Security advisories

Vitest: Servers misapply `server.fs.deny`, serving `.env`, private keys, `.git`, and the API token file

Vitest: Code injection via unauthenticated manual mock registration

Vitest: Windows backslash traversal bypasses the @vitest/mocker redirect allowlist fix

ApostropheCMS: Exposure of Sensitive Information via predictable export filenames

OpenClaw: Browser CDP discovery could accept blocked WebSocket URLs

Storybook: Missing origin validation in Storybook preview allows code injection from malicious websites

Electron: HID and USB permission checks can be attributed to the wrong origin

ApostropheCMS: POST /api/v1/@apostrophecms/doc/slugTaken discloses existence of private/admin-only content to any authenticated user

ApostropheCMS: GET /api/v1/@apostrophecms/page/:id bypasses viewRole restriction and exposes viewPermission-gated fields to lower-privileged users

ApostropheCMS: Stored XSS via Unescaped Widget Style Attribute Serialization

ApostropheCMS: Missing Authentication in `cleanExport` Route

ApostropheCMS: Unauthenticated publicApiProjection bypass via search and sort query builders in the public REST API

ApostropheCMS: Color field validation bypass allows stored XSS via HTML appended after rgb()/hsl() prefix

ApostropheCMS sanitize-html: unbounded recursion when re-sanitizing the fallback of a discarded iframe (stack overflow, nestingLimit not enforced)

ApostropheCMS: Import API bypasses publication roles for protected content

ApostropheCMS: Archive duplicate continuation lets contributors overwrite published content

ApostropheCMS: Import archives can exhaust server storage and deny service

Vite: Cross origin script execution through Vite custom middleware

Vite: Files outside `server.fs.allow` could be served when project paths match system paths on non-Windows machine

Vite: First 4 bytes of files outside of `server.fs` setting is exposed by `?vite-wasm-instance`

ApostropheCMS: Unauthenticated resource exhaustion via pre-auth aposBigUpload processing in @apostrophecms/import-export

Cachet has Stored XSS in Incident Component

@angular/common: XSRF Token Leakage via URL Parsing Discrepancy in Angular HTTP Client (Incomplete fix for CVE-2025-66035)

markdown-it: Quadratic-time rendering of a single multi-line link reference definition with default options (regression since 14.0)

markdown-it: Quadratic-time denial of service in inline HTML parsing with html enabled

MCP TypeScript server SDK: Shared transport or server instances delivered one HTTP client's messages to another

MCP TypeScript SDK: One HTTP request within the default size limit could exhaust server memory during validation

launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors

launch-editor: `fs.existsSync()` existence check can be bypassed on Windows

MCP TypeScript SDK: Server bearer authentication accepted tokens issued for another service

launch-editor: escapeCmdArgs() omits % escaping on Windows

MCP TypeScript SDK: Experimental tasks were not tied to the session that created them

MCP TypeScript client SDK: HTTP client transports and OAuth requests followed cross-origin redirects and re-sent custom headers and request bodies

ApostropheCMS: The general public can access @apostrophecms/user objects via a relationship (viewRole is not applied to the general public)

ApostropheCMS: Missing Authorization on Notification PATCH/DELETE Endpoints

ApostropheCMS import-export tar guard misses './..' because it is a literal '../' substring test

ApostropheCMS: Path traversal in uploadfs

ApostropheCMS sanitize-html: SMIL animation namespace-prefix bypass allows javascript: URI injection (XSS)

ApostropheCMS uploadfs Azure backend leaks account-level SAS token into every public attachment URL (sas: true)

ApostropheCMS: Authenticated Object-Level Authorization Bypass in exist-in-locale Reveals Restricted Localized Draft Identifiers

ApostropheCMS import-export: NoSQL injection via update-key value lets a crafted import match and overwrite an unidentified document

ApostropheCMS: Client-side Prototype Pollution in apos.http.parseQuery leading to DOM-based XSS against authenticated users

ApostropheCMS: No Attempt Throttling on Authenticated Password-Change Endpoint Enables Unlimited Current-Password Guessing

ApostropheCMS: Incomplete CVE-2026-53606: `meta http-equiv=refresh` `content` still ships `javascript:` / `data:` URLs

ApostropheCMS: :_id/locales REST route omits the public-API authorization gate its sibling read routes enforce (unauthenticated doc-existence + locale metadata disclosure)

ApostropheCMS: Page REST API authorization bypass

ApostropheCMS: Host header controls server-side image fetch origin in @apostrophecms/ai-helper, enabling authenticated SSRF

ApostropheCMS: Unauthenticated CSV import requests leave rejected uploads in the system temporary directory

ApostropheCMS: Cross-domain session token in URL confers session takeover

ApostropheCMS: Unauthenticated unbounded multipart upload → disk-exhaustion DoS

ApostropheCMS: CAPTCHA response token not URL-encoded

Leantime: Any Authenticated User Can Self-Escalate to Admin via Unauthorized JSON-RPC Methods

YOURLS: Unauthenticated File Inclusion

react/http: Unbounded HTTP Client Response Header Buffering Leads to Memory Exhaustion DoS

Contao: Protected page content is disclosed to anonymous visitors after contao.search.index_protected is disabled

Contao: The registration module re-sends activation mails

Contao: Cross-site request forgery in custom backend actions

Contao: Path traversal in the images controller

Contao: Cross-site scripting in the comments bundle

Contao: Improper access control in the preview links module

Contao: Improper access control in the table access voter

enshrined/svg-sanitize: Stored XSS via DTD Entity / HTML5 Named Character Reference Collision

svg-sanitizer: Mixed-case xlink:HrEf skips the `<use>` nesting-DoS check in Resolver::processReferences

enshrined/svg-sanitize: Denial of Service via DTD Attribute Declaration Crash

Kunstmaan CMS: MediaBundle extension blacklist bypass allows authenticated administrators to upload executable PHP files leading to remote code execution

Filament: Multi-factor authentication (app) management actions do not require password reauthentication

MongoDB: GridFS data disclosure and deletion via query-operator injection in file IDs

Composer: GHSA-gjfg-22fp-rrxx fix bypass via symlinked package bin path

league/commonmark: DisallowedRawHtml bypassed when a disallowed tag name ends the raw-HTML literal

league/commonmark: Quadratic-time denial of service in the GitHub Flavored Markdown Table extension block-start scan

Laravel: XSS in Debug Page Information

Flysystem: WhitespacePathNormalizer's control-character (CorruptedPathDetected) check is bypassed by malformed UTF-8 in the path, affecting every adapter

PHPCSUtils: Remote code execution via eval() in AbstractArrayDeclarationSniff::getActualArrayKey()

FriendsOfFlarum OAuth: Unauthenticated account takeover via unverified email trust in Discord OAuth provider

Mediawiki EmbedVideo Extension has stored XSS via malformed src url with $wgEmbedVideoRequireConsent disabled

code16 Sharp vulnerable to stored XSS via iframe srcdoc Attribute

code16/sharp has a stored XSS via data-html-content Sanitizer Bypass

Contao: Server-Side Request Forgery (SSRF) via Unvalidated RSS Feed URL in Feed Reader Module

zbateson/mail-mime-parser has CRLF header injection via attachment filename

zbateson/mail-mime-parser has uncontrolled resource consumption (CPU/memory DoS) parsing untrusted MIME

phpMyFAQ has SQL Injection in `StopWords::add()` — Unescaped Stop Word Insertion

phpMyFAQ's two-factor authentication login bypasses the password factor

phpMyFAQ has Stored XSS in Admin FAQ Editor via HTML Entity Bypass in Frontend FAQ Submission

Snipe-IT: Stored XSS via Inline XML Rendering in the Uploaded Files API

Snipe-IT: Stored XSS via Custom Field name in asset-list column headers

Snipe-IT: 2FA bypass via the API token flow

REDAXO: Unwhitelisted ORDER BY Column in rex_list Allows Authenticated Column Enumeration

Formie: Missing authorization on sent notification resend modal exposes submission PII

Formie: Unauthenticated users can overwrite incomplete submissions via submit action

Formie: Integration form-settings action allows SSRF and exfiltration of stored integration credentials

Sulu: JCR-SQL2 injection via `categories` query parameter (unauthenticated)

Solspace Freeform: Limited Twig template injection via submitted field values

WPGraphQL: Contributor can publish and modify posts without the required capabilities via updatePost

REDAXO: Missing CSRF Protection on Package Update Action Allows Forced Addon Updates

REDAXO: Stored XSS in Mediapool Sync Page via Unescaped Filesystem Filenames

REDAXO: Stored XSS via Unescaped Media Manager Type Name in `mediaIsInUse()`

Paymenter has a credit-refund double-spend race condition in service downgrade (doUpgrade)

Semantic MediaWiki'a missing authorization in the smwtask API module allows unauthenticated access to admin-only maintenance tasks

Semantic MediaWiki's Special:FacetedSearch cstate hidden inputs enable reflected XSS (residual of CVE-2025-10354)

Semantic MediaWiki affected by reflected XSS in `Special:Ask` via a forged cursor pagination token

conflibot vulnerable to command injection via crafted pull request branch names under pull_request_target

Duplicate Advisory: Gemini CLI: Remote Code Execution via workspace trust and tool allowlisting bypasses

githubtoplanguages: Command Injection via Issue Title in Discord Notification Workflow

Claude Code Action: Malicious MCP Server Configuration in PRs Enables Remote Code Execution and Secret Exfiltration

Setup PHP: GitHub tokens configured by setup-php may be exposed through pinned affected Composer versions

Setup PHP: Command Injection in Repository-Derived PHP Version Resolution

Gemini CLI: Remote Code Execution via workspace trust and tool allowlisting bypasses

actions-mkdocs: Command Injection via issue title in internal GitHub Actions workflow

wenxian: Command Injection in GitHub Actions Workflow via `issue_comment.body`

Trivy ecosystem supply chain was briefly compromised

Zen-AI-Pentest has Shell Injection via untrusted issue title in ZenClaw Discord Integration workflow

Egress Policy Bypass via DNS over HTTPS (DoH) in Harden-Runner (Community Tier)

Egress Policy Bypass via DNS over TCP in Harden-Runner (Community Tier)

xygeni-action v5 tag poisoned with C2 backdoor

Black's vulnerable version parsing leads to RCE in GitHub Action

Trivy Action has a script injection via sourced env file in composite action

Super-linter is vulnerable to command injection via crafted filenames in Super-linter Action

Harden-Runner: Bypassing Logging of Outbound Connections Using sendto, sendmsg, and sendmmsg in Harden-Runner (Community Tier)

j178/prek-action vulnerable to arbitrary code injection in composite action

Argument injection vulnerability in SonarQube Scan Action

PyPI publish GitHub Action vulnerable to injectable expression expansions in action steps

Command Injection via sonarqube-scan-action GitHub Action

lychee link checking action affected by arbitrary code injection in composite action

m00nl1ght-dev/steam-workshop-deploy: Exposure of Version-Control Repository to an Unauthorized Control Sphere and Insufficiently Protected Credentials

tj-actions/branch-names has a Command Injection Vulnerability

RageAgainstThePixel/setup-steamcmd leaked authentication token in job output logs

buildalon/setup-steamcmd leaked authentication token in job output logs

Cromwell GitHub Actions Secrets exfiltration via `Issue_comment`

Bullfrog's DNS over TCP bypasses domain filtering

OZI-Project/ozi-publish Code Injection vulnerability

Harden-Runner allows evasion of 'disable-sudo' policy

canonical/get-workflow-version-action can leak a partial GITHUB_TOKEN in exception output

Multiple Reviewdog actions were compromised during a specific time period

tj-actions changed-files through 45.0.7 allows remote attackers to discover secrets by reading actions logs.

GitHub PAT written to debug artifacts

Artifact poisoning vulnerability in action-download-artifact v5 and earlier

Harden-Runner has a command injection weaknesses in `setup.ts` and `arc-runner.ts`

@actions/download-artifact has an Arbitrary File Write via artifact extraction

GitHub Actions Script Injection in `ultralytics/actions`

fish-shop/syntax-check Improper Neutralization of Delimiters

github-slug-action use of `set-env` Runner commands which are processed via stdout

Potential Actions command injection in output filenames (GHSL-2023-275)

tj-actions/changed-files has Potential Actions command injection in output filenames (GHSL-2023-271)

memory overflow vulnerability in OpenEXR-viewer

tj-actions/branch-names's Improper Sanitization of Branch Name Leads to Arbitrary Code Injection

Actions expression injection in `filter-test-configs` (`GHSL-2023-181`)

Data written to GitHub Actions Cache may expose secrets

Arbitrary command injection in embano1/wip

github-slug-action vulnerable to arbitrary code execution

Azure/setup-kubectl: Escalation of privilege vulnerability for v3 and lower