Security advisories (GitHub reviewed)

November 3, 2026

On November 3, 2026, GitHub's security advisory list published 22 new advisories, changed 29, and withdrew 1. A security advisory is a public warning about a hole in a piece of software.

• GHSA-wp3j-xq48-xpjw
  Go · github[.]com/containers/podman/v5, github[.]com/containers/podman/v4 · HIGH · podman kube play symlink traversal vulnerability
  Advisory · The commit · The file
• GHSA-v653-r55g-hcmg
  crates[.]io · uv · MODERATE · uv has ZIP payload obfuscation through parsing differentials
  Advisory · The commit · The file
• GHSA-f23m-r3pf-42rh
  npm · lodash, lodash-es, lodash-amd, lodash[.]unset, lodash[.]omit · MODERATE · lodash vulnerable to prototype pollution via array-path bypass in `_[.]unset`, `_[.]omit`, and `_[.]pullAt
  Advisory · The commit · The file
• GHSA-2cvf-wqm6-wr9g
  Go · github[.]com/containers/podman/v4, go[.]podman[.]io/podman/v6, github[.]com/containers/podman/v5 · CRITICAL · Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation
  Advisory · The commit · The file
• GHSA-23f4-hfmq-94mj
  Maven · com[.]github[.]liuyueyi[.]media:batik-codec-fix · MODERATE · Quick-Media Batik Codec FIX Package has Vulnerability in PNG Codec
  Advisory · The commit · The file
• GHSA-4c5c-2vc3-x5w2
  PyPI · vantage6 · MODERATE · Vantage6: 2FA can be circumvented with hacked email access
  Advisory · The commit · The file
• GHSA-5549-c5q7-fj65
  PyPI · vantage6 · LOW · Vantage6: No limit on emails sent for password/MFA reset
  Advisory · The commit · The file
• GHSA-gg2p-37pv-v7fq
  PyPI · feast · CRITICAL · Feast vulnerable to arbitrary code execution via unsafe deserialization of dill-serialized UDFs
  Advisory · The commit · The file
• GHSA-263q-5cv3-xq9g
  Go · code[.]gitea[.]io/gitea · HIGH · Gitea allows attackers to add attachments with forbidden file extensions
  Advisory · The commit · The file
• GHSA-2fqr-mr3j-6wp8
  PyPI · aiohttp · LOW · aiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence
  Advisory · The commit · The file
• GHSA-m3qr-fvp4-78xj
  Go · github[.]com/basekick-labs/arc · LOW · Arc has unauthenticated application log disclosure via `/api/v1/logs`
  Advisory · The commit · The file
• GHSA-h26j-4vp7-x9w2
  NuGet · Metalama[.]Framework · HIGH · Metalama: Unsafe deserialization over Metalama's Visual Studio inter-process named pipe enables local code execution
  Advisory · The commit · The file
• GHSA-9ppr-wfw9-xvr2
  Go · github[.]com/tinfoil-factory/netfoil · MODERATE · Netfoil doesn't decrement TTL
  Advisory · The commit · The file
• GHSA-g27p-qf6j-c96c
  NuGet · Microsoft[.]AspNetCore[.]Components[.]WebAssembly[.]Server · HIGH · Microsoft Security Advisory CVE-2026-102870 - ASP[.]NET Core Remote Code Execution Vulnerability
  Advisory · The commit · The file
• GHSA-4mpw-cpwj-hxxj
  NuGet · Microsoft[.]NETCore[.]App[.]Runtime[.]win-arm64, Microsoft[.]NETCore[.]App[.]Runtime[.]win-x64, Microsoft[.]NETCore[.]App[.]Runtime[.]win-x86 · HIGH · Microsoft Security Advisory CVE-2026-70197 - .NET and Visual Studio Remote Code Execution Vulnerability
  Advisory · The commit · The file
• GHSA-9v8h-qqgm-4m35
  PyPI · brotli, brotlicffi · CRITICAL · Brotli: Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package
  Advisory · The commit · The file
• GHSA-g27p-qf6j-c96c
  NuGet · Microsoft[.]AspNetCore[.]Components[.]WebAssembly[.]Server · HIGH · Microsoft Security Advisory CVE-2026-102870 - ASP[.]NET Core Remote Code Execution Vulnerability
  Advisory · The commit · The file
• GHSA-gqj5-2xp5-3qmp
  Maven · org[.]keycloak:keycloak-services · HIGH · Duplicate Advisory: Authentication bypass via jwt algorithm confusion
  Advisory · The commit · The file
• GHSA-48v2-6jcm-fc99
  Go · github[.]com/mtzanidakis/praktor · HIGH · praktor: Path traversal in Telegram file uploads allows writing outside the agent workspace uploads/ directory (stored instruction injection)
  Advisory · The commit · The file
• GHSA-j97h-3f8r-mrjr
  Maven · org[.]keycloak:keycloak-services · HIGH · Keycloak has authentication bypass via jwt algorithm confusion
  Advisory · The commit · The file
• GHSA-p3jp-9v83-76w9
  NuGet · Microsoft[.]DotNet[.]ILCompiler, Microsoft[.]NETCore[.]App[.]Runtime[.]NativeAOT[.]ios-arm64, Microsoft[.]NETCore[.]App[.]Runtime[.]NativeAOT[.]iossimulator-arm64, Microsoft[.]NETCore[.]App[.]Runtime[.]NativeAOT[.]iossimulator-x64, Microsoft[.]NETCore[.]App[.]Runtime[.]NativeAOT[.]linux-bionic-arm64, Microsoft[.]NETCore[.]App[.]Runtime[.]NativeAOT[.]linux-bionic-x64, Microsoft[.]NETCore[.]App[.]Runtime[.]NativeAOT[.]maccatalyst-arm64, Microsoft[.]NETCore[.]App[.]Runtime[.]NativeAOT[.]maccatalyst-x64, Microsoft[.]NETCore[.]App[.]Runtime[.]NativeAOT[.]osx-arm64, Microsoft[.]NETCore[.]App[.]Runtime[.]NativeAOT[.]osx-x64, Microsoft[.]NETCore[.]App[.]Runtime[.]NativeAOT[.]tvos-arm64, Microsoft[.]NETCore[.]App[.]Runtime[.]NativeAOT[.]tvossimulator-arm64, Microsoft[.]NETCore[.]App[.]Runtime[.]NativeAOT[.]tvossimulator-x64, Microsoft[.]NETCore[.]App[.]Runtime[.]Mono[.]LLVM[.]linux-arm64, Microsoft[.]NETCore[.]App[.]Runtime[.]Mono[.]LLVM[.]linux-x64, Microsoft[.]NETCore[.]App[.]Runtime[.]Mono[.]LLVM[.]osx-x64, Microsoft[.]NETCore[.]App[.]Runtime[.]Mono[.]android-arm, Microsoft[.]NETCore[.]App[.]Runtime[.]Mono[.]android-arm64, Microsoft[.]NETCore[.]App[.]Runtime[.]Mono[.]android-x64, Microsoft[.]NETCore[.]App[.]Runtime[.]Mono[.]android-x86, Microsoft[.]NETCore[.]App[.]Runtime[.]Mono[.]browser-wasm, Microsoft[.]NETCore[.]App[.]Runtime[.]Mono[.]ios-arm64, Microsoft[.]NETCore[.]App[.]Runtime[.]Mono[.]iossimulator-arm64, Microsoft[.]NETCore[.]App[.]Runtime[.]Mono[.]iossimulator-x64, Microsoft[.]NETCore[.]App[.]Runtime[.]Mono[.]linux-arm, Microsoft[.]NETCore[.]App[.]Runtime[.]Mono[.]linux-arm64, Microsoft[.]NETCore[.]App[.]Runtime[.]Mono[.]linux-musl-x64, Microsoft[.]NETCore[.]App[.]Runtime[.]Mono[.]linux-x64, Microsoft[.]NETCore[.]App[.]Runtime[.]Mono[.]maccatalyst-arm64, Microsoft[.]NETCore[.]App[.]Runtime[.]Mono[.]maccatalyst-x64, Microsoft[.]NETCore[.]App[.]Runtime[.]Mono[.]multithread[.]browser-wasm, Microsoft[.]NETCore[.]App[.]Runtime[.]Mono[.]osx-arm64, Microsoft[.]NETCore[.]App[.]Runtime[.]Mono[.]osx-x64, Microsoft[.]NETCore[.]App[.]Runtime[.]Mono[.]tvos-arm64, Microsoft[.]NETCore[.]App[.]Runtime[.]Mono[.]tvossimulator-arm64, Microsoft[.]NETCore[.]App[.]Runtime[.]Mono[.]tvossimulator-x64, Microsoft[.]NETCore[.]App[.]Runtime[.]Mono[.]wasi-wasm, Microsoft[.]NETCore[.]App[.]Runtime[.]Mono[.]win-x64, Microsoft[.]NETCore[.]App[.]Runtime[.]Mono[.]win-x86, Microsoft[.]NETCore[.]App[.]Runtime[.]linux-arm, Microsoft[.]NETCore[.]App[.]Runtime[.]linux-arm64, Microsoft[.]NETCore[.]App[.]Runtime[.]linux-bionic-arm64, Microsoft[.]NETCore[.]App[.]Runtime[.]linux-bionic-x64, Microsoft[.]NETCore[.]App[.]Runtime[.]linux-musl-arm, Microsoft[.]NETCore[.]App[.]Runtime[.]linux-musl-arm64, Microsoft[.]NETCore[.]App[.]Runtime[.]linux-musl-x64, Microsoft[.]NETCore[.]App[.]Runtime[.]linux-x64, Microsoft[.]NETCore[.]App[.]Runtime[.]osx-arm64, Microsoft[.]NETCore[.]App[.]Runtime[.]osx-x64, Microsoft[.]NETCore[.]App[.]Runtime[.]win-arm64, Microsoft[.]NETCore[.]App[.]Runtime[.]win-x64, Microsoft[.]NETCore[.]App[.]Runtime[.]win-x86, Microsoft[.]NETCore[.]App[.]Runtime[.]NativeAOT[.]linux-arm, Microsoft[.]NETCore[.]App[.]Runtime[.]NativeAOT[.]linux-arm64, Microsoft[.]NETCore[.]App[.]Runtime[.]NativeAOT[.]linux-bionic-arm, Microsoft[.]NETCore[.]App[.]Runtime[.]NativeAOT[.]linux-musl-arm, Microsoft[.]NETCore[.]App[.]Runtime[.]NativeAOT[.]linux-musl-arm64, Microsoft[.]NETCore[.]App[.]Runtime[.]NativeAOT[.]linux-musl-x64, Microsoft[.]NETCore[.]App[.]Runtime[.]NativeAOT[.]linux-x64, Microsoft[.]NETCore[.]App[.]Runtime[.]NativeAOT[.]win-arm64, Microsoft[.]NETCore[.]App[.]Runtime[.]NativeAOT[.]win-x64, Microsoft[.]NETCore[.]App[.]Runtime[.]NativeAOT[.]win-x86, Microsoft[.]NETCore[.]App[.]Runtime[.]NativeAOT[.]android-arm, Microsoft[.]NETCore[.]App[.]Runtime[.]NativeAOT[.]android-arm64, Microsoft[.]NETCore[.]App[.]Runtime[.]NativeAOT[.]android-x64, Microsoft[.]NETCore[.]App[.]Runtime[.]android-arm64, Microsoft[.]NETCore[.]App[.]Runtime[.]android-x64, Microsoft[.]NETCore[.]App[.]Runtime[.]android-arm, Microsoft[.]NETCore[.]App[.]Runtime[.]browser-wasm, Microsoft[.]NETCore[.]App[.]Runtime[.]ios-arm64, Microsoft[.]NETCore[.]App[.]Runtime[.]iossimulator-arm64, Microsoft[.]NETCore[.]App[.]Runtime[.]iossimulator-x64, Microsoft[.]NETCore[.]App[.]Runtime[.]maccatalyst-arm64, Microsoft[.]NETCore[.]App[.]Runtime[.]maccatalyst-x64, Microsoft[.]NETCore[.]App[.]Runtime[.]tvos-arm64, Microsoft[.]NETCore[.]App[.]Runtime[.]tvossimulator-arm64, Microsoft[.]NETCore[.]App[.]Runtime[.]tvossimulator-x64 · HIGH · Microsoft Security Advisory CVE-2026-111497 - .NET Brotli Decoder Out-of-bounds Write Vulnerability
  Advisory · The commit · The file
• GHSA-8vvx-qvq9-5948
  npm · flowise · CRITICAL · Flowise allows arbitrary file write to RCE
  Advisory · The commit · The file
• GHSA-3gf5-cxq9-w223
  PyPI · picklescan · HIGH · Picklescan is missing detection when calling built-in python idlelib[.]pyshell[.]ModifiedInterpreter[.]runcode
  Advisory · The commit · The file
• GHSA-6933-jpx5-q87q
  npm · flowise · CRITICAL · Flowise has unsandboxed remote code execution via Custom MCP
  Advisory · The commit · The file
• GHSA-q67q-549q-p849
  npm · flowise · CRITICAL · Flowise has arbitrary file access due to missing chat flow id validation
  Advisory · The commit · The file
• GHSA-273h-m46v-96q4
  NuGet · Magick[.]NET-Q16-AnyCPU, Magick[.]NET-Q16-HDRI-AnyCPU, Magick[.]NET-Q16-HDRI-OpenMP-arm64, Magick[.]NET-Q16-HDRI-OpenMP-x64, Magick[.]NET-Q16-HDRI-arm64, Magick[.]NET-Q16-HDRI-x64, Magick[.]NET-Q16-HDRI-x86, Magick[.]NET-Q16-OpenMP-arm64, Magick[.]NET-Q16-OpenMP-x64, Magick[.]NET-Q16-OpenMP-x86, Magick[.]NET-Q16-arm64, Magick[.]NET-Q16-x64, Magick[.]NET-Q16-x86, Magick[.]NET-Q8-AnyCPU, Magick[.]NET-Q8-OpenMP-arm64, Magick[.]NET-Q8-OpenMP-x64, Magick[.]NET-Q8-arm64, Magick[.]NET-Q8-x64, Magick[.]NET-Q8-x86 · LOW · ImageMagick: Integer Overflow in PSB (PSD v2) RLE decoding path causes heap Out of Bounds reads for 32-bit builds
  Advisory · The commit · The file
• GHSA-c3hj-m5hq-59xw
  npm · flowise · CRITICAL · Duplicate Advisory : Flowise allows arbitrary file write to RCE
  Advisory · The commit · The file
• GHSA-mq7r-vm99-p7vx
  PyPI · picklescan · HIGH · Duplicate Advisory : Picklescan is missing detection when calling built-in python idlelib[.]pyshell[.]ModifiedInterpreter[.]runcode
  Advisory · The commit · The file
• GHSA-q2xp-j85q-883h
  npm · flowise · CRITICAL · Duplicate Advisory: Flowise has unsandboxed remote code execution via Custom MCP
  Advisory · The commit · The file
• GHSA-rg39-4fm5-hrp2
  NuGet · Magick[.]NET-Q8-x86 · MODERATE · Duplicate Advisory: ImageMagick: Integer Overflow in PSB (PSD v2) RLE decoding path causes heap Out of Bounds reads for 32-bit builds
  Advisory · The commit · The file
• GHSA-w5r9-j49j-2m55
  npm · flowise · CRITICAL · Duplicate Advisory : Flowise has arbitrary file access due to missing chat flow id validation
  Advisory · The commit · The file
• GHSA-q2hg-643c-gw8h
  PyPI · apache-airflow · HIGH · Withdrawn Advisory: Apache Airflow: RCE by race condition in example_xcom dag
  Advisory · The commit · The file
• GHSA-x9rp-7wh3-2rj5
  npm · @enspirit/elo · HIGH · Elo backends have code injection via unvalidated emission of programmatic AST fields
  Advisory · The commit · The file
• GHSA-33r5-xmm8-v6x5
  npm · @enspirit/elo · CRITICAL · Elo JavaScript emitter has sandbox escape to arbitrary Node[.]js / browser code execution via unfiltered `.constructor` member access
  Advisory · The commit · The file
• GHSA-7w38-ggh5-v542
  npm · @enspirit/elo · CRITICAL · Elo Ruby backend has Remote Code Execution via unescaped `#{...}` interpolation in emitted string literals and subtype-constraint labels
  Advisory · The commit · The file
• GHSA-m9cv-24rx-8mv7
  Packagist · filament/forms · HIGH · Filament: Disabled RichEditor field state can be used for XSS
  Advisory · The commit · The file
• GHSA-q6r4-3wmg-fwcq
  Go · github[.]com/containers/podman/v5, github[.]com/containers/podman/v4, github[.]com/containers/podman/v3 · MODERATE · Podman: WORKDIR symlink traversal vulnerability
  Advisory · The commit · The file
• GHSA-9c4c-g95m-c8cp
  npm · flowise · HIGH · FlowiseDB vulnerable to SQL Injection by authenticated users
  Advisory · The commit · The file
• GHSA-29hf-rm4x-xxph
  crates[.]io · mise · MODERATE · Mise's local credential_command executes untrusted config
  Advisory · The commit · The file
• GHSA-gh9r-c94j-cmp5
  PyPI · stanza · HIGH · Stanza: RCE via pickle deserialization in the lemmatizer
  Advisory · The commit · The file
• GHSA-68wq-phq7-p2vg
  Packagist · silverstripe/mfa · MODERATE · MultiFactor Authentication for SilverStripe can bypass MFA during password reset flow
  Advisory · The commit · The file
• GHSA-7pm4-56h2-5rxr
  PyPI · prefect · CRITICAL · Prefect has Git Flag Injection via commit_sha and directories Parameters Leading to Remote Code Execution (RCE)
  Advisory · The commit · The file
• GHSA-q63x-9pfm-mjx4
  PyPI · feast · CRITICAL · Feast vulnerable to unsafe deserialization RCE in registry server via UDF proto
  Advisory · The commit · The file
• GHSA-qj64-jj84-w38j
  Maven · org[.]apache[.]shiro:shiro-guice · HIGH · Apache Shiro shiro-guice module vulnerable to authentication bypass
  Advisory · The commit · The file
• GHSA-m8g6-vrr2-x7ff
  Maven · org[.]apache[.]shiro:shiro-core, org[.]apache[.]shiro:shiro-web · LOW · Apache Shiro's "remember me" cookie age is not verified on the server.
  Advisory · The commit · The file
• GHSA-p2gc-fm5w-94jj
  Maven · org[.]apache[.]qpid:proton-j · HIGH · Apache Qpid Proton-J: Unbounded type nesting can lead to pre-authentication stackoverflow
  Advisory · The commit · The file
• GHSA-57q6-fvp4-pqmm
  PyPI · open-webui · MODERATE · Open WebUI's API key endpoint restrictions bypassed via `x-api-key` header — full message processing on restricted endpoints
  Advisory · The commit · The file
• GHSA-x6vc-x4v4-hjhr
  Maven · org[.]apache[.]kerby:kerby-asn1 · MODERATE · Apache Kerby vulnerable to denial of service
  Advisory · The commit · The file
• GHSA-xrvj-h9w2-3q69
  Maven · org[.]apache[.]iotdb:iotdb-server · CRITICAL · Apache IoTDB has a Path Traversal vulnerability
  Advisory · The commit · The file
• GHSA-262p-fj3f-xh7v
  Maven · org[.]apache[.]kerby:kerb-server · HIGH · Apache Kerby has a bypass the Kerberos pre-authentication check
  Advisory · The commit · The file
• GHSA-h548-jhj8-q85h
  Maven · org[.]apache[.]iotdb:iotdb-server · CRITICAL · Apache IoTDB has a Path Traversal vulnerability
  Advisory · The commit · The file
• GHSA-72v2-v53v-4qmm
  Go · github[.]com/mattermost/mattermost/server/public · MODERATE · github[.]com/mattermost/mattermost/server/public vulnerable to path traversal in API route construction
  Advisory · The commit · The file

Permanent record

November 2, 2026

On November 2, 2026, GitHub's security advisory list published 2 new advisories, changed 16, and withdrew 0. A security advisory is a public warning about a hole in a piece of software.

• GHSA-f9j6-8p6x-r9j6
  npm · @sd-jwt/decode, @sd-jwt/core · HIGH · SD JWT JS: Tampered disclosures silently dropped instead of rejected
  Advisory · The commit · The file
• GHSA-j656-3hf2-fvjc
  npm · @bytebase/dbhub · MODERATE · DBHub: MySQL and MariaDB comment interpretation bypasses read-only SQL validation
  Advisory · The commit · The file
• GHSA-593v-wcqx-hq2w
  npm · parse-server · HIGH · Incorrect version tags linked to external repository
  Advisory · The commit · The file
• GHSA-62gx-5q78-wrvx
  npm · obsidian-local-rest-api · HIGH · obsidian-local-rest-api: Authenticated path traversal via URL-encoded %2F in /vault/{path} — arbitrary host file read/write/delete
  Advisory · The commit · The file
• GHSA-wcjj-9m6g-2fr2
  npm · functype-mcp-server · HIGH · functype-mcp-server: MCP `set_functype_version` Package Alias RCE via Unsanitized pnpm install + Dynamic Import
  Advisory · The commit · The file
• GHSA-2x63-gw47-w4mm
  RubyGems · websocket-driver · HIGH · websocket-driver-ruby: Denial of service via malformed Host header
  Advisory · The commit · The file
• GHSA-crwc-vw2r-qr6m
  Maven · ognl:ognl · MODERATE · OGNL stricter-invocation block list bypass via java[.]lang[.]reflect reflection proxies
  Advisory · The commit · The file
• GHSA-8mgp-746c-j5xp
  PyPI · nltk · HIGH · NLTK: Model-artifact APIs bypass pathsec and touch files outside allowed roots
  Advisory · The commit · The file
• GHSA-2vqw-3mp8-cgmx
  RubyGems · puma · HIGH · Puma PROXY Protocol v1 Accepts Repeated Protocol Headers on Persistent Connections
  Advisory · The commit · The file
• GHSA-qpgp-93vx-g8v8
  RubyGems · puma · HIGH · Puma PROXY Protocol v1 Parser Allows Remote Memory Exhaustion
  Advisory · The commit · The file
• GHSA-gm2x-2g9h-ccm8
  Go · github[.]com/go-git/go-git/v5 · LOW · go-git missing validation decoding Index v4 files leads to panic
  Advisory · The commit · The file
• GHSA-79qf-vqgc-7xx3
  npm · @apostrophecms/import-export · MODERATE · ApostropheCMS: Arbitrary file read via import-export attachment-name path traversal
  Advisory · The commit · The file
• GHSA-wg36-wvj6-r67p
  Packagist · composer/composer · HIGH · Composer has a command injection via malicious perforce repository
  Advisory · The commit · The file
• GHSA-2p5x-4jr6-x5jg
  Packagist · facturascripts/facturascripts · HIGH · FacturaScripts: CSV formula injection in CSVExport allows authenticated low-priv users to plant payloads that execute when an admin opens the export
  Advisory · The commit · The file
• GHSA-5qmh-x653-g8qj
  Packagist · facturascripts/facturascripts · CRITICAL · FacturaScripts: Authenticated SQL injection in the FacturaScripts REST API filter parameter via parenthesis bypass in `Where::sqlColumn`
  Advisory · The commit · The file
• GHSA-hgjx-r89m-m7v4
  Packagist · facturascripts/facturascripts · CRITICAL · FacturaScripts: Path traversal in UploadedFile::move() via getClientOriginalName() — arbitrary file write outside MyFiles/ leading to RCE
  Advisory · The commit · The file
• GHSA-6hcw-qqr8-pjj8
  PyPI · apache-airflow · HIGH · Apache Airflow: Authenticated users can bypass the `is_safe_url` check
  Advisory · The commit · The file
• GHSA-r4q5-vmmm-2653
  npm · follow-redirects · MODERATE · follow-redirects leaks Custom Authentication Headers to Cross-Domain Redirect Targets
  Advisory · The commit · The file

Permanent record

November 1, 2026

On November 1, 2026, GitHub's security advisory list published 0 new advisories, changed 0, and withdrew 0. A security advisory is a public warning about a hole in a piece of software.

Permanent record

October 31, 2026

On October 31, 2026, GitHub's security advisory list published 0 new advisories, changed 0, and withdrew 0. A security advisory is a public warning about a hole in a piece of software.

Permanent record

October 30, 2026

On October 30, 2026, GitHub's security advisory list published 0 new advisories, changed 0, and withdrew 0. A security advisory is a public warning about a hole in a piece of software.

Permanent record