https://vulnogram.org/ Most recent CVEs assigned by GitHub, Inc. (github_m). https://vulnogram.org/seaview/icons/github_m.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-113726 https://vulnogram.org/CVE-2026-113726 virtualenv is a tool for creating isolated virtual python environments. Prior to 21.13.0, the bash activate script that zsh also sources leaves the environment name unescaped; from 21.13.0 until 21.14.4, it escapes backslashes, dollar signs, and back… High Tue, 20 Oct 2026 22:05:24 GMT https://vulnogram.org/CVE-2026-113776 https://vulnogram.org/CVE-2026-113776 virtualenv is a tool for creating isolated virtual python environments. From 20.26.6 until 21.14.2, ViaTemplateActivator.instantiate_template() replaces placeholders one key at a time across the complete activation template, so trigger names such as… High Tue, 20 Oct 2026 22:03:18 GMT https://vulnogram.org/CVE-2026-113732 https://vulnogram.org/CVE-2026-113732 virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.2, FishActivator inherits ViaTemplateActivator.quote(), which uses POSIX shlex.quote() even though fish interprets backslashes and single quotes differently. An at… High Tue, 20 Oct 2026 22:01:23 GMT https://vulnogram.org/CVE-2026-113731 https://vulnogram.org/CVE-2026-113731 djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. From 0.9.0 until 1.0.10, 1.1.7, 1.2.4, and 1.3.0rc8, the find_handlers_for_template MCP tool in python/djust/mcp/server.py accepts an exist… Low Tue, 20 Oct 2026 21:31:28 GMT https://vulnogram.org/CVE-2026-113730 https://vulnogram.org/CVE-2026-113730 OGNL is an Object Graph Navigation Library for Java. Prior to 3.4.13, the optional stricter-invocation mode in OgnlRuntime.invokeMethod checks the declaring class of the method that OGNL invokes but does not block java.lang.reflect.Method, java.lang.… Medium Network Exploitable Tue, 20 Oct 2026 21:24:24 GMT https://vulnogram.org/CVE-2026-113729 https://vulnogram.org/CVE-2026-113729 Moov signedxml is a pure Go library for processing signed XML documents. Prior to 1.4.1, ExclusiveCanonicalization in exclusivecanonicalization.go copies the complete accumulated namespace map at every nested element before reference digest or signat… High Network Exploitable Tue, 20 Oct 2026 21:17:55 GMT https://vulnogram.org/CVE-2026-113728 https://vulnogram.org/CVE-2026-113728 Bulwark Webmail is a self-hosted webmail client for Stalwart Mail Server. Prior to 1.9.2, the unauthenticated POST /api/fetch-ical endpoint validates a caller-supplied hostname with one DNS lookup and then passes the URL to fetch, which performs a se… High Network Exploitable Tue, 20 Oct 2026 21:12:38 GMT https://vulnogram.org/CVE-2026-113727 https://vulnogram.org/CVE-2026-113727 OpenChoreo is a developer platform for Kubernetes. From 1.0.0 until 1.0.6, 1.1.7, and 1.2.5, the PUT .../workflowruns/{runName} update route authorizes a request using the openchoreo.dev/project and openchoreo.dev/component labels in the submitted bo… High Tue, 20 Oct 2026 21:08:37 GMT https://vulnogram.org/CVE-2026-111758 https://vulnogram.org/CVE-2026-111758 markdown-it is a Markdown parser. From versions 14.1.0 to before 14.3.3, and 15.0.0 to before 15.0.3, a link reference definition whose label or title is never closed is O(n²) with default options. Continuation lines are pulled lazily with str += lin… High Network Exploitable Tue, 20 Oct 2026 20:28:40 GMT https://vulnogram.org/CVE-2026-113725 https://vulnogram.org/CVE-2026-113725 virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.7, the bash activate script escapes the environment name for only one of the two passes bash makes over PS1, so a backslash in the name undoes the escaping and a n… High Tue, 20 Oct 2026 19:56:52 GMT https://vulnogram.org/CVE-2026-113724 https://vulnogram.org/CVE-2026-113724 virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the safe_delete() deletion error handler responds to a failed removal by reading mode bits with os.lstat(path) and applying owner-write permission with os.chmod… Medium Tue, 20 Oct 2026 19:53:29 GMT https://vulnogram.org/CVE-2026-113723 https://vulnogram.org/CVE-2026-113723 virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, caller-supplied prompt text can become executable syntax in the bash activation prompt. An attacker must influence the value passed to virtualenv, and a user mu… High Tue, 20 Oct 2026 19:51:06 GMT https://vulnogram.org/CVE-2026-113722 https://vulnogram.org/CVE-2026-113722 virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, virtualenv's ScriptMakerCustom and pip pass an incompletely quoted interpreter path to distlib ScriptMaker when generating POSIX console scripts. When the path… High Tue, 20 Oct 2026 19:48:29 GMT https://vulnogram.org/CVE-2026-113721 https://vulnogram.org/CVE-2026-113721 virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, ViaTemplateActivator._generate() removes an existing output only when Path.exists() is true, allowing a dangling symlink to survive and redirect generated activ… Medium Tue, 20 Oct 2026 19:46:28 GMT https://vulnogram.org/CVE-2026-113720 https://vulnogram.org/CVE-2026-113720 virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the app-data copy seeder uses shutil.copy() to copy cached package files into later environments, causing cached source modes to override the current run's umas… Medium Tue, 20 Oct 2026 19:43:32 GMT https://vulnogram.org/CVE-2026-113715 https://vulnogram.org/CVE-2026-113715 virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the stdlib venv creator reads generated pyvenv.cfg with str.splitlines() and merges parsed keys over virtualenv's selected configuration. An untrusted caller wh… Low Tue, 20 Oct 2026 19:42:55 GMT https://vulnogram.org/CVE-2026-113719 https://vulnogram.org/CVE-2026-113719 virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, PipInstall._uninstall_previous_version() accepts existing seed-package metadata and _uninstall_dist() joins entries from top_level.txt and RECORD to site-packag… Medium Tue, 20 Oct 2026 19:42:07 GMT https://vulnogram.org/CVE-2026-113718 https://vulnogram.org/CVE-2026-113718 virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, POSIX xonsh activation quote() uses repr() to write printable non-ASCII prompt or destination data into UTF-8 activate.xsh, while xonsh can read that script usi… High Tue, 20 Oct 2026 19:39:52 GMT https://vulnogram.org/CVE-2026-113717 https://vulnogram.org/CVE-2026-113717 virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, PipInvoke.get_pip_install_cmd() handles --seeder pip --download by calling get_wheel(download=False) and then allowing pip to consult the configured index, bypa… Low Network Exploitable Tue, 20 Oct 2026 19:22:11 GMT https://vulnogram.org/CVE-2026-113716 https://vulnogram.org/CVE-2026-113716 virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the builtin creator calls ensure_dir() for executable, library, and package directories, and ensure_dir() accepts an existing symlink to a directory because exi… Medium Tue, 20 Oct 2026 19:18:09 GMT https://vulnogram.org/CVE-2026-113712 https://vulnogram.org/CVE-2026-113712 Cachet is an open-source status page system. Versions 2.4.1 and earlier have a stored Cross-Site Scripting (XSS) vulnerability in the incident creation form, allowing an authenticated attacker to inject malicious HTML/JavaScript that executes in the… Medium Tue, 20 Oct 2026 19:14:02 GMT https://vulnogram.org/CVE-2026-113714 https://vulnogram.org/CVE-2026-113714 virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, download_wheel() writes package-index downloads directly into the reusable wheel/house cache before selecting a verification target from pip's textual Saved out… Low Network Exploitable Tue, 20 Oct 2026 19:09:45 GMT https://vulnogram.org/CVE-2026-113713 https://vulnogram.org/CVE-2026-113713 virtualenv is a tool for creating isolated virtual python environments. From 21.14.8 until 21.14.10, the app-data seeder can leave an environment linked to temporary package files that virtualenv deletes when creation finishes. The environment-variab… Medium Tue, 20 Oct 2026 19:06:25 GMT https://vulnogram.org/CVE-2026-111767 https://vulnogram.org/CVE-2026-111767 MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. From version 1.24.0 to before version 1.32.0, the experimental tasks feature (taskStore) did not check which session created a task. Clients sharing one… High Network Exploitable Tue, 20 Oct 2026 18:28:45 GMT https://vulnogram.org/CVE-2026-113709 https://vulnogram.org/CVE-2026-113709 Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.1.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, when an operator has enabled --enable-helm for kustomize build, helmGlobals.configHome can point Helm's config and data d… Critical Tue, 20 Oct 2026 18:08:36 GMT https://vulnogram.org/CVE-2026-113708 https://vulnogram.org/CVE-2026-113708 Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.7.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, Kustomize passes ref or version query values from remote resource, base, or component URLs to git fetch without an end-of… Critical Tue, 20 Oct 2026 18:03:17 GMT https://vulnogram.org/CVE-2026-113672 https://vulnogram.org/CVE-2026-113672 Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 0.9.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, the repo-server evaluates .jsonnet files with an importer that does not confine import, importstr, or importbin to the re… Critical Tue, 20 Oct 2026 18:00:54 GMT https://vulnogram.org/CVE-2026-111756 https://vulnogram.org/CVE-2026-111756 follow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically follows redirects. From version 1.16.0 to before version 1.16.1, follow-redirects removes sensitive credential headers (Authorization, Proxy-Authorization, Cookie, and any… High Network Exploitable Tue, 20 Oct 2026 17:58:21 GMT https://vulnogram.org/CVE-2026-113711 https://vulnogram.org/CVE-2026-113711 ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0 of ApostropheCMS and 3.7.0 of the import-export module, import routes invoke bigUploadMiddleware without an early authorize callback, allowing unauthenticated requests… High Network Exploitable Tue, 20 Oct 2026 17:49:31 GMT https://vulnogram.org/CVE-2026-113710 https://vulnogram.org/CVE-2026-113710 ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, the self-service password-change endpoint verifies the current password but does not use the login module’s failed-attempt counter, throttle, delay, or lockout mechan… Medium Tue, 20 Oct 2026 17:46:09 GMT https://vulnogram.org/CVE-2026-113671 https://vulnogram.org/CVE-2026-113671 ApostropheCMS is an open-source Node.js content management system. From 1.0.0-beta.10 until 1.0.0-beta.13 of the AI helper, an editor with image-generation capability can create a base64-generated image record without a stored provider URL and invoke… Medium Tue, 20 Oct 2026 17:43:53 GMT https://vulnogram.org/CVE-2026-113670 https://vulnogram.org/CVE-2026-113670 ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, the core page REST API reads full page documents with .permission(false) in getOne and in the all=1 tree dump, bypassing page-type viewRole, visibility: private, and… Medium Network Exploitable Tue, 20 Oct 2026 17:37:41 GMT https://vulnogram.org/CVE-2026-113669 https://vulnogram.org/CVE-2026-113669 ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0 of ApostropheCMS and 1.6.1 of passport-bridge, cross-host or cross-locale session migration places a single-use bearer session token in a redirect URL. A client that o… Medium Tue, 20 Oct 2026 17:35:40 GMT https://vulnogram.org/CVE-2026-113667 https://vulnogram.org/CVE-2026-113667 ApostropheCMS is an open-source Node.js content management system. Prior to 1.5.5 of the Form add-on, 1.2.1 of login-recaptcha, and 1.3.0 of login-hcaptcha, these three CAPTCHA integrations interpolate an unencoded user-supplied response token into t… Medium Tue, 20 Oct 2026 17:33:28 GMT https://vulnogram.org/CVE-2026-113668 https://vulnogram.org/CVE-2026-113668 ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, the REST route GET /api/v1/<piece-type>/:_id/locales (and the equivalent page route) does not apply the publicApiCheckAsync gate that ApostropheCMS's other read route… Medium Network Exploitable Tue, 20 Oct 2026 17:32:07 GMT https://vulnogram.org/CVE-2026-113666 https://vulnogram.org/CVE-2026-113666 ApostropheCMS is an open-source Node.js content management system. Prior to 1.1.0 of db-connect and 4.33.0 of ApostropheCMS, an account with view-draft access can submit a projection exclusion path that traverses through a constructor prototype chain… High Tue, 20 Oct 2026 17:25:44 GMT https://vulnogram.org/CVE-2026-113665 https://vulnogram.org/CVE-2026-113665 ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, the notification module exposes PATCH and DELETE REST endpoints that perform operations directly on the underlying MongoDB collection without verifying that the reque… Low Network Exploitable Tue, 20 Oct 2026 17:19:56 GMT https://vulnogram.org/CVE-2026-113664 https://vulnogram.org/CVE-2026-113664 ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.0 of the import-export module, an authenticated importer can submit a tar entry whose normalized destination targets a directory while bypassing the literal parent-path s… Medium Tue, 20 Oct 2026 17:15:01 GMT https://vulnogram.org/CVE-2026-113662 https://vulnogram.org/CVE-2026-113662 ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.0 of the import-export module, an authenticated user with import access to a target type can supply an object or operator as an update-key value, causing the import query… Medium Tue, 20 Oct 2026 17:13:07 GMT https://vulnogram.org/CVE-2026-113661 https://vulnogram.org/CVE-2026-113661 ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer with a clear API. Prior to sanitize-html 2.18.0, a non-default configuration that allows meta refresh elements and their http-equiv… Medium Tue, 20 Oct 2026 17:11:20 GMT https://vulnogram.org/CVE-2026-113660 https://vulnogram.org/CVE-2026-113660 ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, ApostropheCMS’s exist-in-locale API allows an authenticated low-privilege user to determine whether restricted documents exist in a specified locale and mode, includi… Medium Tue, 20 Oct 2026 17:04:06 GMT https://vulnogram.org/CVE-2026-113659 https://vulnogram.org/CVE-2026-113659 ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, an unauthenticated attacker can send a crafted link whose query string is automatically parsed by apos.http.parseQuery when an authenticated victim loads a page with… Medium Network Exploitable Tue, 20 Oct 2026 17:00:59 GMT https://vulnogram.org/CVE-2026-113658 https://vulnogram.org/CVE-2026-113658 ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, the unauthenticated Rich Text CSV conversion route writes a multipart upload to the system temporary directory before checking its extension and does not remove the s… High Network Exploitable Tue, 20 Oct 2026 16:56:01 GMT https://vulnogram.org/CVE-2026-113657 https://vulnogram.org/CVE-2026-113657 ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer with a clear API. From sanitize-html 2.17.7 until 2.18.0, an application configuration that permits namespace-prefixed SVG animation… Low Tue, 20 Oct 2026 16:54:12 GMT https://vulnogram.org/CVE-2026-113656 https://vulnogram.org/CVE-2026-113656 ApostropheCMS is an open-source Node.js content management system. Prior to 1.5.5 of the ApostropheCMS Form add-on, its form submission route stages unbounded multipart uploads before form validation or authentication and lacks upload size, count, an… Medium Network Exploitable Tue, 20 Oct 2026 16:49:36 GMT https://vulnogram.org/CVE-2026-113649 https://vulnogram.org/CVE-2026-113649 ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module and 4.34.0 of core ApostropheCMS, an editor who can import an enabled content type but lacks its stronger publication role can cause import… Medium Tue, 20 Oct 2026 16:40:16 GMT https://vulnogram.org/CVE-2026-113655 https://vulnogram.org/CVE-2026-113655 ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, an authenticated editor with legitimate edit rights on a pre-existing ordinary page nested under a restricted parent can use the same-parent page move operation to ch… Medium Tue, 20 Oct 2026 16:38:27 GMT https://vulnogram.org/CVE-2026-113654 https://vulnogram.org/CVE-2026-113654 ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer with a clear API. Prior to sanitize-html 2.18.0, a non-default nonTextTags configuration that includes noscript can end its discard… Medium Tue, 20 Oct 2026 16:35:55 GMT https://vulnogram.org/CVE-2026-113653 https://vulnogram.org/CVE-2026-113653 ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, viewRole is not applied to anonymous visitors when a developer exposes user objects through a publicly rendered relationship or expressly enabled public API. Inadequa… Medium Network Exploitable Tue, 20 Oct 2026 16:30:48 GMT https://vulnogram.org/CVE-2026-113652 https://vulnogram.org/CVE-2026-113652 ApostropheCMS is an open-source Node.js content management system. From 1.25.0 until 1.28.0, uploadfs Azure backend leaks account-level SAS token into every public attachment URL. When uploadfs is configured with the Azure backend and sas: true, crea… Medium Network Exploitable Tue, 20 Oct 2026 16:26:21 GMT