CVE-2026-96893 high Improper Neutralization of Input Used for LLM Prompting in GitLab since at least 24 Oct 2026 07:11 UTC build 13 Oct 2026 CVE-2026-92883 high Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab since at least 24 Oct 2026 07:11 UTC build 13 Oct 2026 CVE-2026-81839 high Incorrect Authorization in GitLab since at least 24 Oct 2026 07:11 UTC build 13 Oct 2026 CVE-2026-16301 high Incorrect Authorization in GitLab since at least 24 Oct 2026 07:11 UTC build 13 Oct 2026 CVE-2026-14814 high Permissive Regular Expression in GitLab since at least 24 Oct 2026 07:11 UTC build 13 Oct 2026 CVE-2026-84312 high Nginx UI: Casdoor SSO callback uses a constant `state` parameter (login CSRF) since at least 24 Oct 2026 07:11 UTC build 12 Oct 2026 CVE-2026-103658 high aspell: aspell: Arbitrary code execution via crafted dictionary file since at least 24 Oct 2026 07:11 UTC build 12 Oct 2026 CVE-2026-84360 high Nginx UI: OTP secure-session step-up can be bypassed via MCP configuration tools since at least 24 Oct 2026 07:11 UTC build 12 Oct 2026 CVE-2026-84319 high Nginx UI: MCP configuration tools bypass restricted directive validation and allow secondary authenticated users to execute NJS in Nginx worker context since at least 24 Oct 2026 07:11 UTC build 12 Oct 2026 CVE-2026-84318 high Nginx UI: MCP `nginx_config_add` Bypasses Directive Validation — Authenticated RCE since at least 24 Oct 2026 07:11 UTC build 12 Oct 2026 CVE-2026-84317 high Nginx UI: MCP nginx_config_add skips config directive validation → authenticated nginx directive injection (RCE on the official image) since at least 24 Oct 2026 07:11 UTC build 12 Oct 2026 CVE-2026-84316 high Nginx UI: nginx config directive denylist (ValidateConfigFile) is bypassable via same-line ";" separation → authenticated directive injection (RCE on the official image) since at least 24 Oct 2026 07:11 UTC build 12 Oct 2026 CVE-2026-84315 high Nginx UI OTP secure-session step-up is missing on sensitive mutation routes since at least 24 Oct 2026 07:11 UTC build 12 Oct 2026 CVE-2026-84314 high Nginx UI: Account Takeover via Missing `RequireSecureSession` on User Management Endpoint since at least 24 Oct 2026 07:11 UTC build 12 Oct 2026 CVE-2026-84313 high Nginx UI: TOTP / passkey enrolment requires no re-authentication, enabling persistent account takeover since at least 24 Oct 2026 07:11 UTC build 12 Oct 2026 CVE-2026-109380 high modern-tar: modern-tar: Denial of Service via memory exhaustion from crafted archives since at least 24 Oct 2026 07:11 UTC build 12 Oct 2026 CVE-2026-95837 high github.com/containerd/containerd: containerd: Privilege escalation via crafted container checkpoint restore since at least 24 Oct 2026 07:11 UTC build 12 Oct 2026 CVE-2026-41510 high Coraza: Silent argument drop at ArgumentLimit allows bypass of ARGS-targeted rules via parameter flooding since at least 24 Oct 2026 07:11 UTC build 12 Oct 2026 CVE-2026-87744 high io.quarkus:quarkus-hibernate-orm-rest-data-panache: Missing Authorization in Quarkus REST Data Panache via Dropped Security Annotations since at least 24 Oct 2026 07:11 UTC build 12 Oct 2026 CVE-2026-65954 high Arbitrary code execution since at least 24 Oct 2026 07:11 UTC build 12 Oct 2026 CVE-2026-57143 high PraisonAI: Server-Side Request Forgery (SSRF) in SearxNG / search_web tools via attacker-controlled searxng_url parameter since at least 24 Oct 2026 07:11 UTC build 12 Oct 2026 CVE-2026-103061 high gleam: gleam: Arbitrary directory deletion via path traversal in package metadata since at least 24 Oct 2026 07:11 UTC build 12 Oct 2026 CVE-2026-75888 high openshift/console: openshift/console: Authenticated SSRF via Helm chart URL fetch since at least 24 Oct 2026 07:11 UTC build 12 Oct 2026 CVE-2026-109301 high Parse Server before 8.6.95 and 9.0.0 before 9.10.2 Denial of Service via File Pointer Without URL since at least 24 Oct 2026 07:11 UTC build 12 Oct 2026 CVE-2026-109242 high freerdp: FreeRDP: Denial of Service via uninitialized progressive tile handling since at least 24 Oct 2026 07:11 UTC build 12 Oct 2026 CVE-2026-96612 high hex: hex: Arbitrary code execution via path traversal in dependency application names since at least 24 Oct 2026 07:11 UTC build 12 Oct 2026 CVE-2026-108094 high mutter: mutter: client-triggered use-after-free in Wayland color-management ICC image description path since at least 24 Oct 2026 07:11 UTC build 12 Oct 2026 CVE-2026-52903 high manageiq: YAML safe_load production fallback to unsafe_load enables RCE via deserialization since at least 24 Oct 2026 07:11 UTC build 12 Oct 2026 CVE-2026-108976 high emacs: zero-click local command execution via TRAMP since at least 24 Oct 2026 07:11 UTC build 11 Oct 2026 CVE-2026-108859 high github.com/mark3labs/mcp-go: mcp-go: Denial of Service via unbounded HTTP request body buffering since at least 24 Oct 2026 07:11 UTC build 11 Oct 2026 CVE-2026-62376 high Vikunja: Plaintext storage of password-reset/email-confirm tokens in database enables account takeover on DB read access since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-62367 high Vikunja: OIDC email-fallback account linking ignores email_verified, enabling local-account takeover since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-57458 high Vikunja: Scoped API token can mint unrestricted OAuth session credentials since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-108260 high @tinacms/web-components: `tina-markdown` writes rich-text link URLs into `href` without scheme validation, allowing stored XSS since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-108259 high Tina: Code injection via unescaped Git branch name in generated client source since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 GHSA-m687-p538-r5hp high Vikunja: Permissive Cross-domain Security Policy trusts every localhost origin which should not be trusted since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-107840 high yopass Prometheus metrics middleware allows remote memory exhaustion through unbounded method labels since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-107839 high ageLANServer: Unbounded JSON Array Allocation in AoE3 Cloud `getFileURL` Endpoint Leads to Remote Denial of Service since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-107826 high Coraza JSON body processor: argument-limit truncation reopens an unbounded-depth gjson.Valid stack overflow (process crash) since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-107823 high mariadb: mariadb: Privilege escalation via unescaped newlines in view parser since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-107818 high mariadb: mariadb: Privilege escalation via environment variable injection during service restart since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-55797 high github.com/argoproj/argo-cd/v3: github.com/argoproj/argo-cd/v2: argo-cd: Arbitrary command execution via crafted SSH repository proxy configuration since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-107815 high mariadb: mariadb: Arbitrary code execution via CONNECT engine out-of-bounds write since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2025-61560 high github.com/argoproj/argo-cd: argo-cd: Rate limit bypass via race condition in SessionManager since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 GHSA-68w4-83fh-f2w8 high pyload-ng: getUserData/get_userdata exposed at Perms.ANY allow any authenticated account to brute-force the administrator password since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 GHSA-jq7h-wrvp-3rgx high pyLoad: Privilege revocation and password change through the REST API do not invalidate the user's session since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 GHSA-889w-m37p-88m5 high pyLoad: Api.set_user_permission never invalidates the target's session since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 GHSA-fr26-jjhm-638c high pyLoad: Tar extraction creates device nodes and FIFOs (member types not filtered; tarfile extractall without filter=) since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 GHSA-r44w-v6gf-x3p6 high pyLoad has an authentication bypass in API key validation (check_apikey cache) since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-107814 high mariadb: mariadb: Arbitrary code execution via insecure service account home directory since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 