漏洞公告

go-git's improper parsing of specially crafted objects may lead to inconsistent interpretation compared to upstream Git

GuardDog has a blind GitHub URL rewrite in remote project scanning causes SSRF and `GH_TOKEN` exfiltration

GuardDog: Unsanitized human-readable scan output allows terminal escape injection from malicious package content

Keylime has a hardcoded attestation challenge nonce that allows replay attacks

Prometheus exporter process crash via malformed HTTP request

Steamworks game clients/servers using P2P authentication vulnerable to denial of service

Streamlink has an arbitrary local file read via file:// URI in HLS and DASH

Dockerfile command injection via envs[*].name in bentofile.yaml (sibling fix-bypass of CVE-2026-33744 and CVE-2026-35043)

BentoML Dockerfile command injection via docker.base_image (sister of pending GHSA-w2pm-x38x-jp44 / CVE-2026-33744 / CVE-2026-35043)

Open WebUI has inconsistent authorization controls within memories API

Dozzle's Cross-Site WebSocket Hijacking (CSWSH) on exec/attach endpointsbypasses authentication

Open WebUI's Improper Authorization in Standard Channels Allows Message Updates with Read Permission

Open WebUI's Insecure Message Access Breaks Authorization

Open WebUI Arbitrary File Write, Delete via Path Traversal

Open WebUI has a CORS misconfiguration and session validation issue

PraisonAI's symlink-extraction bypass of `_safe_extractall` writes outside `dest_dir`

PraisonAI has unsafe tool resolution in `ToolExecutionMixin.execute_tool`: undeclared `__main__` callables execute

PraisonAI MCP `tools/call` path-traversal => RCE via Python `.pth` injection

PraisonAI knowledge-store backends interpolate unvalidated collection names into SQL and CQL queries

PraisonAI ships and generates a legacy API server with authentication disabled by default, allowing unauthenticated workflow execution

Gotenberg: Server-Side Request Forgery via Chromium URL Endpoint with Redirect-Based Deny-List Bypass

Apache Airflow Providers OpenSearch: OpenSearch task-log handler leaks credentials embedded in the host URL

Apache Airflow Providers Elasticsearch: Elasticsearch task-log handlers leak credentials embedded in the host URL