Security advisories (GitHub reviewed), as recorded on Flare Reef (https://flarereef.flareforward.com/p/20)

November 4, 2026. On November 4, 2026, GitHub's security advisory list published 17 new advisories, changed 46, and withdrew 0. A security advisory is a public warning about a hole in a piece of software.
GHSA-7p85-w9px-jpjp · changed · twig/twig · CRITICAL · Twig: PHP code injection via `{% use %}` template name
Advisory: https://github.com/advisories/GHSA-7p85-w9px-jpjp
The commit: https://github.com/github/advisory-database/commit/8d8209a50cacdad85184e017ac9d9cec92b4e0cb
The file: https://github.com/github/advisory-database/blob/8d8209a50cacdad85184e017ac9d9cec92b4e0cb/advisories/github-reviewed/2026/05/GHSA-7p85-w9px-jpjp/GHSA-7p85-w9px-jpjp.json
GHSA-659w-93r5-9j6m · changed · org[.]apache[.]opennlp:opennlp-tools · HIGH · Apache OpenNLP AbstractModelReader has an OOM Denial of Service via Unbounded Array Allocation
Advisory: https://github.com/advisories/GHSA-659w-93r5-9j6m
The commit: https://github.com/github/advisory-database/commit/d29f93b34c304df05cd3a23ea898c61ebb69d2ea
The file: https://github.com/github/advisory-database/blob/d29f93b34c304df05cd3a23ea898c61ebb69d2ea/advisories/github-reviewed/2026/05/GHSA-659w-93r5-9j6m/GHSA-659w-93r5-9j6m.json
GHSA-63cw-57p8-fm3p · changed · torch · HIGH · PyTorch Vulnerable to Remote Code Execution via Untrusted Checkpoint Files
Advisory: https://github.com/advisories/GHSA-63cw-57p8-fm3p
The commit: https://github.com/github/advisory-database/commit/568487bb4bb7928f51234182640bce237067a8c9
The file: https://github.com/github/advisory-database/blob/568487bb4bb7928f51234182640bce237067a8c9/advisories/github-reviewed/2026/01/GHSA-63cw-57p8-fm3p/GHSA-63cw-57p8-fm3p.json
GHSA-xxjr-mmjv-4gpg · changed · lodash · lodash-amd · lodash-es · lodash[.]omit · lodash[.]unset · MODERATE · Lodash has Prototype Pollution Vulnerability in `_[.]unset`, `_[.]omit`, and `_[.]pullAt` functions
Advisory: https://github.com/advisories/GHSA-xxjr-mmjv-4gpg
The commit: https://github.com/github/advisory-database/commit/378cd3bf07dd1a59610cd65c576008e5b586979f
The file: https://github.com/github/advisory-database/blob/378cd3bf07dd1a59610cd65c576008e5b586979f/advisories/github-reviewed/2026/01/GHSA-xxjr-mmjv-4gpg/GHSA-xxjr-mmjv-4gpg.json
GHSA-mgp5-rv84-w37q · changed · org[.]apache[.]tomcat:tomcat-coyote · org[.]apache[.]tomcat[.]embed:tomcat-embed-core · org[.]apache[.]tomcat:tomcat-coyote-ffm · HIGH · Apache Tomcat has an Improper Input Validation vulnerability
Advisory: https://github.com/advisories/GHSA-mgp5-rv84-w37q
The commit: https://github.com/github/advisory-database/commit/5f5b41b00513c7ce1e843053d1d22999dafca0b0
The file: https://github.com/github/advisory-database/blob/5f5b41b00513c7ce1e843053d1d22999dafca0b0/advisories/github-reviewed/2026/02/GHSA-mgp5-rv84-w37q/GHSA-mgp5-rv84-w37q.json
GHSA-68j8-pq59-fqgm · changed · nltk · HIGH · NLTK has a Path Traversal issue
Advisory: https://github.com/advisories/GHSA-68j8-pq59-fqgm
The commit: https://github.com/github/advisory-database/commit/5f5b41b00513c7ce1e843053d1d22999dafca0b0
The file: https://github.com/github/advisory-database/blob/5f5b41b00513c7ce1e843053d1d22999dafca0b0/advisories/github-reviewed/2026/03/GHSA-68j8-pq59-fqgm/GHSA-68j8-pq59-fqgm.json
GHSA-3r9x-f23j-gc73 · changed · onnx · HIGH · onnx Vulnerable to Path Traversal via Symlink
Advisory: https://github.com/advisories/GHSA-3r9x-f23j-gc73
The commit: https://github.com/github/advisory-database/commit/f284b8fa0fe059249764f70c0baaa8135a0312db
The file: https://github.com/github/advisory-database/blob/f284b8fa0fe059249764f70c0baaa8135a0312db/advisories/github-reviewed/2026/03/GHSA-3r9x-f23j-gc73/GHSA-3r9x-f23j-gc73.json
GHSA-469j-vmhf-r6v7 · changed · nltk · HIGH · NLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File Overwrite
Advisory: https://github.com/advisories/GHSA-469j-vmhf-r6v7
The commit: https://github.com/github/advisory-database/commit/f284b8fa0fe059249764f70c0baaa8135a0312db
The file: https://github.com/github/advisory-database/blob/f284b8fa0fe059249764f70c0baaa8135a0312db/advisories/github-reviewed/2026/03/GHSA-469j-vmhf-r6v7/GHSA-469j-vmhf-r6v7.json
GHSA-qr99-7898-vr7c · changed · github[.]com/traefik/traefik/v2 · github[.]com/traefik/traefik/v3 · MODERATE · Traefik Vulnerable to BasicAuth/DigestAuth Identity Spoofing via Non-Canonical headerField
Advisory: https://github.com/advisories/GHSA-qr99-7898-vr7c
The commit: https://github.com/github/advisory-database/commit/f284b8fa0fe059249764f70c0baaa8135a0312db
The file: https://github.com/github/advisory-database/blob/f284b8fa0fe059249764f70c0baaa8135a0312db/advisories/github-reviewed/2026/03/GHSA-qr99-7898-vr7c/GHSA-qr99-7898-vr7c.json
GHSA-p423-j2cm-9vmq · changed · cryptography · MODERATE · Cryptography vulnerable to buffer overflow if non-contiguous buffers were passed to APIs
Advisory: https://github.com/advisories/GHSA-p423-j2cm-9vmq
The commit: https://github.com/github/advisory-database/commit/f284b8fa0fe059249764f70c0baaa8135a0312db
The file: https://github.com/github/advisory-database/blob/f284b8fa0fe059249764f70c0baaa8135a0312db/advisories/github-reviewed/2026/04/GHSA-p423-j2cm-9vmq/GHSA-p423-j2cm-9vmq.json
GHSA-p93r-85wp-75v3 · changed · org[.]bouncycastle:bcprov-jdk15to18 · org[.]bouncycastle:bcprov-jdk14 · org[.]bouncycastle:bcprov-jdk18on · HIGH · Bouncy Castle Has Covert Timing Channel Vulnerability
Advisory: https://github.com/advisories/GHSA-p93r-85wp-75v3
The commit: https://github.com/github/advisory-database/commit/fd0f6e20b23c4d395ac90a0f97fe2f4fad2b1cd3
The file: https://github.com/github/advisory-database/blob/fd0f6e20b23c4d395ac90a0f97fe2f4fad2b1cd3/advisories/github-reviewed/2026/04/GHSA-p93r-85wp-75v3/GHSA-p93r-85wp-75v3.json
GHSA-c3fc-8qff-9hwx · changed · org[.]bouncycastle:bcprov-jdk14 · org[.]bouncycastle:bcprov-jdk15to18 · org[.]bouncycastle:bcprov-jdk18on · MODERATE · Bouncy Castle has an LDAP injection
Advisory: https://github.com/advisories/GHSA-c3fc-8qff-9hwx
The commit: https://github.com/github/advisory-database/commit/257898fe95916c61b45527df993e2f2fa485bf94
The file: https://github.com/github/advisory-database/blob/257898fe95916c61b45527df993e2f2fa485bf94/advisories/github-reviewed/2026/04/GHSA-c3fc-8qff-9hwx/GHSA-c3fc-8qff-9hwx.json
GHSA-v3vg-332r-mw99 · changed · org[.]apache[.]camel:camel-pqc · HIGH · Camel-PQC Vulnerable to Deserialization of Untrusted Data
Advisory: https://github.com/advisories/GHSA-v3vg-332r-mw99
The commit: https://github.com/github/advisory-database/commit/c838fdf54fffc232e4559792eb1b1b915d5b0d60
The file: https://github.com/github/advisory-database/blob/c838fdf54fffc232e4559792eb1b1b915d5b0d60/advisories/github-reviewed/2026/04/GHSA-v3vg-332r-mw99/GHSA-v3vg-332r-mw99.json
GHSA-26hh-7cqf-hhc6 · changed · next · HIGH · Next[.]js has a Middleware / Proxy bypass in App Router applications via segment-prefetch routes - Incomplete Fix Follow-Up
Advisory: https://github.com/advisories/GHSA-26hh-7cqf-hhc6
The commit: https://github.com/github/advisory-database/commit/7762634d412ae6fb8a9c51cd747312c11754c146
The file: https://github.com/github/advisory-database/blob/7762634d412ae6fb8a9c51cd747312c11754c146/advisories/github-reviewed/2026/05/GHSA-26hh-7cqf-hhc6/GHSA-26hh-7cqf-hhc6.json
GHSA-55hx-c926-fr95 · changed · vm2 · CRITICAL · VM2 Has a Sandbox Escape Issue via SuppressedError
Advisory: https://github.com/advisories/GHSA-55hx-c926-fr95
The commit: https://github.com/github/advisory-database/commit/7762634d412ae6fb8a9c51cd747312c11754c146
The file: https://github.com/github/advisory-database/blob/7762634d412ae6fb8a9c51cd747312c11754c146/advisories/github-reviewed/2026/05/GHSA-55hx-c926-fr95/GHSA-55hx-c926-fr95.json
GHSA-grj5-jjm8-h35p · changed · vm2 · CRITICAL · VM2 Sandbox Breakout Through __lookupGetter__
Advisory: https://github.com/advisories/GHSA-grj5-jjm8-h35p
The commit: https://github.com/github/advisory-database/commit/7762634d412ae6fb8a9c51cd747312c11754c146
The file: https://github.com/github/advisory-database/blob/7762634d412ae6fb8a9c51cd747312c11754c146/advisories/github-reviewed/2026/05/GHSA-grj5-jjm8-h35p/GHSA-grj5-jjm8-h35p.json
GHSA-v37h-5mfm-c47c · changed · vm2 · CRITICAL · VM2 Has Sandbox Breakout Through Inspect Function
Advisory: https://github.com/advisories/GHSA-v37h-5mfm-c47c
The commit: https://github.com/github/advisory-database/commit/7762634d412ae6fb8a9c51cd747312c11754c146
The file: https://github.com/github/advisory-database/blob/7762634d412ae6fb8a9c51cd747312c11754c146/advisories/github-reviewed/2026/05/GHSA-v37h-5mfm-c47c/GHSA-v37h-5mfm-c47c.json
GHSA-8hg8-63c5-gwmx · changed · vm2 · CRITICAL · vm2 NodeVM `nesting: true` bypasses `require: false` allowing sandbox escape and arbitrary OS command execution
Advisory: https://github.com/advisories/GHSA-8hg8-63c5-gwmx
The commit: https://github.com/github/advisory-database/commit/f5a2d1ff6e7b5791366faa2b74615534a1a1462e
The file: https://github.com/github/advisory-database/blob/f5a2d1ff6e7b5791366faa2b74615534a1a1462e/advisories/github-reviewed/2026/05/GHSA-8hg8-63c5-gwmx/GHSA-8hg8-63c5-gwmx.json
GHSA-9qj6-qjgg-37qq · changed · vm2 · CRITICAL · vm2 has sandbox breakout via `neutralizeArraySpeciesBatch`
Advisory: https://github.com/advisories/GHSA-9qj6-qjgg-37qq
The commit: https://github.com/github/advisory-database/commit/f5a2d1ff6e7b5791366faa2b74615534a1a1462e
The file: https://github.com/github/advisory-database/blob/f5a2d1ff6e7b5791366faa2b74615534a1a1462e/advisories/github-reviewed/2026/05/GHSA-9qj6-qjgg-37qq/GHSA-9qj6-qjgg-37qq.json
GHSA-9vg3-4rfj-wgcm · changed · vm2 · CRITICAL · vm2 has Sandbox Breakout Through Null Proto Exception
Advisory: https://github.com/advisories/GHSA-9vg3-4rfj-wgcm
The commit: https://github.com/github/advisory-database/commit/b1ba8e3c2f6cc7d9dddcd9678309ecd04a95a26f
The file: https://github.com/github/advisory-database/blob/b1ba8e3c2f6cc7d9dddcd9678309ecd04a95a26f/advisories/github-reviewed/2026/05/GHSA-9vg3-4rfj-wgcm/GHSA-9vg3-4rfj-wgcm.json
GHSA-vxpw-j846-p89q · changed · undici · HIGH · undici WebSocket client vulnerable to denial of service via fragment count bypass
Advisory: https://github.com/advisories/GHSA-vxpw-j846-p89q
The commit: https://github.com/github/advisory-database/commit/b1ba8e3c2f6cc7d9dddcd9678309ecd04a95a26f
The file: https://github.com/github/advisory-database/blob/b1ba8e3c2f6cc7d9dddcd9678309ecd04a95a26f/advisories/github-reviewed/2026/06/GHSA-vxpw-j846-p89q/GHSA-vxpw-j846-p89q.json
GHSA-wp3c-266w-4qfq · changed · js-toml · HIGH · js-toml vulnerable to CPU exhaustion via O(n^2) BigInt construction on radix-prefixed integer literals
Advisory: https://github.com/advisories/GHSA-wp3c-266w-4qfq
The commit: https://github.com/github/advisory-database/commit/557871daae102762572edbc32c842a7a1a46113a
The file: https://github.com/github/advisory-database/blob/557871daae102762572edbc32c842a7a1a46113a/advisories/github-reviewed/2026/06/GHSA-wp3c-266w-4qfq/GHSA-wp3c-266w-4qfq.json
GHSA-3fxj-6jh8-hvhx · changed · github[.]com/go-chi/chi/v5/middleware · github[.]com/go-chi/chi/v5 · MODERATE · chi Has an IP Spoofing Vulnerability in `middleware[.]RealIP`
Advisory: https://github.com/advisories/GHSA-3fxj-6jh8-hvhx
The commit: https://github.com/github/advisory-database/commit/9476a7ac3483db5eb8a2acf162787ffc27bebd6c
The file: https://github.com/github/advisory-database/blob/9476a7ac3483db5eb8a2acf162787ffc27bebd6c/advisories/github-reviewed/2026/06/GHSA-3fxj-6jh8-hvhx/GHSA-3fxj-6jh8-hvhx.json
GHSA-rp2p-6cmp-jxj9 · changed · Microsoft[.]NetCore[.]App[.]Runtime[.]linux-arm · Microsoft[.]NetCore[.]App[.]Runtime[.]linux-arm64 · Microsoft[.]NetCore[.]App[.]Runtime[.]linux-musl-arm · Microsoft[.]NetCore[.]App[.]Runtime[.]linux-musl-arm64 · Microsoft[.]NetCore[.]App[.]Runtime[.]linux-musl-x64 · Microsoft[.]NetCore[.]App[.]Runtime[.]linux-x64 · Microsoft[.]NetCore[.]App[.]Runtime[.]osx-arm64 · Microsoft[.]NetCore[.]App[.]Runtime[.]osx-x64 · HIGH · Microsoft Security Advisory CVE-2026-57108 – .NET Denial of Service Vulnerability
Advisory: https://github.com/advisories/GHSA-rp2p-6cmp-jxj9
The commit: https://github.com/github/advisory-database/commit/3c82703bb98b8d802b37a346686bdc5a605056a2
The file: https://github.com/github/advisory-database/blob/3c82703bb98b8d802b37a346686bdc5a605056a2/advisories/github-reviewed/2026/07/GHSA-rp2p-6cmp-jxj9/GHSA-rp2p-6cmp-jxj9.json
GHSA-2969-4q4w-w5h3 · changed · Microsoft[.]WindowsDesktop[.]App[.]Runtime[.]win-x64 · Microsoft[.]WindowsDesktop[.]App[.]Runtime[.]win-x86 · Microsoft[.]WindowsDesktop[.]App[.]Runtime[.]win-arm64 · HIGH · Microsoft Security Advisory CVE-2026-50650 – .NET Elevation of Privilege Vulnerability
Advisory: https://github.com/advisories/GHSA-2969-4q4w-w5h3
The commit: https://github.com/github/advisory-database/commit/b84b8ea05b18a6e0e292cdbd3904eb25fe1d8db4
The file: https://github.com/github/advisory-database/blob/b84b8ea05b18a6e0e292cdbd3904eb25fe1d8db4/advisories/github-reviewed/2026/07/GHSA-2969-4q4w-w5h3/GHSA-2969-4q4w-w5h3.json
GHSA-w7cw-xp7h-6j5j · changed · Microsoft[.]NetCore[.]App[.]Runtime[.]linux-arm · Microsoft[.]NetCore[.]App[.]Runtime[.]linux-arm64 · Microsoft[.]NetCore[.]App[.]Runtime[.]linux-musl-arm · Microsoft[.]NetCore[.]App[.]Runtime[.]linux-musl-arm64 · Microsoft[.]NetCore[.]App[.]Runtime[.]linux-musl-x64 · Microsoft[.]NetCore[.]App[.]Runtime[.]linux-x64 · Microsoft[.]NetCore[.]App[.]Runtime[.]osx-arm64 · Microsoft[.]NetCore[.]App[.]Runtime[.]osx-x64 · Microsoft[.]NetCore[.]App[.]Runtime[.]win-arm · Microsoft[.]NetCore[.]App[.]Runtime[.]win-arm64 · Microsoft[.]NetCore[.]App[.]Runtime[.]win-x64 · Microsoft[.]NetCore[.]App[.]Runtime[.]win-x86 · HIGH · Microsoft Security Advisory CVE-2026-50524 – .NET Denial of Service Vulnerability
Advisory: https://github.com/advisories/GHSA-w7cw-xp7h-6j5j
The commit: https://github.com/github/advisory-database/commit/b84b8ea05b18a6e0e292cdbd3904eb25fe1d8db4
The file: https://github.com/github/advisory-database/blob/b84b8ea05b18a6e0e292cdbd3904eb25fe1d8db4/advisories/github-reviewed/2026/07/GHSA-w7cw-xp7h-6j5j/GHSA-w7cw-xp7h-6j5j.json
GHSA-wp74-jgxh-gv4q · changed · Microsoft[.]NetCore[.]App[.]Runtime[.]linux-arm · Microsoft[.]NetCore[.]App[.]Runtime[.]linux-arm64 · Microsoft[.]NetCore[.]App[.]Runtime[.]linux-musl-arm · Microsoft[.]NetCore[.]App[.]Runtime[.]linux-musl-arm64 · Microsoft[.]NetCore[.]App[.]Runtime[.]linux-musl-x64 · Microsoft[.]NetCore[.]App[.]Runtime[.]linux-x64 · Microsoft[.]NetCore[.]App[.]Runtime[.]osx-arm64 · Microsoft[.]NetCore[.]App[.]Runtime[.]osx-x64 · Microsoft[.]NetCore[.]App[.]Runtime[.]win-arm · Microsoft[.]NetCore[.]App[.]Runtime[.]win-arm64 · Microsoft[.]NetCore[.]App[.]Runtime[.]win-x64 · Microsoft[.]NetCore[.]App[.]Runtime[.]win-x86 · HIGH · Microsoft Security Advisory CVE-2026-50651 – .NET Denial of Service Vulnerability
Advisory: https://github.com/advisories/GHSA-wp74-jgxh-gv4q
The commit: https://github.com/github/advisory-database/commit/b84b8ea05b18a6e0e292cdbd3904eb25fe1d8db4
The file: https://github.com/github/advisory-database/blob/b84b8ea05b18a6e0e292cdbd3904eb25fe1d8db4/advisories/github-reviewed/2026/07/GHSA-wp74-jgxh-gv4q/GHSA-wp74-jgxh-gv4q.json
GHSA-2j8r-3c22-8565 · changed · Microsoft[.]DiaSymReader[.]Native · HIGH · Microsoft Security Advisory CVE-2026-69522 – .NET and Visual Studio Remote Code Execution Vulnerability
Advisory: https://github.com/advisories/GHSA-2j8r-3c22-8565
The commit: https://github.com/github/advisory-database/commit/b84b8ea05b18a6e0e292cdbd3904eb25fe1d8db4
The file: https://github.com/github/advisory-database/blob/b84b8ea05b18a6e0e292cdbd3904eb25fe1d8db4/advisories/github-reviewed/2026/09/GHSA-2j8r-3c22-8565/GHSA-2j8r-3c22-8565.json
GHSA-v653-r55g-hcmg · changed · uv · MODERATE · uv has ZIP payload obfuscation through parsing differentials
Advisory: https://github.com/advisories/GHSA-v653-r55g-hcmg
The commit: https://github.com/github/advisory-database/commit/7b9d4a76d57210c31547ee6aa9a88f906d4211f0
The file: https://github.com/github/advisory-database/blob/7b9d4a76d57210c31547ee6aa9a88f906d4211f0/advisories/github-reviewed/2026/02/GHSA-v653-r55g-hcmg/GHSA-v653-r55g-hcmg.json
GHSA-h5gm-rvw6-2xpx · published · org[.]apache[.]activemq:activemq-broker · org[.]apache[.]activemq:apache-activemq · org[.]apache[.]activemq:activemq-all · HIGH · Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All have an Improper Input Validation vulnerability
Advisory: https://github.com/advisories/GHSA-h5gm-rvw6-2xpx
The commit: https://github.com/github/advisory-database/commit/9d0e960825d8c8d78f6c45f2a23b9a641a0fcd94
The file: https://github.com/github/advisory-database/blob/9d0e960825d8c8d78f6c45f2a23b9a641a0fcd94/advisories/github-reviewed/2026/06/GHSA-h5gm-rvw6-2xpx/GHSA-h5gm-rvw6-2xpx.json
GHSA-f892-4h9f-j7g9 · published · org[.]apache[.]activemq:apache-activemq · HIGH · Apache ActiveMQ Improper Authorization vulnerability
Advisory: https://github.com/advisories/GHSA-f892-4h9f-j7g9
The commit: https://github.com/github/advisory-database/commit/5aa7f472bdae2377252ee19acf255f7f176f8319
The file: https://github.com/github/advisory-database/blob/5aa7f472bdae2377252ee19acf255f7f176f8319/advisories/github-reviewed/2026/06/GHSA-f892-4h9f-j7g9/GHSA-f892-4h9f-j7g9.json
GHSA-7259-vf48-52q3 · published · org[.]apache[.]activemq:activemq-client · org[.]apache[.]activemq:apache-activemq · org[.]apache[.]activemq:activemq-all · HIGH · Apache ActiveMQ Client, Apache ActiveMQ, Apache ActiveMQ All has a Memory Allocation with Excessive Size Value vulnerability
Advisory: https://github.com/advisories/GHSA-7259-vf48-52q3
The commit: https://github.com/github/advisory-database/commit/cf4b010fd702de6801178a813c22567fde0e4908
The file: https://github.com/github/advisory-database/blob/cf4b010fd702de6801178a813c22567fde0e4908/advisories/github-reviewed/2026/06/GHSA-7259-vf48-52q3/GHSA-7259-vf48-52q3.json
GHSA-9qj4-v6r6-3wmx · published · org[.]apache[.]activemq:activemq-broker · org[.]apache[.]activemq:apache-activemq · org[.]apache[.]activemq:activemq-all · HIGH · Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All have a Denial of Service via Out of Memory vulnerability
Advisory: https://github.com/advisories/GHSA-9qj4-v6r6-3wmx
The commit: https://github.com/github/advisory-database/commit/00388c49ed84e11fd7bbe4c533b00e6a96725296
The file: https://github.com/github/advisory-database/blob/00388c49ed84e11fd7bbe4c533b00e6a96725296/advisories/github-reviewed/2026/06/GHSA-9qj4-v6r6-3wmx/GHSA-9qj4-v6r6-3wmx.json
GHSA-f77w-px59-cqf5 · published · org[.]apache[.]activemq:apache-activemq · org[.]apache[.]activemq:activemq-all · org[.]apache[.]activemq:activemq-client · org[.]apache[.]activemq:activemq-broker · HIGH · Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Client, Apache ActiveMQ Broker have Memory Allocation with Excessive Size Value vulnerability
Advisory: https://github.com/advisories/GHSA-f77w-px59-cqf5
The commit: https://github.com/github/advisory-database/commit/1fd15f5582aefdf9bd05012dedfa1cfb5f2589d3
The file: https://github.com/github/advisory-database/blob/1fd15f5582aefdf9bd05012dedfa1cfb5f2589d3/advisories/github-reviewed/2026/06/GHSA-f77w-px59-cqf5/GHSA-f77w-px59-cqf5.json
GHSA-3cgg-c5pp-57h6 · published · odf-kit · MODERATE · odf-kit: HTML injection leading to XSS in odtToHtml() and odsToHtml() via unescaped style attribute values
Advisory: https://github.com/advisories/GHSA-3cgg-c5pp-57h6
The commit: https://github.com/github/advisory-database/commit/b5a44f78eb9999143bdf585014ce1ee95d3b1daf
The file: https://github.com/github/advisory-database/blob/b5a44f78eb9999143bdf585014ce1ee95d3b1daf/advisories/github-reviewed/2026/11/GHSA-3cgg-c5pp-57h6/GHSA-3cgg-c5pp-57h6.json
GHSA-5v3h-fjv2-54fg · published · org[.]apache[.]tomcat[.]embed:tomcat-embed-core · org[.]apache[.]tomcat:tomcat · org[.]apache[.]tomcat:tomcat-catalina · MODERATE · Apache Tomcat has an Improper Authorization vulnerability
Advisory: https://github.com/advisories/GHSA-5v3h-fjv2-54fg
The commit: https://github.com/github/advisory-database/commit/0de2a17d38c440b5426a30a942fe87d5822155d0
The file: https://github.com/github/advisory-database/blob/0de2a17d38c440b5426a30a942fe87d5822155d0/advisories/github-reviewed/2026/06/GHSA-5v3h-fjv2-54fg/GHSA-5v3h-fjv2-54fg.json
GHSA-7895-gffq-w6jq · published · org[.]apache[.]tomcat[.]embed:tomcat-embed-core · org[.]apache[.]tomcat:tomcat · org[.]apache[.]tomcat:tomcat-catalina · HIGH · Apache Tomcat has a Missing Critical Step in Authentication vulnerability
Advisory: https://github.com/advisories/GHSA-7895-gffq-w6jq
The commit: https://github.com/github/advisory-database/commit/476f281f70f359faf23a310a2a0c7dbe8c151834
The file: https://github.com/github/advisory-database/blob/476f281f70f359faf23a310a2a0c7dbe8c151834/advisories/github-reviewed/2026/06/GHSA-7895-gffq-w6jq/GHSA-7895-gffq-w6jq.json
GHSA-c5ph-rghf-fjfj · published · org[.]apache[.]tomcat:tomcat · org[.]apache[.]tomcat:tomcat-tribes · MODERATE · Apache Tomcat has an Improper Authentication vulnerability
Advisory: https://github.com/advisories/GHSA-c5ph-rghf-fjfj
The commit: https://github.com/github/advisory-database/commit/abcaa04b68d39d803a109d26ba60fc420f042c61
The file: https://github.com/github/advisory-database/blob/abcaa04b68d39d803a109d26ba60fc420f042c61/advisories/github-reviewed/2026/06/GHSA-c5ph-rghf-fjfj/GHSA-c5ph-rghf-fjfj.json
GHSA-mqg3-r7h5-24x4 · published · org[.]apache[.]tomcat[.]embed:tomcat-embed-core · org[.]apache[.]tomcat:tomcat · org[.]apache[.]tomcat:tomcat-util-scan · CRITICAL · Apache Tomcat has an Always-Incorrect Control Flow Implementation vulnerability
Advisory: https://github.com/advisories/GHSA-mqg3-r7h5-24x4
The commit: https://github.com/github/advisory-database/commit/e3708cb57e3aa264df797e3c9a17eee4fd6aa769
The file: https://github.com/github/advisory-database/blob/e3708cb57e3aa264df797e3c9a17eee4fd6aa769/advisories/github-reviewed/2026/06/GHSA-mqg3-r7h5-24x4/GHSA-mqg3-r7h5-24x4.json
GHSA-h792-v28v-ppgr · published · org[.]apache[.]tomcat[.]embed:tomcat-embed-core · org[.]apache[.]tomcat:tomcat · org[.]apache[.]tomcat:tomcat-catalina · HIGH · Apache Tomcat's rewrite valve has an Always-Incorrect Control Flow Implementation vulnerability
Advisory: https://github.com/advisories/GHSA-h792-v28v-ppgr
The commit: https://github.com/github/advisory-database/commit/0bb50231f88a9288477b136731f74619e41e0d6d
The file: https://github.com/github/advisory-database/blob/0bb50231f88a9288477b136731f74619e41e0d6d/advisories/github-reviewed/2026/06/GHSA-h792-v28v-ppgr/GHSA-h792-v28v-ppgr.json
GHSA-pg42-rg8c-j886 · published · org[.]apache[.]tomcat:tomcat · MODERATE · Apache Tomcat has a Cross-site Scripting vulnerability
Advisory: https://github.com/advisories/GHSA-pg42-rg8c-j886
The commit: https://github.com/github/advisory-database/commit/d5e5c5ec0c1a386d1245ffefe8f044e5f5d5d936
The file: https://github.com/github/advisory-database/blob/d5e5c5ec0c1a386d1245ffefe8f044e5f5d5d936/advisories/github-reviewed/2026/06/GHSA-pg42-rg8c-j886/GHSA-pg42-rg8c-j886.json
GHSA-g3hv-75wg-m249 · changed · minimatch · MODERATE · minimatch has potential denial of service via globparts amplification
Advisory: https://github.com/advisories/GHSA-g3hv-75wg-m249
The commit: https://github.com/github/advisory-database/commit/db6b565eb01ac6a316283ef3d177ce76b587c7d0
The file: https://github.com/github/advisory-database/blob/db6b565eb01ac6a316283ef3d177ce76b587c7d0/advisories/github-reviewed/2026/10/GHSA-g3hv-75wg-m249/GHSA-g3hv-75wg-m249.json
GHSA-mc8m-rr6c-r5qr · published · @payloadcms/storage-vercel-blob · MODERATE · @payloadcms/storage-vercel-blob has access control bypass of uploads in Vercel Storage adapter
Advisory: https://github.com/advisories/GHSA-mc8m-rr6c-r5qr
The commit: https://github.com/github/advisory-database/commit/8320eee3cbf9f6001f2acc857e0390efd2d75710
The file: https://github.com/github/advisory-database/blob/8320eee3cbf9f6001f2acc857e0390efd2d75710/advisories/github-reviewed/2026/11/GHSA-mc8m-rr6c-r5qr/GHSA-mc8m-rr6c-r5qr.json
GHSA-93cm-2v4m-c56c · published · github[.]com/basekick-labs/arc · MODERATE · Arc: DuckDB I/O aliases bypass database RBAC after CVE-2026-47735
Advisory: https://github.com/advisories/GHSA-93cm-2v4m-c56c
The commit: https://github.com/github/advisory-database/commit/fcd0d8752081d5aaef409e634881b062cadd651c
The file: https://github.com/github/advisory-database/blob/fcd0d8752081d5aaef409e634881b062cadd651c/advisories/github-reviewed/2026/11/GHSA-93cm-2v4m-c56c/GHSA-93cm-2v4m-c56c.json
GHSA-xq3m-2v4x-88gg · changed · protobufjs · CRITICAL · protobufjs has an arbitrary code execution issue
Advisory: https://github.com/advisories/GHSA-xq3m-2v4x-88gg
The commit: https://github.com/github/advisory-database/commit/767f96481e4e169de400e47608b0e550af6ad319
The file: https://github.com/github/advisory-database/blob/767f96481e4e169de400e47608b0e550af6ad319/advisories/github-reviewed/2026/04/GHSA-xq3m-2v4x-88gg/GHSA-xq3m-2v4x-88gg.json
GHSA-6f2p-2qg2-qqch · changed · github[.]com/kubevirt/kubevirt · LOW · KubeVirt downward metrics virtio-serial server vulnerable to unbounded memory consumption
Advisory: https://github.com/advisories/GHSA-6f2p-2qg2-qqch
The commit: https://github.com/github/advisory-database/commit/64f29619e3facde666a5656253caba04a35f598a
The file: https://github.com/github/advisory-database/blob/64f29619e3facde666a5656253caba04a35f598a/advisories/github-reviewed/2026/06/GHSA-6f2p-2qg2-qqch/GHSA-6f2p-2qg2-qqch.json
GHSA-cgm6-wvp9-4g5h · changed · kubevirt[.]io/kubevirt · MODERATE · KubeVirt virt-api port-forward handler vulnerable to SSRF via guest-controlled VMI IP address
Advisory: https://github.com/advisories/GHSA-cgm6-wvp9-4g5h
The commit: https://github.com/github/advisory-database/commit/64f29619e3facde666a5656253caba04a35f598a
The file: https://github.com/github/advisory-database/blob/64f29619e3facde666a5656253caba04a35f598a/advisories/github-reviewed/2026/06/GHSA-cgm6-wvp9-4g5h/GHSA-cgm6-wvp9-4g5h.json
GHSA-q3jc-42cq-33fj · changed · kubevirt[.]io/kubevirt · MODERATE · KubeVirt virt-handler network cache symlink vulnerability allows arbitrary host file overwrite
Advisory: https://github.com/advisories/GHSA-q3jc-42cq-33fj
The commit: https://github.com/github/advisory-database/commit/495a5678d0934a9fc2047202e2999a981b261e4c
The file: https://github.com/github/advisory-database/blob/495a5678d0934a9fc2047202e2999a981b261e4c/advisories/github-reviewed/2026/06/GHSA-q3jc-42cq-33fj/GHSA-q3jc-42cq-33fj.json
GHSA-7g64-f2hm-vjxp · published · io[.]apicurio:apicurio-registry-schema-util-common · HIGH · Apicurio Registry utilities allow SSRF and denial of service through XML parsing
Advisory: https://github.com/advisories/GHSA-7g64-f2hm-vjxp
The commit: https://github.com/github/advisory-database/commit/c17d5cb32d992acd951c598ed4d9a2a0679fd180
The file: https://github.com/github/advisory-database/blob/c17d5cb32d992acd951c598ed4d9a2a0679fd180/advisories/github-reviewed/2026/06/GHSA-7g64-f2hm-vjxp/GHSA-7g64-f2hm-vjxp.json
GHSA-rcmh-vfq7-8gf4 · published · io[.]apicurio:apicurio-registry-schema-util-wsdl · HIGH · Apicurio Registry allows upload of WSDL raising HTTP request 
Advisory: https://github.com/advisories/GHSA-rcmh-vfq7-8gf4
The commit: https://github.com/github/advisory-database/commit/fd60a4de4b7272f2342c6b37dd2a4778f722a899
The file: https://github.com/github/advisory-database/blob/fd60a4de4b7272f2342c6b37dd2a4778f722a899/advisories/github-reviewed/2026/06/GHSA-rcmh-vfq7-8gf4/GHSA-rcmh-vfq7-8gf4.json
GHSA-748j-wm96-4wh5 · published · io[.]apicurio:apicurio-registry-schema-util-xml · MODERATE · Apicurio Registry is vulnerable to denial of service through XML entity expansion
Advisory: https://github.com/advisories/GHSA-748j-wm96-4wh5
The commit: https://github.com/github/advisory-database/commit/53298e035bd2729cafe5a51d768fd8a32d7cbb17
The file: https://github.com/github/advisory-database/blob/53298e035bd2729cafe5a51d768fd8a32d7cbb17/advisories/github-reviewed/2026/06/GHSA-748j-wm96-4wh5/GHSA-748j-wm96-4wh5.json
GHSA-vqqj-9cmv-hx43 · changed · io[.]undertow:undertow-core · HIGH · Undertow is Vulnerable to HTTP Request/Response Smuggling
Advisory: https://github.com/advisories/GHSA-vqqj-9cmv-hx43
The commit: https://github.com/github/advisory-database/commit/7a766ee5a5ba897bab2181e56b8275e9cfb2349c
The file: https://github.com/github/advisory-database/blob/7a766ee5a5ba897bab2181e56b8275e9cfb2349c/advisories/github-reviewed/2026/03/GHSA-vqqj-9cmv-hx43/GHSA-vqqj-9cmv-hx43.json
GHSA-3gv6-g396-9v4r · changed · io[.]undertow:undertow-core · HIGH · Undertow is Vulnerable to HTTP Request/Response Smuggling
Advisory: https://github.com/advisories/GHSA-3gv6-g396-9v4r
The commit: https://github.com/github/advisory-database/commit/5dba8c957620db8b87373c076694d087e15d7904
The file: https://github.com/github/advisory-database/blob/5dba8c957620db8b87373c076694d087e15d7904/advisories/github-reviewed/2026/03/GHSA-3gv6-g396-9v4r/GHSA-3gv6-g396-9v4r.json
GHSA-8v4x-mgvp-p658 · changed · io[.]undertow:undertow-core · HIGH · Undertow is Vulnerable to HTTP Request/Response Smuggling
Advisory: https://github.com/advisories/GHSA-8v4x-mgvp-p658
The commit: https://github.com/github/advisory-database/commit/022d1a3e3c163d8ffc76af65f25890766077c527
The file: https://github.com/github/advisory-database/blob/022d1a3e3c163d8ffc76af65f25890766077c527/advisories/github-reviewed/2026/03/GHSA-8v4x-mgvp-p658/GHSA-8v4x-mgvp-p658.json
GHSA-cpm7-cfpx-3hvp · changed · gov[.]nsa[.]emissary:emissary · MODERATE · Emissary has Stored XSS via Navigation Template Link Injection
Advisory: https://github.com/advisories/GHSA-cpm7-cfpx-3hvp
The commit: https://github.com/github/advisory-database/commit/8112fa5b5b7559a0e8943561151e07470a3c385f
The file: https://github.com/github/advisory-database/blob/8112fa5b5b7559a0e8943561151e07470a3c385f/advisories/github-reviewed/2026/04/GHSA-cpm7-cfpx-3hvp/GHSA-cpm7-cfpx-3hvp.json
GHSA-6c37-7w4p-jg9v · changed · gov[.]nsa[.]emissary:emissary · HIGH · Emissary has a Command Injection via PLACE_NAME Configuration in Executrix
Advisory: https://github.com/advisories/GHSA-6c37-7w4p-jg9v
The commit: https://github.com/github/advisory-database/commit/8adf6e5342ddaa03a1abd50efc92ebb7b579ccd9
The file: https://github.com/github/advisory-database/blob/8adf6e5342ddaa03a1abd50efc92ebb7b579ccd9/advisories/github-reviewed/2026/04/GHSA-6c37-7w4p-jg9v/GHSA-6c37-7w4p-jg9v.json
GHSA-3p24-9x7v-7789 · changed · gov[.]nsa[.]emissary:emissary · HIGH · Emissary has an OS Command Injection via Unvalidated IN_FILE_ENDING / OUT_FILE_ENDING in Executrix
Advisory: https://github.com/advisories/GHSA-3p24-9x7v-7789
The commit: https://github.com/github/advisory-database/commit/5b0c85124f9b9941dd868281ae501e0f1af43c84
The file: https://github.com/github/advisory-database/blob/5b0c85124f9b9941dd868281ae501e0f1af43c84/advisories/github-reviewed/2026/04/GHSA-3p24-9x7v-7789/GHSA-3p24-9x7v-7789.json
GHSA-c6q7-wqw2-h65w · changed · gov[.]nsa[.]emissary:emissary · MODERATE · NationalSecurityAgency/emissary has an incomplete fix for CVE-2026-35571
Advisory: https://github.com/advisories/GHSA-c6q7-wqw2-h65w
The commit: https://github.com/github/advisory-database/commit/af48dd6ab7a731fb14bc7595633f963711f56d48
The file: https://github.com/github/advisory-database/blob/af48dd6ab7a731fb14bc7595633f963711f56d48/advisories/github-reviewed/2026/10/GHSA-c6q7-wqw2-h65w/GHSA-c6q7-wqw2-h65w.json
GHSA-p3fp-8748-vqfq · changed · Django · MODERATE · Django Vulnerable to Allocation of Resources Without Limits or Throttling
Advisory: https://github.com/advisories/GHSA-p3fp-8748-vqfq
The commit: https://github.com/github/advisory-database/commit/50abec1c963f54b5c2d98b878e2f098303d55c52
The file: https://github.com/github/advisory-database/blob/50abec1c963f54b5c2d98b878e2f098303d55c52/advisories/github-reviewed/2025/03/GHSA-p3fp-8748-vqfq/GHSA-p3fp-8748-vqfq.json
GHSA-8fcf-v89g-xpg6 · changed · github[.]com/traefik/traefik/v3 · github[.]com/traefik/traefik · MODERATE · Traefik: BasicAuth singleflight coalescing reintroduces an unauthenticated username-enumeration timing oracle
Advisory: https://github.com/advisories/GHSA-8fcf-v89g-xpg6
The commit: https://github.com/github/advisory-database/commit/23f656e6e34e93e7139a5410d318da166d406828
The file: https://github.com/github/advisory-database/blob/23f656e6e34e93e7139a5410d318da166d406828/advisories/github-reviewed/2026/09/GHSA-8fcf-v89g-xpg6/GHSA-8fcf-v89g-xpg6.json
GHSA-gfjv-gqf2-c888 · changed · github[.]com/gardener/gardener · MODERATE · Gardener: Authorization Bypass via Group Subject Injection
Advisory: https://github.com/advisories/GHSA-gfjv-gqf2-c888
The commit: https://github.com/github/advisory-database/commit/ac30616de113be598fed3bb7e191a7a3e6ebb5f6
The file: https://github.com/github/advisory-database/blob/ac30616de113be598fed3bb7e191a7a3e6ebb5f6/advisories/github-reviewed/2026/09/GHSA-gfjv-gqf2-c888/GHSA-gfjv-gqf2-c888.json
GHSA-fjwv-jf2v-j499 · changed · github[.]com/hatchet-dev/hatchet · MODERATE · Hatchet: SSRF via Unsigned UnsubscribeURL in SNS UnsubscribeConfirmation Handler
Advisory: https://github.com/advisories/GHSA-fjwv-jf2v-j499
The commit: https://github.com/github/advisory-database/commit/d5733ce882a9ba49496bd0dda44c271f74fff63f
The file: https://github.com/github/advisory-database/blob/d5733ce882a9ba49496bd0dda44c271f74fff63f/advisories/github-reviewed/2026/09/GHSA-fjwv-jf2v-j499/GHSA-fjwv-jf2v-j499.json
GHSA-phg3-3g28-wq9v · changed · github[.]com/hatchet-dev/hatchet · HIGH · Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState
Advisory: https://github.com/advisories/GHSA-phg3-3g28-wq9v
The commit: https://github.com/github/advisory-database/commit/19e0cb6241793d628a63cb215eb69946acd3eb28
The file: https://github.com/github/advisory-database/blob/19e0cb6241793d628a63cb215eb69946acd3eb28/advisories/github-reviewed/2026/09/GHSA-phg3-3g28-wq9v/GHSA-phg3-3g28-wq9v.json
Permanent record: https://flarereef.flareforward.com/n/430