Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    MINI-8ffr-3f79-gfjq
    Fix available
    Packages

    py3-gitpython, py3-gitpython-auto, py3-supported-gitpython, py3.10-gitpython, py3.11-gitpython, py3.12-gitpython, py3.13-gitpython, py3.14-gitpython

    Summary

    Published
    4 Sept 2026
    MINI-8xjg-r739-2m57
    Fix available
    Packages

    py3-gitpython, py3-gitpython-auto, py3-supported-gitpython, py3.10-gitpython, py3.11-gitpython, py3.12-gitpython, py3.13-gitpython, py3.14-gitpython

    Summary

    Published
    4 Sept 2026
    MINI-9mfv-j8fc-r8cv
    Fix available
    Packages

    py3-gitpython, py3-gitpython-auto, py3-supported-gitpython, py3.10-gitpython, py3.11-gitpython, py3.12-gitpython, py3.13-gitpython, py3.14-gitpython

    Summary

    Published
    4 Sept 2026
    MINI-fh7v-pmm4-vf5g
    Fix available
    Packages

    py3-gitpython, py3-gitpython-auto, py3-supported-gitpython, py3.10-gitpython, py3.11-gitpython, py3.12-gitpython, py3.13-gitpython, py3.14-gitpython

    Summary

    Published
    4 Sept 2026
    MINI-hw49-82mc-rcpc
    Fix available
    Packages

    py3-gitpython, py3-gitpython-auto, py3-supported-gitpython, py3.10-gitpython, py3.11-gitpython, py3.12-gitpython, py3.13-gitpython, py3.14-gitpython

    Summary

    Published
    4 Sept 2026
    MINI-pgh2-998m-qrcf
    Fix available
    Packages

    py3-gitpython, py3-gitpython-auto, py3-supported-gitpython, py3.10-gitpython, py3.11-gitpython, py3.12-gitpython, py3.13-gitpython, py3.14-gitpython

    Summary

    Published
    4 Sept 2026
    MINI-phc6-8vp2-6mxc
    Fix available
    Packages

    py3-gitpython, py3-gitpython-auto, py3-supported-gitpython, py3.10-gitpython, py3.11-gitpython, py3.12-gitpython, py3.13-gitpython, py3.14-gitpython

    Summary

    Published
    4 Sept 2026
    MINI-q425-9cxm-h29j
    Fix available
    Packages

    py3-gitpython, py3-gitpython-auto, py3-supported-gitpython, py3.10-gitpython, py3.11-gitpython, py3.12-gitpython, py3.13-gitpython, py3.14-gitpython

    Summary

    Published
    4 Sept 2026
    MINI-r87m-95mc-w3gg
    Fix available
    Packages

    py3-gitpython, py3-gitpython-auto, py3-supported-gitpython, py3.10-gitpython, py3.11-gitpython, py3.12-gitpython, py3.13-gitpython, py3.14-gitpython

    Summary

    Published
    4 Sept 2026
    MINI-rxg9-4pxg-22fm
    Fix available
    Packages

    py3-gitpython, py3-gitpython-auto, py3-supported-gitpython, py3.10-gitpython, py3.11-gitpython, py3.12-gitpython, py3.13-gitpython, py3.14-gitpython

    Summary

    Published
    4 Sept 2026
    MINI-v4vh-3p2q-8hpf
    Fix available
    Packages

    py3-gitpython, py3-gitpython-auto, py3-supported-gitpython, py3.10-gitpython, py3.11-gitpython, py3.12-gitpython, py3.13-gitpython, py3.14-gitpython

    Summary

    Published
    4 Sept 2026
    MINI-v7pv-6656-prw7
    Fix available
    Packages

    py3-gitpython, py3-gitpython-auto, py3-supported-gitpython, py3.10-gitpython, py3.11-gitpython, py3.12-gitpython, py3.13-gitpython, py3.14-gitpython

    Summary

    Published
    4 Sept 2026
    MINI-w4mg-v93p-3jwg
    Fix available
    Packages

    py3-gitpython, py3-gitpython-auto, py3-supported-gitpython, py3.10-gitpython, py3.11-gitpython, py3.12-gitpython, py3.13-gitpython, py3.14-gitpython

    Summary

    Published
    4 Sept 2026
    CVE-2026-85661
    No fix available
    Packages

    Summary

    excel-mcp-server 0.1.8 Arbitrary File Read/Write via stdio mode

    Published
    4 Sept 2026
    CVE-2026-85651
    Fix available
    Packages

    Summary

    Trigger.dev before 4.5.2 Unauthorized Environment Access via Run Replay

    Published
    4 Sept 2026
    CVE-2026-85650
    Fix available
    Packages

    Summary

    Trigger.dev before 4.5.2 Server-Side Request Forgery via webhook alert-channel

    Published
    4 Sept 2026
    CVE-2026-85626
    No fix available
    Packages

    Summary

    git-mcp-server 2.15.1 Argument Injection via Git Ref Parameters

    Published
    4 Sept 2026
    CVE-2026-85625
    No fix available
    Packages

    Summary

    sift 17.1.3 Prototype Pollution Remote Code Execution via $where

    Published
    4 Sept 2026
    CVE-2026-85624
    No fix available
    Packages

    Summary

    Blinko 1.8.7 Cross-User Private Note Disclosure via noteReferenceList

    Published
    4 Sept 2026
    CVE-2026-85623
    No fix available
    Packages

    Summary

    goose 1.37.0 Arbitrary Command Execution via Recipe Extensions

    Published
    4 Sept 2026
    CVE-2026-85622
    Fix available
    Packages

    Summary

    AppFlowy-Cloud through 0.9.64 Cross-Workspace Collab Read via WebSocket

    Published
    4 Sept 2026
    CVE-2026-85621
    No fix available
    Packages

    Summary

    LobeChat 2.2.1 Webhook Signature Verification Bypass QQ Feishu

    Published
    4 Sept 2026
    CVE-2026-85620
    No fix available
    Packages

    Summary

    Postgres MCP Pro 0.3.0 Restricted-Mode Bypass via FROM-Clause Function

    Published
    4 Sept 2026
    CVE-2026-85619
    No fix available
    Packages

    Summary

    AppFlowy-Cloud 0.9.64 Cross-Workspace Collab Access via HTTP API

    Published
    4 Sept 2026
    CVE-2026-85618
    No fix available
    Packages

    Summary

    ConvertX 0.17.0 Arbitrary File Read via LaTeX Input Directives

    Published
    4 Sept 2026
    MINI-p78m-47vq-9hv2
    Fix available
    Packages

    py3-supported-tornado, py3-tornado, py3-tornado-auto, py3.10-tornado, py3.11-tornado, py3.12-tornado, py3.13-tornado, py3.14-tornado

    Summary

    Published
    4 Sept 2026
    CVE-2026-85608
    Fix available
    Packages

    Summary

    Douyin_TikTok_Download_API 4.1.2 SSRF via url parameter

    Published
    4 Sept 2026
    CVE-2026-85607
    No fix available
    Packages

    Summary

    Blinko 1.8.7 Cross-User AI Conversation Read and Write via message tRPC Router

    Published
    4 Sept 2026
    CVE-2026-85605
    Fix available
    Packages

    Summary

    Slink before 1.12.3 Missing Authorization on Image Comment Endpoints

    Published
    4 Sept 2026
    MINI-w9h9-q6mx-2m55
    Fix available
    Packages

    pulumi-fips, pulumi-language-go-fips, pulumi-language-nodejs-fips, pulumi-language-python-fips

    Summary

    Published
    4 Sept 2026
    MINI-xcpr-r95r-r7fp
    Fix available
    Packages

    pulumi-fips, pulumi-language-go-fips, pulumi-language-nodejs-fips, pulumi-language-python-fips

    Summary

    Published
    4 Sept 2026
    MINI-3fq7-97cq-8r7q
    Fix available
    Packages

    pnpm

    Summary

    Published
    4 Sept 2026
    MINI-523r-qxwc-hv6w
    Fix available
    Packages

    portainer-ce-2.39

    Summary

    Published
    4 Sept 2026
    MINI-5c7f-pfcx-p47x
    Fix available
    Packages

    portainer-agent-fips-2.44

    Summary

    Published
    4 Sept 2026
    MINI-6chx-x48h-62hv
    Fix available
    Packages

    portainer-ce-fips-2.45

    Summary

    Published
    4 Sept 2026
    MINI-73pw-53gp-rgcr
    Fix available
    Packages

    portainer-agent-2.39

    Summary

    Published
    4 Sept 2026
    MINI-7v4c-h429-xmf2
    Fix available
    Packages

    portainer-agent-fips-2.39

    Summary

    Published
    4 Sept 2026
    MINI-8959-qpvq-w8w9
    Fix available
    Packages

    portainer-ce-fips-2.45

    Summary

    Published
    4 Sept 2026
    MINI-c94x-v2c3-5m5w
    Fix available
    Packages

    portainer-agent-fips-2.39

    Summary

    Published
    4 Sept 2026
    MINI-2vcp-cpcr-wxh9
    Fix available
    Packages

    portainer-agent-2.45

    Summary

    Published
    4 Sept 2026
    MINI-36fr-x7qw-5fwj
    Fix available
    Packages

    portainer-agent-2.44

    Summary

    Published
    4 Sept 2026
    MINI-fhvr-wwf9-j49q
    Fix available
    Packages

    portainer-agent-2.45

    Summary

    Published
    4 Sept 2026
    MINI-fp2w-wh5h-wp4x
    Fix available
    Packages

    portainer-agent-2.44

    Summary

    Published
    4 Sept 2026
    MINI-jjh6-593v-x8mr
    Fix available
    Packages

    portainer-agent-2.39

    Summary

    Published
    4 Sept 2026
    MINI-mxrq-wc35-64wm
    Fix available
    Packages

    portainer-ce-2.39

    Summary

    Published
    4 Sept 2026
    MINI-pc9p-4mfw-3m3h
    Fix available
    Packages

    portainer-agent-fips-2.45

    Summary

    Published
    4 Sept 2026
    MINI-q5hw-43wp-pc9v
    Fix available
    Packages

    pnpm

    Summary

    Published
    4 Sept 2026
    MINI-rc5w-crqv-8hwc
    Fix available
    Packages

    portainer-agent-fips-2.44

    Summary

    Published
    4 Sept 2026
    MINI-whmm-fj73-qjc7
    Fix available
    Packages

    portainer-agent-fips-2.45

    Summary

    Published
    4 Sept 2026
    MINI-483w-w66v-9cf7
    Fix available
    Packages

    plural-agent-harness-fips

    Summary

    Published
    4 Sept 2026