CVE Notifier

CVE-2026-45143 CWE-79 9.0

Chamilo LMS: Student-to-admin stored XSS in private messages via v-html

Chamilo LMS is an open-source learning management system. From 2.0.0 through at least 2.1.0, Chamilo LMS stores private Message.content without server-side sanitization and renders it as HTML in assets/vue/views/message/…

cve.org chamilo:chamilo-lms 3 hari lalu

CVE-2026-54460 CWE-306 9.8

OpenReception: Unauthenticated WebAuthn passkey injection via `POST /api/auth/passkeys` leads to account takeover

OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to 1.1.1, POST /api/auth/passkeys accepts a request-body userId and attacker-supplied passkey without an a…

cve.org open-reception:appointment-booking-software 3 hari lalu

CVE-2026-50022 CWE-441 5.8

Metacat acts as unintended proxy to backend Apache SOLR engine

Metacat is data repository software that helps researchers preserve, share, and discover data. Prior to 3.4.2, MetacatSolrIndex.query forwards the client-controlled qt parameter through Apache SolrJ from search endpoints…

cve.org NCEAS:metacat 3 hari lalu

CVE-2026-50275 CWE-770 7.5

Datadog PHP Tracer: Improper parsing of W3C baggage headers may lead to DoS

The Datadog PHP Tracer provides application performance monitoring and distributed tracing for PHP. Prior to 1.19.2, ddtrace_deserialize_baggage in ext/distributed_tracing_headers.c parses incoming W3C baggage HTTP heade…

cve.org DataDog:dd-trace-php 3 hari lalu

CVE-2026-54918 CWE-15 5.3

NetBox Device Type Library: PR-controllable upstream clone URL (NETBOX_DT_LIBRARY_URL) enables SSRF and test-data substitution from CI

NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. In the affected repository revisions, NETBOX_DT_LIBRARY_URL in tests/test_configuration.py is a free-form tr…

cve.org netbox-community:devicetype-library 3 hari lalu

CVE-2026-54916 CWE-427 8.8

NetBox Device Type Library: Module Shadowing Bypass of prior pickle fix - RCE via missing `tests/__init__.py` + SSRF via unfixed `NETBOX_DT_LIBRARY_URL` → Cloud Metadata credential theft

NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. The absence of tests/init.py and the lack of --import-mode=importlib cause pytest prepend import mode to pla…

cve.org netbox-community:devicetype-library 3 hari lalu

CVE-2026-54752 CWE-502 9.6

NetBox Device Type Library: Insecure Pickle Deserialization in Test Suite Allows Remote Code Execution via Malicious Pull Request

NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. The validation test harness can deserialize pull-request-controlled tracked pickle cache files through pickl…

cve.org netbox-community:devicetype-library 3 hari lalu

CVE-2026-50125 CWE-400 7.5

MKP: Unbounded Pod Log Read via Attacker-Controlled `limitBytes`/`tailLines` Causes Memory Exhaustion

MKP is a Model Context Protocol server for Kubernetes. Prior to 0.4.1, cmd/server/main.go exposes the default HTTP endpoint and pkg/mcp/server.go registers the unauthenticated get_resource tool, which accepts attacker-co…

cve.org StacklokLabs:mkp 3 hari lalu

CVE-2026-54594 CWE-799 N/A

OmniBlocks: Spamming in Discussions tab possible via disc.yml

OmniBlocks is a monorepo for the OmniBlocks project. Prior to the June 6, 2026 workflow remediation, .github/workflows/disc.yml runs for the issues opened event and the issues edited event and invokes the createDiscussio…

cve.org OmniBlocks:monorepo 3 hari lalu

CVE-2026-50285 CWE-1284 7.5

Pomerium: Pre-Auth Memory Exhaustion via Unbounded zstd Decompression in HPKE Callback

Pomerium is an identity and context-aware access proxy. Prior to 0.32.8, decodeQueryStringV2 in pkg/hpke/url.go performs zstd decompression of attacker-controlled data without an output-memory limit when DecryptURLValues…

cve.org pomerium:pomerium 3 hari lalu

CVE-2026-54692 CWE-131 7.8

SAIL: XBM X10 decoder writes 2 bytes per literal into a 1-byte-per-literal buffer (heap out-of-bounds write)

SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. Prior to 1.0.0, sail_codec_load_frame_v8_xbm() in src/sail-codecs/xbm/xbm.c allocates the decoded pix…

cve.org HappySeaFox:sail 3 hari lalu

CVE-2026-54627 CWE-122 9.8

SAIL: Heap out-of-bounds write in SAIL PSD decoder (Bitmap mode ignores depth)

SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. In 0.9.10 and earlier, psd_private_sail_pixel_format() in src/sail-codecs/psd/helpers.c resolves a on…

cve.org HappySeaFox:sail 3 hari lalu