GHSA-8wvg-r2j4-3737 medium Vikunja: Assignee email addresses disclosed to read-only project members via the task assignees endpoint since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 GHSA-3hc7-r24j-rpwc medium Vikunja: Cross-project task disclosure through subtask expansion since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 GHSA-g38j-7v97-x298 medium Vikunja: CalDAV relation creation bypasses TaskRelation.CanCreate, allowing an unauthorized write into any task by known UID since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-107844 medium Contao: Path traversal in the images controller since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-107843 medium Contao: The registration module re-sends activation mails since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-107842 medium Contao: Protected page content is disclosed to anonymous visitors after contao.search.index_protected is disabled since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-107841 medium pacioli: A submit consent marker licensed cancellation of caller-named pre-existing documents since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-107834 medium Coraza: Resource exhaustion via deferred file handle accumulation in multipart body processor since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-107833 medium Coraza: Unbounded recursion in JSON response body processor causes CPU exhaustion since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-107825 medium Coraza: ProcessURI silently drops QUERY_STRING and ARGS_GET on URI parse failure — defense-in-depth bypass for non-net/http integrations since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-107822 medium mariadb: MariaDB: Privilege escalation via ACL cache key collision since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-107821 medium mariadb: mariadb: Arbitrary code execution via crafted FRM metadata since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-107816 medium mariadb: mariadb: Information disclosure via embedded null bytes in query cache plugin since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-75597 medium pyLoad: Unauthenticated access to /web/<path:filename> bypasses authentication on sensitive templates and leaks internal error details via exception attribute typo since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-48484 medium pyLoad: Lack of Input Size Validation Leads to Denial of Service (DoS) and Process Termination since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-108119 medium busybox: busybox: tar extraction-root escape via deferred symlink/hardlink creation bypasses CVE-2026-26158 fix since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-108093 medium GIMP: gimp: Denial of service via NULL pointer dereference in XCF simulation parasite loading since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 GHSA-9q47-3cm2-2rp8 medium pyLoad: Rate-Limit Bypass and Audit-Log Spoofing via Trusted Client-Controlled `X-Forwarded-For` Header since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 GHSA-p3pr-8f3m-4qp8 medium pyLoad WindowsPhoneNotify addon: non-admin SETTINGS user triggers SSRF via unguarded http.client notification host since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-108104 medium org.xerial.snappy/snappy-java: snappy-java: information disclosure via double release of pooled buffers since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-107804 medium Nginx UI: Bundled reverse proxy can bypass IP allowlists and enable shared login lockout since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-108063 medium A flaw was found in libhangul. When parsing Hanja dictionary files, th ... since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-71884 medium org.bouncycastle:bcprov-lts8on: bouncycastle: Information disclosure via keystream reuse in native CTR cipher since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-107655 medium cups: NULL pointer dereference via embedded job ticket comments allows remote denial of service since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-104635 medium protobuf: protobuf: Denial of Service via deeply nested JSON input since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-98384 medium kernel: bpf: Fix out-of-bounds read of sk_protocol in bpf_sock_destroy() since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-98383 medium kernel: bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-98382 medium kernel: bpf: Reject dev-bound-only programs on other devices since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-98381 medium kernel: veth: manage XDP program pointers during channel resize since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-98380 medium kernel: net/sched: reject IDR error pointers when deleting actions since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-98379 medium kernel: netfilter: ip6t_rpfilter: reject routes without inet6_dev since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-98377 medium kernel: vlan: require the MAC header to be present in __vlan_insert_inner_tag() since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-98376 medium kernel: bpf: Use array_map_meta_equal for percpu array inner map replacement since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-98375 medium kernel: xen/netfront: drop RX packets with a short Ethernet header since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-101028 medium ash: Ash: Information disclosure via missing authorization checks in aggregate queries since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-107890 medium cups: cups: Denial of Service via repeated IPP group tags since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-107889 medium keycloak-services: keycloak-services: Stored XSS on login page via kcSanitize bypass since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-107888 medium cups: CUPS: Denial of Service via deleted temporary printer since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-107886 medium cups: cups: Denial of Service via double-free in printer class management since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-107885 medium cups: cups: Denial of Service via improper job submission timeout handling since at least 24 Oct 2026 07:11 UTC build 9 Oct 2026 CVE-2026-97032 medium net/http: net/http/internal/http2: golang: golang.org/x/net/http2: net/http: Denial of Service via concurrent HPACK encoder modification since at least 24 Oct 2026 07:11 UTC build 8 Oct 2026 CVE-2026-97030 medium html/template: golang: html/template: Cross-site scripting via improper escaping of yield keyword since at least 24 Oct 2026 07:11 UTC build 8 Oct 2026 CVE-2026-94448 medium html/template: golang: golang: cross-site scripting via consecutive expressions in JavaScript template literals since at least 24 Oct 2026 07:11 UTC build 8 Oct 2026 CVE-2026-94447 medium cmd/go: golang: cmd/go: Toolchain checksum verification bypass via crafted project configuration since at least 24 Oct 2026 07:11 UTC build 8 Oct 2026 CVE-2026-94444 medium cmd/go: golang: cmd/go: arbitrary code execution via untrusted module proxy since at least 24 Oct 2026 07:11 UTC build 8 Oct 2026 CVE-2026-94440 medium net/textproto: mime/multipart: golang: golang: Denial of Service via memory limit bypass in multipart form parsing since at least 24 Oct 2026 07:11 UTC build 8 Oct 2026 CVE-2026-94439 medium net/http: golang: net/http: HTTP request smuggling via improper handling of HTTP/1 CONNECT responses since at least 24 Oct 2026 07:11 UTC build 8 Oct 2026 CVE-2026-78663 medium net/http: net/http/internal/http2: golang: golang.org/x/net/http2: golang: flow control limit bypass via double refund in HTTP/2 server since at least 24 Oct 2026 07:11 UTC build 8 Oct 2026 CVE-2026-78660 medium net/http: golang: golang.org/x/net/http2: net/http: HTTP response smuggling via malformed HTTP/2 framing headers since at least 24 Oct 2026 07:11 UTC build 8 Oct 2026 CVE-2026-78659 medium net/http: golang.org/x/net/http2: golang: net/http: Denial of Service via HTTP/2 trailer header memory exhaustion since at least 24 Oct 2026 07:11 UTC build 8 Oct 2026 