Security advisories (GitHub reviewed), as recorded on Flare Reef (https://flarereef.flareforward.com/p/20)

November 3, 2026. On November 3, 2026, GitHub's security advisory list published 22 new advisories, changed 29, and withdrew 1. A security advisory is a public warning about a hole in a piece of software.
GHSA-wp3j-xq48-xpjw · changed · github[.]com/containers/podman/v5 · github[.]com/containers/podman/v4 · HIGH · podman kube play symlink traversal vulnerability
Advisory: https://github.com/advisories/GHSA-wp3j-xq48-xpjw
The commit: https://github.com/github/advisory-database/commit/887dcb68f13a7d9be8bf3d604c2e32fc3d6960e8
The file: https://github.com/github/advisory-database/blob/887dcb68f13a7d9be8bf3d604c2e32fc3d6960e8/advisories/github-reviewed/2025/09/GHSA-wp3j-xq48-xpjw/GHSA-wp3j-xq48-xpjw.json
GHSA-v653-r55g-hcmg · changed · uv · MODERATE · uv has ZIP payload obfuscation through parsing differentials
Advisory: https://github.com/advisories/GHSA-v653-r55g-hcmg
The commit: https://github.com/github/advisory-database/commit/109512409477d1b7dfa372b0346a28a59d47e04d
The file: https://github.com/github/advisory-database/blob/109512409477d1b7dfa372b0346a28a59d47e04d/advisories/github-reviewed/2026/02/GHSA-v653-r55g-hcmg/GHSA-v653-r55g-hcmg.json
GHSA-f23m-r3pf-42rh · changed · lodash · lodash-es · lodash-amd · lodash[.]unset · lodash[.]omit · MODERATE · lodash vulnerable to prototype pollution via array-path bypass in `_[.]unset`, `_[.]omit`, and `_[.]pullAt
Advisory: https://github.com/advisories/GHSA-f23m-r3pf-42rh
The commit: https://github.com/github/advisory-database/commit/0b1941f7d05b03f4ed6469b0236dd3c59357f497
The file: https://github.com/github/advisory-database/blob/0b1941f7d05b03f4ed6469b0236dd3c59357f497/advisories/github-reviewed/2026/04/GHSA-f23m-r3pf-42rh/GHSA-f23m-r3pf-42rh.json
GHSA-2cvf-wqm6-wr9g · changed · github[.]com/containers/podman/v4 · go[.]podman[.]io/podman/v6 · github[.]com/containers/podman/v5 · CRITICAL · Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation
Advisory: https://github.com/advisories/GHSA-2cvf-wqm6-wr9g
The commit: https://github.com/github/advisory-database/commit/b9d5dfa2061837f892e2cdbecfe33751bcd902fa
The file: https://github.com/github/advisory-database/blob/b9d5dfa2061837f892e2cdbecfe33751bcd902fa/advisories/github-reviewed/2026/10/GHSA-2cvf-wqm6-wr9g/GHSA-2cvf-wqm6-wr9g.json
GHSA-23f4-hfmq-94mj · changed · com[.]github[.]liuyueyi[.]media:batik-codec-fix · MODERATE · Quick-Media Batik Codec FIX Package has Vulnerability in PNG Codec
Advisory: https://github.com/advisories/GHSA-23f4-hfmq-94mj
The commit: https://github.com/github/advisory-database/commit/1cd5f193871f6f187dcd0bb684096313535d13dc
The file: https://github.com/github/advisory-database/blob/1cd5f193871f6f187dcd0bb684096313535d13dc/advisories/github-reviewed/2026/01/GHSA-23f4-hfmq-94mj/GHSA-23f4-hfmq-94mj.json
GHSA-4c5c-2vc3-x5w2 · changed · vantage6 · MODERATE · Vantage6: 2FA can be circumvented with hacked email access
Advisory: https://github.com/advisories/GHSA-4c5c-2vc3-x5w2
The commit: https://github.com/github/advisory-database/commit/09a0c50f4c060b454b1beba39b06607b692ae442
The file: https://github.com/github/advisory-database/blob/09a0c50f4c060b454b1beba39b06607b692ae442/advisories/github-reviewed/2026/06/GHSA-4c5c-2vc3-x5w2/GHSA-4c5c-2vc3-x5w2.json
GHSA-5549-c5q7-fj65 · changed · vantage6 · LOW · Vantage6: No limit on emails sent for password/MFA reset
Advisory: https://github.com/advisories/GHSA-5549-c5q7-fj65
The commit: https://github.com/github/advisory-database/commit/3ad38b79a298df87ea7277ef69a97bdf8ac19070
The file: https://github.com/github/advisory-database/blob/3ad38b79a298df87ea7277ef69a97bdf8ac19070/advisories/github-reviewed/2026/06/GHSA-5549-c5q7-fj65/GHSA-5549-c5q7-fj65.json
GHSA-gg2p-37pv-v7fq · changed · feast · CRITICAL · Feast vulnerable to arbitrary code execution via unsafe deserialization of dill-serialized UDFs
Advisory: https://github.com/advisories/GHSA-gg2p-37pv-v7fq
The commit: https://github.com/github/advisory-database/commit/2f5c9c3dc515527cf27c5dea15ea0c286b09a6a1
The file: https://github.com/github/advisory-database/blob/2f5c9c3dc515527cf27c5dea15ea0c286b09a6a1/advisories/github-reviewed/2026/08/GHSA-gg2p-37pv-v7fq/GHSA-gg2p-37pv-v7fq.json
GHSA-263q-5cv3-xq9g · changed · code[.]gitea[.]io/gitea · HIGH · Gitea allows attackers to add attachments with forbidden file extensions
Advisory: https://github.com/advisories/GHSA-263q-5cv3-xq9g
The commit: https://github.com/github/advisory-database/commit/1fb1ef7a46bdb8dd9f8eb720a840dbecb943e2f3
The file: https://github.com/github/advisory-database/blob/1fb1ef7a46bdb8dd9f8eb720a840dbecb943e2f3/advisories/github-reviewed/2025/12/GHSA-263q-5cv3-xq9g/GHSA-263q-5cv3-xq9g.json
GHSA-2fqr-mr3j-6wp8 · changed · aiohttp · LOW · aiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence
Advisory: https://github.com/advisories/GHSA-2fqr-mr3j-6wp8
The commit: https://github.com/github/advisory-database/commit/1fb1ef7a46bdb8dd9f8eb720a840dbecb943e2f3
The file: https://github.com/github/advisory-database/blob/1fb1ef7a46bdb8dd9f8eb720a840dbecb943e2f3/advisories/github-reviewed/2026/06/GHSA-2fqr-mr3j-6wp8/GHSA-2fqr-mr3j-6wp8.json
GHSA-m3qr-fvp4-78xj · published · github[.]com/basekick-labs/arc · LOW · Arc has unauthenticated application log disclosure via `/api/v1/logs`
Advisory: https://github.com/advisories/GHSA-m3qr-fvp4-78xj
The commit: https://github.com/github/advisory-database/commit/20d31bd4c8caa6b82129e0d004e578e5cebe8f91
The file: https://github.com/github/advisory-database/blob/20d31bd4c8caa6b82129e0d004e578e5cebe8f91/advisories/github-reviewed/2026/11/GHSA-m3qr-fvp4-78xj/GHSA-m3qr-fvp4-78xj.json
GHSA-h26j-4vp7-x9w2 · published · Metalama[.]Framework · HIGH · Metalama: Unsafe deserialization over Metalama's Visual Studio inter-process named pipe enables local code execution
Advisory: https://github.com/advisories/GHSA-h26j-4vp7-x9w2
The commit: https://github.com/github/advisory-database/commit/5742631ca9236a1b99fb823b7dc5746894dc9c97
The file: https://github.com/github/advisory-database/blob/5742631ca9236a1b99fb823b7dc5746894dc9c97/advisories/github-reviewed/2026/11/GHSA-h26j-4vp7-x9w2/GHSA-h26j-4vp7-x9w2.json
GHSA-9ppr-wfw9-xvr2 · published · github[.]com/tinfoil-factory/netfoil · MODERATE · Netfoil doesn't decrement TTL
Advisory: https://github.com/advisories/GHSA-9ppr-wfw9-xvr2
The commit: https://github.com/github/advisory-database/commit/2c0fc1b40f792460bac314a3589ee722fddf9ab7
The file: https://github.com/github/advisory-database/blob/2c0fc1b40f792460bac314a3589ee722fddf9ab7/advisories/github-reviewed/2026/11/GHSA-9ppr-wfw9-xvr2/GHSA-9ppr-wfw9-xvr2.json
GHSA-g27p-qf6j-c96c · changed · Microsoft[.]AspNetCore[.]Components[.]WebAssembly[.]Server · HIGH · Microsoft Security Advisory CVE-2026-102870 - ASP[.]NET Core Remote Code Execution Vulnerability
Advisory: https://github.com/advisories/GHSA-g27p-qf6j-c96c
The commit: https://github.com/github/advisory-database/commit/0713d11c551f4fb074272b59e61c545ca28b395e
The file: https://github.com/github/advisory-database/blob/0713d11c551f4fb074272b59e61c545ca28b395e/advisories/github-reviewed/2026/10/GHSA-g27p-qf6j-c96c/GHSA-g27p-qf6j-c96c.json
GHSA-4mpw-cpwj-hxxj · changed · Microsoft[.]NETCore[.]App[.]Runtime[.]win-arm64 · Microsoft[.]NETCore[.]App[.]Runtime[.]win-x64 · Microsoft[.]NETCore[.]App[.]Runtime[.]win-x86 · HIGH · Microsoft Security Advisory CVE-2026-70197 - .NET and Visual Studio Remote Code Execution Vulnerability
Advisory: https://github.com/advisories/GHSA-4mpw-cpwj-hxxj
The commit: https://github.com/github/advisory-database/commit/1b2b2b1ca2543a77a29a869f05f5d5ab9a48832d
The file: https://github.com/github/advisory-database/blob/1b2b2b1ca2543a77a29a869f05f5d5ab9a48832d/advisories/github-reviewed/2026/10/GHSA-4mpw-cpwj-hxxj/GHSA-4mpw-cpwj-hxxj.json
GHSA-9v8h-qqgm-4m35 · changed · brotli · brotlicffi · CRITICAL · Brotli: Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package
Advisory: https://github.com/advisories/GHSA-9v8h-qqgm-4m35
The commit: https://github.com/github/advisory-database/commit/a8429404393e1324233442f9b6b686fa23906d49
The file: https://github.com/github/advisory-database/blob/a8429404393e1324233442f9b6b686fa23906d49/advisories/github-reviewed/2026/10/GHSA-9v8h-qqgm-4m35/GHSA-9v8h-qqgm-4m35.json
GHSA-g27p-qf6j-c96c · changed · Microsoft[.]AspNetCore[.]Components[.]WebAssembly[.]Server · HIGH · Microsoft Security Advisory CVE-2026-102870 - ASP[.]NET Core Remote Code Execution Vulnerability
Advisory: https://github.com/advisories/GHSA-g27p-qf6j-c96c
The commit: https://github.com/github/advisory-database/commit/a8429404393e1324233442f9b6b686fa23906d49
The file: https://github.com/github/advisory-database/blob/a8429404393e1324233442f9b6b686fa23906d49/advisories/github-reviewed/2026/10/GHSA-g27p-qf6j-c96c/GHSA-g27p-qf6j-c96c.json
GHSA-gqj5-2xp5-3qmp · published · org[.]keycloak:keycloak-services · HIGH · Duplicate Advisory: Authentication bypass via jwt algorithm confusion
Advisory: https://github.com/advisories/GHSA-gqj5-2xp5-3qmp
The commit: https://github.com/github/advisory-database/commit/6b4ca00b2205554fe416e66ca4f6bbaa419faff0
The file: https://github.com/github/advisory-database/blob/6b4ca00b2205554fe416e66ca4f6bbaa419faff0/advisories/github-reviewed/2026/06/GHSA-gqj5-2xp5-3qmp/GHSA-gqj5-2xp5-3qmp.json
GHSA-48v2-6jcm-fc99 · published · github[.]com/mtzanidakis/praktor · HIGH · praktor: Path traversal in Telegram file uploads allows writing outside the agent workspace uploads/ directory (stored instruction injection)
Advisory: https://github.com/advisories/GHSA-48v2-6jcm-fc99
The commit: https://github.com/github/advisory-database/commit/2b369933cd4a9c17398ae7d4532f48e2ac48c173
The file: https://github.com/github/advisory-database/blob/2b369933cd4a9c17398ae7d4532f48e2ac48c173/advisories/github-reviewed/2026/11/GHSA-48v2-6jcm-fc99/GHSA-48v2-6jcm-fc99.json
GHSA-j97h-3f8r-mrjr · published · org[.]keycloak:keycloak-services · HIGH · Keycloak has authentication bypass via jwt algorithm confusion
Advisory: https://github.com/advisories/GHSA-j97h-3f8r-mrjr
The commit: https://github.com/github/advisory-database/commit/2b369933cd4a9c17398ae7d4532f48e2ac48c173
The file: https://github.com/github/advisory-database/blob/2b369933cd4a9c17398ae7d4532f48e2ac48c173/advisories/github-reviewed/2026/11/GHSA-j97h-3f8r-mrjr/GHSA-j97h-3f8r-mrjr.json
GHSA-p3jp-9v83-76w9 · published · Microsoft[.]DotNet[.]ILCompiler · Microsoft[.]NETCore[.]App[.]Runtime[.]NativeAOT[.]ios-arm64 · Microsoft[.]NETCore[.]App[.]Runtime[.]NativeAOT[.]iossimulator-arm64 · Microsoft[.]NETCore[.]App[.]Runtime[.]NativeAOT[.]iossimulator-x64 · Microsoft[.]NETCore[.]App[.]Runtime[.]NativeAOT[.]linux-bionic-arm64 · Microsoft[.]NETCore[.]App[.]Runtime[.]NativeAOT[.]linux-bionic-x64 · Microsoft[.]NETCore[.]App[.]Runtime[.]NativeAOT[.]maccatalyst-arm64 · Microsoft[.]NETCore[.]App[.]Runtime[.]NativeAOT[.]maccatalyst-x64 · Microsoft[.]NETCore[.]App[.]Runtime[.]NativeAOT[.]osx-arm64 · Microsoft[.]NETCore[.]App[.]Runtime[.]NativeAOT[.]osx-x64 · Microsoft[.]NETCore[.]App[.]Runtime[.]NativeAOT[.]tvos-arm64 · Microsoft[.]NETCore[.]App[.]Runtime[.]NativeAOT[.]tvossimulator-arm64 · Microsoft[.]NETCore[.]App[.]Runtime[.]NativeAOT[.]tvossimulator-x64 · Microsoft[.]NETCore[.]App[.]Runtime[.]Mono[.]LLVM[.]linux-arm64 · Microsoft[.]NETCore[.]App[.]Runtime[.]Mono[.]LLVM[.]linux-x64 · Microsoft[.]NETCore[.]App[.]Runtime[.]Mono[.]LLVM[.]osx-x64 · Microsoft[.]NETCore[.]App[.]Runtime[.]Mono[.]android-arm · Microsoft[.]NETCore[.]App[.]Runtime[.]Mono[.]android-arm64 · Microsoft[.]NETCore[.]App[.]Runtime[.]Mono[.]android-x64 · Microsoft[.]NETCore[.]App[.]Runtime[.]Mono[.]android-x86 · Microsoft[.]NETCore[.]App[.]Runtime[.]Mono[.]browser-wasm · Microsoft[.]NETCore[.]App[.]Runtime[.]Mono[.]ios-arm64 · Microsoft[.]NETCore[.]App[.]Runtime[.]Mono[.]iossimulator-arm64 · Microsoft[.]NETCore[.]App[.]Runtime[.]Mono[.]iossimulator-x64 · Microsoft[.]NETCore[.]App[.]Runtime[.]Mono[.]linux-arm · Microsoft[.]NETCore[.]App[.]Runtime[.]Mono[.]linux-arm64 · Microsoft[.]NETCore[.]App[.]Runtime[.]Mono[.]linux-musl-x64 · Microsoft[.]NETCore[.]App[.]Runtime[.]Mono[.]linux-x64 · Microsoft[.]NETCore[.]App[.]Runtime[.]Mono[.]maccatalyst-arm64 · Microsoft[.]NETCore[.]App[.]Runtime[.]Mono[.]maccatalyst-x64 · Microsoft[.]NETCore[.]App[.]Runtime[.]Mono[.]multithread[.]browser-wasm · Microsoft[.]NETCore[.]App[.]Runtime[.]Mono[.]osx-arm64 · Microsoft[.]NETCore[.]App[.]Runtime[.]Mono[.]osx-x64 · Microsoft[.]NETCore[.]App[.]Runtime[.]Mono[.]tvos-arm64 · Microsoft[.]NETCore[.]App[.]Runtime[.]Mono[.]tvossimulator-arm64 · Microsoft[.]NETCore[.]App[.]Runtime[.]Mono[.]tvossimulator-x64 · Microsoft[.]NETCore[.]App[.]Runtime[.]Mono[.]wasi-wasm · Microsoft[.]NETCore[.]App[.]Runtime[.]Mono[.]win-x64 · Microsoft[.]NETCore[.]App[.]Runtime[.]Mono[.]win-x86 · Microsoft[.]NETCore[.]App[.]Runtime[.]linux-arm · Microsoft[.]NETCore[.]App[.]Runtime[.]linux-arm64 · Microsoft[.]NETCore[.]App[.]Runtime[.]linux-bionic-arm64 · Microsoft[.]NETCore[.]App[.]Runtime[.]linux-bionic-x64 · Microsoft[.]NETCore[.]App[.]Runtime[.]linux-musl-arm · Microsoft[.]NETCore[.]App[.]Runtime[.]linux-musl-arm64 · Microsoft[.]NETCore[.]App[.]Runtime[.]linux-musl-x64 · Microsoft[.]NETCore[.]App[.]Runtime[.]linux-x64 · Microsoft[.]NETCore[.]App[.]Runtime[.]osx-arm64 · Microsoft[.]NETCore[.]App[.]Runtime[.]osx-x64 · Microsoft[.]NETCore[.]App[.]Runtime[.]win-arm64 · Microsoft[.]NETCore[.]App[.]Runtime[.]win-x64 · Microsoft[.]NETCore[.]App[.]Runtime[.]win-x86 · Microsoft[.]NETCore[.]App[.]Runtime[.]NativeAOT[.]linux-arm · Microsoft[.]NETCore[.]App[.]Runtime[.]NativeAOT[.]linux-arm64 · Microsoft[.]NETCore[.]App[.]Runtime[.]NativeAOT[.]linux-bionic-arm · Microsoft[.]NETCore[.]App[.]Runtime[.]NativeAOT[.]linux-musl-arm · Microsoft[.]NETCore[.]App[.]Runtime[.]NativeAOT[.]linux-musl-arm64 · Microsoft[.]NETCore[.]App[.]Runtime[.]NativeAOT[.]linux-musl-x64 · Microsoft[.]NETCore[.]App[.]Runtime[.]NativeAOT[.]linux-x64 · Microsoft[.]NETCore[.]App[.]Runtime[.]NativeAOT[.]win-arm64 · Microsoft[.]NETCore[.]App[.]Runtime[.]NativeAOT[.]win-x64 · Microsoft[.]NETCore[.]App[.]Runtime[.]NativeAOT[.]win-x86 · Microsoft[.]NETCore[.]App[.]Runtime[.]NativeAOT[.]android-arm · Microsoft[.]NETCore[.]App[.]Runtime[.]NativeAOT[.]android-arm64 · Microsoft[.]NETCore[.]App[.]Runtime[.]NativeAOT[.]android-x64 · Microsoft[.]NETCore[.]App[.]Runtime[.]android-arm64 · Microsoft[.]NETCore[.]App[.]Runtime[.]android-x64 · Microsoft[.]NETCore[.]App[.]Runtime[.]android-arm · Microsoft[.]NETCore[.]App[.]Runtime[.]browser-wasm · Microsoft[.]NETCore[.]App[.]Runtime[.]ios-arm64 · Microsoft[.]NETCore[.]App[.]Runtime[.]iossimulator-arm64 · Microsoft[.]NETCore[.]App[.]Runtime[.]iossimulator-x64 · Microsoft[.]NETCore[.]App[.]Runtime[.]maccatalyst-arm64 · Microsoft[.]NETCore[.]App[.]Runtime[.]maccatalyst-x64 · Microsoft[.]NETCore[.]App[.]Runtime[.]tvos-arm64 · Microsoft[.]NETCore[.]App[.]Runtime[.]tvossimulator-arm64 · Microsoft[.]NETCore[.]App[.]Runtime[.]tvossimulator-x64 · HIGH · Microsoft Security Advisory CVE-2026-111497 - .NET Brotli Decoder Out-of-bounds Write Vulnerability
Advisory: https://github.com/advisories/GHSA-p3jp-9v83-76w9
The commit: https://github.com/github/advisory-database/commit/772fd8ac4b2e4d12a16d65630979ba79c9a7e82f
The file: https://github.com/github/advisory-database/blob/772fd8ac4b2e4d12a16d65630979ba79c9a7e82f/advisories/github-reviewed/2026/11/GHSA-p3jp-9v83-76w9/GHSA-p3jp-9v83-76w9.json
GHSA-8vvx-qvq9-5948 · changed · flowise · CRITICAL · Flowise allows arbitrary file write to RCE
Advisory: https://github.com/advisories/GHSA-8vvx-qvq9-5948
The commit: https://github.com/github/advisory-database/commit/b55477d13556e53acd3794d686556266ec52a168
The file: https://github.com/github/advisory-database/blob/b55477d13556e53acd3794d686556266ec52a168/advisories/github-reviewed/2025/03/GHSA-8vvx-qvq9-5948/GHSA-8vvx-qvq9-5948.json
GHSA-3gf5-cxq9-w223 · changed · picklescan · HIGH · Picklescan is missing detection when calling built-in python idlelib[.]pyshell[.]ModifiedInterpreter[.]runcode
Advisory: https://github.com/advisories/GHSA-3gf5-cxq9-w223
The commit: https://github.com/github/advisory-database/commit/b55477d13556e53acd3794d686556266ec52a168
The file: https://github.com/github/advisory-database/blob/b55477d13556e53acd3794d686556266ec52a168/advisories/github-reviewed/2025/08/GHSA-3gf5-cxq9-w223/GHSA-3gf5-cxq9-w223.json
GHSA-6933-jpx5-q87q · changed · flowise · CRITICAL · Flowise has unsandboxed remote code execution via Custom MCP
Advisory: https://github.com/advisories/GHSA-6933-jpx5-q87q
The commit: https://github.com/github/advisory-database/commit/b55477d13556e53acd3794d686556266ec52a168
The file: https://github.com/github/advisory-database/blob/b55477d13556e53acd3794d686556266ec52a168/advisories/github-reviewed/2025/09/GHSA-6933-jpx5-q87q/GHSA-6933-jpx5-q87q.json
GHSA-q67q-549q-p849 · changed · flowise · CRITICAL · Flowise has arbitrary file access due to missing chat flow id validation
Advisory: https://github.com/advisories/GHSA-q67q-549q-p849
The commit: https://github.com/github/advisory-database/commit/b55477d13556e53acd3794d686556266ec52a168
The file: https://github.com/github/advisory-database/blob/b55477d13556e53acd3794d686556266ec52a168/advisories/github-reviewed/2025/09/GHSA-q67q-549q-p849/GHSA-q67q-549q-p849.json
GHSA-273h-m46v-96q4 · changed · Magick[.]NET-Q16-AnyCPU · Magick[.]NET-Q16-HDRI-AnyCPU · Magick[.]NET-Q16-HDRI-OpenMP-arm64 · Magick[.]NET-Q16-HDRI-OpenMP-x64 · Magick[.]NET-Q16-HDRI-arm64 · Magick[.]NET-Q16-HDRI-x64 · Magick[.]NET-Q16-HDRI-x86 · Magick[.]NET-Q16-OpenMP-arm64 · Magick[.]NET-Q16-OpenMP-x64 · Magick[.]NET-Q16-OpenMP-x86 · Magick[.]NET-Q16-arm64 · Magick[.]NET-Q16-x64 · Magick[.]NET-Q16-x86 · Magick[.]NET-Q8-AnyCPU · Magick[.]NET-Q8-OpenMP-arm64 · Magick[.]NET-Q8-OpenMP-x64 · Magick[.]NET-Q8-arm64 · Magick[.]NET-Q8-x64 · Magick[.]NET-Q8-x86 · LOW · ImageMagick: Integer Overflow in PSB (PSD v2) RLE decoding path causes heap Out of Bounds reads for 32-bit builds
Advisory: https://github.com/advisories/GHSA-273h-m46v-96q4
The commit: https://github.com/github/advisory-database/commit/b55477d13556e53acd3794d686556266ec52a168
The file: https://github.com/github/advisory-database/blob/b55477d13556e53acd3794d686556266ec52a168/advisories/github-reviewed/2026/02/GHSA-273h-m46v-96q4/GHSA-273h-m46v-96q4.json
GHSA-c3hj-m5hq-59xw · published · flowise · CRITICAL · Duplicate Advisory : Flowise allows arbitrary file write to RCE
Advisory: https://github.com/advisories/GHSA-c3hj-m5hq-59xw
The commit: https://github.com/github/advisory-database/commit/b55477d13556e53acd3794d686556266ec52a168
The file: https://github.com/github/advisory-database/blob/b55477d13556e53acd3794d686556266ec52a168/advisories/github-reviewed/2026/06/GHSA-c3hj-m5hq-59xw/GHSA-c3hj-m5hq-59xw.json
GHSA-mq7r-vm99-p7vx · published · picklescan · HIGH · Duplicate Advisory : Picklescan is missing detection when calling built-in python idlelib[.]pyshell[.]ModifiedInterpreter[.]runcode
Advisory: https://github.com/advisories/GHSA-mq7r-vm99-p7vx
The commit: https://github.com/github/advisory-database/commit/b55477d13556e53acd3794d686556266ec52a168
The file: https://github.com/github/advisory-database/blob/b55477d13556e53acd3794d686556266ec52a168/advisories/github-reviewed/2026/06/GHSA-mq7r-vm99-p7vx/GHSA-mq7r-vm99-p7vx.json
GHSA-q2xp-j85q-883h · published · flowise · CRITICAL · Duplicate Advisory: Flowise has unsandboxed remote code execution via Custom MCP
Advisory: https://github.com/advisories/GHSA-q2xp-j85q-883h
The commit: https://github.com/github/advisory-database/commit/b55477d13556e53acd3794d686556266ec52a168
The file: https://github.com/github/advisory-database/blob/b55477d13556e53acd3794d686556266ec52a168/advisories/github-reviewed/2026/06/GHSA-q2xp-j85q-883h/GHSA-q2xp-j85q-883h.json
GHSA-rg39-4fm5-hrp2 · published · Magick[.]NET-Q8-x86 · MODERATE · Duplicate Advisory: ImageMagick: Integer Overflow in PSB (PSD v2) RLE decoding path causes heap Out of Bounds reads for 32-bit builds
Advisory: https://github.com/advisories/GHSA-rg39-4fm5-hrp2
The commit: https://github.com/github/advisory-database/commit/b55477d13556e53acd3794d686556266ec52a168
The file: https://github.com/github/advisory-database/blob/b55477d13556e53acd3794d686556266ec52a168/advisories/github-reviewed/2026/06/GHSA-rg39-4fm5-hrp2/GHSA-rg39-4fm5-hrp2.json
GHSA-w5r9-j49j-2m55 · published · flowise · CRITICAL · Duplicate Advisory : Flowise has arbitrary file access due to missing chat flow id validation
Advisory: https://github.com/advisories/GHSA-w5r9-j49j-2m55
The commit: https://github.com/github/advisory-database/commit/b55477d13556e53acd3794d686556266ec52a168
The file: https://github.com/github/advisory-database/blob/b55477d13556e53acd3794d686556266ec52a168/advisories/github-reviewed/2026/06/GHSA-w5r9-j49j-2m55/GHSA-w5r9-j49j-2m55.json
GHSA-q2hg-643c-gw8h · withdrawn · apache-airflow · HIGH · Withdrawn Advisory: Apache Airflow: RCE by race condition in example_xcom dag
Advisory: https://github.com/advisories/GHSA-q2hg-643c-gw8h
The commit: https://github.com/github/advisory-database/commit/bfee4fa8fd91e14b833b776680f2381a9311a967
The file: https://github.com/github/advisory-database/blob/bfee4fa8fd91e14b833b776680f2381a9311a967/advisories/github-reviewed/2026/04/GHSA-q2hg-643c-gw8h/GHSA-q2hg-643c-gw8h.json
GHSA-x9rp-7wh3-2rj5 · published · @enspirit/elo · HIGH · Elo backends have code injection via unvalidated emission of programmatic AST fields
Advisory: https://github.com/advisories/GHSA-x9rp-7wh3-2rj5
The commit: https://github.com/github/advisory-database/commit/3166063e03a19d7eaa16d650902b995c4946ccac
The file: https://github.com/github/advisory-database/blob/3166063e03a19d7eaa16d650902b995c4946ccac/advisories/github-reviewed/2026/11/GHSA-x9rp-7wh3-2rj5/GHSA-x9rp-7wh3-2rj5.json
GHSA-33r5-xmm8-v6x5 · published · @enspirit/elo · CRITICAL · Elo JavaScript emitter has sandbox escape to arbitrary Node[.]js / browser code execution via unfiltered `.constructor` member access
Advisory: https://github.com/advisories/GHSA-33r5-xmm8-v6x5
The commit: https://github.com/github/advisory-database/commit/7afed176f45c534bccb2f43fa4272d08dafd4efb
The file: https://github.com/github/advisory-database/blob/7afed176f45c534bccb2f43fa4272d08dafd4efb/advisories/github-reviewed/2026/11/GHSA-33r5-xmm8-v6x5/GHSA-33r5-xmm8-v6x5.json
GHSA-7w38-ggh5-v542 · published · @enspirit/elo · CRITICAL · Elo Ruby backend has Remote Code Execution via unescaped `#{...}` interpolation in emitted string literals and subtype-constraint labels
Advisory: https://github.com/advisories/GHSA-7w38-ggh5-v542
The commit: https://github.com/github/advisory-database/commit/7afed176f45c534bccb2f43fa4272d08dafd4efb
The file: https://github.com/github/advisory-database/blob/7afed176f45c534bccb2f43fa4272d08dafd4efb/advisories/github-reviewed/2026/11/GHSA-7w38-ggh5-v542/GHSA-7w38-ggh5-v542.json
GHSA-m9cv-24rx-8mv7 · changed · filament/forms · HIGH · Filament: Disabled RichEditor field state can be used for XSS
Advisory: https://github.com/advisories/GHSA-m9cv-24rx-8mv7
The commit: https://github.com/github/advisory-database/commit/bfb1ff7326519dc6a6f4a1ac745d1b011e5b17e4
The file: https://github.com/github/advisory-database/blob/bfb1ff7326519dc6a6f4a1ac745d1b011e5b17e4/advisories/github-reviewed/2026/06/GHSA-m9cv-24rx-8mv7/GHSA-m9cv-24rx-8mv7.json
GHSA-q6r4-3wmg-fwcq · changed · github[.]com/containers/podman/v5 · github[.]com/containers/podman/v4 · github[.]com/containers/podman/v3 · MODERATE · Podman: WORKDIR symlink traversal vulnerability
Advisory: https://github.com/advisories/GHSA-q6r4-3wmg-fwcq
The commit: https://github.com/github/advisory-database/commit/c85a0fbb78e2cf8aa52f64a30136b1361c9751a1
The file: https://github.com/github/advisory-database/blob/c85a0fbb78e2cf8aa52f64a30136b1361c9751a1/advisories/github-reviewed/2026/06/GHSA-q6r4-3wmg-fwcq/GHSA-q6r4-3wmg-fwcq.json
GHSA-9c4c-g95m-c8cp · changed · flowise · HIGH · FlowiseDB vulnerable to SQL Injection by authenticated users
Advisory: https://github.com/advisories/GHSA-9c4c-g95m-c8cp
The commit: https://github.com/github/advisory-database/commit/2d4bd9ec59f215311b7e656b111083fc252ac893
The file: https://github.com/github/advisory-database/blob/2d4bd9ec59f215311b7e656b111083fc252ac893/advisories/github-reviewed/2025/04/GHSA-9c4c-g95m-c8cp/GHSA-9c4c-g95m-c8cp.json
GHSA-29hf-rm4x-xxph · changed · mise · MODERATE · Mise's local credential_command executes untrusted config
Advisory: https://github.com/advisories/GHSA-29hf-rm4x-xxph
The commit: https://github.com/github/advisory-database/commit/b91a7d18bf660e4df3d16ce86ea8a4c5683e1a74
The file: https://github.com/github/advisory-database/blob/b91a7d18bf660e4df3d16ce86ea8a4c5683e1a74/advisories/github-reviewed/2026/06/GHSA-29hf-rm4x-xxph/GHSA-29hf-rm4x-xxph.json
GHSA-gh9r-c94j-cmp5 · published · stanza · HIGH · Stanza: RCE via pickle deserialization in the lemmatizer
Advisory: https://github.com/advisories/GHSA-gh9r-c94j-cmp5
The commit: https://github.com/github/advisory-database/commit/17f6aad969d6fbf66d428725d56c65072693f130
The file: https://github.com/github/advisory-database/blob/17f6aad969d6fbf66d428725d56c65072693f130/advisories/github-reviewed/2026/11/GHSA-gh9r-c94j-cmp5/GHSA-gh9r-c94j-cmp5.json
GHSA-68wq-phq7-p2vg · changed · silverstripe/mfa · MODERATE · MultiFactor Authentication for SilverStripe can bypass MFA during password reset flow
Advisory: https://github.com/advisories/GHSA-68wq-phq7-p2vg
The commit: https://github.com/github/advisory-database/commit/e283ff073919b1843af36729a333698cb9816520
The file: https://github.com/github/advisory-database/blob/e283ff073919b1843af36729a333698cb9816520/advisories/github-reviewed/2026/10/GHSA-68wq-phq7-p2vg/GHSA-68wq-phq7-p2vg.json
GHSA-7pm4-56h2-5rxr · published · prefect · CRITICAL · Prefect has Git Flag Injection via commit_sha and directories Parameters Leading to Remote Code Execution (RCE)
Advisory: https://github.com/advisories/GHSA-7pm4-56h2-5rxr
The commit: https://github.com/github/advisory-database/commit/133ace55605a3f3e9f4331c0643c69660c0efdfa
The file: https://github.com/github/advisory-database/blob/133ace55605a3f3e9f4331c0643c69660c0efdfa/advisories/github-reviewed/2026/06/GHSA-7pm4-56h2-5rxr/GHSA-7pm4-56h2-5rxr.json
GHSA-q63x-9pfm-mjx4 · changed · feast · CRITICAL · Feast vulnerable to unsafe deserialization RCE in registry server via UDF proto
Advisory: https://github.com/advisories/GHSA-q63x-9pfm-mjx4
The commit: https://github.com/github/advisory-database/commit/e129255cb37f297a5bc876a9e362d34a443f9d5f
The file: https://github.com/github/advisory-database/blob/e129255cb37f297a5bc876a9e362d34a443f9d5f/advisories/github-reviewed/2026/06/GHSA-q63x-9pfm-mjx4/GHSA-q63x-9pfm-mjx4.json
GHSA-qj64-jj84-w38j · published · org[.]apache[.]shiro:shiro-guice · HIGH · Apache Shiro shiro-guice module vulnerable to authentication bypass
Advisory: https://github.com/advisories/GHSA-qj64-jj84-w38j
The commit: https://github.com/github/advisory-database/commit/e129255cb37f297a5bc876a9e362d34a443f9d5f
The file: https://github.com/github/advisory-database/blob/e129255cb37f297a5bc876a9e362d34a443f9d5f/advisories/github-reviewed/2026/06/GHSA-qj64-jj84-w38j/GHSA-qj64-jj84-w38j.json
GHSA-m8g6-vrr2-x7ff · published · org[.]apache[.]shiro:shiro-core · org[.]apache[.]shiro:shiro-web · LOW · Apache Shiro's "remember me" cookie age is not verified on the server.
Advisory: https://github.com/advisories/GHSA-m8g6-vrr2-x7ff
The commit: https://github.com/github/advisory-database/commit/acf5bcf01917d2e611bf2966c2e38ee282bc071a
The file: https://github.com/github/advisory-database/blob/acf5bcf01917d2e611bf2966c2e38ee282bc071a/advisories/github-reviewed/2026/06/GHSA-m8g6-vrr2-x7ff/GHSA-m8g6-vrr2-x7ff.json
GHSA-p2gc-fm5w-94jj · changed · org[.]apache[.]qpid:proton-j · HIGH · Apache Qpid Proton-J: Unbounded type nesting can lead to pre-authentication stackoverflow
Advisory: https://github.com/advisories/GHSA-p2gc-fm5w-94jj
The commit: https://github.com/github/advisory-database/commit/c84527072ba4f605ae401866e29fb9d00bda7017
The file: https://github.com/github/advisory-database/blob/c84527072ba4f605ae401866e29fb9d00bda7017/advisories/github-reviewed/2026/08/GHSA-p2gc-fm5w-94jj/GHSA-p2gc-fm5w-94jj.json
GHSA-57q6-fvp4-pqmm · changed · open-webui · MODERATE · Open WebUI's API key endpoint restrictions bypassed via `x-api-key` header — full message processing on restricted endpoints
Advisory: https://github.com/advisories/GHSA-57q6-fvp4-pqmm
The commit: https://github.com/github/advisory-database/commit/54ea6b928d36e4a9a41a26ac072524b191634fd8
The file: https://github.com/github/advisory-database/blob/54ea6b928d36e4a9a41a26ac072524b191634fd8/advisories/github-reviewed/2026/05/GHSA-57q6-fvp4-pqmm/GHSA-57q6-fvp4-pqmm.json
GHSA-x6vc-x4v4-hjhr · changed · org[.]apache[.]kerby:kerby-asn1 · MODERATE · Apache Kerby vulnerable to denial of service
Advisory: https://github.com/advisories/GHSA-x6vc-x4v4-hjhr
The commit: https://github.com/github/advisory-database/commit/f6c6cc756ae0690bde99e87dcfa980246865af49
The file: https://github.com/github/advisory-database/blob/f6c6cc756ae0690bde99e87dcfa980246865af49/advisories/github-reviewed/2026/06/GHSA-x6vc-x4v4-hjhr/GHSA-x6vc-x4v4-hjhr.json
GHSA-xrvj-h9w2-3q69 · published · org[.]apache[.]iotdb:iotdb-server · CRITICAL · Apache IoTDB has a Path Traversal vulnerability
Advisory: https://github.com/advisories/GHSA-xrvj-h9w2-3q69
The commit: https://github.com/github/advisory-database/commit/dfea14d0cd6ad3dab2d1cce70dcc7b978110402a
The file: https://github.com/github/advisory-database/blob/dfea14d0cd6ad3dab2d1cce70dcc7b978110402a/advisories/github-reviewed/2026/06/GHSA-xrvj-h9w2-3q69/GHSA-xrvj-h9w2-3q69.json
GHSA-262p-fj3f-xh7v · changed · org[.]apache[.]kerby:kerb-server · HIGH · Apache Kerby has a bypass the Kerberos pre-authentication check
Advisory: https://github.com/advisories/GHSA-262p-fj3f-xh7v
The commit: https://github.com/github/advisory-database/commit/0398025025eda364510f89231e300fc5cea2f1e4
The file: https://github.com/github/advisory-database/blob/0398025025eda364510f89231e300fc5cea2f1e4/advisories/github-reviewed/2026/06/GHSA-262p-fj3f-xh7v/GHSA-262p-fj3f-xh7v.json
GHSA-h548-jhj8-q85h · published · org[.]apache[.]iotdb:iotdb-server · CRITICAL · Apache IoTDB has a Path Traversal vulnerability
Advisory: https://github.com/advisories/GHSA-h548-jhj8-q85h
The commit: https://github.com/github/advisory-database/commit/0398025025eda364510f89231e300fc5cea2f1e4
The file: https://github.com/github/advisory-database/blob/0398025025eda364510f89231e300fc5cea2f1e4/advisories/github-reviewed/2026/06/GHSA-h548-jhj8-q85h/GHSA-h548-jhj8-q85h.json
GHSA-72v2-v53v-4qmm · published · github[.]com/mattermost/mattermost/server/public · MODERATE · github[.]com/mattermost/mattermost/server/public vulnerable to path traversal in API route construction
Advisory: https://github.com/advisories/GHSA-72v2-v53v-4qmm
The commit: https://github.com/github/advisory-database/commit/51487350d8faedb34ce51f2e868bff73324095e9
The file: https://github.com/github/advisory-database/blob/51487350d8faedb34ce51f2e868bff73324095e9/advisories/github-reviewed/2026/06/GHSA-72v2-v53v-4qmm/GHSA-72v2-v53v-4qmm.json
Permanent record: https://flarereef.flareforward.com/n/418