Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
21265 vulnerabilities
CVE-2026-97381 (GCVE-0-2026-97381)
Vulnerability from cvelistv5 – Published: 2026-10-13 21:08 – Updated: 2026-10-13 21:08
VLAI
EPSS
VEX
Title
Legacy Update ActiveX control accepts unauthorized hosting origins
Summary
Legacy Update is a tool for activating and installing updates on legacy Windows PCs. Legacy Update 1.12.0 through 1.13.1 contains an origin validation error in the IsPermitted method of its ActiveX control. After successfully reading the hosting document's hostname, a hostname that is not on the permitted list falls through without setting E_ACCESSDENIED, causing IsPermitted to return S_OK. An attacker who induces a user to visit a malicious webpage in Internet Explorer can invoke the control to enumerate update and system information, install updates without consent, display dialogs, or restart the computer when a reboot is pending. This issue was fixed in Legacy Update 1.13.2.
Severity
9.9 (Critical)
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://github.com/LegacyUpdate/LegacyUpdate/secu… | x_refsource_CONFIRM |
| https://github.com/LegacyUpdate/LegacyUpdate/comm… | x_refsource_MISC |
| https://github.com/LegacyUpdate/LegacyUpdate/comm… | x_refsource_MISC |
| https://github.com/LegacyUpdate/LegacyUpdate/rele… | x_refsource_MISC |
| https://legacyupdate.net/news/2026/07/21/legacy-u… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| LegacyUpdate | LegacyUpdate |
Affected:
>= 1.12.0, < 1.13.2
|
{
"containers": {
"cna": {
"affected": [
{
"product": "LegacyUpdate",
"vendor": "LegacyUpdate",
"versions": [
{
"status": "affected",
"version": "\u003e= 1.12.0, \u003c 1.13.2"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Legacy Update is a tool for activating and installing updates on legacy Windows PCs. Legacy Update 1.12.0 through 1.13.1 contains an origin validation error in the IsPermitted method of its ActiveX control. After successfully reading the hosting document\u0027s hostname, a hostname that is not on the permitted list falls through without setting E_ACCESSDENIED, causing IsPermitted to return S_OK. An attacker who induces a user to visit a malicious webpage in Internet Explorer can invoke the control to enumerate update and system information, install updates without consent, display dialogs, or restart the computer when a reboot is pending. This issue was fixed in Legacy Update 1.13.2."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.9,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-346",
"description": "CWE-346: Origin Validation Error",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-393",
"description": "CWE-393: Return of Wrong Status Code",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T21:08:05.334Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/LegacyUpdate/LegacyUpdate/security/advisories/GHSA-f4g7-4gmx-jfgf",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/LegacyUpdate/LegacyUpdate/security/advisories/GHSA-f4g7-4gmx-jfgf"
},
{
"name": "https://github.com/LegacyUpdate/LegacyUpdate/commit/7d62f0bfaa770d74cd6e2cb0bac9c1907df48033",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/LegacyUpdate/LegacyUpdate/commit/7d62f0bfaa770d74cd6e2cb0bac9c1907df48033"
},
{
"name": "https://github.com/LegacyUpdate/LegacyUpdate/commit/ae1c46c97f39a55a1937784d9f9beb30aa9147fd",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/LegacyUpdate/LegacyUpdate/commit/ae1c46c97f39a55a1937784d9f9beb30aa9147fd"
},
{
"name": "https://github.com/LegacyUpdate/LegacyUpdate/releases/tag/v1.13.2.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/LegacyUpdate/LegacyUpdate/releases/tag/v1.13.2.0"
},
{
"name": "https://legacyupdate.net/news/2026/07/21/legacy-update-1-13-2",
"tags": [
"x_refsource_MISC"
],
"url": "https://legacyupdate.net/news/2026/07/21/legacy-update-1-13-2"
}
],
"source": {
"advisory": "GHSA-f4g7-4gmx-jfgf",
"discovery": "UNKNOWN"
},
"title": "Legacy Update ActiveX control accepts unauthorized hosting origins"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-97381",
"datePublished": "2026-10-13T21:08:05.334Z",
"dateReserved": "2026-09-24T14:16:20.201Z",
"dateUpdated": "2026-10-13T21:08:05.334Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-108388 (GCVE-0-2026-108388)
Vulnerability from cvelistv5 – Published: 2026-10-13 20:27 – Updated: 2026-10-13 20:27
VLAI
EPSS
VEX
Title
Indico legacy contribution export cache poisoning discloses restricted metadata
Summary
Indico is a feature-rich event management system. Indico 3.3.3 through 3.3.13 incorrectly uses the ambient web-session user instead of the user supplied to Contribution.can_manage when checking inherited event contribution-management permission. A low-privileged user can induce a privileged user to request a crafted legacy contribution export and cause speaker or author email addresses and contribution access-control entries to be stored in an API cache entry retrievable with less privilege. This issue was fixed in Indico 3.3.14.
Severity
CWE
- CWE-863 - Incorrect Authorization
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/indico/indico/security/advisor… | x_refsource_CONFIRM |
| https://github.com/indico/indico/commit/0e71da31f… | x_refsource_MISC |
| https://github.com/indico/indico/commit/5985cfa65… | x_refsource_MISC |
| https://github.com/indico/indico/releases/tag/v3.3.14 | x_refsource_MISC |
{
"containers": {
"cna": {
"affected": [
{
"product": "indico",
"vendor": "indico",
"versions": [
{
"status": "affected",
"version": "\u003e= 3.3.3, \u003c 3.3.14"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Indico is a feature-rich event management system. Indico 3.3.3 through 3.3.13 incorrectly uses the ambient web-session user instead of the user supplied to Contribution.can_manage when checking inherited event contribution-management permission. A low-privileged user can induce a privileged user to request a crafted legacy contribution export and cause speaker or author email addresses and contribution access-control entries to be stored in an API cache entry retrievable with less privilege. This issue was fixed in Indico 3.3.14."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.5,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-863",
"description": "CWE-863: Incorrect Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T20:27:36.919Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/indico/indico/security/advisories/GHSA-p9vj-86c7-h7q3",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/indico/indico/security/advisories/GHSA-p9vj-86c7-h7q3"
},
{
"name": "https://github.com/indico/indico/commit/0e71da31fc21d0ed0ce687cce5b745ba2fad0b92",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/indico/indico/commit/0e71da31fc21d0ed0ce687cce5b745ba2fad0b92"
},
{
"name": "https://github.com/indico/indico/commit/5985cfa65a3441b7d3ca4ef1a9dc177c82ea0f26",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/indico/indico/commit/5985cfa65a3441b7d3ca4ef1a9dc177c82ea0f26"
},
{
"name": "https://github.com/indico/indico/releases/tag/v3.3.14",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/indico/indico/releases/tag/v3.3.14"
}
],
"source": {
"advisory": "GHSA-p9vj-86c7-h7q3",
"discovery": "UNKNOWN"
},
"title": "Indico legacy contribution export cache poisoning discloses restricted metadata"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-108388",
"datePublished": "2026-10-13T20:27:36.919Z",
"dateReserved": "2026-10-09T21:36:27.043Z",
"dateUpdated": "2026-10-13T20:27:36.919Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-104252 (GCVE-0-2026-104252)
Vulnerability from cvelistv5 – Published: 2026-10-13 19:22 – Updated: 2026-10-13 19:22
VLAI
EPSS
VEX
Title
Vitess vttablet /twopcz reflected XSS
Summary
Vitess is a database clustering system for horizontal scaling of MySQL. Prior to 23.0.5 and 24.0.2, twopczHandler in go/vt/vttablet/tabletserver/twopcz.go writes the Action and dtid form values from the vttablet and vtcombo /twopcz HTTP debug endpoint into a text/html response without HTML escaping. Under the default allow-all ACL policy, a remote unauthenticated attacker can send an operator a crafted request that executes script in the operator's browser after the request is opened. The script runs with the vttablet debug origin and can read same-origin diagnostic endpoints that expose query, transaction, environment, variable, or profiling data available in that deployment. This issue is fixed in versions 23.0.5 and 24.0.2.
Severity
9.8 (Critical)
CWE
- CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Assigner
References
9 references
| URL | Tags |
|---|---|
| https://github.com/vitessio/vitess/security/advis… | x_refsource_CONFIRM |
| https://github.com/vitessio/vitess/pull/20255 | x_refsource_MISC |
| https://github.com/vitessio/vitess/pull/20273 | x_refsource_MISC |
| https://github.com/vitessio/vitess/pull/20274 | x_refsource_MISC |
| https://github.com/vitessio/vitess/commit/3140c18… | x_refsource_MISC |
| https://github.com/vitessio/vitess/commit/976e1e0… | x_refsource_MISC |
| https://github.com/vitessio/vitess/commit/c1ed963… | x_refsource_MISC |
| https://github.com/vitessio/vitess/releases/tag/v23.0.5 | x_refsource_MISC |
| https://github.com/vitessio/vitess/releases/tag/v24.0.2 | x_refsource_MISC |
Impacted products
{
"containers": {
"cna": {
"affected": [
{
"product": "vitess",
"vendor": "vitessio",
"versions": [
{
"status": "affected",
"version": "\u003c 23.0.5"
},
{
"status": "affected",
"version": "\u003e= 24.0.0, \u003c 24.0.2"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Vitess is a database clustering system for horizontal scaling of MySQL. Prior to 23.0.5 and 24.0.2, twopczHandler in go/vt/vttablet/tabletserver/twopcz.go writes the Action and dtid form values from the vttablet and vtcombo /twopcz HTTP debug endpoint into a text/html response without HTML escaping. Under the default allow-all ACL policy, a remote unauthenticated attacker can send an operator a crafted request that executes script in the operator\u0027s browser after the request is opened. The script runs with the vttablet debug origin and can read same-origin diagnostic endpoints that expose query, transaction, environment, variable, or profiling data available in that deployment. This issue is fixed in versions 23.0.5 and 24.0.2."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-79",
"description": "CWE-79: Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T19:22:58.208Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/vitessio/vitess/security/advisories/GHSA-v75v-6fpf-gvw8",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/vitessio/vitess/security/advisories/GHSA-v75v-6fpf-gvw8"
},
{
"name": "https://github.com/vitessio/vitess/pull/20255",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/vitessio/vitess/pull/20255"
},
{
"name": "https://github.com/vitessio/vitess/pull/20273",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/vitessio/vitess/pull/20273"
},
{
"name": "https://github.com/vitessio/vitess/pull/20274",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/vitessio/vitess/pull/20274"
},
{
"name": "https://github.com/vitessio/vitess/commit/3140c1846cd120db34f33b2083139b4ab638aed2",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/vitessio/vitess/commit/3140c1846cd120db34f33b2083139b4ab638aed2"
},
{
"name": "https://github.com/vitessio/vitess/commit/976e1e0d78f9d29d02e5e31b4aa7e180648f08af",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/vitessio/vitess/commit/976e1e0d78f9d29d02e5e31b4aa7e180648f08af"
},
{
"name": "https://github.com/vitessio/vitess/commit/c1ed96302e658190168c971afdac730cf70e43f7",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/vitessio/vitess/commit/c1ed96302e658190168c971afdac730cf70e43f7"
},
{
"name": "https://github.com/vitessio/vitess/releases/tag/v23.0.5",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/vitessio/vitess/releases/tag/v23.0.5"
},
{
"name": "https://github.com/vitessio/vitess/releases/tag/v24.0.2",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/vitessio/vitess/releases/tag/v24.0.2"
}
],
"source": {
"advisory": "GHSA-v75v-6fpf-gvw8",
"discovery": "UNKNOWN"
},
"title": "Vitess vttablet /twopcz reflected XSS"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-104252",
"datePublished": "2026-10-13T19:22:58.208Z",
"dateReserved": "2026-10-01T19:04:39.706Z",
"dateUpdated": "2026-10-13T19:22:58.208Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-86022 (GCVE-0-2026-86022)
Vulnerability from cvelistv5 – Published: 2026-10-13 19:17 – Updated: 2026-10-13 19:17
VLAI
EPSS
VEX
Title
VNote: Argument injection to arbitrary command execution via crafted note filename in external-program handling
Summary
VNote is a note-taking platform. Prior to 4.3.0, SessionConfig::ExternalProgram::fetchCommand wraps a note path in double quotes and substitutes it into a command string that QProcess::start(const QString&) reparses into arguments through ProcessUtils::startDetached. The automatic path in src/controllers/viewareacontroller.cpp and the Open With path in src/controllers/notebooknodecontroller.cpp both reach this sink. On Linux and macOS, an attacker-controlled double quote in a POSIX note filename can terminate the quoted path and add arguments to the victim's configured external program. If the configured program supports an argument that executes commands, such as the vim or gvim -c option, the injected arguments can execute arbitrary commands as the user. This issue is fixed in version 4.3.0.
Severity
CWE
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://github.com/vnotex/vnote/security/advisori… | x_refsource_CONFIRM |
| https://github.com/vnotex/vnote/commit/4abaacdb8d… | x_refsource_MISC |
| https://github.com/vnotex/vnote/releases/tag/v4.3.0 | x_refsource_MISC |
{
"containers": {
"cna": {
"affected": [
{
"product": "vnote",
"vendor": "vnotex",
"versions": [
{
"status": "affected",
"version": "\u003c 4.3.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "VNote is a note-taking platform. Prior to 4.3.0, SessionConfig::ExternalProgram::fetchCommand wraps a note path in double quotes and substitutes it into a command string that QProcess::start(const QString\u0026) reparses into arguments through ProcessUtils::startDetached. The automatic path in src/controllers/viewareacontroller.cpp and the Open With path in src/controllers/notebooknodecontroller.cpp both reach this sink. On Linux and macOS, an attacker-controlled double quote in a POSIX note filename can terminate the quoted path and add arguments to the victim\u0027s configured external program. If the configured program supports an argument that executes commands, such as the vim or gvim -c option, the injected arguments can execute arbitrary commands as the user. This issue is fixed in version 4.3.0."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "CWE-78: Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-88",
"description": "CWE-88: Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T19:17:23.321Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/vnotex/vnote/security/advisories/GHSA-6m2r-wm6v-c8qp",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/vnotex/vnote/security/advisories/GHSA-6m2r-wm6v-c8qp"
},
{
"name": "https://github.com/vnotex/vnote/commit/4abaacdb8dd110d279f3290ad7e69f20b2604602",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/vnotex/vnote/commit/4abaacdb8dd110d279f3290ad7e69f20b2604602"
},
{
"name": "https://github.com/vnotex/vnote/releases/tag/v4.3.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/vnotex/vnote/releases/tag/v4.3.0"
}
],
"source": {
"advisory": "GHSA-6m2r-wm6v-c8qp",
"discovery": "UNKNOWN"
},
"title": "VNote: Argument injection to arbitrary command execution via crafted note filename in external-program handling"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-86022",
"datePublished": "2026-10-13T19:17:23.321Z",
"dateReserved": "2026-09-04T19:23:40.691Z",
"dateUpdated": "2026-10-13T19:17:23.321Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-86016 (GCVE-0-2026-86016)
Vulnerability from cvelistv5 – Published: 2026-10-13 19:15 – Updated: 2026-10-13 19:15
VLAI
EPSS
VEX
Title
VNote: Stored XSS via YAML Frontmatter Leading to Local File Read and Remote Exfiltration
Summary
VNote is a note-taking platform. Prior to 4.3.0, VNote uses the assignment `preNode.innerHTML = p_metaData` in src/data/extra/web/js/markdownit.js to insert YAML frontmatter metadata into a pre element before the protectFromXss sanitization path runs. Opening an attacker-supplied Markdown note can therefore execute stored JavaScript in the file:// viewer context. Because QWebEngineSettings::LocalContentCanAccessRemoteUrls enables local content to access remote URLs, the script can read reachable local note files and transmit their contents to a remote server without further interaction after the note is opened. This issue is fixed in version 4.3.0.
Severity
8.2 (High)
CWE
- CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://github.com/vnotex/vnote/security/advisori… | x_refsource_CONFIRM |
| https://github.com/vnotex/vnote/commit/7371efde53… | x_refsource_MISC |
| https://github.com/vnotex/vnote/releases/tag/v4.3.0 | x_refsource_MISC |
{
"containers": {
"cna": {
"affected": [
{
"product": "vnote",
"vendor": "vnotex",
"versions": [
{
"status": "affected",
"version": "\u003c 4.3.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "VNote is a note-taking platform. Prior to 4.3.0, VNote uses the assignment `preNode.innerHTML = p_metaData` in src/data/extra/web/js/markdownit.js to insert YAML frontmatter metadata into a pre element before the protectFromXss sanitization path runs. Opening an attacker-supplied Markdown note can therefore execute stored JavaScript in the file:// viewer context. Because QWebEngineSettings::LocalContentCanAccessRemoteUrls enables local content to access remote URLs, the script can read reachable local note files and transmit their contents to a remote server without further interaction after the note is opened. This issue is fixed in version 4.3.0."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-79",
"description": "CWE-79: Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T19:15:21.682Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/vnotex/vnote/security/advisories/GHSA-vfhj-c636-h59x",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/vnotex/vnote/security/advisories/GHSA-vfhj-c636-h59x"
},
{
"name": "https://github.com/vnotex/vnote/commit/7371efde531312eb24beb982fb5fdd73469cb171",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/vnotex/vnote/commit/7371efde531312eb24beb982fb5fdd73469cb171"
},
{
"name": "https://github.com/vnotex/vnote/releases/tag/v4.3.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/vnotex/vnote/releases/tag/v4.3.0"
}
],
"source": {
"advisory": "GHSA-vfhj-c636-h59x",
"discovery": "UNKNOWN"
},
"title": "VNote: Stored XSS via YAML Frontmatter Leading to Local File Read and Remote Exfiltration"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-86016",
"datePublished": "2026-10-13T19:15:21.682Z",
"dateReserved": "2026-09-04T19:23:40.691Z",
"dateUpdated": "2026-10-13T19:15:21.682Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-55601 (GCVE-0-2026-55601)
Vulnerability from cvelistv5 – Published: 2026-10-13 19:13 – Updated: 2026-10-13 20:02
VLAI
EPSS
VEX
Title
MultiTail: Shell injection in execute-on-match command handling
Summary
MultiTail is a utility for monitoring multiple log files in one terminal. In version 7.1.5 and earlier, the -ex and -eX execute-on-match feature appended attacker-controlled matched input to a configured command inside double quotes, then check_filter_exec() in mt.c passed the constructed command through execute_program() in exec.c to sh -c. Partial escaping left shell metacharacters such as command substitution active, allowing an attacker who could influence monitored input to execute commands as the user running MultiTail. No fixed release is available as of this review.
Severity
7.3 (High)
SSVC
Exploitation: poc
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-13 20:02 UTC
CWE
- CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://github.com/folkertvanheusden/multitail/se… | x_refsource_CONFIRM |
| https://github.com/folkertvanheusden/multitail/is… | x_refsource_MISC |
| https://github.com/folkertvanheusden/multitail/co… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| folkertvanheusden | multitail |
Affected:
<= 7.1.5
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-55601",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-13T20:02:02.281948Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T20:02:24.721Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://github.com/folkertvanheusden/multitail/security/advisories/GHSA-54vm-wwx8-856h"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "multitail",
"vendor": "folkertvanheusden",
"versions": [
{
"status": "affected",
"version": "\u003c= 7.1.5"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "MultiTail is a utility for monitoring multiple log files in one terminal. In version 7.1.5 and earlier, the -ex and -eX execute-on-match feature appended attacker-controlled matched input to a configured command inside double quotes, then check_filter_exec() in mt.c passed the constructed command through execute_program() in exec.c to sh -c. Partial escaping left shell metacharacters such as command substitution active, allowing an attacker who could influence monitored input to execute commands as the user running MultiTail. No fixed release is available as of this review."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "CWE-78: Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T19:13:31.325Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/folkertvanheusden/multitail/security/advisories/GHSA-54vm-wwx8-856h",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/folkertvanheusden/multitail/security/advisories/GHSA-54vm-wwx8-856h"
},
{
"name": "https://github.com/folkertvanheusden/multitail/issues/56",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/folkertvanheusden/multitail/issues/56"
},
{
"name": "https://github.com/folkertvanheusden/multitail/commit/84f304e140261034e33796bab81e9bf4f09d153c",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/folkertvanheusden/multitail/commit/84f304e140261034e33796bab81e9bf4f09d153c"
}
],
"source": {
"advisory": "GHSA-54vm-wwx8-856h",
"discovery": "UNKNOWN"
},
"title": "MultiTail: Shell injection in execute-on-match command handling"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-55601",
"datePublished": "2026-10-13T19:13:31.325Z",
"dateReserved": "2026-06-16T23:18:03.170Z",
"dateUpdated": "2026-10-13T20:02:24.721Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-56826 (GCVE-0-2026-56826)
Vulnerability from cvelistv5 – Published: 2026-10-13 19:11 – Updated: 2026-10-13 19:11
VLAI
EPSS
VEX
Title
Shopper: Missing function-level authorization on Settings tax/zone/shipping Livewire components allows a low-privileged user to delete commerce configuration
Summary
Shopper is a Headless e-commerce Admin Panel. From 2.0.0 until 2.9.2, authenticated users who could reach the Settings pages with only access_setting could directly invoke destructive actions through the Livewire endpoint because packages/admin/src/Livewire/Components/Settings/Zones/ZoneShippingOptions.php, packages/admin/src/Livewire/Components/Settings/Zones/Detail.php, packages/admin/src/Livewire/Components/Settings/Taxes/Detail.php, and packages/admin/src/Livewire/Components/Settings/Taxes/TaxRates.php did not enforce server-side delete authorization. The actions could delete carrier options, shipping zones, tax zones, and tax rates, disrupting checkout shipping, payment-method mapping, and tax calculation. This issue is fixed in version 2.9.2.
Severity
5.4 (Medium)
CWE
- CWE-862 - Missing Authorization
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/shopperlabs/shopper/security/a… | x_refsource_CONFIRM |
| https://github.com/shopperlabs/shopper/pull/570 | x_refsource_MISC |
| https://github.com/shopperlabs/shopper/commit/bf7… | x_refsource_MISC |
| https://github.com/shopperlabs/shopper/releases/t… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| shopperlabs | shopper |
Affected:
>= 2.0.0, < 2.9.2
|
{
"containers": {
"cna": {
"affected": [
{
"product": "shopper",
"vendor": "shopperlabs",
"versions": [
{
"status": "affected",
"version": "\u003e= 2.0.0, \u003c 2.9.2"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Shopper is a Headless e-commerce Admin Panel. From 2.0.0 until 2.9.2, authenticated users who could reach the Settings pages with only access_setting could directly invoke destructive actions through the Livewire endpoint because packages/admin/src/Livewire/Components/Settings/Zones/ZoneShippingOptions.php, packages/admin/src/Livewire/Components/Settings/Zones/Detail.php, packages/admin/src/Livewire/Components/Settings/Taxes/Detail.php, and packages/admin/src/Livewire/Components/Settings/Taxes/TaxRates.php did not enforce server-side delete authorization. The actions could delete carrier options, shipping zones, tax zones, and tax rates, disrupting checkout shipping, payment-method mapping, and tax calculation. This issue is fixed in version 2.9.2."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-862",
"description": "CWE-862: Missing Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T19:11:55.629Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/shopperlabs/shopper/security/advisories/GHSA-f7h9-qv4x-9x57",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/shopperlabs/shopper/security/advisories/GHSA-f7h9-qv4x-9x57"
},
{
"name": "https://github.com/shopperlabs/shopper/pull/570",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/shopperlabs/shopper/pull/570"
},
{
"name": "https://github.com/shopperlabs/shopper/commit/bf72e2753e21296184596d507336c7d65ecd46ff",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/shopperlabs/shopper/commit/bf72e2753e21296184596d507336c7d65ecd46ff"
},
{
"name": "https://github.com/shopperlabs/shopper/releases/tag/v2.9.2",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/shopperlabs/shopper/releases/tag/v2.9.2"
}
],
"source": {
"advisory": "GHSA-f7h9-qv4x-9x57",
"discovery": "UNKNOWN"
},
"title": "Shopper: Missing function-level authorization on Settings tax/zone/shipping Livewire components allows a low-privileged user to delete commerce configuration"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-56826",
"datePublished": "2026-10-13T19:11:55.629Z",
"dateReserved": "2026-06-23T14:55:09.116Z",
"dateUpdated": "2026-10-13T19:11:55.629Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-104875 (GCVE-0-2026-104875)
Vulnerability from cvelistv5 – Published: 2026-10-13 19:10 – Updated: 2026-10-13 19:10
VLAI
EPSS
VEX
Title
Ente: Accepted emergency contact can bypass the recovery notice period
Summary
Ente provides end-to-end encrypted cloud services and security tools. Prior to server image 2026.07.09, the POST /emergency-contacts/approve-recovery endpoint authorized approval using a client-supplied userID and updated an emergency recovery session using only its client-supplied recovery-session UUID. An accepted emergency contact could submit the contact's own identifier, transition the victim's session from WAITING to READY, clear wait_till, retrieve recovery information, and continue account recovery before the owner-configured notice period expired. Exploitation of the approval bypass required the victim to have previously added and accepted the attacker as an emergency contact, and it did not create recovery rights for an arbitrary account. Separately, the same insufficiently scoped update pattern affected the reject and stop recovery transitions, allowing a user who knew another recovery-session UUID to potentially cancel a session to which the user was not a party. This issue is fixed in server image 2026.07.09.
Severity
7.1 (High)
CWE
- CWE-639 - Authorization Bypass Through User-Controlled Key
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://github.com/ente/ente/security/advisories/… | x_refsource_CONFIRM |
| https://github.com/ente/ente/pull/11311 | x_refsource_MISC |
| https://github.com/ente/ente/pull/11342 | x_refsource_MISC |
| https://github.com/ente/ente/commit/1fc4956f90277… | x_refsource_MISC |
| https://github.com/ente/ente/commit/b3fa9f566466a… | x_refsource_MISC |
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| ente | ente |
Affected:
< 0.1.18
|
|
| ente | ghcr.io/ente/server |
Affected:
< 2026.07.09
|
{
"containers": {
"cna": {
"affected": [
{
"product": "ente",
"vendor": "ente",
"versions": [
{
"status": "affected",
"version": "\u003c 0.1.18"
}
]
},
{
"product": "ghcr.io/ente/server",
"vendor": "ente",
"versions": [
{
"status": "affected",
"version": "\u003c 2026.07.09"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Ente provides end-to-end encrypted cloud services and security tools. Prior to server image 2026.07.09, the POST /emergency-contacts/approve-recovery endpoint authorized approval using a client-supplied userID and updated an emergency recovery session using only its client-supplied recovery-session UUID. An accepted emergency contact could submit the contact\u0027s own identifier, transition the victim\u0027s session from WAITING to READY, clear wait_till, retrieve recovery information, and continue account recovery before the owner-configured notice period expired. Exploitation of the approval bypass required the victim to have previously added and accepted the attacker as an emergency contact, and it did not create recovery rights for an arbitrary account. Separately, the same insufficiently scoped update pattern affected the reject and stop recovery transitions, allowing a user who knew another recovery-session UUID to potentially cancel a session to which the user was not a party. This issue is fixed in server image 2026.07.09."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-639",
"description": "CWE-639: Authorization Bypass Through User-Controlled Key",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T19:10:06.908Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/ente/ente/security/advisories/GHSA-2hxj-953x-c2vw",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/ente/ente/security/advisories/GHSA-2hxj-953x-c2vw"
},
{
"name": "https://github.com/ente/ente/pull/11311",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/ente/ente/pull/11311"
},
{
"name": "https://github.com/ente/ente/pull/11342",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/ente/ente/pull/11342"
},
{
"name": "https://github.com/ente/ente/commit/1fc4956f90277076559c16dedbfad10cb4d1227b",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/ente/ente/commit/1fc4956f90277076559c16dedbfad10cb4d1227b"
},
{
"name": "https://github.com/ente/ente/commit/b3fa9f566466ac3660e276a67621130d684957e7",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/ente/ente/commit/b3fa9f566466ac3660e276a67621130d684957e7"
}
],
"source": {
"advisory": "GHSA-2hxj-953x-c2vw",
"discovery": "UNKNOWN"
},
"title": "Ente: Accepted emergency contact can bypass the recovery notice period"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-104875",
"datePublished": "2026-10-13T19:10:06.908Z",
"dateReserved": "2026-10-02T14:59:11.775Z",
"dateUpdated": "2026-10-13T19:10:06.908Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-102599 (GCVE-0-2026-102599)
Vulnerability from cvelistv5 – Published: 2026-10-13 19:05 – Updated: 2026-10-13 19:05
VLAI
EPSS
VEX
Title
Socket.IO: Engine.IO Protocol Revision Mismatch DoS
Summary
Socket.IO enables bidirectional and low-latency communication for every platform. From Engine.IO 6.6.0 until 6.6.10, a transport upgrade can independently derive an Engine.IO protocol revision from the upgrade request instead of enforcing the revision stored on the existing session. A malicious client can establish a valid session and send an upgrade request with a different or omitted EIO query parameter, attaching a transport with incompatible parser and heartbeat behavior. A crafted heartbeat packet can then trigger an uncaught exception and terminate the Node.js process, including when Engine.IO v3 compatibility is disabled because an omitted EIO value is interpreted as revision 3 on the affected path. This issue is fixed in Engine.IO 6.6.10.
Severity
7.5 (High)
CWE
- CWE-248 - Uncaught Exception
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://github.com/socketio/socket.io/security/ad… | x_refsource_CONFIRM |
| https://github.com/socketio/socket.io/commit/86db… | x_refsource_MISC |
| https://github.com/socketio/socket.io/releases/ta… | x_refsource_MISC |
{
"containers": {
"cna": {
"affected": [
{
"product": "socket.io",
"vendor": "socketio",
"versions": [
{
"status": "affected",
"version": "\u003e= 6.6.0, \u003c 6.6.10"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Socket.IO enables bidirectional and low-latency communication for every platform. From Engine.IO 6.6.0 until 6.6.10, a transport upgrade can independently derive an Engine.IO protocol revision from the upgrade request instead of enforcing the revision stored on the existing session. A malicious client can establish a valid session and send an upgrade request with a different or omitted EIO query parameter, attaching a transport with incompatible parser and heartbeat behavior. A crafted heartbeat packet can then trigger an uncaught exception and terminate the Node.js process, including when Engine.IO v3 compatibility is disabled because an omitted EIO value is interpreted as revision 3 on the affected path. This issue is fixed in Engine.IO 6.6.10."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-248",
"description": "CWE-248: Uncaught Exception",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T19:05:10.870Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/socketio/socket.io/security/advisories/GHSA-2gc4-cqfq-p2gv",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/socketio/socket.io/security/advisories/GHSA-2gc4-cqfq-p2gv"
},
{
"name": "https://github.com/socketio/socket.io/commit/86db1fc3db2cd315a065d64c4e48918ccf9b4729",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/socketio/socket.io/commit/86db1fc3db2cd315a065d64c4e48918ccf9b4729"
},
{
"name": "https://github.com/socketio/socket.io/releases/tag/engine.io@6.6.10",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/socketio/socket.io/releases/tag/engine.io@6.6.10"
}
],
"source": {
"advisory": "GHSA-2gc4-cqfq-p2gv",
"discovery": "UNKNOWN"
},
"title": "Socket.IO: Engine.IO Protocol Revision Mismatch DoS"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-102599",
"datePublished": "2026-10-13T19:05:10.870Z",
"dateReserved": "2026-09-29T14:18:02.920Z",
"dateUpdated": "2026-10-13T19:05:10.870Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-86063 (GCVE-0-2026-86063)
Vulnerability from cvelistv5 – Published: 2026-10-13 19:04 – Updated: 2026-10-13 20:21
VLAI
EPSS
VEX
Title
Claude Code: Plugin Hash Pin Bypass Allows Bypass of Hash Pinning
Summary
Claude Code is an agentic coding tool. Prior to 2.1.179, the Claude Code and Claude Desktop plugin installation flow runs git checkout for a marketplace-pinned commit without verifying that the resulting HEAD equals the pinned 40-character SHA. An attacker who controls a plugin repository on a Git host that permits SHA-shaped branch names can create a branch named after the reviewed commit, causing checkout to select the branch tip and install attacker-controlled plugin code. Exploitation requires a user to install the malicious plugin and pin it to the ostensibly safe hash. This issue is fixed in version 2.1.179.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-13 20:14 UTC
CWE
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://github.com/anthropics/claude-code/securit… | x_refsource_CONFIRM |
| https://github.com/anthropics/claude-code/release… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| anthropics | claude-code |
Affected:
< 2.1.179
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-86063",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-13T20:14:06.546364Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T20:21:00.156Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "claude-code",
"vendor": "anthropics",
"versions": [
{
"status": "affected",
"version": "\u003c 2.1.179"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Claude Code is an agentic coding tool. Prior to 2.1.179, the Claude Code and Claude Desktop plugin installation flow runs git checkout for a marketplace-pinned commit without verifying that the resulting HEAD equals the pinned 40-character SHA. An attacker who controls a plugin repository on a Git host that permits SHA-shaped branch names can create a branch named after the reviewed commit, causing checkout to select the branch tip and install attacker-controlled plugin code. Exploitation requires a user to install the malicious plugin and pin it to the ostensibly safe hash. This issue is fixed in version 2.1.179."
}
],
"metrics": [
{
"cvssV4_0": {
"attackComplexity": "LOW",
"attackRequirements": "PRESENT",
"attackVector": "NETWORK",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"privilegesRequired": "NONE",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "ACTIVE",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-494",
"description": "CWE-494: Download of Code Without Integrity Check",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-829",
"description": "CWE-829: Inclusion of Functionality from Untrusted Control Sphere",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T19:04:11.695Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/anthropics/claude-code/security/advisories/GHSA-pq7j-f95f-qfcv",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/anthropics/claude-code/security/advisories/GHSA-pq7j-f95f-qfcv"
},
{
"name": "https://github.com/anthropics/claude-code/releases/tag/v2.1.179",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/anthropics/claude-code/releases/tag/v2.1.179"
}
],
"source": {
"advisory": "GHSA-pq7j-f95f-qfcv",
"discovery": "UNKNOWN"
},
"title": "Claude Code: Plugin Hash Pin Bypass Allows Bypass of Hash Pinning"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-86063",
"datePublished": "2026-10-13T19:04:11.695Z",
"dateReserved": "2026-09-04T19:34:03.099Z",
"dateUpdated": "2026-10-13T20:21:00.156Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-84994 (GCVE-0-2026-84994)
Vulnerability from cvelistv5 – Published: 2026-10-13 19:00 – Updated: 2026-10-13 19:00
VLAI
EPSS
VEX
Title
Qwik: Crashing any Qwik Server via Resource thenable
Summary
Qwik is a performance-focused JavaScript framework. Prior to @builder.io/qwik 1.20.0 and @qwik.dev/core 2.0.0-beta.37, default server-side qwik-json deserialization causes ResourceSerializer.$fill$ to pass resource._resolved to Promise.resolve without first rejecting attacker-controlled thenables. An unauthenticated request can provide a plain object whose then property is a QRL for an unregistered symbol, causing an orphaned asynchronous rejection that terminates Node.js under its default unhandled-rejection policy. A single request can crash a server, and repeated requests can keep replicas unavailable. This issue is fixed in @builder.io/qwik 1.20.0 and @qwik.dev/core 2.0.0-beta.37.
Severity
CWE
- CWE-248 - Uncaught Exception
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/QwikDev/qwik/security/advisori… | x_refsource_CONFIRM |
| https://github.com/QwikDev/qwik/pull/8655 | x_refsource_MISC |
| https://github.com/QwikDev/qwik/commit/c1e7444402… | x_refsource_MISC |
| https://github.com/QwikDev/qwik/releases/tag/@bui… | x_refsource_MISC |
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| QwikDev | qwik |
Affected:
< 2.0.0-beta37
|
|
| @builder.io | qwik |
Affected:
< 1.20.0
|
{
"containers": {
"cna": {
"affected": [
{
"product": "qwik",
"vendor": "QwikDev",
"versions": [
{
"status": "affected",
"version": "\u003c 2.0.0-beta37"
}
]
},
{
"product": "qwik",
"vendor": "@builder.io",
"versions": [
{
"status": "affected",
"version": "\u003c 1.20.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Qwik is a performance-focused JavaScript framework. Prior to @builder.io/qwik 1.20.0 and @qwik.dev/core 2.0.0-beta.37, default server-side qwik-json deserialization causes ResourceSerializer.$fill$ to pass resource._resolved to Promise.resolve without first rejecting attacker-controlled thenables. An unauthenticated request can provide a plain object whose then property is a QRL for an unregistered symbol, causing an orphaned asynchronous rejection that terminates Node.js under its default unhandled-rejection policy. A single request can crash a server, and repeated requests can keep replicas unavailable. This issue is fixed in @builder.io/qwik 1.20.0 and @qwik.dev/core 2.0.0-beta.37."
}
],
"metrics": [
{
"cvssV4_0": {
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"privilegesRequired": "NONE",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "NONE"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-248",
"description": "CWE-248: Uncaught Exception",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T19:00:53.742Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/QwikDev/qwik/security/advisories/GHSA-x586-xvc8-g7q6",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/QwikDev/qwik/security/advisories/GHSA-x586-xvc8-g7q6"
},
{
"name": "https://github.com/QwikDev/qwik/pull/8655",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/QwikDev/qwik/pull/8655"
},
{
"name": "https://github.com/QwikDev/qwik/commit/c1e7444402f9592b5cf9096e10bf303ab4640511",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/QwikDev/qwik/commit/c1e7444402f9592b5cf9096e10bf303ab4640511"
},
{
"name": "https://github.com/QwikDev/qwik/releases/tag/@builder.io/qwik@1.20.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/QwikDev/qwik/releases/tag/@builder.io/qwik@1.20.0"
}
],
"source": {
"advisory": "GHSA-x586-xvc8-g7q6",
"discovery": "UNKNOWN"
},
"title": "Qwik: Crashing any Qwik Server via Resource thenable"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-84994",
"datePublished": "2026-10-13T19:00:53.742Z",
"dateReserved": "2026-09-02T18:12:13.535Z",
"dateUpdated": "2026-10-13T19:00:53.742Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-103937 (GCVE-0-2026-103937)
Vulnerability from cvelistv5 – Published: 2026-10-13 18:42 – Updated: 2026-10-13 18:42
VLAI
EPSS
VEX
Title
Misskey: Denial of service resulting from insufficient cleanup processing during file uploads
Summary
Misskey is an open source, federated social media platform. From 13.0.0 until 2025.4.1 and from 2025.5.0 until 2026.7.0, cleanup processing may not execute during file uploads. Repeated uploads can exhaust storage or file descriptors and deny service regardless of whether federation is enabled. This issue is fixed in version 2026.7.0.
Severity
CWE
- CWE-459 - Incomplete Cleanup
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/misskey-dev/misskey/security/a… | x_refsource_CONFIRM |
| https://github.com/misskey-dev/misskey/pull/17750 | x_refsource_MISC |
| https://github.com/misskey-dev/misskey/commit/3f2… | x_refsource_MISC |
| https://github.com/misskey-dev/misskey/releases/t… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| misskey-dev | misskey |
Affected:
>= 12.0.0, <= 13.14.2
Affected: >= 2023.9.0-beta.1, < 2025.4.1 Affected: >= 2025.5.0, < 2026.7.0 |
{
"containers": {
"cna": {
"affected": [
{
"product": "misskey",
"vendor": "misskey-dev",
"versions": [
{
"status": "affected",
"version": "\u003e= 12.0.0, \u003c= 13.14.2"
},
{
"status": "affected",
"version": "\u003e= 2023.9.0-beta.1, \u003c 2025.4.1"
},
{
"status": "affected",
"version": "\u003e= 2025.5.0, \u003c 2026.7.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Misskey is an open source, federated social media platform. From 13.0.0 until 2025.4.1 and from 2025.5.0 until 2026.7.0, cleanup processing may not execute during file uploads. Repeated uploads can exhaust storage or file descriptors and deny service regardless of whether federation is enabled. This issue is fixed in version 2026.7.0."
}
],
"metrics": [
{
"cvssV4_0": {
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"privilegesRequired": "NONE",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "NONE"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-459",
"description": "CWE-459: Incomplete Cleanup",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T18:42:17.022Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/misskey-dev/misskey/security/advisories/GHSA-m9xp-2fvm-pfmq",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/misskey-dev/misskey/security/advisories/GHSA-m9xp-2fvm-pfmq"
},
{
"name": "https://github.com/misskey-dev/misskey/pull/17750",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/misskey-dev/misskey/pull/17750"
},
{
"name": "https://github.com/misskey-dev/misskey/commit/3f28489fb856e6e07a16290f3ea1e1261572b527",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/misskey-dev/misskey/commit/3f28489fb856e6e07a16290f3ea1e1261572b527"
},
{
"name": "https://github.com/misskey-dev/misskey/releases/tag/2026.7.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/misskey-dev/misskey/releases/tag/2026.7.0"
}
],
"source": {
"advisory": "GHSA-m9xp-2fvm-pfmq",
"discovery": "UNKNOWN"
},
"title": "Misskey: Denial of service resulting from insufficient cleanup processing during file uploads"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-103937",
"datePublished": "2026-10-13T18:42:17.022Z",
"dateReserved": "2026-10-01T14:20:19.156Z",
"dateUpdated": "2026-10-13T18:42:17.022Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-104817 (GCVE-0-2026-104817)
Vulnerability from cvelistv5 – Published: 2026-10-13 18:39 – Updated: 2026-10-13 19:04
VLAI
EPSS
VEX
Title
Misskey: Lack of rate limiting and size restrictions in RSS fetching API
Summary
Misskey is an open source, federated social media platform. From 12.112.1 until 2026.7.0, the unauthenticated fetch-rss API lacks rate limiting and response-size restrictions and performs synchronous XML parsing. An attacker can trigger unbounded outbound HTTP requests and synchronous parsing, exhausting instance resources, amplifying requests toward third-party servers, or probing network-reachable services even when federation is disabled. This issue is fixed in version 2026.7.0.
Severity
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-13 19:03 UTC
CWE
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://github.com/misskey-dev/misskey/security/a… | x_refsource_CONFIRM |
| https://github.com/misskey-dev/misskey/commit/a12… | x_refsource_MISC |
| https://github.com/misskey-dev/misskey/releases/t… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| misskey-dev | misskey |
Affected:
>= 12.0.0, <= 13.14.2
Affected: >= 2023.9.0-beta.1, < 2026.7.0 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-104817",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-13T19:03:52.462592Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T19:04:03.012Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "misskey",
"vendor": "misskey-dev",
"versions": [
{
"status": "affected",
"version": "\u003e= 12.0.0, \u003c= 13.14.2"
},
{
"status": "affected",
"version": "\u003e= 2023.9.0-beta.1, \u003c 2026.7.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Misskey is an open source, federated social media platform. From 12.112.1 until 2026.7.0, the unauthenticated fetch-rss API lacks rate limiting and response-size restrictions and performs synchronous XML parsing. An attacker can trigger unbounded outbound HTTP requests and synchronous parsing, exhausting instance resources, amplifying requests toward third-party servers, or probing network-reachable services even when federation is disabled. This issue is fixed in version 2026.7.0."
}
],
"metrics": [
{
"cvssV4_0": {
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"privilegesRequired": "NONE",
"subAvailabilityImpact": "LOW",
"subConfidentialityImpact": "LOW",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:L/SI:N/SA:L",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "NONE"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-405",
"description": "CWE-405: Asymmetric Resource Consumption (Amplification)",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-770",
"description": "CWE-770: Allocation of Resources Without Limits or Throttling",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-918",
"description": "CWE-918: Server-Side Request Forgery (SSRF)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T18:39:30.169Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/misskey-dev/misskey/security/advisories/GHSA-4x7v-qx8f-g3p8",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/misskey-dev/misskey/security/advisories/GHSA-4x7v-qx8f-g3p8"
},
{
"name": "https://github.com/misskey-dev/misskey/commit/a12ee2e5d72c40252e11a164b2231667c9697667",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/misskey-dev/misskey/commit/a12ee2e5d72c40252e11a164b2231667c9697667"
},
{
"name": "https://github.com/misskey-dev/misskey/releases/tag/2026.7.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/misskey-dev/misskey/releases/tag/2026.7.0"
}
],
"source": {
"advisory": "GHSA-4x7v-qx8f-g3p8",
"discovery": "UNKNOWN"
},
"title": "Misskey: Lack of rate limiting and size restrictions in RSS fetching API"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-104817",
"datePublished": "2026-10-13T18:39:30.169Z",
"dateReserved": "2026-10-02T14:17:09.334Z",
"dateUpdated": "2026-10-13T19:04:03.012Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-104816 (GCVE-0-2026-104816)
Vulnerability from cvelistv5 – Published: 2026-10-13 18:38 – Updated: 2026-10-13 20:21
VLAI
EPSS
VEX
Title
Misskey: Cross-site scripting in RSS feed item links
Summary
Misskey is an open source, federated social media platform. From 12.0.0 until 2026.7.0, the RSS components display feed item links from configured feeds without verifying their URL schemes. Missing URL scheme verification allows an attacker who controls feed content to provide an unsafe-scheme link that causes script execution when a user clicks it in an RSS widget. This issue is fixed in version 2026.7.0.
Severity
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-13 20:19 UTC
CWE
- CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/misskey-dev/misskey/security/a… | x_refsource_CONFIRM |
| https://github.com/misskey-dev/misskey/pull/17831 | x_refsource_MISC |
| https://github.com/misskey-dev/misskey/commit/8dd… | x_refsource_MISC |
| https://github.com/misskey-dev/misskey/releases/t… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| misskey-dev | misskey |
Affected:
>= 12.0.0, <= 13.14.2
Affected: >= 2023.9.0-beta.1, < 2026.7.0 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-104816",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-13T20:19:04.007207Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T20:21:09.308Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "misskey",
"vendor": "misskey-dev",
"versions": [
{
"status": "affected",
"version": "\u003e= 12.0.0, \u003c= 13.14.2"
},
{
"status": "affected",
"version": "\u003e= 2023.9.0-beta.1, \u003c 2026.7.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Misskey is an open source, federated social media platform. From 12.0.0 until 2026.7.0, the RSS components display feed item links from configured feeds without verifying their URL schemes. Missing URL scheme verification allows an attacker who controls feed content to provide an unsafe-scheme link that causes script execution when a user clicks it in an RSS widget. This issue is fixed in version 2026.7.0."
}
],
"metrics": [
{
"cvssV4_0": {
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 8.5,
"baseSeverity": "HIGH",
"privilegesRequired": "NONE",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "LOW",
"subIntegrityImpact": "LOW",
"userInteraction": "ACTIVE",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:N/SC:L/SI:L/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-79",
"description": "CWE-79: Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T18:38:06.905Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/misskey-dev/misskey/security/advisories/GHSA-p73x-6qrq-34jc",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/misskey-dev/misskey/security/advisories/GHSA-p73x-6qrq-34jc"
},
{
"name": "https://github.com/misskey-dev/misskey/pull/17831",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/misskey-dev/misskey/pull/17831"
},
{
"name": "https://github.com/misskey-dev/misskey/commit/8dd59a8c06da49b8f302d902d73d04397ee29366",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/misskey-dev/misskey/commit/8dd59a8c06da49b8f302d902d73d04397ee29366"
},
{
"name": "https://github.com/misskey-dev/misskey/releases/tag/2026.7.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/misskey-dev/misskey/releases/tag/2026.7.0"
}
],
"source": {
"advisory": "GHSA-p73x-6qrq-34jc",
"discovery": "UNKNOWN"
},
"title": "Misskey: Cross-site scripting in RSS feed item links"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-104816",
"datePublished": "2026-10-13T18:38:06.905Z",
"dateReserved": "2026-10-02T14:17:09.334Z",
"dateUpdated": "2026-10-13T20:21:09.308Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-54086 (GCVE-0-2026-54086)
Vulnerability from cvelistv5 – Published: 2026-10-13 18:28 – Updated: 2026-10-13 18:28
VLAI
EPSS
VEX
Title
SLE API for Java: Uncontrolled Memory Allocation / handled exception leading to Denial of Service
Summary
SLE API for Java is an implementation of CCSDS Space Link Extension Services. Prior to 5.1.7, the ISP1 PDU handling path decodes an attacker-controlled body length and allocates a byte array without an upper bound, while malformed or truncated input can also terminate reads unexpectedly, allowing an unauthenticated client of the SLE listening service to trigger exceptions, resource leakage, and denial of service. This issue is fixed in version 5.1.7.
Severity
5.3 (Medium)
CWE
- CWE-770 - Allocation of Resources Without Limits or Throttling
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://github.com/esa/sleapi-j/security/advisori… | x_refsource_CONFIRM |
| https://github.com/esa/sleapi-j/commit/265118dfb7… | x_refsource_MISC |
| https://github.com/esa/sleapi-j/releases/tag/5.1.7 | x_refsource_MISC |
{
"containers": {
"cna": {
"affected": [
{
"product": "sleapi-j",
"vendor": "esa",
"versions": [
{
"status": "affected",
"version": "\u003c 5.1.7"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "SLE API for Java is an implementation of CCSDS Space Link Extension Services. Prior to 5.1.7, the ISP1 PDU handling path decodes an attacker-controlled body length and allocates a byte array without an upper bound, while malformed or truncated input can also terminate reads unexpectedly, allowing an unauthenticated client of the SLE listening service to trigger exceptions, resource leakage, and denial of service. This issue is fixed in version 5.1.7."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-770",
"description": "CWE-770: Allocation of Resources Without Limits or Throttling",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T18:28:25.345Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/esa/sleapi-j/security/advisories/GHSA-6g75-jwgj-hj8v",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/esa/sleapi-j/security/advisories/GHSA-6g75-jwgj-hj8v"
},
{
"name": "https://github.com/esa/sleapi-j/commit/265118dfb70d1d0d991b085dcde4028c60bce4fc",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/esa/sleapi-j/commit/265118dfb70d1d0d991b085dcde4028c60bce4fc"
},
{
"name": "https://github.com/esa/sleapi-j/releases/tag/5.1.7",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/esa/sleapi-j/releases/tag/5.1.7"
}
],
"source": {
"advisory": "GHSA-6g75-jwgj-hj8v",
"discovery": "UNKNOWN"
},
"title": "SLE API for Java: Uncontrolled Memory Allocation / handled exception leading to Denial of Service"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-54086",
"datePublished": "2026-10-13T18:28:25.345Z",
"dateReserved": "2026-06-11T18:44:47.761Z",
"dateUpdated": "2026-10-13T18:28:25.345Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-85747 (GCVE-0-2026-85747)
Vulnerability from cvelistv5 – Published: 2026-10-13 18:20 – Updated: 2026-10-13 18:20
VLAI
EPSS
VEX
Title
Distribution: Client `manifests.Get()` does not verify returned content against requested digest
Summary
Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.2, registry/client.(*manifests).Get() reads a manifest returned for a digest-pinned request and passes it to distribution.UnmarshalManifest without hashing the body against the requested digest, allowing a malicious or intercepted registry response to substitute attacker-chosen manifest content even when Docker-Content-Digest claims the requested value. The bundled pull-through proxy in registry/proxy/proxymanifeststore.go can cache and re-serve the substituted manifest. This issue is fixed in version 3.1.2.
Severity
6.8 (Medium)
CWE
- CWE-354 - Improper Validation of Integrity Check Value
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://github.com/distribution/distribution/secu… | x_refsource_CONFIRM |
| https://github.com/distribution/distribution/comm… | x_refsource_MISC |
| https://github.com/distribution/distribution/rele… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| distribution | distribution |
Affected:
< 3.1.2
|
{
"containers": {
"cna": {
"affected": [
{
"product": "distribution",
"vendor": "distribution",
"versions": [
{
"status": "affected",
"version": "\u003c 3.1.2"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.2, registry/client.(*manifests).Get() reads a manifest returned for a digest-pinned request and passes it to distribution.UnmarshalManifest without hashing the body against the requested digest, allowing a malicious or intercepted registry response to substitute attacker-chosen manifest content even when Docker-Content-Digest claims the requested value. The bundled pull-through proxy in registry/proxy/proxymanifeststore.go can cache and re-serve the substituted manifest. This issue is fixed in version 3.1.2."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-354",
"description": "CWE-354: Improper Validation of Integrity Check Value",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T18:20:56.539Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/distribution/distribution/security/advisories/GHSA-685w-q87j-wqw3",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/distribution/distribution/security/advisories/GHSA-685w-q87j-wqw3"
},
{
"name": "https://github.com/distribution/distribution/commit/960439b09f342cdeb8f1c0e18e8c7349bdcfbf80",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/distribution/distribution/commit/960439b09f342cdeb8f1c0e18e8c7349bdcfbf80"
},
{
"name": "https://github.com/distribution/distribution/releases/tag/v3.1.2",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/distribution/distribution/releases/tag/v3.1.2"
}
],
"source": {
"advisory": "GHSA-685w-q87j-wqw3",
"discovery": "UNKNOWN"
},
"title": "Distribution: Client `manifests.Get()` does not verify returned content against requested digest"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-85747",
"datePublished": "2026-10-13T18:20:56.539Z",
"dateReserved": "2026-09-04T14:50:16.720Z",
"dateUpdated": "2026-10-13T18:20:56.539Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-108385 (GCVE-0-2026-108385)
Vulnerability from cvelistv5 – Published: 2026-10-13 17:56 – Updated: 2026-10-13 18:15
VLAI
EPSS
VEX
Title
dataclasses-avroschema enum symbols can inject statements through generated member names
Summary
dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, BaseGenerator.parse_enum and EnumRepresentation.render_symbols use each schema-controlled enum symbol as a generated enum member name after case conversion but without validating it as an identifier. When generator classes are used directly, newlines and punctuation can inject constrained statements into the generated enum class body, allowing namespace modification or preventing the module from loading. Version 0.70.6 fixes the vulnerability by validating every enum symbol as a name.
Severity
8.8 (High)
SSVC
Exploitation: poc
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-13 18:15 UTC
CWE
- CWE-94 - Improper Control of Generation of Code ('Code Injection')
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://github.com/marcosschroh/dataclasses-avros… | x_refsource_CONFIRM |
| https://github.com/marcosschroh/dataclasses-avros… | x_refsource_MISC |
| https://github.com/marcosschroh/dataclasses-avros… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| marcosschroh | dataclasses-avroschema |
Affected:
>= 0.38.0, < 0.70.6
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-108385",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-13T18:15:24.109413Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T18:15:58.645Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://github.com/marcosschroh/dataclasses-avroschema/security/advisories/GHSA-gw6w-pvv9-2fqc"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "dataclasses-avroschema",
"vendor": "marcosschroh",
"versions": [
{
"status": "affected",
"version": "\u003e= 0.38.0, \u003c 0.70.6"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, BaseGenerator.parse_enum and EnumRepresentation.render_symbols use each schema-controlled enum symbol as a generated enum member name after case conversion but without validating it as an identifier. When generator classes are used directly, newlines and punctuation can inject constrained statements into the generated enum class body, allowing namespace modification or preventing the module from loading. Version 0.70.6 fixes the vulnerability by validating every enum symbol as a name."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-94",
"description": "CWE-94: Improper Control of Generation of Code (\u0027Code Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T17:56:31.399Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/marcosschroh/dataclasses-avroschema/security/advisories/GHSA-gw6w-pvv9-2fqc",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/marcosschroh/dataclasses-avroschema/security/advisories/GHSA-gw6w-pvv9-2fqc"
},
{
"name": "https://github.com/marcosschroh/dataclasses-avroschema/commit/429f3d705d2d04c0c65e2ef832daed5ff91318fc",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/marcosschroh/dataclasses-avroschema/commit/429f3d705d2d04c0c65e2ef832daed5ff91318fc"
},
{
"name": "https://github.com/marcosschroh/dataclasses-avroschema/releases/tag/0.70.6",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/marcosschroh/dataclasses-avroschema/releases/tag/0.70.6"
}
],
"source": {
"advisory": "GHSA-gw6w-pvv9-2fqc",
"discovery": "UNKNOWN"
},
"title": "dataclasses-avroschema enum symbols can inject statements through generated member names"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-108385",
"datePublished": "2026-10-13T17:56:31.399Z",
"dateReserved": "2026-10-09T21:36:27.043Z",
"dateUpdated": "2026-10-13T18:15:58.645Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-108384 (GCVE-0-2026-108384)
Vulnerability from cvelistv5 – Published: 2026-10-13 17:53 – Updated: 2026-10-13 20:21
VLAI
EPSS
VEX
Title
dataclasses-avroschema allows code injection through fixed-type aliases supplied as a bare string
Summary
dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, BaseGenerator.parse_fixed interpolates a fixed type's aliases value directly into a generated types.confixed annotation. A list is represented with quoted entries, but a bare string is emitted as an unquoted Python expression and evaluated when the generated module is imported, allowing arbitrary code execution from a crafted schema. Version 0.70.6 fixes the vulnerability by rejecting aliases values that are not lists.
Severity
8.8 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-13 20:14 UTC
CWE
- CWE-94 - Improper Control of Generation of Code ('Code Injection')
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://github.com/marcosschroh/dataclasses-avros… | x_refsource_CONFIRM |
| https://github.com/marcosschroh/dataclasses-avros… | x_refsource_MISC |
| https://github.com/marcosschroh/dataclasses-avros… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| marcosschroh | dataclasses-avroschema |
Affected:
>= 0.38.0, < 0.70.6
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-108384",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-13T20:14:08.820272Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T20:21:19.992Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "dataclasses-avroschema",
"vendor": "marcosschroh",
"versions": [
{
"status": "affected",
"version": "\u003e= 0.38.0, \u003c 0.70.6"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, BaseGenerator.parse_fixed interpolates a fixed type\u0027s aliases value directly into a generated types.confixed annotation. A list is represented with quoted entries, but a bare string is emitted as an unquoted Python expression and evaluated when the generated module is imported, allowing arbitrary code execution from a crafted schema. Version 0.70.6 fixes the vulnerability by rejecting aliases values that are not lists."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-94",
"description": "CWE-94: Improper Control of Generation of Code (\u0027Code Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T17:53:48.228Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/marcosschroh/dataclasses-avroschema/security/advisories/GHSA-8j5c-xq6f-2c43",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/marcosschroh/dataclasses-avroschema/security/advisories/GHSA-8j5c-xq6f-2c43"
},
{
"name": "https://github.com/marcosschroh/dataclasses-avroschema/commit/429f3d705d2d04c0c65e2ef832daed5ff91318fc",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/marcosschroh/dataclasses-avroschema/commit/429f3d705d2d04c0c65e2ef832daed5ff91318fc"
},
{
"name": "https://github.com/marcosschroh/dataclasses-avroschema/releases/tag/0.70.6",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/marcosschroh/dataclasses-avroschema/releases/tag/0.70.6"
}
],
"source": {
"advisory": "GHSA-8j5c-xq6f-2c43",
"discovery": "UNKNOWN"
},
"title": "dataclasses-avroschema allows code injection through fixed-type aliases supplied as a bare string"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-108384",
"datePublished": "2026-10-13T17:53:48.228Z",
"dateReserved": "2026-10-09T21:36:27.043Z",
"dateUpdated": "2026-10-13T20:21:19.992Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-108383 (GCVE-0-2026-108383)
Vulnerability from cvelistv5 – Published: 2026-10-13 17:47 – Updated: 2026-10-13 17:47
VLAI
EPSS
VEX
Title
dataclasses-avroschema enum field defaults can inject statements into generated modules
Summary
dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, FieldRepresentation.get_field_default renders a schema-controlled enum field default as an enum member reference after applying case conversion but without validating it as an identifier. Newlines, operators, and punctuation can escape the intended reference and inject constrained statements into the generated module, allowing namespace modification or preventing the module from loading. Version 0.70.6 fixes the vulnerability by validating enum defaults as names.
Severity
8.8 (High)
CWE
- CWE-94 - Improper Control of Generation of Code ('Code Injection')
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://github.com/marcosschroh/dataclasses-avros… | x_refsource_CONFIRM |
| https://github.com/marcosschroh/dataclasses-avros… | x_refsource_MISC |
| https://github.com/marcosschroh/dataclasses-avros… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| marcosschroh | dataclasses-avroschema |
Affected:
>= 0.38.0, < 0.70.6
|
{
"containers": {
"cna": {
"affected": [
{
"product": "dataclasses-avroschema",
"vendor": "marcosschroh",
"versions": [
{
"status": "affected",
"version": "\u003e= 0.38.0, \u003c 0.70.6"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, FieldRepresentation.get_field_default renders a schema-controlled enum field default as an enum member reference after applying case conversion but without validating it as an identifier. Newlines, operators, and punctuation can escape the intended reference and inject constrained statements into the generated module, allowing namespace modification or preventing the module from loading. Version 0.70.6 fixes the vulnerability by validating enum defaults as names."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-94",
"description": "CWE-94: Improper Control of Generation of Code (\u0027Code Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T17:47:51.594Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/marcosschroh/dataclasses-avroschema/security/advisories/GHSA-4xxf-mv22-hcr8",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/marcosschroh/dataclasses-avroschema/security/advisories/GHSA-4xxf-mv22-hcr8"
},
{
"name": "https://github.com/marcosschroh/dataclasses-avroschema/commit/429f3d705d2d04c0c65e2ef832daed5ff91318fc",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/marcosschroh/dataclasses-avroschema/commit/429f3d705d2d04c0c65e2ef832daed5ff91318fc"
},
{
"name": "https://github.com/marcosschroh/dataclasses-avroschema/releases/tag/0.70.6",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/marcosschroh/dataclasses-avroschema/releases/tag/0.70.6"
}
],
"source": {
"advisory": "GHSA-4xxf-mv22-hcr8",
"discovery": "UNKNOWN"
},
"title": "dataclasses-avroschema enum field defaults can inject statements into generated modules"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-108383",
"datePublished": "2026-10-13T17:47:51.594Z",
"dateReserved": "2026-10-09T21:36:27.043Z",
"dateUpdated": "2026-10-13T17:47:51.594Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-108382 (GCVE-0-2026-108382)
Vulnerability from cvelistv5 – Published: 2026-10-13 17:44 – Updated: 2026-10-13 18:00
VLAI
EPSS
VEX
Title
dataclasses-avroschema allows code injection through generated enum-symbol string literals
Summary
dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, EnumRepresentation.render_symbols concatenates each schema-controlled enum symbol between double quotes in a generated enum assignment. When generator classes are used directly, a quote can terminate the string literal and inject arbitrary Python code into the enum class body, which executes when the generated module is imported. Version 0.70.6 fixes the vulnerability by escaping enum symbol values before rendering them.
Severity
8.8 (High)
SSVC
Exploitation: poc
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-13 18:00 UTC
CWE
- CWE-94 - Improper Control of Generation of Code ('Code Injection')
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://github.com/marcosschroh/dataclasses-avros… | x_refsource_CONFIRM |
| https://github.com/marcosschroh/dataclasses-avros… | x_refsource_MISC |
| https://github.com/marcosschroh/dataclasses-avros… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| marcosschroh | dataclasses-avroschema |
Affected:
>= 0.38.0, < 0.70.6
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-108382",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-13T18:00:18.850453Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T18:00:34.900Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://github.com/marcosschroh/dataclasses-avroschema/security/advisories/GHSA-vrq9-94ww-jv3c"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "dataclasses-avroschema",
"vendor": "marcosschroh",
"versions": [
{
"status": "affected",
"version": "\u003e= 0.38.0, \u003c 0.70.6"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, EnumRepresentation.render_symbols concatenates each schema-controlled enum symbol between double quotes in a generated enum assignment. When generator classes are used directly, a quote can terminate the string literal and inject arbitrary Python code into the enum class body, which executes when the generated module is imported. Version 0.70.6 fixes the vulnerability by escaping enum symbol values before rendering them."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-94",
"description": "CWE-94: Improper Control of Generation of Code (\u0027Code Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T17:44:36.222Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/marcosschroh/dataclasses-avroschema/security/advisories/GHSA-vrq9-94ww-jv3c",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/marcosschroh/dataclasses-avroschema/security/advisories/GHSA-vrq9-94ww-jv3c"
},
{
"name": "https://github.com/marcosschroh/dataclasses-avroschema/commit/429f3d705d2d04c0c65e2ef832daed5ff91318fc",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/marcosschroh/dataclasses-avroschema/commit/429f3d705d2d04c0c65e2ef832daed5ff91318fc"
},
{
"name": "https://github.com/marcosschroh/dataclasses-avroschema/releases/tag/0.70.6",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/marcosschroh/dataclasses-avroschema/releases/tag/0.70.6"
}
],
"source": {
"advisory": "GHSA-vrq9-94ww-jv3c",
"discovery": "UNKNOWN"
},
"title": "dataclasses-avroschema allows code injection through generated enum-symbol string literals"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-108382",
"datePublished": "2026-10-13T17:44:36.222Z",
"dateReserved": "2026-10-09T21:36:27.043Z",
"dateUpdated": "2026-10-13T18:00:34.900Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-108381 (GCVE-0-2026-108381)
Vulnerability from cvelistv5 – Published: 2026-10-13 17:43 – Updated: 2026-10-13 17:43
VLAI
EPSS
VEX
Title
dataclasses-avroschema pydantic-class metadata allows code injection in generated annotations
Summary
dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.44.0 through 0.70.5, the Pydantic and AvroDantic model generators insert a schema field's pydantic-class value after pydantic. in a generated field annotation without safely restricting the expression. Because annotations are evaluated when the generated module is imported, a crafted value can execute arbitrary Python code. Version 0.70.6 fixes the vulnerability by restricting the value to a bare name or a call to a bare name with literal arguments.
Severity
8.8 (High)
CWE
- CWE-94 - Improper Control of Generation of Code ('Code Injection')
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/marcosschroh/dataclasses-avros… | x_refsource_CONFIRM |
| https://github.com/marcosschroh/dataclasses-avros… | x_refsource_MISC |
| https://github.com/marcosschroh/dataclasses-avros… | x_refsource_MISC |
| https://github.com/marcosschroh/dataclasses-avros… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| marcosschroh | dataclasses-avroschema |
Affected:
>= 0.44.0, < 0.70.6
|
{
"containers": {
"cna": {
"affected": [
{
"product": "dataclasses-avroschema",
"vendor": "marcosschroh",
"versions": [
{
"status": "affected",
"version": "\u003e= 0.44.0, \u003c 0.70.6"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.44.0 through 0.70.5, the Pydantic and AvroDantic model generators insert a schema field\u0027s pydantic-class value after pydantic. in a generated field annotation without safely restricting the expression. Because annotations are evaluated when the generated module is imported, a crafted value can execute arbitrary Python code. Version 0.70.6 fixes the vulnerability by restricting the value to a bare name or a call to a bare name with literal arguments."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-94",
"description": "CWE-94: Improper Control of Generation of Code (\u0027Code Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T17:43:11.422Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/marcosschroh/dataclasses-avroschema/security/advisories/GHSA-4jmx-9m83-vxx8",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/marcosschroh/dataclasses-avroschema/security/advisories/GHSA-4jmx-9m83-vxx8"
},
{
"name": "https://github.com/marcosschroh/dataclasses-avroschema/pull/358",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/marcosschroh/dataclasses-avroschema/pull/358"
},
{
"name": "https://github.com/marcosschroh/dataclasses-avroschema/commit/429f3d705d2d04c0c65e2ef832daed5ff91318fc",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/marcosschroh/dataclasses-avroschema/commit/429f3d705d2d04c0c65e2ef832daed5ff91318fc"
},
{
"name": "https://github.com/marcosschroh/dataclasses-avroschema/releases/tag/0.70.6",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/marcosschroh/dataclasses-avroschema/releases/tag/0.70.6"
}
],
"source": {
"advisory": "GHSA-4jmx-9m83-vxx8",
"discovery": "UNKNOWN"
},
"title": "dataclasses-avroschema pydantic-class metadata allows code injection in generated annotations"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-108381",
"datePublished": "2026-10-13T17:43:11.422Z",
"dateReserved": "2026-10-09T21:36:27.043Z",
"dateUpdated": "2026-10-13T17:43:11.422Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-108380 (GCVE-0-2026-108380)
Vulnerability from cvelistv5 – Published: 2026-10-13 17:41 – Updated: 2026-10-13 18:17
VLAI
EPSS
VEX
Title
dataclasses-avroschema field documentation allows code injection in generated Pydantic descriptions
Summary
dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.65.9 through 0.70.5, PydanticFieldRepresentation.add_field_properties inserts a schema field's doc value between the quotes of a generated pydantic.Field description argument without escaping it. A crafted quote can terminate the string and inject an expression evaluated during generated class definition, allowing arbitrary Python code execution for Pydantic and AvroDantic model generation. Version 0.70.6 fixes the vulnerability by escaping the documentation value before rendering it.
Severity
8.8 (High)
SSVC
Exploitation: poc
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-13 18:16 UTC
CWE
- CWE-94 - Improper Control of Generation of Code ('Code Injection')
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/marcosschroh/dataclasses-avros… | x_refsource_CONFIRM |
| https://github.com/marcosschroh/dataclasses-avros… | x_refsource_MISC |
| https://github.com/marcosschroh/dataclasses-avros… | x_refsource_MISC |
| https://github.com/marcosschroh/dataclasses-avros… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| marcosschroh | dataclasses-avroschema |
Affected:
>= 0.65.9, < 0.70.6
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-108380",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-13T18:16:40.339511Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T18:17:04.630Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://github.com/marcosschroh/dataclasses-avroschema/security/advisories/GHSA-g7p7-mgvm-jw7p"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "dataclasses-avroschema",
"vendor": "marcosschroh",
"versions": [
{
"status": "affected",
"version": "\u003e= 0.65.9, \u003c 0.70.6"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.65.9 through 0.70.5, PydanticFieldRepresentation.add_field_properties inserts a schema field\u0027s doc value between the quotes of a generated pydantic.Field description argument without escaping it. A crafted quote can terminate the string and inject an expression evaluated during generated class definition, allowing arbitrary Python code execution for Pydantic and AvroDantic model generation. Version 0.70.6 fixes the vulnerability by escaping the documentation value before rendering it."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-94",
"description": "CWE-94: Improper Control of Generation of Code (\u0027Code Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T17:41:38.127Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/marcosschroh/dataclasses-avroschema/security/advisories/GHSA-g7p7-mgvm-jw7p",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/marcosschroh/dataclasses-avroschema/security/advisories/GHSA-g7p7-mgvm-jw7p"
},
{
"name": "https://github.com/marcosschroh/dataclasses-avroschema/pull/843",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/marcosschroh/dataclasses-avroschema/pull/843"
},
{
"name": "https://github.com/marcosschroh/dataclasses-avroschema/commit/429f3d705d2d04c0c65e2ef832daed5ff91318fc",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/marcosschroh/dataclasses-avroschema/commit/429f3d705d2d04c0c65e2ef832daed5ff91318fc"
},
{
"name": "https://github.com/marcosschroh/dataclasses-avroschema/releases/tag/0.70.6",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/marcosschroh/dataclasses-avroschema/releases/tag/0.70.6"
}
],
"source": {
"advisory": "GHSA-g7p7-mgvm-jw7p",
"discovery": "UNKNOWN"
},
"title": "dataclasses-avroschema field documentation allows code injection in generated Pydantic descriptions"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-108380",
"datePublished": "2026-10-13T17:41:38.127Z",
"dateReserved": "2026-10-09T21:36:27.043Z",
"dateUpdated": "2026-10-13T18:17:04.630Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-108379 (GCVE-0-2026-108379)
Vulnerability from cvelistv5 – Published: 2026-10-13 17:40 – Updated: 2026-10-13 20:21
VLAI
EPSS
VEX
Title
dataclasses-avroschema fixed namespaces allow code injection in generated annotations
Summary
dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, BaseGenerator.parse_fixed inserts a fixed type's namespace value between quotes inside a generated types.confixed annotation without escaping or validating it. A crafted quote can terminate the namespace string and alter the surrounding annotation expression, which Python evaluates when the generated class is defined, allowing arbitrary code execution. Version 0.70.6 fixes the vulnerability by requiring the namespace to be a dot-separated sequence of valid Avro names.
Severity
8.8 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-13 20:14 UTC
CWE
- CWE-94 - Improper Control of Generation of Code ('Code Injection')
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://github.com/marcosschroh/dataclasses-avros… | x_refsource_CONFIRM |
| https://github.com/marcosschroh/dataclasses-avros… | x_refsource_MISC |
| https://github.com/marcosschroh/dataclasses-avros… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| marcosschroh | dataclasses-avroschema |
Affected:
>= 0.38.0, < 0.70.6
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-108379",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-13T20:14:10.799759Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T20:21:27.845Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "dataclasses-avroschema",
"vendor": "marcosschroh",
"versions": [
{
"status": "affected",
"version": "\u003e= 0.38.0, \u003c 0.70.6"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, BaseGenerator.parse_fixed inserts a fixed type\u0027s namespace value between quotes inside a generated types.confixed annotation without escaping or validating it. A crafted quote can terminate the namespace string and alter the surrounding annotation expression, which Python evaluates when the generated class is defined, allowing arbitrary code execution. Version 0.70.6 fixes the vulnerability by requiring the namespace to be a dot-separated sequence of valid Avro names."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-94",
"description": "CWE-94: Improper Control of Generation of Code (\u0027Code Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T17:40:21.984Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/marcosschroh/dataclasses-avroschema/security/advisories/GHSA-h9q3-f96w-f88j",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/marcosschroh/dataclasses-avroschema/security/advisories/GHSA-h9q3-f96w-f88j"
},
{
"name": "https://github.com/marcosschroh/dataclasses-avroschema/commit/429f3d705d2d04c0c65e2ef832daed5ff91318fc",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/marcosschroh/dataclasses-avroschema/commit/429f3d705d2d04c0c65e2ef832daed5ff91318fc"
},
{
"name": "https://github.com/marcosschroh/dataclasses-avroschema/releases/tag/0.70.6",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/marcosschroh/dataclasses-avroschema/releases/tag/0.70.6"
}
],
"source": {
"advisory": "GHSA-h9q3-f96w-f88j",
"discovery": "UNKNOWN"
},
"title": "dataclasses-avroschema fixed namespaces allow code injection in generated annotations"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-108379",
"datePublished": "2026-10-13T17:40:21.984Z",
"dateReserved": "2026-10-09T21:36:27.043Z",
"dateUpdated": "2026-10-13T20:21:27.845Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-108378 (GCVE-0-2026-108378)
Vulnerability from cvelistv5 – Published: 2026-10-13 17:34 – Updated: 2026-10-13 17:34
VLAI
EPSS
VEX
Title
dataclasses-avroschema record documentation can terminate generated class docstrings
Summary
dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.40.0 through 0.70.5, ClassRepresentation.render_docstring copies a schema record's doc value into a generated triple-double-quoted class docstring without escaping quotes or backslashes. A crafted triple-quote sequence can close the docstring and inject statements into the generated class body, while a trailing backslash can escape the generated closing delimiter, allowing Python code execution during module import. Version 0.70.6 fixes the vulnerability by escaping quotes, backslashes, and unsafe control characters before rendering docstrings.
Severity
8.8 (High)
CWE
- CWE-94 - Improper Control of Generation of Code ('Code Injection')
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://github.com/marcosschroh/dataclasses-avros… | x_refsource_CONFIRM |
| https://github.com/marcosschroh/dataclasses-avros… | x_refsource_MISC |
| https://github.com/marcosschroh/dataclasses-avros… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| marcosschroh | dataclasses-avroschema |
Affected:
>= 0.40.0, < 0.70.6
|
{
"containers": {
"cna": {
"affected": [
{
"product": "dataclasses-avroschema",
"vendor": "marcosschroh",
"versions": [
{
"status": "affected",
"version": "\u003e= 0.40.0, \u003c 0.70.6"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.40.0 through 0.70.5, ClassRepresentation.render_docstring copies a schema record\u0027s doc value into a generated triple-double-quoted class docstring without escaping quotes or backslashes. A crafted triple-quote sequence can close the docstring and inject statements into the generated class body, while a trailing backslash can escape the generated closing delimiter, allowing Python code execution during module import. Version 0.70.6 fixes the vulnerability by escaping quotes, backslashes, and unsafe control characters before rendering docstrings."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-94",
"description": "CWE-94: Improper Control of Generation of Code (\u0027Code Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T17:34:28.530Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/marcosschroh/dataclasses-avroschema/security/advisories/GHSA-ff3j-hw44-6vx4",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/marcosschroh/dataclasses-avroschema/security/advisories/GHSA-ff3j-hw44-6vx4"
},
{
"name": "https://github.com/marcosschroh/dataclasses-avroschema/commit/429f3d705d2d04c0c65e2ef832daed5ff91318fc",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/marcosschroh/dataclasses-avroschema/commit/429f3d705d2d04c0c65e2ef832daed5ff91318fc"
},
{
"name": "https://github.com/marcosschroh/dataclasses-avroschema/releases/tag/0.70.6",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/marcosschroh/dataclasses-avroschema/releases/tag/0.70.6"
}
],
"source": {
"advisory": "GHSA-ff3j-hw44-6vx4",
"discovery": "UNKNOWN"
},
"title": "dataclasses-avroschema record documentation can terminate generated class docstrings"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-108378",
"datePublished": "2026-10-13T17:34:28.530Z",
"dateReserved": "2026-10-09T21:36:27.043Z",
"dateUpdated": "2026-10-13T17:34:28.530Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-108377 (GCVE-0-2026-108377)
Vulnerability from cvelistv5 – Published: 2026-10-13 17:22 – Updated: 2026-10-13 17:49
VLAI
EPSS
VEX
Title
dataclasses-avroschema allows code injection through generated Meta.schema_name
Summary
dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.62.3 through 0.70.5, ClassRepresentation.render_metaclass inserts a schema-controlled Avro record name into the quoted Meta.schema_name field of generated Python source without escaping it. A crafted name can terminate the string literal and inject statements into the generated class body, which execute when the generated module is imported. Version 0.70.6 fixes the vulnerability by escaping schema values rendered into generated string literals.
Severity
8.8 (High)
SSVC
Exploitation: poc
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-13 17:48 UTC
CWE
- CWE-94 - Improper Control of Generation of Code ('Code Injection')
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/marcosschroh/dataclasses-avros… | x_refsource_CONFIRM |
| https://github.com/marcosschroh/dataclasses-avros… | x_refsource_MISC |
| https://github.com/marcosschroh/dataclasses-avros… | x_refsource_MISC |
| https://github.com/marcosschroh/dataclasses-avros… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| marcosschroh | dataclasses-avroschema |
Affected:
>= 0.62.3, < 0.70.6
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-108377",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-13T17:48:59.254712Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T17:49:08.751Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://github.com/marcosschroh/dataclasses-avroschema/security/advisories/GHSA-57hr-pcm8-p9j9"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "dataclasses-avroschema",
"vendor": "marcosschroh",
"versions": [
{
"status": "affected",
"version": "\u003e= 0.62.3, \u003c 0.70.6"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.62.3 through 0.70.5, ClassRepresentation.render_metaclass inserts a schema-controlled Avro record name into the quoted Meta.schema_name field of generated Python source without escaping it. A crafted name can terminate the string literal and inject statements into the generated class body, which execute when the generated module is imported. Version 0.70.6 fixes the vulnerability by escaping schema values rendered into generated string literals."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-94",
"description": "CWE-94: Improper Control of Generation of Code (\u0027Code Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T17:32:34.126Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/marcosschroh/dataclasses-avroschema/security/advisories/GHSA-57hr-pcm8-p9j9",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/marcosschroh/dataclasses-avroschema/security/advisories/GHSA-57hr-pcm8-p9j9"
},
{
"name": "https://github.com/marcosschroh/dataclasses-avroschema/commit/429f3d705d2d04c0c65e2ef832daed5ff91318fc",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/marcosschroh/dataclasses-avroschema/commit/429f3d705d2d04c0c65e2ef832daed5ff91318fc"
},
{
"name": "https://github.com/marcosschroh/dataclasses-avroschema/commit/919d3e07c8938369cfc2c0569007ba373247e74a",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/marcosschroh/dataclasses-avroschema/commit/919d3e07c8938369cfc2c0569007ba373247e74a"
},
{
"name": "https://github.com/marcosschroh/dataclasses-avroschema/releases/tag/0.70.6",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/marcosschroh/dataclasses-avroschema/releases/tag/0.70.6"
}
],
"source": {
"advisory": "GHSA-57hr-pcm8-p9j9",
"discovery": "UNKNOWN"
},
"title": "dataclasses-avroschema allows code injection through generated Meta.schema_name"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-108377",
"datePublished": "2026-10-13T17:22:32.040Z",
"dateReserved": "2026-10-09T21:36:27.042Z",
"dateUpdated": "2026-10-13T17:49:08.751Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-108376 (GCVE-0-2026-108376)
Vulnerability from cvelistv5 – Published: 2026-10-13 17:17 – Updated: 2026-10-13 17:24
VLAI
EPSS
VEX
Title
dataclasses-avroschema allows code injection through record names in generated default factories
Summary
dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.47.3 through 0.70.5, FieldRepresentation.get_field_default inserts a schema-controlled referenced record name into the callable position of a generated default_factory lambda without validating it as an Avro name. A crafted record name can become an arbitrary Python expression that executes when an instance of the generated model consumes the field default. Version 0.70.6 fixes the vulnerability by rejecting record names that do not match the Avro name grammar.
Severity
8.8 (High)
CWE
- CWE-94 - Improper Control of Generation of Code ('Code Injection')
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://github.com/marcosschroh/dataclasses-avros… | x_refsource_CONFIRM |
| https://github.com/marcosschroh/dataclasses-avros… | x_refsource_MISC |
| https://github.com/marcosschroh/dataclasses-avros… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| marcosschroh | dataclasses-avroschema |
Affected:
>= 0.47.3, < 0.70.6
|
{
"containers": {
"cna": {
"affected": [
{
"product": "dataclasses-avroschema",
"vendor": "marcosschroh",
"versions": [
{
"status": "affected",
"version": "\u003e= 0.47.3, \u003c 0.70.6"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.47.3 through 0.70.5, FieldRepresentation.get_field_default inserts a schema-controlled referenced record name into the callable position of a generated default_factory lambda without validating it as an Avro name. A crafted record name can become an arbitrary Python expression that executes when an instance of the generated model consumes the field default. Version 0.70.6 fixes the vulnerability by rejecting record names that do not match the Avro name grammar."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-94",
"description": "CWE-94: Improper Control of Generation of Code (\u0027Code Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T17:24:09.441Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/marcosschroh/dataclasses-avroschema/security/advisories/GHSA-jcjg-gjg5-xp7v",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/marcosschroh/dataclasses-avroschema/security/advisories/GHSA-jcjg-gjg5-xp7v"
},
{
"name": "https://github.com/marcosschroh/dataclasses-avroschema/commit/429f3d705d2d04c0c65e2ef832daed5ff91318fc",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/marcosschroh/dataclasses-avroschema/commit/429f3d705d2d04c0c65e2ef832daed5ff91318fc"
},
{
"name": "https://github.com/marcosschroh/dataclasses-avroschema/releases/tag/0.70.6",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/marcosschroh/dataclasses-avroschema/releases/tag/0.70.6"
}
],
"source": {
"advisory": "GHSA-jcjg-gjg5-xp7v",
"discovery": "UNKNOWN"
},
"title": "dataclasses-avroschema allows code injection through record names in generated default factories"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-108376",
"datePublished": "2026-10-13T17:17:07.502Z",
"dateReserved": "2026-10-09T21:36:27.042Z",
"dateUpdated": "2026-10-13T17:24:09.441Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-108375 (GCVE-0-2026-108375)
Vulnerability from cvelistv5 – Published: 2026-10-13 17:05 – Updated: 2026-10-13 17:27
VLAI
EPSS
VEX
Title
dataclasses-avroschema allows code injection through generated field-default literals
Summary
dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, FieldRepresentation.get_field_default inserts schema-controlled string, UUID, bytes, and fixed field defaults into quoted literals in generated Python source without escaping them. A crafted default can terminate the literal and inject statements into the generated module, which execute when the module is imported. Version 0.70.6 fixes the vulnerability by escaping schema values rendered into generated string literals.
Severity
8.8 (High)
SSVC
Exploitation: poc
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-13 17:26 UTC
CWE
- CWE-94 - Improper Control of Generation of Code ('Code Injection')
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://github.com/marcosschroh/dataclasses-avros… | x_refsource_CONFIRM |
| https://github.com/marcosschroh/dataclasses-avros… | x_refsource_MISC |
| https://github.com/marcosschroh/dataclasses-avros… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| marcosschroh | dataclasses-avroschema |
Affected:
>= 0.38.0, < 0.70.6
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-108375",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-13T17:26:36.130286Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T17:27:01.914Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://github.com/marcosschroh/dataclasses-avroschema/security/advisories/GHSA-9h8h-264x-jcg2"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "dataclasses-avroschema",
"vendor": "marcosschroh",
"versions": [
{
"status": "affected",
"version": "\u003e= 0.38.0, \u003c 0.70.6"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, FieldRepresentation.get_field_default inserts schema-controlled string, UUID, bytes, and fixed field defaults into quoted literals in generated Python source without escaping them. A crafted default can terminate the literal and inject statements into the generated module, which execute when the module is imported. Version 0.70.6 fixes the vulnerability by escaping schema values rendered into generated string literals."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-94",
"description": "CWE-94: Improper Control of Generation of Code (\u0027Code Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T17:25:18.077Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/marcosschroh/dataclasses-avroschema/security/advisories/GHSA-9h8h-264x-jcg2",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/marcosschroh/dataclasses-avroschema/security/advisories/GHSA-9h8h-264x-jcg2"
},
{
"name": "https://github.com/marcosschroh/dataclasses-avroschema/commit/01e6d5e15ab0ff69faac39a340d21b85da1e852f",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/marcosschroh/dataclasses-avroschema/commit/01e6d5e15ab0ff69faac39a340d21b85da1e852f"
},
{
"name": "https://github.com/marcosschroh/dataclasses-avroschema/releases/tag/0.70.6",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/marcosschroh/dataclasses-avroschema/releases/tag/0.70.6"
}
],
"source": {
"advisory": "GHSA-9h8h-264x-jcg2",
"discovery": "UNKNOWN"
},
"title": "dataclasses-avroschema allows code injection through generated field-default literals"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-108375",
"datePublished": "2026-10-13T17:05:41.515Z",
"dateReserved": "2026-10-09T21:36:27.042Z",
"dateUpdated": "2026-10-13T17:27:01.914Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-94603 (GCVE-0-2026-94603)
Vulnerability from cvelistv5 – Published: 2026-10-13 16:51 – Updated: 2026-10-13 20:21
VLAI
EPSS
VEX
Title
Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation
Summary
Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats an image carrying the io.podman.annotations.checkpoint.runtime.name annotation as a checkpoint and silently ignores user-supplied container creation restrictions such as --cap-drop=ALL, allowing image-controlled checkpoint state to select weaker sandbox settings and capabilities. Rootless containers are not affected because checkpoint and restore are unavailable in that mode. This issue is fixed in versions 5.8.8 and 6.1.3.
Severity
10 (Critical)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-13 20:19 UTC
CWE
- CWE-693 - Protection Mechanism Failure
Assigner
References
9 references
| URL | Tags |
|---|---|
| https://github.com/podman-container-tools/podman/… | x_refsource_CONFIRM |
| https://github.com/podman-container-tools/podman/… | x_refsource_MISC |
| https://github.com/podman-container-tools/podman/… | x_refsource_MISC |
| https://github.com/podman-container-tools/podman/… | x_refsource_MISC |
| https://github.com/podman-container-tools/podman/… | x_refsource_MISC |
| https://github.com/podman-container-tools/podman/… | x_refsource_MISC |
| https://github.com/podman-container-tools/podman/… | x_refsource_MISC |
| https://github.com/podman-container-tools/podman/… | x_refsource_MISC |
| https://github.com/podman-container-tools/podman/… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| podman-container-tools | podman |
Affected:
>= 4.4.0, < 5.8.8
Affected: >= 6.0.0, < 6.1.3 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-94603",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-13T20:19:31.021516Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T20:21:43.627Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "podman",
"vendor": "podman-container-tools",
"versions": [
{
"status": "affected",
"version": "\u003e= 4.4.0, \u003c 5.8.8"
},
{
"status": "affected",
"version": "\u003e= 6.0.0, \u003c 6.1.3"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats an image carrying the io.podman.annotations.checkpoint.runtime.name annotation as a checkpoint and silently ignores user-supplied container creation restrictions such as --cap-drop=ALL, allowing image-controlled checkpoint state to select weaker sandbox settings and capabilities. Rootless containers are not affected because checkpoint and restore are unavailable in that mode. This issue is fixed in versions 5.8.8 and 6.1.3."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 10,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-693",
"description": "CWE-693: Protection Mechanism Failure",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T16:51:38.731Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/podman-container-tools/podman/security/advisories/GHSA-2cvf-wqm6-wr9g",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/podman-container-tools/podman/security/advisories/GHSA-2cvf-wqm6-wr9g"
},
{
"name": "https://github.com/podman-container-tools/podman/commit/24706290d5c974f078d8ca284026802515f28e92",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/podman-container-tools/podman/commit/24706290d5c974f078d8ca284026802515f28e92"
},
{
"name": "https://github.com/podman-container-tools/podman/commit/3721ff82ffb44a4ceeaecc5abd3808e924a6b669",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/podman-container-tools/podman/commit/3721ff82ffb44a4ceeaecc5abd3808e924a6b669"
},
{
"name": "https://github.com/podman-container-tools/podman/commit/450c64426dbcff1097d3c7911d791101e3d16f4c",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/podman-container-tools/podman/commit/450c64426dbcff1097d3c7911d791101e3d16f4c"
},
{
"name": "https://github.com/podman-container-tools/podman/commit/7728ba0a90094408ad9078e36c3622a651d49616",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/podman-container-tools/podman/commit/7728ba0a90094408ad9078e36c3622a651d49616"
},
{
"name": "https://github.com/podman-container-tools/podman/commit/c74b1d37b3fb834b0de43e176565d9d8c254b627",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/podman-container-tools/podman/commit/c74b1d37b3fb834b0de43e176565d9d8c254b627"
},
{
"name": "https://github.com/podman-container-tools/podman/commit/ea9243e04d1db3886dc3a51ee3300ffb547cfc02",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/podman-container-tools/podman/commit/ea9243e04d1db3886dc3a51ee3300ffb547cfc02"
},
{
"name": "https://github.com/podman-container-tools/podman/releases/tag/v5.8.8",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/podman-container-tools/podman/releases/tag/v5.8.8"
},
{
"name": "https://github.com/podman-container-tools/podman/releases/tag/v6.1.3",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/podman-container-tools/podman/releases/tag/v6.1.3"
}
],
"source": {
"advisory": "GHSA-2cvf-wqm6-wr9g",
"discovery": "UNKNOWN"
},
"title": "Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-94603",
"datePublished": "2026-10-13T16:51:38.731Z",
"dateReserved": "2026-09-21T21:32:23.740Z",
"dateUpdated": "2026-10-13T20:21:43.627Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-55823 (GCVE-0-2026-55823)
Vulnerability from cvelistv5 – Published: 2026-10-13 16:49 – Updated: 2026-10-13 17:51
VLAI
EPSS
VEX
Title
Frappe: Possibility of SQL injection in reportview
Summary
Frappe is a full-stack web application framework. Prior to 16.23.0, the get_count() method in reportview composes a count operation around generated SQL through a raw database execution path, allowing crafted report input to alter SQL executed by the application. This issue is fixed in version 16.23.0.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-13 17:51 UTC
CWE
- CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://github.com/frappe/frappe/security/advisor… | x_refsource_CONFIRM |
| https://github.com/frappe/frappe/pull/40022 | x_refsource_MISC |
| https://github.com/frappe/frappe/pull/40027 | x_refsource_MISC |
| https://github.com/frappe/frappe/commit/49dbde746… | x_refsource_MISC |
| https://github.com/frappe/frappe/commit/f4f2df926… | x_refsource_MISC |
| https://github.com/frappe/frappe/releases/tag/v16.23.0 | x_refsource_MISC |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-55823",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-13T17:51:48.752488Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T17:51:54.927Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "frappe",
"vendor": "frappe",
"versions": [
{
"status": "affected",
"version": "\u003c 16.23.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Frappe is a full-stack web application framework. Prior to 16.23.0, the get_count() method in reportview composes a count operation around generated SQL through a raw database execution path, allowing crafted report input to alter SQL executed by the application. This issue is fixed in version 16.23.0."
}
],
"metrics": [
{
"cvssV4_0": {
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"privilegesRequired": "LOW",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "LOW",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "CWE-89: Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T16:49:28.128Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/frappe/frappe/security/advisories/GHSA-mf6r-q34j-pjw7",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/frappe/frappe/security/advisories/GHSA-mf6r-q34j-pjw7"
},
{
"name": "https://github.com/frappe/frappe/pull/40022",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/frappe/frappe/pull/40022"
},
{
"name": "https://github.com/frappe/frappe/pull/40027",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/frappe/frappe/pull/40027"
},
{
"name": "https://github.com/frappe/frappe/commit/49dbde7460fa41528154088d23b6c6e12f733f9b",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/frappe/frappe/commit/49dbde7460fa41528154088d23b6c6e12f733f9b"
},
{
"name": "https://github.com/frappe/frappe/commit/f4f2df926e3c2db2da5fc79983f285397c028690",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/frappe/frappe/commit/f4f2df926e3c2db2da5fc79983f285397c028690"
},
{
"name": "https://github.com/frappe/frappe/releases/tag/v16.23.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/frappe/frappe/releases/tag/v16.23.0"
}
],
"source": {
"advisory": "GHSA-mf6r-q34j-pjw7",
"discovery": "UNKNOWN"
},
"title": "Frappe: Possibility of SQL injection in reportview"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-55823",
"datePublished": "2026-10-13T16:49:28.128Z",
"dateReserved": "2026-06-17T16:29:38.864Z",
"dateUpdated": "2026-10-13T17:51:54.927Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-66057 (GCVE-0-2026-66057)
Vulnerability from cvelistv5 – Published: 2026-10-13 16:48 – Updated: 2026-10-13 16:48
VLAI
EPSS
VEX
Title
Frappe: Open Redirect via Unsanitized OAuth State Param.
Summary
Frappe is a full-stack web application framework. Prior to 15.116.0 and 16.29.0, the OAuth login flow uses an unsanitized client-controlled state parameter to select post-authentication navigation, allowing a crafted state value to redirect a user to an attacker-chosen location. This issue is fixed in versions 15.116.0 and 16.29.0.
Severity
CWE
- CWE-601 - URL Redirection to Untrusted Site ('Open Redirect')
Assigner
References
7 references
| URL | Tags |
|---|---|
| https://github.com/frappe/frappe/security/advisor… | x_refsource_CONFIRM |
| https://github.com/frappe/frappe/pull/40962 | x_refsource_MISC |
| https://github.com/frappe/frappe/commit/12568e2d5… | x_refsource_MISC |
| https://github.com/frappe/frappe/commit/1e0a3b941… | x_refsource_MISC |
| https://github.com/frappe/frappe/commit/6ed8acd86… | x_refsource_MISC |
| https://github.com/frappe/frappe/releases/tag/v15.116.0 | x_refsource_MISC |
| https://github.com/frappe/frappe/releases/tag/v16.29.0 | x_refsource_MISC |
Impacted products
{
"containers": {
"cna": {
"affected": [
{
"product": "frappe",
"vendor": "frappe",
"versions": [
{
"status": "affected",
"version": "\u003c 15.116.0"
},
{
"status": "affected",
"version": "\u003e= 16.0.0, \u003c 16.29.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Frappe is a full-stack web application framework. Prior to 15.116.0 and 16.29.0, the OAuth login flow uses an unsanitized client-controlled state parameter to select post-authentication navigation, allowing a crafted state value to redirect a user to an attacker-chosen location. This issue is fixed in versions 15.116.0 and 16.29.0."
}
],
"metrics": [
{
"cvssV4_0": {
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"privilegesRequired": "NONE",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "ACTIVE",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "NONE"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-601",
"description": "CWE-601: URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T16:48:03.798Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/frappe/frappe/security/advisories/GHSA-78c5-55xg-jm7m",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/frappe/frappe/security/advisories/GHSA-78c5-55xg-jm7m"
},
{
"name": "https://github.com/frappe/frappe/pull/40962",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/frappe/frappe/pull/40962"
},
{
"name": "https://github.com/frappe/frappe/commit/12568e2d54c4abba70bc0261387053fa28f90988",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/frappe/frappe/commit/12568e2d54c4abba70bc0261387053fa28f90988"
},
{
"name": "https://github.com/frappe/frappe/commit/1e0a3b941231d74a71ff1a43eee2e9f63c88712d",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/frappe/frappe/commit/1e0a3b941231d74a71ff1a43eee2e9f63c88712d"
},
{
"name": "https://github.com/frappe/frappe/commit/6ed8acd869199feb3a2598887d471448297edf07",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/frappe/frappe/commit/6ed8acd869199feb3a2598887d471448297edf07"
},
{
"name": "https://github.com/frappe/frappe/releases/tag/v15.116.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/frappe/frappe/releases/tag/v15.116.0"
},
{
"name": "https://github.com/frappe/frappe/releases/tag/v16.29.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/frappe/frappe/releases/tag/v16.29.0"
}
],
"source": {
"advisory": "GHSA-78c5-55xg-jm7m",
"discovery": "UNKNOWN"
},
"title": "Frappe: Open Redirect via Unsanitized OAuth State Param."
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-66057",
"datePublished": "2026-10-13T16:48:03.798Z",
"dateReserved": "2026-07-23T23:25:28.896Z",
"dateUpdated": "2026-10-13T16:48:03.798Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}