漏洞公告

Sentry: Superusers can execute arbitrary commands by injecting malicious pickle-serialized objects through audit log entry data parameter

OSGeo gdal has a heap-based buffer overflow

Spring AI's MilvusVectorStore#doDelete(List) implementation is vulnerable to filter-expression injection via unsanitized document IDs

Hono has CSS Declaration Injection via Style Object Values in JSX SSR

Hono has improper validation of NumericDate claims (exp, nbf, iat) in JWT verify()

@profullstack/mcp-server vulnerable to OS Command Injection in domain_lookup Module

Velocity.js has a Prototype Pollution vulnerability through #set path assignment

Vert.x has a DoS via unbounded server-side SNI SslContext cache growth

Hono's Cache Middleware ignores Vary: Authorization / Vary: Cookie leading to cross-user cache leakage

Mistune Heading ID Attribute has Injection XSS

@yoda.digital/gitlab-mcp-server's SSE transport has no authentication and wildcard CORS, exposing all 86 GitLab tools

smallbitvec: Integer overflow in safe API leads to heap buffer overflow

SharpCompress has directory traversal via directory entries in WriteToDirectory (zip slip variant)

epa4all-client has a VAU Signature bypass

Mistune has XSS via unescaped figclass/figwidth in Figure directive

Mistune Math Plugin has an XSS Escape Bypass

view_component: System Test Entry Point Path Check Allows Sibling Directory Escape

view_component: Preview Route Can Dispatch Inherited Helper Methods

Snipe-IT has an open redirect vulnerability

GitPython: Newline injection in config_writer() section parameter bypasses CVE-2026-42215 patch, enabling RCE via core.hooksPath

eml_parser has recursion DoS via nested message/rfc822 attachments

LangChain vulnerable to unsafe deserialization of attacker-controlled objects through overly broad `load()` allowlists

Phpseclib needs guardrails on large binaryfield integers