漏洞公告

Nokogiri: Possible Use-After-Free when directly using `NokogirI::XML::XPathContext` beyond document lifetime

Nokogiri: Possible Use-After-Free when setting `Document#root=` to an invalid node type

Nokogiri: Possible Out-of-Bounds Read in `Nokogiri::XML::NodeSet#[]`

Nokogiri: Null Pointer Dereference calling methods on uninitialized wrapper classes

Nokogiri: XML::Schema on JRuby allows network requests when NONET is set, bypassing CVE-2020-26247

Nokogiri: Possible Use-After-Free when `Nokogiri::XML::Document#encoding=` raises an exception

OpenTofu: Possible arbitrary file read during certain git operations via a maliciously crafted URL

Agentic-Flow: OS Command Injection in agentic-flow MCP server tools via unsanitized tool-parameter interpolation into execSync

ouroboros-ai: Incomplete fix of CVE-2026-47211: untrusted project .env can still reach RCE via omitted execution-routing keys

JupyterLab: Stored XSS in extension manager through package metadata unsanitized URI protocol

agent-coderag: Gradle Wrapper Execution During Dependency Discovery Enables Arbitrary Code Execution

Entire CLI: Path traversal in checkpoint session metadata allows arbitrary file write during resume/rewind

parse-server: Denial of service via exponential-time processing of deeply nested query operators

Improper neutralization of argument delimiters in AWS Bedrock AgentCore Python SDK install_packages()

tract: Arbitrary file read via unsanitized ONNX external_data `location` (path traversal) on model load in tract-onnx

CedarJava has policy injection vulnerability

CedarJava has type confusion vulnerability

guzzlehttp/guzzle: Dot-Only Cookie Domains Match All Hosts

guzzlehttp/psr7: CRLF Injection in HTTP Start-Line Serialization

OpenFGA: OIDC audience validation skipped when --authn-oidc-audience is unset

undici vulnerable to Set-Cookie SameSite attribute downgrade via permissive substring matching

undici WebSocket client vulnerable to denial of service via fragment count bypass

undici vulnerable to HTTP header injection via Set-Cookie percent-decoding