Open Source Vulnerabilities

phpMyAdmin through 5.2.3 SSRF via setup/validate.php After Setup Disabled

phpMyAdmin through 5.2.3 SQL Injection via Designer saveSetting

phpMyAdmin through 5.2.3 CSRF Token Bypass via Non-AJAX POST to /sql

OPNsense 26.1.6 through 26.7.7 Captive Portal Session Takeover via Forged ARP

OPNsense before 26.7.8 Wireless WPA Configuration Line Injection via Identity

OPNsense core before 26.7.8 Lockout IP Planting via WebGUI Login Username

Hyperswitch before 1.128.0 Webhook Authentication Bypass via Worldpayxml Connector

Hyperswitch through 1.128.0 Missing Authorization in Payout Confirmation

Lago through 1.55.0 Authentication Bypass via acceptInvite GraphQL Mutation

CakePHP through 5.4.3 SQL Injection via StringExpression and IdentifierExpression Collation

CakePHP through 5.4.3 SQL Injection via WindowExpression range() and frame()

CakePHP through 5.4.3 Email Header Injection via Bare CR/LF in SmtpTransport and MailTransport

CakePHP through 5.4.3 Cookie Leakage via HTTP Client CookieCollection Domain Matching

CakePHP through 5.4.3 MIME Header Injection via FormDataPart Content-Type

Bitwarden Server before 2026.10.1 Authorization Bypass via POST /api/ciphers/create

OPNsense before 26.7.8 Root Command Injection via Firmware Mirror Setting

n8n before 2.42.6, 2.43.3 and 3.0.1 Code Execution Outside Task Runner Isolation via Deprecated Function Nodes

Element Web and Element Desktop before 1.12.32 Forced Logout via Guest Credential URL Parameters

SQLite before 3.54.0 Heap Buffer Overflow via Session Extension sessionUpdateFind()

SQLite before 3.54.0 Use-After-Free in R-Tree nodeWrite()

SQLite before 3.54.0 Authorizer Bypass via RIGHT or FULL JOIN USING

SQLite before 3.54.0 Stack Exhaustion via COLLATE Operator Chain

SQLite before 3.54.0 Information Disclosure via WAL Page Size Mismatch

SQLite before 3.54.0 Heap Buffer Overflow via FTS5 fts5DoSecureDelete()

SQLite before 3.54.0 FTS5 Heap Buffer Overflow via fts5MergeRowidLists()

SQLite before 3.54.0 Use-After-Free in FTS3 fts3BestSnippet() via snippet()

SQLite before 3.54.0 Stack Exhaustion via CTE Chain in selectExpander()

ProFTPD through 1.3.9e and 1.3.10rc4 mod_copy Symlink Following Write Bypass

ProFTPD before 1.3.9e and 1.3.10rc5 mod_sftp Copy-File Authorization Bypass

ProFTPD before 1.3.9e and 1.3.10rc5 Buffer Overflow via mod_rewrite utf8trans RewriteMap

apache-zookeeper

Security fix for GHSA-qqpg-mvqg-649v applied in: apache-zookeeper 3.9.4-r5

apache-zookeeper

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files

apache-zookeeper

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files

apache-zookeeper

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files

apache-zookeeper

In libexpat before 2

apache-zookeeper

Stack-based buffer overflow in libtasn1 version: v4

kibana-9.5

apache-zookeeper

In libexpat before 2

apache-zookeeper, sonarqube, elasticsearch, elasticsearch, kafka, solr, wso2is, apache-zookeeper

Security fix for GHSA-72hv-8253-57qq applied in: apache-zookeeper 3.8.6-r0, sonarqube 26.3.0.120487-r3, elasticsearch 9.4.2-r0, kafka 4.2.0-r0, solr 10.0.0-r0, wso2is 7.3.0-r1, apache-zookeeper 3.9.5-r0

apache-zookeeper, spark-sc213-jdk17-py312, spark-sc213-jdk17-py312, wildfly, wildfly, strimzi-kafka-operator, apache-zookeeper

Netty is an asynchronous, event-driven network application framework

apache-zookeeper, apache-zookeeper

Security fix for GHSA-mj4r-2hfc-f8p6 applied in: apache-zookeeper 3.8.6-r1, apache-zookeeper 3.9.5-r1

apache-zookeeper, spark-sc213-jdk17-py312, spark-sc213-jdk17-py312, wildfly, wildfly, elasticsearch, elasticsearch, strimzi-kafka-operator, solr, solr, solr, solr, apache-zookeeper

Netty is a network application framework for development of protocol servers and clients

apache-zookeeper, spark-sc213-jdk17-py312, spark-sc213-jdk17-py312, wildfly, wildfly, elasticsearch, elasticsearch, strimzi-kafka-operator, solr, solr, solr, solr, apache-zookeeper

Netty is a network application framework for development of protocol servers and clients

go-fips-1.26, ollama-fips, ollama-fips, go1.25

Security fix for GHSA-j5w8-q4qc-rx2x applied in: go-fips-1.26 1.25.6-r0, ollama-fips 0.34.4-r2, go1.25 1.25.5-r0

go-fips-1.26, ollama-fips, ollama-fips, go1.25

Security fix for GHSA-f6x5-jh6r-wrfv applied in: go-fips-1.26 1.25.6-r0, ollama-fips 0.34.4-r2, go1.25 1.25.5-r0

apache-zookeeper, apache-zookeeper, spark-sc213-jdk17-py312, spark-sc213-jdk17-py312, wildfly, wildfly, wildfly, wildfly, elasticsearch, elasticsearch, keycloak, strimzi-kafka-operator, solr, solr, solr, solr, solr, solr, apache-zookeeper, apache-zookeeper

Netty is a network application framework for development of protocol servers and clients

go-fips-1.26, go-fips-1.26, velero, go1.25

Downloading and building modules with malicious version strings can cause local code execution

sonarqube, sonarqube, apache-zookeeper, apache-zookeeper

ACE vulnerability in conditional configuration file processing by QOS

sonarqube, apache-zookeeper, apache-zookeeper

Deserialization of untrusted data vulnerability in QOS

apache-zookeeper, apache-hive, apache-zookeeper

Security fix for GHSA-47qp-hqvx-6r3f applied in: apache-zookeeper 3.8.6-r4, apache-hive 4.0.1-r7, apache-zookeeper 3.9.5-r4