Security advisories

Tina: Code injection via unescaped Git branch name in generated client source

TinaCMS admin preview iframe loads an attacker-controlled origin from the URL fragment

@tinacms/web-components: `tina-markdown` writes rich-text link URLs into `href` without scheme validation, allowing stored XSS

Contao: Protected page content is disclosed to anonymous visitors after contao.search.index_protected is disabled

Contao: The registration module re-sends activation mails

Contao: Cross-site request forgery in custom backend actions

Contao: Path traversal in the images controller

Contao: Cross-site scripting in the comments bundle

Contao: Improper access control in the preview links module

Contao: Improper access control in the table access voter

fast-jwt: Verifier cache accepts expired JWTs without iat.

AdonisJS: Unencoded route parameters can produce open redirects

fast-jwt: createVerifier accepts unsigned JWTs when key is '' or null and algorithms is explicitly set

fast-jwt: Incomplete patch of CVE-2026-34950: Non-whitespace key-prefix re-enables RSA→HS256 algorithm confusion

fast-jwt clockTolerance: Infinity silently bypasses both exp and nbf validation (and persists in the verifier cache)

fast-jwt : Silent claim-validator bypass when JWT payload is a JSON array

fast-jwt treats raw public JWK JSON as an HMAC secret, enabling HS256 token forgery

PraisonAI: AgentOS defaults to network-exposed no-auth mode, allowing unauthenticated agent invocation and instruction disclosure

music-metadata: MP4 stsd sample-entry size==0 causes a synchronous infinite loop (DoS) — unreleased regression on master

music-metadata: Uncontrolled memory allocation in APEv2 parser

music-metadata: ID3v2 tag size not validated before allocation, causing memory exhaustion DoS

music-metadata: EBML parser trusts element lengths, allowing memory exhaustion or process abort

MariaDB Connector/Node.js: SQL injection in the text protocol when the session uses NO_BACKSLASH_ESCAPES

MariaDB Connector/Node.js: SQL injection through object keys in SET expansion (permitSetMultiParamEntries)

MariaDB Connector/Node.js exposes uninitialized process memory through malformed GeoJSON parameters

MariaDB Connector/Node.js: Uncaught exception crashes the client during ed25519 authentication with zero-configuration TLS

enshrined/svg-sanitize: Stored XSS via DTD Entity / HTML5 Named Character Reference Collision

svg-sanitizer: Mixed-case xlink:HrEf skips the `<use>` nesting-DoS check in Resolver::processReferences

enshrined/svg-sanitize: Denial of Service via DTD Attribute Declaration Crash

music-metadata: uncatchable process crash parsing a crafted `.dsf` (residual of GHSA-v6c2-xwv6-8xf7)

Handlebars: JavaScript Injection via Unsafe Inline Embedding of Precompiled Templates

Handlebars: JavaScript Injection via AST Type Confusion in compile (bypass of CVE-2026-33937)

Handlebars: JavaScript Injection via Own Property Check Bypass

LangChain: MongoDBChatMessageHistory query injection can allow cross-session access

JHipster: SQL Injection in the Parameter of JHipster-Generated Reactive (WebFlux + R2DBC) Applicationssort

JHipster: Generated Applications Allow Stored XSS via Unrestricted Blob ContentType Opened as Same-Origin Blob

msgpack5: Truncated map32 headers throw an unexpected error

msgpack5: Many buffered values can exhaust the streaming decoder stack

msgpack5: Reserved byte can cause unbounded stream buffering

msgpack5: Partial options disable prototype protection

msgpack5: Deeply nested input can exhaust the decoder stack

msgpack5: Quadratic parsing in the streaming decoder

msgpack5: Decoding negative int64 values mutates the input buffer

Ghost: Remote Code Execution via Bookmark Card Images

Ghost: Stored XSS via Embed Card Previews

Ghost : Stored XSS via SVG Files in Content Imports

Ghost: Regular Expression Denial of Service in External Media Inliner

Ghost: Regular Expression Denial of Service in Content Import

Ghost: Server-Side Request Forgery in Bookmark Fetching

Ghost: Private IP Filtering Bypass via IPv6 Transition Addresses

Ghost: Stored XSS via SVG Uploads Bypassing Sanitization

Next.js: Pending `use cache` fill can leak Draft Mode content into regular responses and persisted pages

Next.js has cache poisoning of SSG and ISR pages in self-hosted applications

Next.js has information disclosure in development server's Model Context Protocol endpoint

Next.js has information disclosure in App Router metadata image routes via dynamicParams bypass

Next.js has cache poisoning in SSG/ISR rendering that leads to cross-user content substitution and persistent denial of service

Next.js has Server-Side Request Forgery in Image Optimization

Payload: SQL injection in SQLite/Postgres

Payload: Remote Code Execution through first-register

Payload has a tenant authorization bypass in Multi-Tenant Plugin

Kunstmaan CMS: MediaBundle extension blacklist bypass allows authenticated administrators to upload executable PHP files leading to remote code execution

Filament: Multi-factor authentication (app) management actions do not require password reauthentication

MongoDB: GridFS data disclosure and deletion via query-operator injection in file IDs

Composer: GHSA-gjfg-22fp-rrxx fix bypass via symlinked package bin path

league/commonmark: DisallowedRawHtml bypassed when a disallowed tag name ends the raw-HTML literal

league/commonmark: Quadratic-time denial of service in the GitHub Flavored Markdown Table extension block-start scan

Laravel: XSS in Debug Page Information

Flysystem: WhitespacePathNormalizer's control-character (CorruptedPathDetected) check is bypassed by malformed UTF-8 in the path, affecting every adapter

PHPCSUtils: Remote code execution via eval() in AbstractArrayDeclarationSniff::getActualArrayKey()

FriendsOfFlarum OAuth: Unauthenticated account takeover via unverified email trust in Discord OAuth provider

Mediawiki EmbedVideo Extension has stored XSS via malformed src url with $wgEmbedVideoRequireConsent disabled

code16 Sharp vulnerable to stored XSS via iframe srcdoc Attribute

code16/sharp has a stored XSS via data-html-content Sanitizer Bypass

Contao: Server-Side Request Forgery (SSRF) via Unvalidated RSS Feed URL in Feed Reader Module

zbateson/mail-mime-parser has CRLF header injection via attachment filename

zbateson/mail-mime-parser has uncontrolled resource consumption (CPU/memory DoS) parsing untrusted MIME

phpMyFAQ has SQL Injection in `StopWords::add()` — Unescaped Stop Word Insertion

phpMyFAQ's two-factor authentication login bypasses the password factor

phpMyFAQ has Stored XSS in Admin FAQ Editor via HTML Entity Bypass in Frontend FAQ Submission

Snipe-IT: Stored XSS via Inline XML Rendering in the Uploaded Files API

Snipe-IT: Stored XSS via Custom Field name in asset-list column headers

Snipe-IT: 2FA bypass via the API token flow

REDAXO: Unwhitelisted ORDER BY Column in rex_list Allows Authenticated Column Enumeration

Formie: Missing authorization on sent notification resend modal exposes submission PII

Formie: Unauthenticated users can overwrite incomplete submissions via submit action

Formie: Integration form-settings action allows SSRF and exfiltration of stored integration credentials

Sulu: JCR-SQL2 injection via `categories` query parameter (unauthenticated)

Solspace Freeform: Limited Twig template injection via submitted field values

WPGraphQL: Contributor can publish and modify posts without the required capabilities via updatePost

REDAXO: Missing CSRF Protection on Package Update Action Allows Forced Addon Updates

REDAXO: Stored XSS in Mediapool Sync Page via Unescaped Filesystem Filenames

REDAXO: Stored XSS via Unescaped Media Manager Type Name in `mediaIsInUse()`

Paymenter has a credit-refund double-spend race condition in service downgrade (doUpgrade)

Semantic MediaWiki'a missing authorization in the smwtask API module allows unauthenticated access to admin-only maintenance tasks

Semantic MediaWiki's Special:FacetedSearch cstate hidden inputs enable reflected XSS (residual of CVE-2025-10354)

Semantic MediaWiki affected by reflected XSS in `Special:Ask` via a forged cursor pagination token

Semantic MediaWiki has a query debug output XSS (`DebugFormatter`)

Semantic MediaWiki has an open redirect in Special:URIResolver

Semantic MediaWiki affected by Special:Ask table `sep` parameter reflected XSS

Semantic MediaWiki has reflected XSS in `Special:SearchByProperty` (`property` and `value` parameters)

conflibot vulnerable to command injection via crafted pull request branch names under pull_request_target

Duplicate Advisory: Gemini CLI: Remote Code Execution via workspace trust and tool allowlisting bypasses

githubtoplanguages: Command Injection via Issue Title in Discord Notification Workflow

Claude Code Action: Malicious MCP Server Configuration in PRs Enables Remote Code Execution and Secret Exfiltration

Setup PHP: GitHub tokens configured by setup-php may be exposed through pinned affected Composer versions

Setup PHP: Command Injection in Repository-Derived PHP Version Resolution

Gemini CLI: Remote Code Execution via workspace trust and tool allowlisting bypasses

actions-mkdocs: Command Injection via issue title in internal GitHub Actions workflow

wenxian: Command Injection in GitHub Actions Workflow via `issue_comment.body`

Trivy ecosystem supply chain was briefly compromised

Zen-AI-Pentest has Shell Injection via untrusted issue title in ZenClaw Discord Integration workflow

Egress Policy Bypass via DNS over HTTPS (DoH) in Harden-Runner (Community Tier)

Egress Policy Bypass via DNS over TCP in Harden-Runner (Community Tier)

xygeni-action v5 tag poisoned with C2 backdoor

Black's vulnerable version parsing leads to RCE in GitHub Action

Trivy Action has a script injection via sourced env file in composite action

Super-linter is vulnerable to command injection via crafted filenames in Super-linter Action

Harden-Runner: Bypassing Logging of Outbound Connections Using sendto, sendmsg, and sendmmsg in Harden-Runner (Community Tier)

j178/prek-action vulnerable to arbitrary code injection in composite action

Argument injection vulnerability in SonarQube Scan Action

PyPI publish GitHub Action vulnerable to injectable expression expansions in action steps

Command Injection via sonarqube-scan-action GitHub Action

lychee link checking action affected by arbitrary code injection in composite action

m00nl1ght-dev/steam-workshop-deploy: Exposure of Version-Control Repository to an Unauthorized Control Sphere and Insufficiently Protected Credentials

tj-actions/branch-names has a Command Injection Vulnerability

RageAgainstThePixel/setup-steamcmd leaked authentication token in job output logs

buildalon/setup-steamcmd leaked authentication token in job output logs

Cromwell GitHub Actions Secrets exfiltration via `Issue_comment`

Bullfrog's DNS over TCP bypasses domain filtering

OZI-Project/ozi-publish Code Injection vulnerability

Harden-Runner allows evasion of 'disable-sudo' policy

canonical/get-workflow-version-action can leak a partial GITHUB_TOKEN in exception output

Multiple Reviewdog actions were compromised during a specific time period

tj-actions changed-files through 45.0.7 allows remote attackers to discover secrets by reading actions logs.

GitHub PAT written to debug artifacts

Artifact poisoning vulnerability in action-download-artifact v5 and earlier

Harden-Runner has a command injection weaknesses in `setup.ts` and `arc-runner.ts`

@actions/download-artifact has an Arbitrary File Write via artifact extraction

GitHub Actions Script Injection in `ultralytics/actions`

fish-shop/syntax-check Improper Neutralization of Delimiters

github-slug-action use of `set-env` Runner commands which are processed via stdout

Potential Actions command injection in output filenames (GHSL-2023-275)

tj-actions/changed-files has Potential Actions command injection in output filenames (GHSL-2023-271)

memory overflow vulnerability in OpenEXR-viewer

tj-actions/branch-names's Improper Sanitization of Branch Name Leads to Arbitrary Code Injection

Actions expression injection in `filter-test-configs` (`GHSL-2023-181`)

Data written to GitHub Actions Cache may expose secrets

Arbitrary command injection in embano1/wip

github-slug-action vulnerable to arbitrary code execution

Azure/setup-kubectl: Escalation of privilege vulnerability for v3 and lower