November 9, 2026
November 9, 2026
On November 9, 2026, GitHub's security advisory list published 45 new advisories, changed 23, and withdrew 0. A security advisory is a public warning about a hole in a piece of software.
- GHSA-rfx3-98h7-v3xpNuGet · Marten · CRITICAL · Marten's LINQ provider has SQL injection via unescaped string literals
- GHSA-8fxw-fmj8-xp7jPackagist · mongodb/mongodb · MODERATE · MongoDB: GridFS data disclosure and deletion via query-operator injection in file IDs
- GHSA-w7qv-268h-9h3fPyPI · loggingredactor · HIGH · Logging Redactor: PII data in str/repr of non primitive objects was not being redacted
- GHSA-52c6-99qm-3hqrMaven · org[.]zeroturnaround:zt-zip · HIGH · zt-zip: Path traversal in fluent API unpack
- GHSA-h667-4jj2-cgv4PyPI · fastapi-code-generator · CRITICAL · fastapi-code-generator: Call-time RCE via operation summary -> unescaped route-handler docstring
- GHSA-6xmv-cjr5-w3q8PyPI · fastapi-code-generator · CRITICAL · fastapi-code-generator: Import-time RCE via response status-code key -> unescaped @app[.]get(..., responses={...}) dict
- GHSA-p2mm-64f6-gmppPyPI · fastapi-code-generator · CRITICAL · fastapi-code-generator: Import-time RCE via route path -> unescaped @app[.]get('...') decorator
- GHSA-9qw7-j9xw-fv9cnpm · isomorphic-git · HIGH · isomorphic-git: Arbitrary file write outside of working tree via directory symlink during checkout (potential RCE)
- GHSA-jwjp-4649-v8jpNuGet · SIPSorcery · HIGH · SIPSorcery vulnerable to Denial of Service via out-of-bounds read in SCTP SACK chunk parsing
- GHSA-96wc-2m84-2cj7npm · isomorphic-git · MODERATE · isomorphic-git: Circular symbolic references cause non-terminating resolution (DoS)
- GHSA-cw2g-2vwq-88w6npm · isomorphic-git · MODERATE · isomorphic-git: Path traversal via a ".." tree-entry name writes files outside the working directory on clone/checkout
- GHSA-qp9x-wp8f-qgjjPyPI · tuf · MODERATE · tuf has platform-dependent delegation path matching
- GHSA-4xm8-rg9h-jhq2npm · signalk-server, @signalk/resources-provider · CRITICAL · Signal K resources API path traversal can disclose the JWT signing secret and enable remote code execution
- GHSA-p74g-f95m-7fx7Go · github[.]com/traPtitech/traQ · HIGH · traQ: XSS in the User Uploaded File Retrieval API
- GHSA-xrmj-5g4g-8987npm · @dynatrace-oss/dynatrace-mcp-server · MODERATE · @dynatrace-oss/dynatrace-mcp-server has a workflow template injection via create_workflow_for_notification
- GHSA-8cfq-jgf7-8m27Go · github[.]com/traPtitech/traQ · HIGH · traQ: Privilege escalation by OAuth prompt=none request
- GHSA-pqh8-p93p-2rx7npm · @dynatrace-oss/dynatrace-mcp-server · MODERATE · @dynatrace-oss/dynatrace-mcp-server has a DQL injection via parameters not documented as DQL
- GHSA-p7w7-4929-vpj5npm · @dynatrace-oss/dynatrace-mcp-server · HIGH · `@dynatrace-oss/dynatrace-mcp-server` has Unauthenticated HTTP MCP Tool Invocation
- GHSA-v2g6-7r9j-v6pxMaven · org[.]zeroturnaround:zt-zip · MODERATE · zt-zip: ZipUtil[.]unpack can change file permissions of output directory
- GHSA-jq7h-wrvp-3rgxPyPI · pyload-ng · HIGH · pyLoad: Privilege revocation and password change through the REST API do not invalidate the user's session
- GHSA-p3pr-8f3m-4qp8PyPI · pyload-ng · MODERATE · pyLoad WindowsPhoneNotify addon: non-admin SETTINGS user triggers SSRF via unguarded http[.]client notification host
- GHSA-6w3r-6hpr-hp6pnpm · ag-psd · HIGH · ag-psd: Uncontrolled Memory Allocation in PSD Layer Decoding (totalMemoryLimit bypass)
- GHSA-fr26-jjhm-638cPyPI · pyload-ng · HIGH · pyLoad: Tar extraction creates device nodes and FIFOs (member types not filtered; tarfile extractall without filter=)
- GHSA-447x-qqwf-m7xqnpm · @tsparticles/mcp-server · HIGH · tsParticles: Unbounded HTTP Request Body Buffering in @tsparticles/mcp-server Leads to Remote DoS
- GHSA-ghc9-756g-vrcvMaven · org[.]json:json · MODERATE · JSON-java: JSONTokener Has Unbounded Numeric String Resource-Exhaustion DoS
- GHSA-r44w-v6gf-x3p6PyPI · pyload-ng · HIGH · pyLoad has an authentication bypass in API key validation (check_apikey cache)
- GHSA-4p8p-pjpq-2w7hnpm · @tsparticles/mcp-server · HIGH · tsParticles: Malformed JSON requests can terminate the @tsparticles/mcp-server HTTP process
- GHSA-h7c4-q426-7jh9npm · @tsparticles/mcp-server · MODERATE · tsParticles: A single anonymous MCP session can monopolize HTTP mode and deny new clients
- GHSA-39wr-7q6h-cf68PyPI · lmdeploy · HIGH · LMDeploy has an SSRF bypass
- GHSA-2g87-pp6c-29x5PyPI · aiohttp · HIGH · aiohttp: Multiple instances of excessive or unbounded memory/CPU use
- GHSA-56x6-q882-mf27Go · github[.]com/umputun/remark42/backend, github[.]com/umputun/remark42 · MODERATE · Remark42: Rate limit bypass via unconditional trust of X-Forwarded-For/X-Real-IP headers in direct-internet deployment
- GHSA-q4xm-p75h-h9p3Go · github[.]com/pocket-id/pocket-id/backend · HIGH · Pocket ID: The client credentials grant allows any OIDC client to obtain tokens for arbitrary audiences
- GHSA-92hv-j533-69wcPyPI · wagtail · LOW · Wagtail: Identification of documents by SHA1 hash
- GHSA-jm5p-837g-rv8gPyPI · wagtail · MODERATE · Wagtail: Improper restriction handling on Page translation API endpoint
- GHSA-x5cx-w6p2-mxf2PyPI · wagtail · MODERATE · Wagtail: Improper permission handling when copying snippets
- GHSA-vvr2-h2jp-838mPyPI · code-graph-rag · HIGH · Code Graph RAG: MCP paginated read_file path traversal / arbitrary file read
- GHSA-fhp4-pr5j-46m5npm · muhammara · HIGH · Muhammara has a NULL pointer dereference in LZWDecode filter when DecodeParms omits EarlyChange key
- GHSA-rrh3-cwwj-g5mgPyPI · cornac · HIGH · Cornac: Path Traversal via _extract_archive() in download[.]py
- GHSA-m27g-v28p-f9fxRubyGems · omniauth · MODERATE · OmniAuth: Host Header Injection Vulnerability
- GHSA-rr8v-fxxf-c986Maven · com[.]gradleup[.]shadow:com[.]gradleup[.]shadow[.]gradle[.]plugin · HIGH · Gradle Shadow: Zip Slip path traversal in ShadowCopyAction — no independent entry-name sanitization
- GHSA-wchh-mrv2-5h4qGo · github[.]com/mayswind/ezbookkeeping · MODERATE · ezBookkeeping: Source-IP allowlist (MCP & API token) is bypassable via a spoofed `X-Forwarded-For` header
- GHSA-f42p-wjw5-97qhPyPI · zizmor · HIGH · zizmor: Debug logging prints available GitHub credentials in cleartext
- GHSA-6j3h-rp73-6rvfGo · github[.]com/telepresenceio/telepresence/v2 · HIGH · Telepresence: Tunnel endpoint accepts caller-supplied session ID with no ownership proof — active client sessions hijackable
- GHSA-j8j4-rw65-56r6Go · github[.]com/telepresenceio/telepresence · HIGH · Telepresence: Traffic Manager gRPC has no auth — any pod claims arbitrary namespace and intercepts services, receiving victim environment secrets
- GHSA-9vhv-g5hf-m7m7PyPI · fast-agent-mcp · MODERATE · fast-agent: `fast-agent serve` binds HTTP to 0.0.0.0 with no authentication by default; with --shell this is unauthenticated remote command execution
- GHSA-g3c2-rjq2-c763Go · github[.]com/esm-dev/esm[.]sh/web · HIGH · esm[.]sh: web[.]NewHandler allows arbitrary file read via encoded dot-segment path traversal
- GHSA-cp25-j9x5-p5xmPyPI · urwid · MODERATE · Urwid: handle_short_request() crashes on non-ASCII POST body (UnicodeEncodeError DoS)
- GHSA-xjw9-38cr-6372PyPI · djust · HIGH · djust: A template binding inherits a context safety grant it never earned (XSS)
- GHSA-vj8v-p5vw-m6v5PyPI · xrootd · MODERATE · xrootd has path traversal in directory listing that allows access to the parent directory via trailing ".." pattern
- GHSA-rm8c-2cv8-jwf6Go · github[.]com/pocket-id/pocket-id/backend · CRITICAL · Pocket ID: Email verification token remains valid after address change, enabling arbitrary verified-email spoofing
- GHSA-4x48-cgf9-q33fnpm · @novu/api · HIGH · Novu has SSRF via conditions filter webhook bypasses validateUrlSsrf() protection
- GHSA-vg6v-j97m-h5xqnpm · @novu/application-generic · MODERATE · @novu/application-generic: `validateUrlSsrf` permits CGNAT (100.64.0.0/10) destinations — affects Workflow HTTP request step + Webhook filter condition
- GHSA-85gg-2gfq-q95mPyPI · code-graph-rag · HIGH · Code Graph RAG structural tools follow out-of-root symlinks
- GHSA-f74m-x83r-c4v4Packagist · filegator/filegator · MODERATE · FileGator: Missing authorization in GET /batchdownload allows cross-user retrieval of another user's archive
- GHSA-gj9m-f8ph-pmhrPyPI · gpustack · CRITICAL · GPUStack: Authentication bypass via trusted loopback source (reverse-proxy TCP peer or X-GPUStack-Real-IP header) grants unauthenticated admin
- GHSA-44r8-3p76-84mwPackagist · filegator/filegator · MODERATE · FileGator: Missing authorization in POST /upload allows cross-user read and deletion of temporary files
- GHSA-9qq5-422f-33c2Go · www[.]velocidex[.]com/golang/velociraptor · MODERATE · Velociraptor: Low-priv analyst reads arbitrary server files via ungated sql() VQL plugin
- GHSA-rjr3-43j3-4q8gGo · github[.]com/kubeflow/pipelines · CRITICAL · Kubeflow Pipelines API server lacks authorization for shared pipeline uploads
- GHSA-h89v-g948-47vpnpm · moleculer · HIGH · Moleculer: Unauthenticated Denial of Service via negative length field in the TCP transporter packet parser
- GHSA-9hq4-hm3j-jmphGo · github[.]com/ddev/ddev · HIGH · DDEV incomplete tar symlink traversal fix allows host file overwrite - Incomplete fix of CVE-2026-32885
- GHSA-x89h-7h96-v88fGo · github[.]com/schollz/croc/v11, github[.]com/schollz/croc/v10, github[.]com/schollz/croc/v9, github[.]com/schollz/croc/v8, github[.]com/schollz/croc/v6, github[.]com/schollz/croc · MODERATE · croc: Overwrite-confirmation bypass via a crafted "croc-stdin-" filename on receive
- GHSA-2xwh-426q-42c5Go · github[.]com/kubeflow/pipelines · MODERATE · Kubeflow Pipelines: Cross-tenant execution-cache poisoning / output substitution via a namespace-blind cache key in the cache webhook (multi-user)
- GHSA-5xjx-9qx6-jcrvnpm · @anthropic-ai/claude-code · HIGH · Claude Code: TOCTOU Race in Edit Tool Allows File Writes Outside the Workspace
- GHSA-f7vj-6669-qvv4Go · github[.]com/kubeflow/pipelines · MODERATE · Kubeflow Pipelines — API server fetches a caller-supplied pipelineURL without host validation
- GHSA-ghgh-57qv-h687Go · github[.]com/kubeflow/pipelines · HIGH · Kubeflow Pipelines: RBAC bypass on shared pipelines allows any authenticated user to delete or modify global pipelines
- GHSA-gcwf-c25f-p9rvPyPI · kiwitcms · MODERATE · Kiwi TCMS account confirmation open redirect through protocol-relative URLs
- GHSA-g3qx-frcg-j979Go · github[.]com/kubeflow/pipelines · MODERATE · Kubeflow Pipelines: Reflected XSS in the frontend pod information and events error responses
- GHSA-r4mx-2gr2-8277Go · github[.]com/kubeflow/pipelines · MODERATE · Kubeflow Pipelines: SQL injection through unvalidated pagination tokens in Kubeflow Pipelines API server