漏洞公告

guzzlehttp/guzzle: Silent HTTPS-Proxy Downgrade to Cleartext

NL Portal Backend Libraries: Unauthenticated form resolver forwards the privileged Objecten-API token to a caller-supplied URL (SSRF)

canto-saas-api: OAuth credentials exposed in URL query string and exception messages

canto-saas-api: Authenticated API requests can be redirected via unencoded path variables

Tilt: Missing authentication on the network-exposed Tilt HUD server

Tilt: Cross-site WebSocket hijacking of the Tilt HUD stream

Tilt: Unauthenticated pprof debug endpoints on the Tilt HUD server

Network-AI: Improper Neutralization of Special Elements used in an OS Command

Network-AI: CVE-2026-46701 fix incomplete — empty default secret still authorizes all requests

ts-deepmerge: Prototype Method Override leads to DoS

Canonical MicroCeph: path traversal issue in the remote-import AP

Duplicate Advisory: PraisonAI: Coarse-Grained Tool Approval Cache Bypasses Per-Invocation Consent for Shell Commands

Duplicate Advisory: PraisonAI has Memory State Leakage and Path Traversal in MultiAgent Context Handling

Signal K Server: Server-Side Request Forgery via Remote Connection Endpoints

PHP JWT Library: RSA1_5 (RSAES-PKCS1-v1_5) decryption lacks implicit rejection, exposing a Bleichenbacher/Marvin padding oracle

PHP JWT Framework: JWSVerifier uses algorithm from unprotected header, enabling algorithm confusion attacks

PHP JWT Library: PBES2-HS*+A*KW unwrap accepts an unbounded p2c iteration count, enabling CPU-amplification denial of service

PHP JWT Framework: Chacha20Poly1305 key-encryption algorithm discards the Poly1305 authentication tag, performing no authentication on decryption

spomky-labs/otphp: Mass-assignment in Factory::loadFromProvisioningUri lets a hostile provisioning URI corrupt OTP state or leak an uncaught TypeError

spomky-labs/otphp: Unbounded digits parameter in a provisioning URI triggers an uncaught DivisionByZeroError in OTP generation

gemini-mcp-tool vulnerable to OS command injection and @file exfiltration via prompt quoting (CVE-2026-0755)

OpenClaw: Internal/webchat command auth could inherit ownerAllowFrom wildcard state

OpenClaw: Empty-scope device re-pairing could confuse caller scope containment