.0, <= 10.0.12 → fixed version 10.0.13

GHSA-g73g-hqqh-jr95

Nodemailer: RFC 5322 comment inside an angle-bracket address is never stripped

nodemailer (npm): affected >= 3.0.0, <= 10.0.12 → fixed version 10.0.13

GHSA-4g23-2xm8-66gc

Nodemailer: Quadratic (O(n^2)) SMTP client reply parsing lets a malicious server or MITM cause a pre-auth remote denial of service

nodemailer (npm): affected >= 3.0.0, <= 10.0.9 → fixed version 10.0.10

GHSA-4ffr-jq9g-5ffx / GHSA-g73g-hqqh-jr95 / GHSA-4g23-2xm8-66gc

GHSA published:2026-10-27T15:04:07Z to 2026-10-27T15:04:07Z / prior context; prose not revalidated in this review / Text not revalidated in this update · Publication or update confirmed

msgpack-python: check published advisories and fix scope

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (1 entry)

GHSA-j586-36cw-2gc2

MessagePack: Unbounded memory leak in msgpack C extension on strict_map_key validation failure

msgpack (pip): affected < 1.2.3 → fixed version 1.2.3

GHSA-j586-36cw-2gc2

GHSA published:2026-10-27T14:50:30Z to 2026-10-27T14:50:30Z / prior context; prose not revalidated in this review / Text not revalidated in this update · Publication or update confirmed

nltk: published advisories and fix scope

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (1 entry)

GHSA-j456-xh4h-cpf2

NLTK: WekaClassifier passes an unvalidated caller-controlled model path to the weka JVM, bypassing nltk.pathsec containment

nltk (pip): affected <= 3.10.3 → fixed version 3.10.4

GHSA-j456-xh4h-cpf2

GHSA published:2026-10-27T14:46:51Z to 2026-10-27T14:46:51Z / prior context; prose not revalidated in this review / Text not revalidated in this update · Publication or update confirmed

pylint: check public advisories and fix scope

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (1 entry)

GHSA-22qq-2fwx-7p67

Pylint: Arbitrary code execution via pickle deserialization of the stats cache in PYLINT_HOME

pylint (pip): affected < 4.0.9 → fixed version 4.0.9

GHSA-22qq-2fwx-7p67

GHSA published:2026-10-27T14:46:43Z to 2026-10-27T14:46:43Z / prior context; prose not revalidated in this review / Text not revalidated in this update · Publication or update confirmed

Satori: insufficient escaping in generated SVG

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (1 entry)

GHSA-wx4j-mvgx-mqwp

Satori-generated SVG has improper escaping

satori (npm): affected >= 0.0.27, < 0.33.5 → fixed version 0.33.5

GHSA-wx4j-mvgx-mqwp

GHSA published:2026-10-27T14:45:36Z to 2026-10-27T14:45:36Z / prior context; prose not revalidated in this review / Text not revalidated in this update · Publication or update confirmed

rembg: published advisories and fix scope

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (1 entry)

GHSA-qr6x-7v33-6qmg

Rembg: Unauthenticated SAM model injection permits local-file disclosure through malicious ONNX graphs

rembg (pip): affected < 2.0.82 → fixed version 2.0.82

GHSA-qr6x-7v33-6qmg

GHSA published:2026-10-27T14:45:29Z to 2026-10-27T14:45:29Z / prior context; prose not revalidated in this review / Text not revalidated in this update · Publication or update confirmed

twisted: check published advisories and fix scope

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (1 entry)

GHSA-jj36-9pvh-vj5r

Twisted: DNS Response Spoofing in twisted.names Due to Missing Source Address Validation

Twisted (pip): affected <= 26.4.0 → fixed version 26.10.0rc1

GHSA-jj36-9pvh-vj5r

GHSA published:2026-10-27T14:44:19Z to 2026-10-27T14:44:19Z / prior context; prose not revalidated in this review / Text not revalidated in this update · Publication or update confirmed

Ghost: check published advisories and fix scope

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (1 entry)

GHSA-qrh6-cwg3-343x

Ghost: Authorization Bypass in Comment Like Feature

ghost (npm): affected >= 5.9.0, < 6.44.1 → fixed version 6.44.1

GHSA-qrh6-cwg3-343x

GHSA published:2026-10-27T14:43:57Z to 2026-10-27T14:43:57Z / prior context; prose not revalidated in this review / Text not revalidated in this update · Publication or update confirmed

siyuan: published advisories and fix scope

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (1 entry)

GHSA-c8r8-95hg-mp34

SiYuan: MCP file tool's blocklist is incomplete relative to the HTTP file API it claims to align with, exposing publish-mode passwords and other sensitive workspace files

github.com/siyuan-note/siyuan/kernel (go): affected < 0.0.0-20260808051406-3542530c505f → fixed version 0.0.0-20260808051406-3542530c505f

GHSA-c8r8-95hg-mp34

GHSA published:2026-10-27T14:43:16Z to 2026-10-27T14:43:19Z / prior context; prose not revalidated in this review / Text not revalidated in this update · Publication or update confirmed

fpdf2: published advisories and fix scope

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (2 advisories)

GHSA-wqw6-wpr3-45rh

fpdf2: Exponential SVG '<use>' expansion causes CPU and memory exhaustion in 'FPDF.image()'

fpdf2 (pip): affected >= 2.5.0, < 2.8.8 → fixed version 2.8.8

GHSA-rw7v-4hrq-x6r9

fpdf2 implicitly loads external URLs and local image paths when rendering attacker-controlled content

fpdf2 (pip): affected <= 2.8.7 → fixed version 2.8.8

GHSA-wqw6-wpr3-45rh / GHSA-rw7v-4hrq-x6r9

GHSA published:2026-10-27T14:27:53Z to 2026-10-27T14:27:53Z / prior context; prose not revalidated in this review / Text not revalidated in this update · Publication or update confirmed

guava: published advisories and fix scope

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (1 entry)

GHSA-xxph-c9ww-hj94

Google Guava: CompactHashMap/CompactHashSet/MapMakerInternalMap deserialization triggers uncontrolled memory allocation

com.google.guava:guava (maven): affected >= 4.0, <= 33.7.1 → fixed version 33.7.2

GHSA-xxph-c9ww-hj94

GHSA published:2026-10-27T13:30:41Z to 2026-10-27T13:30:41Z / prior context; prose not revalidated in this review / Text not revalidated in this update · Publication or update confirmed

agno: published advisories and fix scope

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (1 entry)

GHSA-m4w4-3r8h-jw98

Agno: Arbitrary code execution via `eval()` on `field_type` in `FunctionCall`

agno (pip): affected < 2.3.24 → fixed version 2.3.24

GHSA-m4w4-3r8h-jw98

GHSA published:2026-10-27T13:30:17Z to 2026-10-27T13:30:17Z / prior context; prose not revalidated in this review / Text not revalidated in this update · Publication or update confirmed

oauthlib: check public advisories and fix scope

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (1 entry)

GHSA-3jp2-3mrg-2vxc

OAuthLib: Bearer token can be retrieved as long as client knows a valid client ID for device workflow

oauthlib (pip): affected >= 3.3.0, < 4.0.0 → fixed version 4.0.0

GHSA-3jp2-3mrg-2vxc

GHSA published:2026-10-27T13:30:10Z to 2026-10-27T13:30:10Z / prior context; prose not revalidated in this review / Text not revalidated in this update · Publication or update confirmed

MONAI: check published advisories and fix scope

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (1 entry)

GHSA-6hp3-vr39-rqw8

MONAILabel Server Crash and Silent Inference Corruption via Crafted DICOM (pydicom DS/IS Validation Bypass)

monai (pip): affected < 1.6.1 → fixed version 1.6.1

GHSA-6hp3-vr39-rqw8

GHSA published:2026-10-27T13:29:57Z to 2026-10-27T13:29:57Z / prior context; prose not revalidated in this review / Text not revalidated in this update · Publication or update confirmed

dcmjs: published advisories and fix scope

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (1 entry)

GHSA-px68-xx5g-48q5

dcmjs: DS/IS VALUE REPRESENTATION INPUT VALIDATION BYPASS

dcmjs (npm): affected < 0.52.0 → fixed version 0.52.0

GHSA-px68-xx5g-48q5

GHSA published:2026-10-27T13:29:47Z to 2026-10-27T13:29:47Z / prior context; prose not revalidated in this review / Text not revalidated in this update · Publication or update confirmed

wails: published advisories and fix scope

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (1 entry)

GHSA-47hv-j4px-h3c9

Wails: wildcardPatternToRegex allows Origin bypass via suffix match in BindingsAllowedOrigins

github.com/wailsapp/wails/v2 (go): affected >= 2.0.0, < 2.13.0 → fixed version 2.13.0

GHSA-47hv-j4px-h3c9

GHSA published:2026-10-27T13:29:25Z to 2026-10-27T13:29:25Z / prior context; prose not revalidated in this review / Text not revalidated in this update · Publication or update confirmed

dolibarr: check published advisories and fix scope

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (1 entry)

GHSA-v5fq-cf5m-vwv7

Dolibarr has SQL Injection in societe/class/societe.class.php via localtax1_value parameter

dolibarr/dolibarr (composer): affected <= 23.0.0 → fixed version No fixed version listed

GHSA-v5fq-cf5m-vwv7

GHSA published:2026-10-27T13:27:58Z to 2026-10-27T13:27:58Z / prior context; prose not revalidated in this review / Text not revalidated in this update · Publication or update confirmed

ajenti: check published advisories and fix scope

What to checkCheck the affected scope and fixed versions for each advisory below. Do not consider series without listed fixed versions patched; check developer migration and interim measures.

By advisory: affected and fixed versions (1 entry)

GHSA-vcw3-r3fx-j444

Ajenti has potential Remote Code Execution

aj (pip): affected < 2.2.13 → fixed version 2.2.13

GHSA-vcw3-r3fx-j444

Updated 10/27 23:30 JST / prior context; prose not revalidated in this review / Text not revalidated in this update · Publication or update confirmed

ConnectWise: phased recovery preparation complete; third-party validation pending

The update on the 27th at 14:30 UTC says preparations for phased recovery are complete and required third-party validation is pending. It does not announce the start of restore access or full recovery. The recovery of Axcient Legacy Portal on the 22nd is a separate PHP mitigation matter.

What to checkKeep affected connections disabled and await individual resumption guidance. Do not generalize the statement that there are no signs of compromise of encrypted backup archives into a claim that every Microsoft365 tenant is uncompromised.

ConnectWise official statement

Continued review of the 10/26 bulletin and 10/27 tag / prior context; prose not revalidated in this review / Text not revalidated in this update · Publication or update confirmed

Tailscale: minimum fixed version 1.104.4 for 4 official advisories

TS-2026-014–017 concern SSH Unix socket forwarding, SSH memory DoS, Serve Unix backends, and HTTP/2 capability confusion. The official bulletin specifies at least 1.104.4. A timing gap in changelog updates remains. Do not equate this with fixes for all 11 Tailworm items.

What to checkVerify 1.104.4 or later on production clients and check SSH/Serve usage conditions. To temporarily disable SSH forwarding, set TS_SSH_DISABLE_FORWARDING=1 and restart the daemon. Do not include headscale or experimental connectors in the same fix scope.

Official Security Bulletins / Official v1.104.4 / Conditions in the researcher report

Revised 10/27 23:45 JST / prior context; prose not revalidated in this review / Text not revalidated in this update · Publication or update confirmed

Fireblocks mpc-lib: still no fix after assessment revision.

CERT VU701544 was revised on the 27th at 14:45 UTC. Descendant shares and chain codes may permit access to ancestor/root shares of the same MPC party, but this is not equivalent to obtaining a complete transfer key exceeding the threshold. Actual theft, amounts, and affected customer counts have not been disclosed.

What to checkTreat the fix as unavailable, protect chain codes as secrets, and investigate the entire hierarchy. Do not reuse Agent2.4.4 / SDK2.19.1 from the separate eMudhra incident as fixed versions for this vulnerability.

CERT VU701544

10/27 official update / prior context; prose not revalidated in this review / Text not revalidated in this update · Publication or update confirmed

Fortinet FIPS: 7.4 remediation build and inconsistent 7.2 notation

The technical article dated the 27 announces availability of FIPS hardening builds. For 7.4, this is FIPS-CC-74-15 b9481. For 7.2, b9883 in the text differs from b9893 in the download path. Extended support for 7.0FIPS has ended, with no build planned this time.

What to checkMatch models and builds against official ReadMe files and support downloads. Do not automatically apply an ambiguous 7.2 number. Do not reuse the GA hardening table as individual minimum fixed versions for an unretrieved PSIRT advisory.

Fortinet technical article / Official hardening guidance

Continuing response to the 10/21 incident and 10/23 analysis / prior context; prose not revalidated in this review / Text not revalidated in this update · Publication or update confirmed

LiteLLM: revoke keys and rebuild environments after distribution-path compromise.

Actual distribution of malicious 1.107.0 and containers was confirmed in the 10/21 incident. The attack-chain report on the 23rd explains the path from an unrevoked master key to publisher tokens and other access. Do not reuse victim counts from the separate March (month 3) incident here.

What to checkCheck installation and execution paths during the affected period. Before simply updating pip packages, isolate and rebuild the environment and revoke/replace keys that were reachable. Product GHSA fixed versions in this window are separate from post-compromise safety checks.

Official 10/21 incident report / Official attack-chain analysis

Current GHSA publication window / malware classification / prior context; prose not revalidated in this review / Text not revalidated in this update · Publication or update confirmed

Malicious packages: separately check 27 GHSA malware-category advisories

Includes trajmetrics0.5.3, numprint1.2.0, and @azure-growth/signup-ux-components1.2.2/1.2.3. Ranges below are as specified in GitHub advisories. Do not infer that all legitimate packages with similar names were compromised. Do not count 27 advisories as 27 newly affected organizations.

What to checkCompare lockfiles and SBOMs with retrieval caches; do not verify suspicious artifacts by executing them. If installed or executed, isolate and rebuild the environment and revoke credentials that were reachable. Do not interpret an unspecified fixed version as meaning a safe version exists or that upgrading alone resolves the issue.

By advisory: affected and fixed versions (27 advisories)

GHSA-rm9p-x4m7-hxmp

Malicious code in trajmetrics (PyPI)

trajmetrics (pip): affected = 0.5.3 → fixed version No fixed version listed

GHSA-vc33-3x34-x6jm

Malware in glyphmatrix-fixture

glyphmatrix-fixture (npm): affected = 1.0.0 → fixed version No fixed version listed
glyphmatrix-fixture (npm): affected = 1.0.1 → fixed version No fixed version listed

GHSA-ph3g-jrf5-8792

Malware in csec-form-validatorr

csec-form-validatorr (npm): affected >= 0 → fixed version No fixed version listed

GHSA-h5wr-j55v-8m79

Malware in ccsseecc-form-validator

ccsseecc-form-validator (npm): affected >= 0 → fixed version No fixed version listed

GHSA-v9xw-mxj4-fm5q

Malware in ccsseecc-crypto-toolkit

ccsseecc-crypto-toolkit (npm): affected >= 0 → fixed version No fixed version listed

GHSA-2732-c6cp-rx5v

Malware in ccsec-crypto-toolkit

ccsec-crypto-toolkit (npm): affected >= 0 → fixed version No fixed version listed

GHSA-r889-j2qv-2jv6

Malware in ccsec-form-validator

ccsec-form-validator (npm): affected >= 0 → fixed version No fixed version listed

GHSA-v383-2358-576w

Malware in csec-crypto-toolkit

csec-crypto-toolkit (npm): affected >= 0 → fixed version No fixed version listed

GHSA-wh86-6qm8-xgw2

Malware in csec-form-validator

csec-form-validator (npm): affected >= 0 → fixed version No fixed version listed

GHSA-7p7m-8jmq-qp93

Malware in agentenact

agentenact (npm): affected = 0.2.0 → fixed version No fixed version listed

GHSA-84fw-gj66-p5v3

Malware in dsh-vm-tester

dsh-vm-tester (npm): affected = 0.1.4 → fixed version No fixed version listed
dsh-vm-tester (npm): affected = 0.1.2 → fixed version No fixed version listed
dsh-vm-tester (npm): affected = 0.1.3 → fixed version No fixed version listed

GHSA-g9fj-q87h-6h4c

Malicious code in numprint (PyPI)

numprint (pip): affected = 1.2.0 → fixed version No fixed version listed

GHSA-r9qx-xcg2-7wcc

Malware in 6161test1234

6161test1234 (npm): affected >= 0 → fixed version No fixed version listed

GHSA-r77r-rw3m-rjh5

Malware in adyen-web-v6

adyen-web-v6 (npm): affected >= 0 → fixed version No fixed version listed

GHSA-6crh-vwr2-4qfp

Malware in buttoncontent

buttoncontent (npm): affected >= 0 → fixed version No fixed version listed

GHSA-wmfr-2pvv-wmf3

Malware in @tableau__catalog-messages/database_lower

@tableau__catalog-messages/database_lower (npm): affected >= 0 → fixed version No fixed version listed

GHSA-wfcx-722r-fg5h

Malware in string-target-mapper-hash

string-target-mapper-hash (npm): affected >= 0 → fixed version No fixed version listed

GHSA-hc8w-gq4q-fr74

Malware in @flexmr/survey-conversation

@flexmr/survey-conversation (npm): affected >= 0 → fixed version No fixed version listed

GHSA-hpc9-fxqh-hhf8

Malware in @flexmr/utils

@flexmr/utils (npm): affected >= 0 → fixed version No fixed version listed

GHSA-w9mp-cvjp-jfqp

Malware in fetch-hash-cache-atomic

fetch-hash-cache-atomic (npm): affected >= 0 → fixed version No fixed version listed

GHSA-rh7q-f888-q36c

Malware in @flexmr/survey-client

@flexmr/survey-client (npm): affected >= 0 → fixed version No fixed version listed

GHSA-32g3-f74c-pcxq

Malware in macro-kernel-record-reader

macro-kernel-record-reader (npm): affected >= 0 → fixed version No fixed version listed

GHSA-9mgv-25w8-jwhf

Malware in paychex-pdftron

paychex-pdftron (npm): affected >= 0 → fixed version No fixed version listed

GHSA-fxw2-4j5q-6hwg

Malware in sc-announcer

sc-announcer (npm): affected >= 0 → fixed version No fixed version listed

GHSA-hh3m-f424-g8v5

Malware in ccl-global-shopping

ccl-global-shopping (npm): affected >= 0 → fixed version No fixed version listed

GHSA-9gcx-88qx-rxch

Malware in sc-hydrate-carousel-price

sc-hydrate-carousel-price (npm): affected >= 0 → fixed version No fixed version listed

GHSA-m8mp-r4jx-43fw

Malicious code in @azure-growth/signup-ux-components (npm)

@azure-growth/signup-ux-components (npm): affected = 1.2.2 → fixed version No fixed version listed
@azure-growth/signup-ux-components (npm): affected = 1.2.3 → fixed version No fixed version listed

2026-10-29 / review / Text not revalidated in this update · Publication or update confirmed

KEV: Linux privilege escalation and missing ESX logging added

KEV version 2026.10.28 contains 1,762 entries. CVE-2026-46300 describes chaining with the 2 PHP flaws; forensicTriage is Yes and the deadline is 10/31. CVE-2026-41709 concerns actions left unlogged after administrator access, with a deadline of 11/11. Addition dates are not attack start dates; deadlines are requirements for US federal agencies.

What to checkCheck kernel and embedded-product updates, including the running version after restart. Use the ESX vendor response matrix and treat missing logs as an investigation limitation.

CISA KEV

2026-10-29 / review / Text not revalidated in this update · Publication or update confirmed

From PHP to the kernel and identity systems: observed artifacts and uncertainty

Dream’s report dated 10/26 describes artifacts of PHP2Shell chained with CVE-2026-46300 to gain root on 25 servers: 24 firewalls and an additional management server. It reports decrypted LDAP credentials and enumeration, but explicitly cannot determine whether password spraying, backdoor account creation or SAML key extraction succeeded. These are researcher observations without independent victim confirmation; direct evidence of AI code generation is also absent.

What to checkRestrict exposed management interfaces and update. Where compromise is suspected, investigate management servers, LDAP credentials, tunnels and identity logs. Do not infer undisclosed product names or affected versions.

Dream Research / CISA KEV

2026-10-29 / review / Text not revalidated in this update · Publication or update confirmed

So-net: member information and some email passwords exposed

The official 10/27 notice says access on 10/19 was detected on 23 and disclosure established on 24. It separately reports 2,141,986 So-net member records and 443,495 plala (S course) member records. Passwords for member records are distinct from email passwords in some mail services: the latter were exposed and reset on 27. The notice also reports 16 bank-account records and 7 notification records. Do not add these as a count of people.

What to checkReset affected email passwords using the official guidance and change reused passwords elsewhere. Do not infer exposure in other services such as NURO.

Sony Network Communications PDF

2026-10-29 / review / Text not revalidated in this update · Publication or update confirmed

UNM Health: clinical and academic recovery, with a warning about follow-on scams

The official 10/28 update reports fully functional clinical operations and resumed classes and research. Ambulance diversion and interrupted outpatient surgery and appointments on 10/26 remain recorded as real impacts. The institution says some end-user devices were affected without penetration of core systems or servers. Attacker claims of stolen data or payment offers are not confirmed disclosure or compensation.

What to checkUse official hospital channels to check rescheduled appointments. Do not engage with purported attackers or compensation offers.

UNM HSC official update

2026-10-29 / review / Text not revalidated in this update · Publication or update confirmed

Yamaha NWR100: unauthenticated command execution and CONFIG access

CVE-2026-97854 allows unauthenticated OS command execution, scored 9.8 in CVSS v3.1 and 9.3 in v4.0. CVE-2026-109822 concerns unauthenticated access to generated CONFIG files. Rev.26.00.07 and earlier are affected; Rev.26.00.08 is fixed. Potential impact is not a count of actual compromises.

What to checkUpdate firmware. If delayed, restrict devices and source IP addresses allowed to access the Web GUI.

JVN NWR100

2026-10-29 / review / Text not revalidated in this update · Publication or update confirmed

Yamaha Windows products: separate installer and service-path fixes

LAN Monitor installers through Ver.1.9.3 have a DLL-loading issue, fixed in Ver.1.10.1; already installed software itself is unaffected by this installer issue. YMS-VPN8 / YMS-VPN8-CP through Ver.1.04.00 have unquoted service paths, fixed in Ver.1.07.00. The latter requires permission to write to the system drive.

What to checkUse the official fixed releases and avoid running installers beside untrusted DLLs. Review shared Windows access and write permissions.

JVN LAN Monitor / JVN VPN clients

2026-10-29 / review / Text not revalidated in this update · Publication or update confirmed

Struts REST: any-setter requires configuration as well as an update

In Struts 2 versions 7.2.1–7.3.0, @StrutsParameter restrictions do not cover REST @JsonAnySetter members. JVN advises updating to 7.4.0 or later and using struts.rest.anySetter.requireAnnotations=true with @StrutsParameter(allowDynamicKeys = true). Conditions include REST use and any-setter declarations; this does not establish compromise of all Struts applications.

What to checkCheck the update, configuration and annotations together. Work around the issue by avoiding any-setter or validating values in the application before storage.

JVN Struts

2026-10-29 / review / Text not revalidated in this update · Publication or update confirmed

EDK II: distinguish PXE exposure from shipped firmware fixes

The official CVE-2026-97631 advisory describes pre-OS memory corruption by an attacker able to deliver ICMP errors during PXE boot. It identifies master as of 2026-09-14 and still lists Not patched currently. A fix PR does not prove a manufacturer has shipped a corrected BIOS or UEFI release.

What to checkDisable unnecessary network boot and restrict PXE paths. Check firmware releases and deployment with the hardware supplier.

TianoCore advisory

2026-10-28 / 2026-10-29 GHSA publication window / Text not revalidated in this update · Publication or update confirmed

tornado: check advisory-specific conditions and minimum fixes

tornado reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (3 entries)

GHSA-r4j5-9xpp-3985

Tornado: Event loop blocking and excess memory use from chunked bodies with many small chunks

tornado (pip): affected < 6.6 → fixed version 6.6

GHSA-pw9p-v7r6-gx4p

Tornado: Open redirect in RedirectHandler via protocol-relative URLs

tornado (pip): affected < 6.6 → fixed version 6.6

GHSA-pcg2-g6cj-q92c

Tornado: Quadratic CPU usage when parsing HTTP headers with line folding

tornado (pip): affected < 6.6 → fixed version 6.6

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window / Text not revalidated in this update · Publication or update confirmed

crass: check advisory-specific conditions and minimum fixes

crass reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (1 entry)

GHSA-pq4g-8rxf-4g29

Crass: Incorrect tokenization of bad URLs enables CSS sanitizer bypass

crass (rubygems): affected <= 1.0.7 → fixed version 1.0.8

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window / Text not revalidated in this update · Publication or update confirmed

systeminformation: check advisory-specific conditions and minimum fixes

systeminformation reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (3 entries)

GHSA-3f7j-7jwc-fxfj

systeminformation vulnerable to Windows command injection in services() through Unicode quotation marks

systeminformation (npm): affected < 5.33.16 → fixed version 5.33.16

GHSA-4vjg-vx72-qq4g

systeminformation has path traversal in Linux networkStats() that allows symlink-based file disclosure outside /sys/class/net

systeminformation (npm): affected < 5.33.14 → fixed version 5.33.14

GHSA-7648-jmwf-vw7j

systeminformation has prototype pollution in `networkStats()` via the interface name

systeminformation (npm): affected < 5.33.13 → fixed version 5.33.13

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window / Text not revalidated in this update · Publication or update confirmed

@backstage/plugin-catalog-backend: check advisory-specific conditions and minimum fixes

@backstage/plugin-catalog-backend reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (1 entry)

GHSA-w658-mh9p-ww8f

Backstage catalog rules can be bypassed for URL locations using encoded path segments

@backstage/plugin-catalog-backend (npm): affected < 3.9.2 → fixed version 3.9.2
@backstage/plugin-catalog-backend (npm): affected >= 4.0.0, < 4.0.2 → fixed version 4.0.2

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window / Text not revalidated in this update · Publication or update confirmed

electrum: check advisory-specific conditions and minimum fixes

electrum reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (1 entry)

GHSA-6jp4-8v48-cc5v

Electrum: Malicious server can replace a just-broadcast tx and try to trick user into RBF-ing it

electrum (pip): affected < 4.8.3 → fixed version 4.8.3

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window / Text not revalidated in this update · Publication or update confirmed

knative.dev/pkg: check advisory-specific conditions and minimum fixes

knative.dev/pkg reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (1 entry)

GHSA-2hw4-c9m4-f2fj

knative.dev/pkg admission webhooks allow unbounded request-body memory exhaustion

knative.dev/pkg (go): affected < 0.0.0-20260531000007-52dbd5ece63f → fixed version 0.0.0-20260531000007-52dbd5ece63f

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window / Text not revalidated in this update · Publication or update confirmed

@waline/vercel: check advisory-specific conditions and minimum fixes

@waline/vercel reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (1 entry)

GHSA-jf75-q64q-g65r

Waline login accepts a non-string email as a match-all MongoDB query

@waline/vercel (npm): affected <= 1.40.3 → fixed version 1.41.0

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window / Text not revalidated in this update · Publication or update confirmed

seroval: check advisory-specific conditions and minimum fixes

seroval reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

Advisories: affected versions and fixes (5)

GHSA-f86p-h4j2-7qgj

Seroval: Code injection through a typed array's own constructor property

seroval (npm): affected >= 1.6.0, < 1.6.11 → fixed version 1.6.11

GHSA-9wx9-5pv9-3349

Seroval: Script injection through RegExp sources in serialized output

seroval (npm): affected >= 1.5.5, < 1.6.10 → fixed version 1.6.10
seroval (npm): affected < 1.0.0 → fixed version 1.0.0

GHSA-97r2-qh9m-474h

Seroval: fromJSON deserializer trusts node-supplied array length and sequence doneAt (unauthenticated event-loop DoS)

seroval (npm): affected <= 1.6.7 → fixed version 1.6.8

GHSA-wp97-x4hv-qvhp

Seroval `fromJSON`/`fromCrossJSON` denial of service via unvalidated array node length

seroval (npm): affected >= 1.4.1, <= 1.6.7 → fixed version 1.6.8

GHSA-7rv5-mrxv-xcr9

Seroval: Deserialization invokes attacker-chosen callables: AsyncIteratorFactoryInstance calls source.on(listener) without type check

seroval (npm): affected <= 1.6.7 → fixed version 1.6.8

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window / Text not revalidated in this update · Publication or update confirmed

mem0ai: check advisory-specific conditions and minimum fixes

mem0ai reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (1 entry)

GHSA-5324-3w58-qpp2

Mem0: Cross-tenant conversation leak via unescaped delimiter collision in session-scope key (_build_session_scope)

mem0ai (pip): affected < 2.0.18 → fixed version 2.0.18
mem0ai (npm): affected < 3.1.6 → fixed version 3.1.6

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window / Text not revalidated in this update · Publication or update confirmed

onnx: check advisory-specific conditions and minimum fixes

onnx reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (4 entries)

GHSA-6pwm-x34p-fvj2

ONNX: Out-of-bounds read in ConvTranspose shape inference via undersized weight rank

onnx (pip): affected >= 1.2.1, <= 1.21.0 → fixed version 1.22.0

GHSA-q69g-f4f5-v8m7

ONNX: Denial of service via unchecked expansion of packed sub-byte tensors in ONNX Python APIs

onnx (pip): affected <= 1.21.0 → fixed version 1.22.0

GHSA-m4pr-6v3c-6fgr

ONNX: Null Pointer Dereference in ScanInferenceFunction Due to Missing Required Attribute

onnx (pip): affected >= 1.4.0, <= 1.21.0 → fixed version 1.22.0

GHSA-48m4-24cq-37qf

ONNX: Out-of-Bounds Read in RNN/GRU/LSTM Shape Inference (Old Opsets, Missing Rank Check)

onnx (pip): affected <= 1.21.0 → fixed version 1.22.0

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window / Text not revalidated in this update · Publication or update confirmed

vllm: check advisory-specific conditions and minimum fixes

vllm reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (8 advisories)

GHSA-vvpg-rrww-wpmh

vLLM: Permissive default CORS origins allow cross-origin requests to the vLLM HTTP server

vllm (pip): affected < 0.32.0 → fixed version 0.32.0

GHSA-8397-8qf6-f2gm

vLLM: Phi-4 multimodal audio encoder materializes and retains full attention matrices: a single max-length audio OOM-crashes the vLLM engine

vllm (pip): affected < 0.32.0 → fixed version 0.32.0

GHSA-gq5q-89c7-vhvx

vLLM DeepSeek-OCR image processing vulnerable to denial of service

vllm (pip): affected >= 0.11.1, < 0.32.0 → fixed version 0.32.0

GHSA-h3rc-j82p-2c3h

vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCE

vllm (pip): affected < 0.32.0 → fixed version 0.32.0

GHSA-6757-hggm-hp2w

vLLM: Public multimodal SHM handle forgery reaches worker-side `pickle.loads()` with insecure serialization disabled

vllm (pip): affected < 0.32.0 → fixed version 0.32.0

GHSA-q97c-p368-75c4

vLLM: Out-of-vocabulary prompt token id passes input validation and triggers a CUDA device-side assert (engine crash / DoS)

vllm (pip): affected < 0.32.0 → fixed version 0.32.0

GHSA-x567-49g5-p4cf

vLLM: Responses API bypasses trust_request_chat_template for chat_template_kwargs

vllm (pip): affected >= 0.16.0, < 0.32.0 → fixed version 0.32.0

GHSA-542m-9234-8gvf

vLLM: DoS via unbounded chat_template Jinja2 rendering exhausts the renderer thread pool

vllm (pip): affected >= 0.19.0, < 0.32.0 → fixed version 0.32.0

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window / Text not revalidated in this update · Publication or update confirmed

wasmtime: check advisory-specific conditions and minimum fixes

wasmtime reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (1 entry)

GHSA-mghf-wjfp-p5xm

Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction

wasmtime (rust): affected < 36.0.19 → fixed version 36.0.19
wasmtime (rust): affected >= 37.0.0, < 48.0.7 → fixed version 48.0.7
wasmtime (rust): affected >= 49.0.0, < 49.0.4 → fixed version 49.0.4

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window / Text not revalidated in this update · Publication or update confirmed

github.com/go-jose/go-jose/v4: check advisory-specific conditions and minimum fixes

github.com/go-jose/go-jose/v4 reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (2 advisories)

GHSA-vvm8-gf78-28g4

Go JOSE: Panics in JSON parsing

github.com/go-jose/go-jose/v4 (go): affected < 4.1.5 → fixed version 4.1.5
github.com/go-jose/go-jose/v3 (go): affected <= 3.0.5 → fixed version No fixed version listed

GHSA-4w3g-jfj2-cw2q

Go JOSE: Panic during CBC-HMAC processing

github.com/go-jose/go-jose/v4 (go): affected < 4.1.5 → fixed version 4.1.5
github.com/go-jose/go-jose/v3 (go): affected <= 3.0.5 → fixed version No fixed version listed

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window / Text not revalidated in this update · Publication or update confirmed

langgraph-cli: check advisory-specific conditions and minimum fixes

langgraph-cli reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (1 entry)

GHSA-8prr-f582-jqq3

LangGraph CLI prints the registry push token in `langgraph deploy --verbose` output

langgraph-cli (pip): affected >= 0.4.15, <= 0.4.31 → fixed version 0.4.32

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window / Text not revalidated in this update · Publication or update confirmed

graphql-scalars: check advisory-specific conditions and minimum fixes

graphql-scalars reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (1 entry)

GHSA-x8rm-f576-gq67

graphql-scalars PhoneNumber scalar is vulnerable to regular expression denial of service

graphql-scalars (npm): affected <= 2.0.0 → fixed version 2.0.1

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window / Text not revalidated in this update · Publication or update confirmed

autobahn: check advisory-specific conditions and minimum fixes

autobahn reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (1 entry)

GHSA-pjh6-c8mg-3x7m

Autobahn Python: permessage-brotli inflates a whole frame before maxMessagePayloadSize is checked (incomplete fix of GHSA-hxp9-w8x3-p566)

autobahn (pip): affected >= 26.7.1, < 26.10.1 → fixed version 26.10.1

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window / Text not revalidated in this update · Publication or update confirmed

i18next-http-backend: check advisory-specific conditions and minimum fixes

i18next-http-backend reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (2 advisories)

GHSA-3cmx-xjww-583x

i18next-http-backend: Query-parameter injection through & and = in lng when loadPath/addPath puts {{lng}} in the query string

i18next-http-backend (npm): affected < 4.0.4 → fixed version 4.0.4

GHSA-9jhj-wvmw-cfx5

i18next-http-backend: Namespace value starting with / forms a protocol-relative URL when loadPath/addPath places {{ns}} right after a / (bypass of the // check added for GHSA-xvq9-wjp8-hwqf)

i18next-http-backend (npm): affected < 4.0.3 → fixed version 4.0.3

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window / Text not revalidated in this update · Publication or update confirmed

re2js: check advisory-specific conditions and minimum fixes

re2js reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (1 entry)

GHSA-gg6h-894w-4m9c

RE2JS: Quadratic-time denial of service in re2js lookbehind matching

re2js (npm): affected >= 2.2.0, < 2.8.7 → fixed version 2.8.7

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window / Text not revalidated in this update · Publication or update confirmed

zip: check advisory-specific conditions and minimum fixes

zip reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (1 entry)

GHSA-m665-v7pm-7grj

zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite & RCE

zip (rust): affected <= 9.0.4 → fixed version 9.0.5

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window / Text not revalidated in this update · Publication or update confirmed

langgraph-api: check advisory-specific conditions and minimum fixes

langgraph-api reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (1 entry)

GHSA-4hm6-w6qq-w73v

LangGraph JavaScript custom authentication may permit cross-user Store access

langgraph-api (pip): affected >= 0.1.2, < 0.15.0 → fixed version 0.15.0

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window / Text not revalidated in this update · Publication or update confirmed

filelock: check advisory-specific conditions and minimum fixes

filelock reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

Advisories: affected versions and fixes (12)

GHSA-wfhq-q4j2-c37m

filelock: SoftReadWriteLock follows a lock tree swapped in after its first acquire and writes lock records into directories of the user running the lock

filelock (pip): affected >= 4.1.0, <= 4.2.0 → fixed version 4.2.1

GHSA-6627-m3xw-93mp

filelock: StrictSoftFileLock creates its claim directories without the lock mode, so another local user with a write bit on them can end a live hold

filelock (pip): affected >= 3.30.0, <= 4.2.0 → fixed version 4.2.1

GHSA-9c4x-gm8v-wgc4

filelock: StrictSoftFileLock and SoftReadWriteLock adopt a protocol directory another user created first, losing mutual exclusion

filelock (pip): affected >= 3.30.0, <= 4.2.0 → fixed version 4.2.1

GHSA-8mx5-7m5m-r77g

filelock: WindowsFileLock ignores mode: a 0o600 lock file and the ReadWriteLock database inherit the directory ACL

filelock (pip): affected >= 3.10.0, <= 4.2.0 → fixed version 4.2.1

GHSA-cwqr-hh33-gh44

filelock ReadWriteLock: a crafted lock database makes every acquire stall or hang regardless of timeout

filelock (pip): affected >= 3.20.4, <= 4.2.0 → fixed version 4.2.1

GHSA-rfpc-qcw5-3pc4

filelock: SoftFileLock removes a live holder's marker when another user forges the PID in a writable marker

filelock (pip): affected >= 3.22.0, <= 4.2.0 → fixed version 4.2.1

GHSA-9j6q-wvj5-jgjg

filelock: Symlink swap during SoftFileLock's writability check leaks whether a path exists and is writable by the lock taker

filelock (pip): affected >= 3.32.6, <= 4.2.0 → fixed version 4.2.1

GHSA-69hj-f68j-2879

filelock: UnixFileLock truncates and chmods any regular file another user renames or hard-links onto the lock path

filelock (pip): affected <= 4.2.0 → fixed version 4.2.1

GHSA-j8f7-rjxc-mr56

filelock: ReadWriteLock follows a symlink at the lock path into SQLite

filelock (pip): affected >= 3.20.4, <= 4.0.8 → fixed version 4.0.9

GHSA-m462-7rxw-wvpg

filelock: StrictSoftFileLock follows a symbolic link swapped in at <path>.filelock and creates claim files in a directory another local user chooses

filelock (pip): affected >= 3.30.0, <= 4.2.0 → fixed version 4.2.1

GHSA-fj95-fr6c-h845

filelock: SoftReadWriteLock holder refresh writes through a hard link and hangs on a named pipe that another local user renames over its record

filelock (pip): affected >= 4.0.0, <= 4.2.0 → fixed version 4.2.1

GHSA-fq56-3cx3-fjxp

filelock: SoftFileLock stale-lock break removes a live lock file on a reused inode number and admits two holders

filelock (pip): affected >= 3.22.0, <= 4.2.0 → fixed version 4.2.1

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window / Text not revalidated in this update · Publication or update confirmed

io.opentelemetry:opentelemetry-api: check advisory-specific conditions and minimum fixes

io.opentelemetry:opentelemetry-api reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (1 entry)

GHSA-ccrj-gw8r-854m

opentelemetry-java: Quadratic CPU consumption in W3C tracestate parsing

io.opentelemetry:opentelemetry-api (maven): affected <= 1.66.0 → fixed version 1.67.0

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window / Text not revalidated in this update · Publication or update confirmed

happy-dom: check advisory-specific conditions and minimum fixes

happy-dom reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (2 advisories)

GHSA-c8p4-j97h-3vg8

Happy DOM: SSRF via iframe and link stylesheet when parsing untrusted HTML

happy-dom (npm): affected <= 20.14.6 → fixed version 21.0.0

GHSA-5fpq-26gf-qwcr

Happy DOM has cookie scope forgery: no DNS-label boundary on Domain= matching , attacker origin sets victim cookies

happy-dom (npm): affected <= 20.14.5 → fixed version 20.14.6

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window / Text not revalidated in this update · Publication or update confirmed

vue-i18n: check advisory-specific conditions and minimum fixes

vue-i18n reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (2 advisories)

GHSA-8rc2-428q-7ww3

Vue I18n: `escapeParameter` does not escape named values when the same call also passes a list

vue-i18n (npm): affected >= 9.0.0-beta.5, < 11.4.14 → fixed version 11.4.14
vue-i18n (npm): affected >= 12.0.0-alpha.1, < 12.0.0-alpha.5 → fixed version 12.0.0-alpha.5
@intlify/core (npm): affected >= 9.0.0-beta.10, < 11.4.14 → fixed version 11.4.14
@intlify/core (npm): affected >= 12.0.0-alpha.1, < 12.0.0-alpha.5 → fixed version 12.0.0-alpha.5
@intlify/core-base (npm): affected >= 9.0.0-beta.12, < 11.4.14 → fixed version 11.4.14
@intlify/core-base (npm): affected >= 12.0.0-alpha.1, < 12.0.0-alpha.5 → fixed version 12.0.0-alpha.5
petite-vue-i18n (npm): affected >= 9.2.0-alpha.7, < 11.4.14 → fixed version 11.4.14
petite-vue-i18n (npm): affected >= 12.0.0-alpha.1, < 12.0.0-alpha.5 → fixed version 12.0.0-alpha.5
@intlify/vue-i18n-core (npm): affected >= 9.2.0-alpha.7, < 11.4.14 → fixed version 11.4.14
@intlify/vue-i18n-core (npm): affected >= 12.0.0-alpha.1, < 12.0.0-alpha.5 → fixed version 12.0.0-alpha.5

GHSA-83rm-6c8r-g728

Vue I18n: escapeParameter does not prevent XSS through srcdoc in translation messages

vue-i18n (npm): affected = 9.14.5 → fixed version No fixed version listed
vue-i18n (npm): affected = 10.0.8 → fixed version No fixed version listed
vue-i18n (npm): affected >= 11.1.10, < 11.4.14 → fixed version 11.4.14
vue-i18n (npm): affected = 12.0.0-alpha.4 → fixed version 12.0.0-alpha.5
petite-vue-i18n (npm): affected = 9.14.5 → fixed version No fixed version listed
petite-vue-i18n (npm): affected = 10.0.8 → fixed version No fixed version listed
petite-vue-i18n (npm): affected >= 11.1.10, < 11.4.14 → fixed version 11.4.14
petite-vue-i18n (npm): affected = 12.0.0-alpha.4 → fixed version 12.0.0-alpha.5
@intlify/core-base (npm): affected = 9.14.5 → fixed version No fixed version listed
@intlify/core-base (npm): affected = 10.0.8 → fixed version No fixed version listed
@intlify/core-base (npm): affected >= 11.1.10, < 11.4.14 → fixed version 11.4.14
@intlify/core-base (npm): affected = 12.0.0-alpha.4 → fixed version 12.0.0-alpha.5
@intlify/core (npm): affected = 9.14.5 → fixed version No fixed version listed
@intlify/core (npm): affected = 10.0.8 → fixed version No fixed version listed
@intlify/core (npm): affected >= 11.1.10, < 11.4.14 → fixed version 11.4.14
@intlify/core (npm): affected = 12.0.0-alpha.4 → fixed version 12.0.0-alpha.5
@intlify/vue-i18n-core (npm): affected = 9.14.5 → fixed version No fixed version listed
@intlify/vue-i18n-core (npm): affected = 10.0.8 → fixed version No fixed version listed
@intlify/vue-i18n-core (npm): affected >= 11.1.10, < 11.4.14 → fixed version 11.4.14
@intlify/vue-i18n-core (npm): affected = 12.0.0-alpha.4 → fixed version 12.0.0-alpha.5
@intlify/shared (npm): affected = 9.14.5 → fixed version No fixed version listed
@intlify/shared (npm): affected = 10.0.8 → fixed version No fixed version listed
@intlify/shared (npm): affected >= 11.1.10, < 11.4.14 → fixed version 11.4.14
@intlify/shared (npm): affected = 12.0.0-alpha.4 → fixed version 12.0.0-alpha.5

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window / Text not revalidated in this update · Publication or update confirmed

langgraph-sdk: check advisory-specific conditions and minimum fixes

langgraph-sdk reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (1 entry)

GHSA-3fx2-cqw9-xr3c

LangGraph: Unencoded identifiers in LangGraph SDK v3 streaming can redirect authenticated GET requests

langgraph-sdk (pip): affected >= 0.4.0, < 0.4.6 → fixed version 0.4.6
langgraph (pip): affected >= 1.2.3, < 1.2.14 → fixed version 1.2.14

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window / Text not revalidated in this update · Publication or update confirmed

@graphql-tools/executor-legacy-ws: check advisory-specific conditions and minimum fixes

@graphql-tools/executor-legacy-ws reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (2 advisories)

GHSA-434m-5hcj-pxf3

GraphQL Tools: Per-request connection parameters persist into later users' WebSocket authentications

@graphql-tools/executor-legacy-ws (npm): affected <= 1.1.35 → fixed version 1.1.36

GHSA-mp66-8ww2-pcwm

GraphQL Tools: Shared legacy executor routes one subscription's results to a different caller

@graphql-tools/executor-legacy-ws (npm): affected <= 1.1.35 → fixed version 1.1.36

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window / Text not revalidated in this update · Publication or update confirmed

@hono/node-server: check advisory-specific conditions and minimum fixes

@hono/node-server reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (1 entry)

GHSA-rmxm-3fg6-px4f

@hono/node-server: `serveStatic` decodes the request path a second time, leading to bypass of middleware on static paths

@hono/node-server (npm): affected >= 1.19.10, < 2.1.3 → fixed version 2.1.3

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window / Text not revalidated in this update · Publication or update confirmed

github.com/labstack/echo/v5: check advisory-specific conditions and minimum fixes

github.com/labstack/echo/v5 reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

Advisories: affected versions and fixes (10)

GHSA-2ffq-g2xg-c22p

Echo: HTTPS Redirect and HSTS Bypass via Unconditional Trust of Forwarded Scheme Headers

github.com/labstack/echo/v5 (go): affected < 5.4.0 → fixed version 5.4.0
github.com/labstack/echo/v4 (go): affected < 4.16.0 → fixed version 4.16.0

GHSA-3pmx-cf9f-34xr

Echo static file middleware route protection bypass via encoded dot-dot traversal

github.com/labstack/echo/v5 (go): affected < 5.4.0 → fixed version 5.4.0
github.com/labstack/echo/v4 (go): affected < 4.16.0 → fixed version 4.16.0

GHSA-xwq5-6cqp-vx96

Echo has a Static Middleware Double-Unescape Path Traversal

github.com/labstack/echo/v5 (go): affected < 5.2.0 → fixed version 5.2.0
github.com/labstack/echo/v4 (go): affected < 4.15.3 → fixed version 4.15.3

GHSA-v753-g4cw-jm48

Echo has Open Redirect via Control-Character Prefix Defeating sanitizeURI

github.com/labstack/echo/v5 (go): affected < 5.4.0 → fixed version 5.4.0
github.com/labstack/echo/v4 (go): affected < 4.16.0 → fixed version 4.16.0

GHSA-23wf-92cp-8pcj

Echo has Arbitrary Scheme Injection in WWWRedirect/NonWWWRedirect Middlewares via X-Forwarded-Proto

github.com/labstack/echo/v5 (go): affected < 5.1.1 → fixed version 5.1.1
github.com/labstack/echo/v4 (go): affected < 4.15.2 → fixed version 4.15.2

GHSA-375p-5qhx-8wq4

Echo's middleware.Static: `%2F`-encoded path bypasses route/group middleware guarding a statically-served path

github.com/labstack/echo/v5 (go): affected < 5.4.0 → fixed version 5.4.0
github.com/labstack/echo/v4 (go): affected < 4.16.0 → fixed version 4.16.0

GHSA-h9g5-28mm-hx3g

Echo vulnerable to Reflected Cross-Site Scripting (XSS) via unsanitized JSONP callback in Context.JSONP / Context.JSONPBlob

github.com/labstack/echo/v5 (go): affected < 5.4.0 → fixed version 5.4.0
github.com/labstack/echo/v4 (go): affected < 4.16.0 → fixed version 4.16.0

GHSA-246p-cpwv-v3jq

Echo has Rate Limiter Bypass via Spoofed X-Forwarded-For Header in Default Configuration

github.com/labstack/echo/v5 (go): affected < 5.1.0 → fixed version 5.1.0
github.com/labstack/echo/v4 (go): affected >= 4.0.0, <= 4.16.2 → fixed version No fixed version listed

GHSA-r7w9-592q-9vg4

Echo has CSRF Protection Bypass via MethodOverride Rewriting POST to Safe Method

github.com/labstack/echo/v5 (go): affected >= 5.0.0, < 5.4.0 → fixed version 5.4.0
github.com/labstack/echo/v4 (go): affected < 4.16.0 → fixed version 4.16.0

GHSA-99jh-6h7p-pp36

Echo: Reverse Proxy Forwards Attacker-Supplied X-Real-IP to Upstream by Default

github.com/labstack/echo/v5 (go): affected < 5.4.0 → fixed version 5.4.0
github.com/labstack/echo/v4 (go): affected >= 4.0.0, <= 4.16.2 → fixed version No fixed version listed

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window / Text not revalidated in this update · Publication or update confirmed

@highcharts/dashboards: check advisory-specific conditions and minimum fixes

@highcharts/dashboards reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (6 entries)

GHSA-6hgp-fmhr-mrg4

Highcharts Grid: `javascript:` URL in credits.href runs script on click

@highcharts/dashboards (npm): affected >= 3.2.0, <= 3.6.0 → fixed version 4.0.0
@highcharts/grid-pro (npm): affected >= 2.0.0, <= 3.1.0 → fixed version 3.2.0

GHSA-58g7-7f52-h92c

Highcharts Dashboards parses fullscreen labels as HTML

@highcharts/dashboards (npm): affected >= 1.0.0, < 4.2.3 → fixed version 4.2.3

GHSA-rcqf-f6h2-ccg9

Highcharts Dashboards parses sidebar component labels as HTML

@highcharts/dashboards (npm): affected >= 1.0.0, <= 4.2.2 → fixed version 4.2.3

GHSA-grj7-r4jv-pw9j

Highcharts Dashboards: `chartConstructor` is an unchecked lookup into the Highcharts namespace

@highcharts/dashboards (npm): affected >= 1.0.0, <= 4.2.1 → fixed version 4.2.2

GHSA-c75x-9x9h-28rm

Highcharts Dashboards / Grid Pro: `DataTable.setCell` and column writers treat `__proto__` as an existing column.

@highcharts/dashboards (npm): affected >= 1.0.0, <= 4.2.1 → fixed version 4.2.2
@highcharts/grid-pro (npm): affected >= 2.0.0, <= 3.1.0 → fixed version 3.2.0

GHSA-jqgh-w3cc-7jqw

Highcharts Dashboards: `__proto__` data table id writes sync listeners to `Object.prototype`

@highcharts/dashboards (npm): affected >= 1.0.0, <= 4.2.1 → fixed version 4.2.2

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window / Text not revalidated in this update · Publication or update confirmed

@highcharts/grid-lite: check advisory-specific conditions and minimum fixes

@highcharts/grid-lite reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (2 advisories)

GHSA-r5wg-q8fc-p6w2

Highcharts Grid parses pagination language options as HTML

@highcharts/grid-lite (npm): affected >= 2.0.0, <= 3.1.0 → fixed version 3.2.0
@highcharts/grid-pro (npm): affected >= 2.0.0, <= 3.1.0 → fixed version 3.2.0

GHSA-6g3c-p4fg-xv47

Highcharts Grid: custom icon definition objects written with raw `setAttribute` on `<path>`

@highcharts/grid-lite (npm): affected >= 2.3.0, <= 3.1.0 → fixed version 3.2.0
@highcharts/grid-pro (npm): affected >= 2.3.0, <= 3.1.0 → fixed version 3.2.0

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window / Text not revalidated in this update · Publication or update confirmed

highcharts: check advisory-specific conditions and minimum fixes

highcharts reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (6 entries)

GHSA-5793-x2q3-c3q7

Highcharts: `javascript:` URL in credits.href runs script on click

highcharts (npm): affected < 11.4.9 → fixed version 11.4.9
highcharts (npm): affected >= 12.0.0, < 12.6.1 → fixed version 12.6.1
highcharts (npm): affected >= 13.0.0, <= 13.0.2 → fixed version 13.1.0

GHSA-rmqc-xvr3-v46c

Highcharts: dotted series.keys paths write to Object.prototype

highcharts (npm): affected >= 12.0.0, < 12.6.1 → fixed version 12.6.1
highcharts (npm): affected >= 13.0.0, <= 13.0.2 → fixed version 13.1.0
highcharts (npm): affected >= 6.1.0, < 11.4.9 → fixed version 11.4.9

GHSA-gfvx-2c2g-38wq

Highcharts: series column construction writes to Object.prototype

highcharts (npm): affected >= 13.0.0, <= 13.0.2 → fixed version 13.1.0

GHSA-35rr-xwfh-x789

Highcharts Core: `breadcrumbs.style` keys become SVG event-handler attributes

highcharts (npm): affected >= 10.0.0, < 11.4.9 → fixed version 11.4.9
highcharts (npm): affected >= 12.0.0, < 12.6.1 → fixed version 12.6.1
highcharts (npm): affected >= 13.0.0, <= 13.0.2 → fixed version 13.1.0

GHSA-65hg-cf3f-5m39

Highcharts Core: HTML text parsing falls back to unfiltered `innerHTML` during printing

highcharts (npm): affected >= 12.0.0, < 12.6.1 → fixed version 12.6.1
highcharts (npm): affected >= 13.0.0, <= 13.0.2 → fixed version 13.1.0

GHSA-mw4f-gj5x-6xr4

Highcharts Core: `javascript:` URL in an `xlink:href` attribute survives text filtering and reaches exported charts

highcharts (npm): affected >= 10.3.2, < 11.4.9 → fixed version 11.4.9
highcharts (npm): affected >= 12.0.0, < 12.6.2 → fixed version 12.6.2
highcharts (npm): affected >= 13.0.0, <= 13.1.0 → fixed version 13.1.1

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window / Text not revalidated in this update · Publication or update confirmed

@highcharts/grid-pro: check advisory-specific conditions and minimum fixes

@highcharts/grid-pro reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (1 entry)

GHSA-5ghw-9mgr-jvx2

Highcharts Grid Pro: cell-renderer `attributes` map written with raw `setAttribute`

@highcharts/grid-pro (npm): affected >= 2.0.0, <= 3.1.0 → fixed version 3.2.0
@highcharts/dashboards (npm): affected = 3.6.0 → fixed version 4.0.0

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window / Text not revalidated in this update · Publication or update confirmed

mcp-sanitizer: check advisory-specific conditions and minimum fixes

mcp-sanitizer reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (2 advisories)

GHSA-4mfg-r38w-w8fg

mcp-sanitizer: URL sanitizer allows localhost/IPv6 loopback SSRF bypass via explicit port or bracketed IPv6

mcp-sanitizer (npm): affected < 1.4.0 → fixed version 1.4.0

GHSA-7w82-6f9j-v9jp

mcp-sanitizer: File Path Sanitizer Permits Arbitrary User-Home Absolute Paths

mcp-sanitizer (npm): affected < 1.4.0 → fixed version 1.4.0

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window / Text not revalidated in this update · Publication or update confirmed

rucio: check advisory-specific conditions and minimum fixes

rucio reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (1 entry)

GHSA-5j9r-fx4x-rpvg

rucio has an Authorization Bypass on REST API endpoint for signing URLs

rucio (pip): affected >= 1.16.1, < 35.9.0 → fixed version 35.9.0
rucio (pip): affected >= 36.0.0rc1, < 38.6.0 → fixed version 38.6.0
rucio (pip): affected >= 39.0.0rc1, < 41.0.0rc1 → fixed version 41.0.0rc1

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window / Text not revalidated in this update · Publication or update confirmed

MySqlConnector: check advisory-specific conditions and minimum fixes

MySqlConnector reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (1 entry)

GHSA-473q-m89c-ghf8

MySqlConnector: Account password disclosed to a man-in-the-middle in zero-configuration TLS mode (clear-text password sent before certificate is verified)

MySqlConnector (nuget): affected < 2.6.1 → fixed version 2.6.1

GitHub Advisory API

2026-10-28 / 2026-10-29 GHSA publication window / Text not revalidated in this update · Publication or update confirmed

github.com/caddyserver/caddy/v2: check advisory-specific conditions and minimum fixes

github.com/caddyserver/caddy/v2 reviewed advisories published in this window are preserved below. Affected ranges and minimum fixes vary by advisory; missing fixes remain explicit. Reviewed status and technical impact do not establish exploitation or compromise of users.

What to checkMatch installed packages and release lines against the table and verify fixes and configuration conditions. Distinguish availability from deployment.

By advisory: affected and fixed versions (1 entry)

GHSA-8qx7-j2v2-x6q5

Caddy has an RFC 7230 §6.1 compliance issue / Hop-by-hop headers that leak through

github.com/caddyserver/caddy/v2 (go): affected <= 2.11.4 → fixed version 2.11.5

GitHub Advisory API

2026-10-29 / review / Text not revalidated in this update · Publication or update confirmed

Malicious packages: distinguish listing from execution in your environment

Malware-classified advisories are preserved individually. Listing counts are not counts of affected organizations or executions. Where no fix is listed, an ordinary update alone does not establish safety.

What to checkCheck lockfiles, build history and artifacts. If executed, prioritize revoking exposed secrets and investigating the environment.

Advisories: affected versions and fixes (19)

GHSA-fw7x-6chc-4244

Malware in b20miner

b20miner (npm): affected = 0.3.1 → fixed version No fixed version listed

GHSA-ffq4-h5jm-8pqr

Malware in @zaip-ai/cli

@zaip-ai/cli (npm): affected = 6.4.0 → fixed version No fixed version listed
@zaip-ai/cli (npm): affected = 7.2.0 → fixed version No fixed version listed
@zaip-ai/cli (npm): affected = 6.5.0 → fixed version No fixed version listed
@zaip-ai/cli (npm): affected = 7.4.0 → fixed version No fixed version listed
@zaip-ai/cli (npm): affected = 7.1.0 → fixed version No fixed version listed
@zaip-ai/cli (npm): affected = 7.0.0 → fixed version No fixed version listed
@zaip-ai/cli (npm): affected = 7.3.0 → fixed version No fixed version listed

GHSA-9939-65w7-25v2

Malicious code in black-spindle (npm)

black-spindle (npm): affected = 999.0.0 → fixed version No fixed version listed

GHSA-x788-rmcm-4x49

Malware in itsa-utils

itsa-utils (npm): affected = 1.4.2 → fixed version No fixed version listed

GHSA-46r9-rx5f-hqqf

Malware in itsa-react-checkbox

itsa-react-checkbox (npm): affected = 16.0.5 → fixed version No fixed version listed

GHSA-p6gj-69gx-r376

Malware in @walknpm/todo-cli

@walknpm/todo-cli (npm): affected = 2.0.1 → fixed version No fixed version listed

GHSA-hw9g-f63g-4c8x

Malware in dsh-plugin-blender-3d

dsh-plugin-blender-3d (npm): affected = 0.2.1 → fixed version No fixed version listed

GHSA-357r-x5jp-3p8f

Malware in mock-transactions-sdk

mock-transactions-sdk (npm): affected >= 0 → fixed version No fixed version listed

GHSA-23j5-jj88-v9f3

Malware in transaction-info-generate-sdk

transaction-info-generate-sdk (npm): affected >= 0 → fixed version No fixed version listed

GHSA-39q9-338w-8vhv

Malware in my-empty-package

my-empty-package (npm): affected = 1.0.0 → fixed version No fixed version listed

GHSA-2j2p-88v8-7xrm

Malware in camelotlabs-utils

camelotlabs-utils (npm): affected >= 0 → fixed version No fixed version listed

GHSA-4mgg-vrvh-32xg

Malware in camelotlabs-worker

camelotlabs-worker (npm): affected >= 0 → fixed version No fixed version listed

GHSA-wx8x-c4rg-8rg7

Malware in camelotlabs-sdk

camelotlabs-sdk (npm): affected >= 0 → fixed version No fixed version listed

GHSA-7972-958m-rqjg

Malware in camelotlabs-config

camelotlabs-config (npm): affected >= 0 → fixed version No fixed version listed

GHSA-pf82-f9wr-54vx

Malware in camelotlabs-core

camelotlabs-core (npm): affected >= 0 → fixed version No fixed version listed

GHSA-65cr-mcfq-59hh

Malware in @atlisp/mcp

@atlisp/mcp (npm): affected = 1.12.14 → fixed version No fixed version listed

GHSA-4g45-28rv-vq9q

Malicious code in @testsecuiitytestme/cache-helper (npm)

@testsecuiitytestme/cache-helper (npm): affected = 1.0.1 → fixed version No fixed version listed
@testsecuiitytestme/cache-helper (npm): affected = 1.0.2 → fixed version No fixed version listed
@testsecuiitytestme/cache-helper (npm): affected = 1.0.3 → fixed version No fixed version listed

GHSA-mhx4-6f72-5vf7

Malicious code in csvflow-schema (npm)

csvflow-schema (npm): affected = 1.0.0 → fixed version No fixed version listed

GHSA-cmqx-q58q-9m8p

Malicious code in @webapp-shared/login-vmok (npm)

@webapp-shared/login-vmok (npm): affected = 1.0.0 → fixed version No fixed version listed
@webapp-shared/login-vmok (npm): affected = 1.0.1 → fixed version No fixed version listed
@webapp-shared/login-vmok (npm): affected = 1.1.0 → fixed version No fixed version listed
@webapp-shared/login-vmok (npm): affected = 2.0.1 → fixed version No fixed version listed
@webapp-shared/login-vmok (npm): affected = 3.0.0 → fixed version No fixed version listed
@webapp-shared/login-vmok (npm): affected = 99.0.1 → fixed version No fixed version listed

GitHub malware API

2026-10-28 / 2026-10-29 NVD publication window / Text not revalidated in this update · Publication or update confirmed

Dell backup infrastructure: unauthenticated execution and credential exposure

DSA-2026-416 fixes command execution, authentication and other issues. The DD OS Feature line affects 7.7.1.0–8.8.0.0 and is remediated in 8.9.0.0 or later. Fixed LTS versions start at 7.13.1.90, 8.3.1.50 and 8.6.1.30. Protect the backup infrastructure and independently verify recovery copies.

What to checkMatch the device, enabled features and running version, and verify official remediation. Do not present exploitability as observed harm.

Primary advisory / CNA record

2026-10-28 / 2026-10-29 NVD publication window / Text not revalidated in this update · Publication or update confirmed

FUXA: check the Node-RED authorization boundary

Talos reports authorization bypass and arbitrary code execution through /nodered in FUXA 1.3.2-2809. An earlier fix alone does not establish remediation. This review does not establish minimum fixed versions across release lines; prioritize management-interface isolation and supplier guidance.

What to checkMatch the device, enabled features and running version, and verify official remediation. Do not present exploitability as observed harm.

Primary advisory / CNA record

2026-10-28 / 2026-10-29 NVD publication window / Text not revalidated in this update · Publication or update confirmed

Juniper management infrastructure: CNA records and unavailable vendor text

NVD CNA records describe root command execution in Session Smart Conductor and unauthenticated administrator access in Session Smart Router before onboarding. The latter is described as unexploitable after onboarding to Mist/Conductor. The vendor URL returned a Loading shell instead of advisory text, so this review does not establish minimum fixes.

What to checkMatch the device, enabled features and running version, and verify official remediation. Do not present exploitability as observed harm.

Primary advisory / CNA record

2026-10-28 / 2026-10-29 NVD publication window / Text not revalidated in this update · Publication or update confirmed

Sophos UTM: CNA record calls for manual action on an EOL product

The NVD CNA record scores CVE-2026-118633 at CVSS v3.1 9.2 and describes unauthenticated root code execution when repeated attacks win a race while the mail proxy uses scanning. It states UTM is EOL and requires a manual patch. The official advisory timed out; this review has not verified its patch identifier or procedure.

What to checkMatch the device, enabled features and running version, and verify official remediation. Do not present exploitability as observed harm.

Primary advisory / CNA record

Reference: same day, but publication time undetermined · 1 group

This is current content retrieved after the target time. The following information is excluded from confirmed changes before the cutoff.

2026-10-28 / publication time unconfirmed / Text not revalidated in this update · Publication or update confirmed

Silent Train: long-term monitoring of infrastructure serving communications, government and transport

Lumen Black Lotus Labs describes ephemeral relay chains tracked since 2023 and operations targeting management infrastructure. Victim notifications cover multiple years, rather than incidents newly occurring in this review. The report lists communications, government, defense, universities, water, energy and transport among targeted sectors without providing individual outage durations or financial losses.

What to checkReview exposed management interfaces, devices usable as relays and management-network telemetry. Do not rely solely on IP reputation.

Lumen Black Lotus Labs

Collection scope, overlap and limitations

703NVD new records

1,970NVD revisions

711GHSA publication window

67Verified saved and referenced responses

All 703 newly published NVD records overlap the 1970 modified records. GHSA has 711 newly published advisories (640 unreviewed, 46 malware) and 1042 modified advisories. Distinguish reviewed, unreviewed and malware entries, and check publication/modification overlap in the register. KEV version2026.10.29 contains 1,764 entries, with changes from the previously saved catalog: CVE-2026-76418 / CVE-2026-97229. Database inclusion and response changes are separate from attack start times. Absence from the catalog does not prove absence of exploitation. Of 67 responses, 17 reference older originals to avoid duplicate storage.

Cutoff: 2026-10-30 19:31:35 JST. Fixed window from 2026-10-29 14:01:25 JST. Responses are current revisions retrieved after cutoff; they do not reconstruct every historical revision.
Previous topic IDs are retained. Text retained from prior source context has not been fully revalidated in this update.
Do not add publications, revisions, CVEs, GHSAs, packages or affected people. Unscored NVD records were collected; unreviewed entries are not automatically promoted to confirmed impacts.
Failed retrievals, empty JavaScript shells and access restrictions are not successful body retrievals. No worldwide completeness or absence of unlisted incidents is claimed.
Researcher observations, victim confirmation, exploitation, restoration plans and completion are separate. Unknown losses, affected versions and people counts are not estimated.

data/2026-10-30-1031/incident-register.json / data/2026-10-30-1031/collection-summary.json / data/2026-10-30-1031/vendor-followup-fetch.json / docs/research-collection-2026-10-30-1031.md / docs/research-2026-10-30-1031.md / data/latest.json

Previous record

10/29 14:01 research record