漏洞公告

Nitro has a proxy scope bypass via percent-encoded path traversal in `routeRules`

pyquorum: Timing side‑channel in mul_mod

MediaMTX affected by CVE-2026-27143 due to vulnerable dependency

opentelemetry-collector-contrib's azureauthextension Authenticate method does not validate bearer tokens, allowing auth bypass via replay

misp-modules website - Missing CSRF protection in the website home blueprint

misp-modules has nsafe remote resource fetching in expansion

fast-jwt: JWT auth bypass due to empty HMAC secret accepted by async key resolver

Lemmy may expose private community data through community, saved, liked, and modlog API views

Private Lemmy instances expose multi-community metadata without authentication

Kyverno policy-reporter-ui has XSS via Stored Property Values in PropertyCard Component

Daptin fuzzy search injects unvalidated column name into raw SQL

PraisonAI has unauthenticated RCE via `tool_override.py` (CVE-2026-40287 patch bypass)

PraisonAI has an SSRF bypass

aiograpi has dependency on vulnerable orjson 3.11.4 (CVE-2025-67221)

Hatchet affected by cross-tenant information disclosure in `listTasksByDAGIds`

GitPython: Newline injection in config_writer().set_value() enables RCE via core.hooksPath

python-multipart has Denial of Service via unbounded multipart part headers

rmcp Streamable HTTP server transport has a DNS rebinding vulnerability

kube-router: GoBGP gRPC Admin Port Exposed on Node Primary IP Without Authentication, Allowing Cluster-Wide BGP Route Injection

rpassword affected by partial password reveal when input is interrupted

vLLM: extract_hidden_states speculative decoding crashes server on any request with penalty parameters

Mako vulnerable to path traversal via backslash URI on Windows in TemplateLookup

JupyterLab's command linker attributes in HTML enable one-click command execution from untrusted content