Open Source Vulnerabilities

cilium-fips-1.18-operator-azure

snipe-it before 8.6.3 Authorization Bypass via Bulk Delete

Snipe-IT before 8.6.2 Authorization Bypass via Checkout-Acceptance

Grav before 2.0.18 Remote Code Execution via sort filter

Grav Admin before 2.0.20 Cross-Site Scripting via marked.js

Grav Admin before 2.0.21 Stored XSS via username

Grav 2.0.0 through 2.0.17 Stored XSS via Modular Pages

Traefik before v2.11.55 and v3.0.0 through v3.7.10 mTLS Bypass via TLS Option Conflict

Traefik v3.7 Authentication Bypass via TLS Option Conflict

Traefik before v2.11.55 and v3.0.0 through v3.7.10 Authentication Bypass via digestAuth

Traefik v3.7.1 crossProviderNamespaces Bypass via Service Middleware

phpMyFAQ before 4.1.8 Stored XSS via html_entity_decode

phpMyFAQ before 4.1.8 Authorization Bypass via question/create

phpMyFAQ before 4.1.8 Authentication Bypass via Unverified Password Change

phpMyFAQ before 4.1.8 Authentication Bypass via Two-Factor Disable

phpMyFAQ before 4.2.0-alpha.2 Missing Authorization via Dashboard API

phpMyFAQ before 4.1.8 TOTP Secret Exposure via Data Export

phpMyFAQ before 4.1.8 Incorrect Authorization via Admin Pages

phpMyFAQ before 4.1.8 CAPTCHA Bypass via store parameter

SiYuan before v3.8.2 Unbounded Memory Consumption via ControlConcurrency

SiYuan before v3.8.2 Denial of Service via Auth Throttle

SiYuan before v3.8.2 Path Traversal via symlink in file API

SiYuan before v3.8.2 Unbounded Session Creation via Basic Auth

SiYuan before v3.8.2 Denial of Service via unauthenticated UI-process registration

SiYuan before v3.8.2 Path Guard Bypass via Case Mismatch

SiYuan before v3.8.2 Information Disclosure via undoState

SiYuan through 3.8.1 Authorization Bypass via getFile

vitess-23, vitess-23

vitess-23, vitess-23

vitess-23, vitess-23

vitess-23, vitess-23

vitess-23, vitess-23

vitess-23, vitess-23

vitess-23, vitess-23

vitess-23, vitess-23

vitess-23, vitess-23

vitess-23, vitess-23

vitess-23, vitess-23

vitess-23, vitess-23

nifi

Apache NiFi: Improper Neutralization of Input in Parameter Description

libsoup3, libsoup3, libsoup3

libsoup

CVE-2026-85534 affecting package libsoup 3.4.4-16

libsoup2.4, libsoup2.4, libsoup2.4, libsoup2.4, libsoup3, libsoup2.4, libsoup3, libsoup3, libsoup2.4

langfuse-fips-4-worker

langfuse-fips-4-worker

cilium-1.18-hubble-relay, cilium-1.18-hubble-relay

cilium-fips-1.20

cilium-fips-1.20

vitess-23-binaries, vitess-23-binaries