Contributions

csecuritylog-injectioncrlf

wazuh/wazuh

Sanitize the Fluentd server strings written to the log

The fluent-forward module logged three strings straight from the collector — the PONG rejection reason and server hostname, and unexpected HELO keys — without filtering, so a rogue collector could embed CRLF and forge entries in ossec.log. Credited as reporter.

$ September 2026open ↗

~GHSA-5293-mq8x-g3xj

pythonsecuritycode-injectioncwe-94

openapi-generators/openapi-python-client

Malicious OpenAPI documents can cause arbitrary code generation, executed when anyone imports the generated client

The generator interpolated strings from an OpenAPI document into its Jinja templates without escaping, so a crafted document could break out of a literal and write arbitrary Python into the generated client, which then runs on import. CVSS 8.4, fixed in 0.29.1.

~GHSA-f689-h8m7-3jp2

swiftsecuritypath-traversaloci

apple/containerization

ContainerizationOCI accepts unvalidated OCI descriptor digests, enabling path traversal in the local content store

OCI descriptor digests were never validated, and the helper that turns a digest into a path only stripped the prefix, so sha256:../../etc/hosts escaped the content store. A malicious registry got a file read oracle on the macOS host. Fixed in containerization 0.41.0.

~CVE-2026-70407

gosecurityaccess-controlcwe-285

go-gitea/gitea

Token scope bypass on GET /api/v1/orgs: the read:organization check ran after the handler that answered the request

Gitea listed the scope check after the handler that answered the request, so GET /api/v1/orgs never enforced read:organization. Any token could list organization metadata, and a site-admin token also returned private and limited orgs. Fixed in 1.27.3.

~CVE-2026-71184

go-gitea/gitea

Gitea Actions: fork pull request approval bypass via pull_request_review_comment (missing WithPullRequest)

The review notifier left the pull request off its notification, so a pull_request_review_comment run skipped the fork approval gate. Forking a repository and leaving a review comment ran attacker workflow code on its runners. CVSS 8.8, fixed in 1.27.3.

gosecurityci-cdcwe-863

~CVE-2026-66874

gosecurityci-cdbranch-protection

go-gitea/gitea

A fork pull request author can satisfy a required Actions status check without any workflow running

Gitea writes a synthetic skipped status for workflows excluded by their own filters, and skipped counts as success. A fork author could name a workflow after a required check and give it filters that never match, turning the check green with no run. Fixed in 1.27.3.

~CVE-2026-78433

gosecurityaccess-controlcwe-639

go-gitea/gitea

Attachments created before the January 2026 cutoff skip the cross repository check, serving private attachments through any public repository's path

The cross repository check on attachments was gated on the creation timestamp instead of the owning repository ID, so anyone with an attachment UUID could pull a private repository's attachments through a public repository's path, unauthenticated. Fixed in 1.27.3.

~#38686

csecuritytlsauthentication

wazuh/wazuh

Verify the Fluentd server identity in the fluent-forward module

The fluent-forward module verified the collector's certificate chain but never that the certificate matched the configured address, and it parsed the shared key digest out of the PONG without comparing it. The fix authenticates both. Credited as reporter.

csecuritytlsinsecure-defaults

~#38684

IssueOpen

wazuh/wazuh

Agent HTTPS transport defaults to verification_mode none, so a default install performs no TLS certificate verification

The 5.x agent sets verification_mode to none and no shipped template overrides it, so a default install does no TLS verification at all. Anyone on the path can impersonate the manager, force re-enrollment, and reach root through active_response.

cppsecurityaccess-controlidor

~#38683

IssueOpen

wazuh/wazuh

remoted /download serves any group's merged.mg to any authenticated agent, no membership check

remoted's POST /download authenticates the calling agent but never checks that it belongs to the group it asks for, so any agent can fetch any group's merged.mg and the credentials inside its agent.conf. Filed as an issue since the code is unreleased.

~GHSA-f2v7-35mm-3hx7

typescriptsecuritycommand-injectioncwe-78

renovatebot/renovate

manager/maven-wrapper: Command injection via unescaped distributionType

The Maven Wrapper manager interpolated distributionType out of a repository's maven-wrapper.properties into the command it runs without escaping, so a crafted value executed arbitrary code as the Renovate user. CVSS 7.8, fixed in 44.14.7.

~GHSA-v85g-rq5w-c46q

typescriptsecuritycommand-injectioncwe-78

renovatebot/renovate

manager/mix: Command injection via unescaped organization

The Mix manager built its hex authentication command from an unescaped organization parsed out of a private dependency name, allowing argument injection and, under binarySource=docker, shell metacharacters. CVSS 7.0, fixed in 44.14.7.

~#7910

swiftsecurityext4memory-safety

caddyserver/caddy

Normalize request path in remote admin access-control check (defense-in-depth)

Fix for issue #7909. Cleans both the request path and the allowed path before the segment-boundary check, so dot-dot traversal can no longer satisfy an admin prefix. Regression tests cover encoded, sibling, and collapsed-slash cases.

apple/containerization

Guard ext4 extent-tree parsing against out-of-bounds reads on malformed images

getExtents trusted the entry counts in the on-disk extent headers, but the inode block region holds only 60 bytes, so a header claiming more entries than fit read past the buffer and trapped the process. Bounds-checks every read, with four tests.

swiftsecurityext4memory-safety

~#848

PROpen

apple/containerization

Guard ext4 directory-entry parsing against out-of-bounds reads on malformed images

getDirEntries read directory headers and entry names at attacker-controlled offsets without bounds checks, so a malformed ext4 image was a crash denial of service against any caller listing a directory. Adds two guards and four tests.

typescriptsecurityaccess-controlprototype-pollution

~#10919

PROpen

better-auth/better-auth

Deny inherited object members in access-control checks instead of throwing

Permission resources come straight from the request body, so naming an Object.prototype member like constructor made the lookup return a function, slipped past the unknown-resource guard, and threw a 500 where the contract is fail-closed. Now denies instead.

typescriptsecurityotpcryptography

~#10917

PROpen

better-auth/better-auth

Support hashed and encrypted OTP storage in the phone-number plugin

phone-number was the only OTP plugin still storing its code in plain text and comparing it with !==. Adds the same storeOTP option the other plugins have, plus constant-time verification, defaulting to plain so no migration is needed.

~#38180

pythonsecurityauthinput-validation

wazuh/wazuh

Enforce password validation for empty passwords in update_user

update_user gated its password checks behind a truthiness test, so an empty string skipped the length, complexity, and reserved-user rules and was accepted as a password. Fixed by checking for None instead. Credited as reporter.

~#38135

pythonsecurityrace-conditionauth

wazuh/wazuh

Improve login attempt limiting under concurrent requests

The API counted failed logins only after credential validation finished, so concurrent requests could clear the gate before any of them were recorded and exceed the attempt limit. Counting moved ahead of authentication, under the existing lock.