CVE Notifier

CVE-2026-77608 CWE-79 6.1

Semantic MediaWiki has reflected XSS in `Special:SearchByProperty` (`property` and `value` parameters)

Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Prior to version 7.2.0, when the `value` parameter was reflected back into rendered output an…

cve.org SemanticMediaWiki:SemanticMediaWiki 1 hari lalu

CVE-2026-77240 CWE-639 9.9

WACRM: Database-layer authorization bypasses

WACRM is a self-hostable CRM template for WhatsApp. In version 0.7.0 and earlier, the profiles_update row-level security policy in supabase/migrations/017_account_sharing.sql permits authenticated users to modify their o…

cve.org ArnasDon:wacrm 1 hari lalu

CVE-2026-77606 CWE-79 6.1

Semantic MediaWiki has reflected XSS in Special:Ask plain table headers

Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Prior to version 7.2.0, when `headers=plain`, table header text was emitted into `<th>` via a…

cve.org SemanticMediaWiki:SemanticMediaWiki 1 hari lalu

CVE-2026-77301 CWE-789 7.5

adm-zip: Uncontrolled memory allocation via the declared uncompressed size (DoS)

adm-zip is a JavaScript library for creating and extracting ZIP archives in Node.js. Prior to 0.6.1, getData() in zipEntry.js trusts an entry's central-directory uncompressed size and allocates output memory before valid…

cve.org cthackers:adm-zip 1 hari lalu

CVE-2026-93579 CWE-1035 6.5

Io.netty/netty-codec-http2: netty: http/2 header field values are not validated by default (cr/lf/nul passthrough)

A flaw was found in Netty's HTTP/2 stack. This vulnerability allows a remote attacker to inject prohibited characters, such as NUL, Line Feed, and Carriage Return, into HTTP/2 header field values due to insufficient vali…

cve.org Red · Hat:Red · Hat 1 hari lalu

CVE-2026-77339 CWE-306 N/A

Process Compose: Browser DNS rebinding lets websites control local process-compose MCP tools

Process Compose is a scheduler and orchestrator for non-containerized applications. Prior to 1.120.0, the MCP SSE listener in src/mcp/server.go accepts browser-origin requests to /sse and the returned message endpoint wi…

cve.org F1bonacc1:process-compose 1 hari lalu

CVE-2026-58197 CWE-284 8.8

ToolHive: containerized MCP servers can reach host services via host.docker.internal, enabling lateral movement

ToolHive is a utility designed to simplify the deployment and management of Model Context Protocol servers. Prior to ToolHive CLI 0.30.1 and ToolHive Studio 0.38.0, locally run MCP server containers use the default netwo…

cve.org stacklok:toolhive · stacklok:toolhive-studio 1 hari lalu

CVE-2026-61795 CWE-697 6.8

Capsule: hostnameRegexHandler.OnUpdate validates stale (old) Tenant regex, allowing invalid AllowedHostnames regex to bypass webhook validation

Capsule is a multi-tenancy and policy-based framework for Kubernetes. From 0.13.0 until 0.13.7, hostnameRegexHandler.OnUpdate in internal/webhook/tenant/validation/hostname_regex.go reverses the new and old Tenant parame…

cve.org projectcapsule:capsule 1 hari lalu

CVE-2026-93534 CWE-494 6.3

spatie Scotty Self Update SelfUpdater.php update code download

A vulnerability was identified in spatie Scotty up to 1.4.2. Affected is the function SelfUpdater::update of the file app/Updater/SelfUpdater.php of the component Self Update Handler. Such manipulation leads to download …

cve.org spatie:Scotty 1 hari lalu

CVE-2026-61672 CWE-697 7.1

Capsule: Tenant owner bypasses Capsule's forbidden namespace/service/node label and annotation enforcement

Capsule is a multi-tenancy and policy-based framework for Kubernetes. Prior to 0.13.7, ForbiddenListSpec.ExactMatch in pkg/api/forbidden_list.go sorts denied metadata keys case-insensitively and then uses sort.SearchStri…

cve.org projectcapsule:capsule 1 hari lalu

CVE-2026-61794 CWE-20 6.8

Capsule: Malformed ForbiddenAnnotations.Regex can bypass Tenant validation and trigger namespace admission panic

Capsule is a multi-tenancy and policy-based framework for Kubernetes. From 0.13.0 until 0.13.7, the Tenant update validation in internal/webhook/tenant/validation/forbidden_annotations_regex.go compiles ForbiddenLabels.R…

cve.org projectcapsule:capsule 1 hari lalu

CVE-2026-62943 CWE-78 N/A

btrbk: SSH Command Filter Bypass in ssh_filter_btrbk.sh

btrbk is a tool for creating snapshots and remote backups of Btrfs subvolumes. From 0.29.0 until 0.32.7, btrbk's ssh_filter_btrbk.sh constructs allow_stream_match with a start anchor but without an end-of-string anchor f…

cve.org digint:btrbk 1 hari lalu