Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    CVE-2026-85241
    Fix available
    Packages

    Summary

    SpecterOps BloodHound Graph Write Endpoint v2.go NewV2API improper authorization

    Published
    3 Sept 2026
    CGA-m3j8-2vw9-g483
    Fix available
    Packages

    crossplane-provider-aws-timestreamwrite-fips

    Summary

    Published
    3 Sept 2026
    CGA-3mx5-fx6v-q2ph
    Fix available
    Packages

    crossplane-provider-aws-timestreamwrite-fips

    Summary

    Published
    3 Sept 2026
    MINI-3433-7frf-gphh
    No fix available
    Packages

    pdfcpu-fips-0.12

    Summary

    Published
    3 Sept 2026
    MINI-5gqc-vvr6-vq2v
    No fix available
    Packages

    pdfcpu-fips-0.12

    Summary

    Published
    3 Sept 2026
    MINI-89mm-3f4h-4gj2
    No fix available
    Packages

    pdfcpu-0.12

    Summary

    Published
    3 Sept 2026
    MINI-p477-rm9g-pc5h
    No fix available
    Packages

    pdfcpu-0.12

    Summary

    Published
    3 Sept 2026
    MINI-j68j-26mx-xjhc
    No fix available
    Packages

    paketo-buildpacks-yarn-install

    Summary

    Published
    3 Sept 2026
    MINI-mxfg-gvqf-g559
    No fix available
    Packages

    paketo-buildpacks-yarn-install

    Summary

    Published
    3 Sept 2026
    GHSA-q2vg-7qgx-x5fc
    Fix available
    Packages

    github.com/siyuan-note/siyuan/kernel

    Summary

    SiYuan: SQL injection in backlink/mention search via unescaped stored and client input (publish mode): first-order (client keyword) and second-order (stored document title) breakout on read-write handle

    Published
    3 Sept 2026
    MINI-h9h3-9pq3-8gmw
    No fix available
    Packages

    paketo-buildpacks-yarn

    Summary

    Published
    3 Sept 2026
    MINI-w4hr-w478-f83x
    No fix available
    Packages

    paketo-buildpacks-yarn

    Summary

    Published
    3 Sept 2026
    MINI-f5vj-2cm2-g99j
    No fix available
    Packages

    paketo-buildpacks-vsdbg

    Summary

    Published
    3 Sept 2026
    MINI-rgjr-vwpf-7gc9
    No fix available
    Packages

    paketo-buildpacks-vsdbg

    Summary

    Published
    3 Sept 2026
    MINI-3pgx-6pgm-j55p
    No fix available
    Packages

    paketo-buildpacks-spring-boot

    Summary

    Published
    3 Sept 2026
    MINI-8qp6-9cc3-wrqm
    No fix available
    Packages

    paketo-buildpacks-spring-boot

    Summary

    Published
    3 Sept 2026
    MINI-chp8-r9gp-94p5
    No fix available
    Packages

    paketo-buildpacks-sbt

    Summary

    Published
    3 Sept 2026
    MINI-q8gv-xc73-5f9w
    No fix available
    Packages

    paketo-buildpacks-sbt

    Summary

    Published
    3 Sept 2026
    MINI-h6cj-92x9-pf76
    No fix available
    Packages

    paketo-buildpacks-python-package-managers-run

    Summary

    Published
    3 Sept 2026
    MINI-xm49-9g4q-89jw
    No fix available
    Packages

    paketo-buildpacks-python-package-managers-run

    Summary

    Published
    3 Sept 2026
    MINI-2cf4-r9c7-76ww
    No fix available
    Packages

    paketo-buildpacks-python-package-managers-install

    Summary

    Published
    3 Sept 2026
    MINI-3fv3-3xhw-mrg6
    No fix available
    Packages

    paketo-buildpacks-python-package-managers-install

    Summary

    Published
    3 Sept 2026
    MINI-9ww9-wxwr-xmqm
    No fix available
    Packages

    paketo-buildpacks-poetry-install

    Summary

    Published
    3 Sept 2026
    MINI-rmwj-rmv6-j29w
    No fix available
    Packages

    paketo-buildpacks-poetry-install

    Summary

    Published
    3 Sept 2026
    MINI-h6m9-mjmc-5phj
    No fix available
    Packages

    paketo-buildpacks-poetry

    Summary

    Published
    3 Sept 2026
    MINI-rh5h-7hh3-w4c9
    No fix available
    Packages

    paketo-buildpacks-poetry

    Summary

    Published
    3 Sept 2026
    GHSA-wgwx-479j-23vq
    Fix available
    Packages

    github.com/siyuan-note/siyuan/kernel

    Summary

    SiYuan: Missing authorization on refreshBacklink allows anonymous readers to trigger persistent server-side writes and unauthenticated resource amplification (publish mode)

    Published
    3 Sept 2026
    MINI-4g3p-8r9j-fp2p
    No fix available
    Packages

    paketo-buildpacks-pipenv-install

    Summary

    Published
    3 Sept 2026
    MINI-x74r-h8fx-3fr8
    No fix available
    Packages

    paketo-buildpacks-pipenv-install

    Summary

    Published
    3 Sept 2026
    MINI-4q8g-m22f-cj6q
    No fix available
    Packages

    paketo-buildpacks-pipenv

    Summary

    Published
    3 Sept 2026
    MINI-h26p-8239-87c4
    No fix available
    Packages

    paketo-buildpacks-pipenv

    Summary

    Published
    3 Sept 2026
    MINI-3jr4-hqxq-qwhj
    No fix available
    Packages

    paketo-buildpacks-pip-install

    Summary

    Published
    3 Sept 2026
    MINI-8xmp-vjcw-68xj
    No fix available
    Packages

    paketo-buildpacks-pip-install

    Summary

    Published
    3 Sept 2026
    MINI-4j95-g8rc-m58c
    No fix available
    Packages

    paketo-buildpacks-pip

    Summary

    Published
    3 Sept 2026
    MINI-8524-x8cr-g2qj
    No fix available
    Packages

    paketo-buildpacks-pip

    Summary

    Published
    3 Sept 2026
    MINI-4jg6-6hg5-7585
    No fix available
    Packages

    paketo-buildpacks-passenger

    Summary

    Published
    3 Sept 2026
    MINI-vg45-2pq3-375r
    No fix available
    Packages

    paketo-buildpacks-passenger

    Summary

    Published
    3 Sept 2026
    MINI-2jx5-6w9j-vg93
    No fix available
    Packages

    paketo-buildpacks-npm-install

    Summary

    Published
    3 Sept 2026
    MINI-vww7-7fxw-gx8m
    No fix available
    Packages

    paketo-buildpacks-npm-install

    Summary

    Published
    3 Sept 2026
    MINI-8cvh-rq8g-fc69
    No fix available
    Packages

    paketo-buildpacks-node-engine

    Summary

    Published
    3 Sept 2026
    MINI-wq7g-v947-4g6v
    No fix available
    Packages

    paketo-buildpacks-node-engine

    Summary

    Published
    3 Sept 2026
    MINI-525r-g4r9-54wh
    No fix available
    Packages

    paketo-buildpacks-nginx

    Summary

    Published
    3 Sept 2026
    MINI-jh65-f426-42j2
    No fix available
    Packages

    paketo-buildpacks-nginx

    Summary

    Published
    3 Sept 2026
    MINI-53qq-34gq-9j79
    No fix available
    Packages

    paketo-buildpacks-native-image

    Summary

    Published
    3 Sept 2026
    MINI-m5ww-5978-4pcw
    No fix available
    Packages

    paketo-buildpacks-native-image

    Summary

    Published
    3 Sept 2026
    MINI-28h7-7hm8-7jf2
    No fix available
    Packages

    paketo-buildpacks-mri

    Summary

    Published
    3 Sept 2026
    MINI-397g-6pv5-j9ph
    No fix available
    Packages

    paketo-buildpacks-mri

    Summary

    Published
    3 Sept 2026
    MINI-7h7v-q9j2-84cp
    No fix available
    Packages

    paketo-buildpacks-miniconda

    Summary

    Published
    3 Sept 2026
    MINI-rq78-2q3x-g96w
    No fix available
    Packages

    paketo-buildpacks-miniconda

    Summary

    Published
    3 Sept 2026
    MINI-mm5j-6rfc-5mmj
    No fix available
    Packages

    paketo-buildpacks-maven

    Summary

    Published
    3 Sept 2026