CVE-2026-107812 high Nginx UI: Self-upgrade runs an unsigned binary verified only by a same-origin digest → RCE via a compromised mirror or MITM since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-107811 high 0xJacky/nginx-ui /api/nodes Leaks Cluster Node Tokens and Allows Cross-Node Impersonation as initUser since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-107810 high Nginx UI: Backup restore follows crafted symlinks into the live Nginx configuration path before restore flags are applied since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-107809 high Nginx-UI AuthRequired token cookie fallback enables CSRF against management APIs since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-107808 high Nginx UI: Authentication bypass: password login does not enforce a passkey-only second factor (2FA bypass) since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-107807 high Nginx UI: Node Secret Credential Exposure via URL Query Parameter since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-102554 high com.google.guava/guava: Google Guava: Denial of Service via unthrottled memory allocation during deserialization since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-95702 high gvisor.dev/gvisor: gVisor: Arbitrary code execution via use-after-free in VFS since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-108106 high org.xerial.snappy/snappy-java: snappy-java: Denial of Service via unbounded memory allocation during decompression since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-107806 high Nginx UI: Authenticated Remote Code Execution via Backup Restore App Config Overwrite since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-107805 high Nginx UI: Unauthenticated signed-request body staging can exhaust temporary storage since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-97791 high org.apache.cxf/cxf-rt-ws-security: Apache CXF: Authentication bypass via shared token validation state since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-97468 high org.apache.cxf/cxf-rt-ws-security: org.apache.cxf/cxf-services-sts-core: Apache CXF: Authentication bypass via hash collision in token cache since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-78384 high org.apache.cxf/cxf-core: Apache CXF: Denial of Service via uncontrolled data decompression since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-108039 high org.apache.cxf/cxf-core: Apache CXF: Denial of Service via unrestricted XML parsing since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-107937 high org.apache.cxf/cxf-core: Apache CXF: Denial of Service via large multipart attachment headers since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-107935 high gvisor-tap-vsock: gvisor-tap-vsock: unathenticated arbitrary file deletion on the host via /expose since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-98378 high kernel: bpf: Skip unsettled links in link iterator since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-97031 high crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references since at least 24 Oct 2026 07:11 UTC build 8 Oct 2026 CVE-2026-78669 high net/http: net/http/internal/http2: golang.org/x/net/http2: net/http: Denial of Service via excessive HTTP/2 SETTINGS frames since at least 24 Oct 2026 07:11 UTC build 8 Oct 2026 CVE-2026-78667 high net/http: golang: golang: Denial of Service via crafted HTTP Range headers since at least 24 Oct 2026 07:11 UTC build 8 Oct 2026 CVE-2026-107728 high strawberry-graphql: strawberry-graphql: Authorization bypass via improper permission evaluation since at least 24 Oct 2026 07:11 UTC build 8 Oct 2026 CVE-2026-89091 high ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution since at least 24 Oct 2026 07:11 UTC build 8 Oct 2026 CVE-2026-107726 high com.hazelcast/hazelcast: Hazelcast: Arbitrary member memory access by low-privileged client since at least 24 Oct 2026 07:11 UTC build 8 Oct 2026 CVE-2026-107725 high com.hazelcast/hazelcast: Hazelcast: arbitrary code execution via missing authorization checks in IMap Predicates API since at least 24 Oct 2026 07:11 UTC build 8 Oct 2026 CVE-2026-107724 high fast-jwt treats raw public JWK JSON as an HMAC secret, enabling HS256 token forgery since at least 24 Oct 2026 07:11 UTC build 8 Oct 2026 CVE-2026-107723 high fast-jwt : Silent claim-validator bypass when JWT payload is a JSON array since at least 24 Oct 2026 07:11 UTC build 8 Oct 2026 CVE-2026-107720 high fast-jwt: createVerifier accepts unsigned JWTs when key is '' or null and algorithms is explicitly set since at least 24 Oct 2026 07:11 UTC build 8 Oct 2026 CVE-2026-107716 high banks: Banks: Information disclosure via symbolic link traversal since at least 24 Oct 2026 07:11 UTC build 8 Oct 2026 CVE-2026-107392 high music-metadata: uncatchable process crash parsing a crafted `.dsf` (residual of GHSA-v6c2-xwv6-8xf7) since at least 24 Oct 2026 07:11 UTC build 8 Oct 2026 CVE-2026-107391 high music-metadata: MP4 stsd sample-entry size==0 causes a synchronous infinite loop (DoS) — unreleased regression on master since at least 24 Oct 2026 07:11 UTC build 8 Oct 2026 CVE-2026-106432 high php-pecl-mongodb: php-pecl-mongodb: Denial of Service via heap buffer overflow in BSON encoder since at least 24 Oct 2026 07:11 UTC build 8 Oct 2026 CVE-2026-107385 high MariaDB Connector/Node.js: SQL injection in the text protocol when the session uses NO_BACKSLASH_ESCAPES since at least 24 Oct 2026 07:11 UTC build 8 Oct 2026 CVE-2026-107384 high MariaDB Connector/Node.js: SQL injection through object keys in SET expansion (permitSetMultiParamEntries) since at least 24 Oct 2026 07:11 UTC build 8 Oct 2026 CVE-2026-107383 high MariaDB Connector/Node.js exposes uninitialized process memory through malformed GeoJSON parameters since at least 24 Oct 2026 07:11 UTC build 8 Oct 2026 CVE-2026-97147 high openstack-mistral: mistral: Cross-project resource tampering via missing ownership check in action definition and environment update paths since at least 24 Oct 2026 07:11 UTC build 8 Oct 2026 CVE-2026-93858 high openstack-mistral: mistral: OS command injection via unvalidated proxy_command in std.ssh_proxied action since at least 24 Oct 2026 07:11 UTC build 8 Oct 2026 CVE-2026-107378 high CairoSVG is an SVG converter based on Cairo, a 2D graphics library. Pr ... since at least 24 Oct 2026 07:11 UTC build 8 Oct 2026 CVE-2026-107377 high datamodel-code-generator: Protobuf weak-import path traversal allows files to be written outside the temporary directory since at least 24 Oct 2026 07:11 UTC build 8 Oct 2026 CVE-2026-107375 high JHipster: SQL Injection in the Parameter of JHipster-Generated Reactive (WebFlux + R2DBC) Applicationssort since at least 24 Oct 2026 07:11 UTC build 8 Oct 2026 CVE-2026-107303 high JHipster: Generated Applications Allow Stored XSS via Unrestricted Blob ContentType Opened as Same-Origin Blob since at least 24 Oct 2026 07:11 UTC build 8 Oct 2026 CVE-2026-107302 high msgpack5: Truncated map32 headers throw an unexpected error since at least 24 Oct 2026 07:11 UTC build 8 Oct 2026 CVE-2026-107300 high msgpack5: Many buffered values can exhaust the streaming decoder stack since at least 24 Oct 2026 07:11 UTC build 8 Oct 2026 CVE-2026-107295 high pydantic-ai-slim: pydantic-ai-slim: Unauthorized tool execution via missing Content-Type validation since at least 24 Oct 2026 07:11 UTC build 8 Oct 2026 CVE-2026-93017 high insights-operator: gather ServiceAccount has cluster-wide Secret read plus nodes/proxy and cluster-reader since at least 24 Oct 2026 07:11 UTC build 8 Oct 2026 CVE-2026-107286 high pydantic-ai: pydantic-ai: Denial of Service via unreleased concurrency slots in streaming requests since at least 24 Oct 2026 07:11 UTC build 8 Oct 2026 CVE-2026-89322 high Vault ACL Policy Evaluation May Allow Bypass of Deny Restrictions since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-107279 high org.asynchttpclient/async-http-client: AsyncHttpClient: Mutual authentication bypass via Digest auth-int negotiation since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-107232 high org.asynchttpclient/async-http-client: async-http-client: Information disclosure via transmission of credentials after failed proxy CONNECT since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-107231 high org.asynchttpclient/async-http-client: async-http-client: Credential exposure via authentication downgrade since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 