A flaw was found in go-billy, an interface filesystem abstraction for Go. Multiple path traversal vulnerabilities exist due to insufficient path sanitization and boundary enforcement. A remote attacker could exploit this by crafting malici…

▾ TwilightRed Hat · Multicluster Engine for KubernetesEPSS 0.47%via CSAF

CVE-2026-47179High· 7.7

4mo ago

Arcane Has an Authenticated Arbitrary Host File Read via Docker Compose Include Directives

▾ Twilightgetarcaneapp · github.com/getarcaneapp/arcane/backendEPSS 0.46%via OSV

CVE-2026-45287Low

4mo ago

opentelemetry-go's Schema ParseFile leaks file descriptors on each parse

▾ Sunlitotel · go.opentelemetry.io/otel/schema/v1.1EPSS 0.18%via OSV

CVE-2026-47144Medium· 5.5

4mo ago

Shamefile has an arbitrary file read via shamefile.yaml in shame next

▾ Sunlitshamefile · shamefileEPSS 0.18%via OSV

CVE-2026-46526Medium· 5.0

4mo ago

local-deep-research has an SSRF bypass in `safe_get`

▾ Sunlitlocal-deep-research · local-deep-researchEPSS 0.41%via OSV

CVE-2026-9094Critical· 9.8

4mo ago

Casdoor: GetTokenExchangeToken bypass through lack of cross-organization JWT signature check

▾ Midnightcasdoor · github.com/casdoor/casdoorEPSS 0.48%via OSV

CVE-2026-9804High· 7.7

4mo ago

A flaw was found in KubeVirt's virt-exportserver component

A flaw was found in KubeVirt's virt-exportserver component. An attacker with specific namespace-level access can exploit a path traversal vulnerability in the VMExport directory endpoint. By placing a symbolic link (symlink) within an ex…

▾ TwilightRed Hat · container-native-virtualization/virt-exportserver-rhel9EPSS 0.72%via NVD

CVE-2026-44394Medium· 6.0

4mo ago

OpenStack Keystone's federated token rescoping mechanism doesn't propagate the original token's expiry to the newly issued token

▾ Sunlitkeystone · keystoneEPSS 0.32%via OSV

CVE-2026-43000Medium· 6.0

4mo ago

OpenStack Keystone has an Incorrect Authorization issue

▾ Sunlitkeystone · keystoneEPSS 0.43%via OSV

Tagged “osv”

PraisonAI `deploy --type api` emits a Flask server with authentication disabled by default

BoxLite has a Timeout Bypass Vulnerability

praisonai-platform: Missing authorization on member removal enables full workspace takeover by any user regardless of role

zeroconf has unbounded DNS record cache that allows LAN-local memory exhaustion via multicast flood

zeroconf: Unbounded exception-dedup state retains packet buffers via traceback frame locals, enabling LAN-local memory exhaustion

PraisonAI has an Arbitrary File Write in Python API

PraisonAI Platform: Missing role checks let any workspace member become owner and control workspace membership

zeroconf has unbounded recursion in DNS compression-pointer decoder that allows LAN-local denial of service

PraisonAI vulnerable to unauthenticated arbitrary file read via MCP workflow.show, workflow.validate, deploy.validate

PraisonAI: Arbitrary code execution via unguarded `spec.loader.exec_module` in `agents_generator.py` - sibling of CVE-2026-44334

PraisonAI Platform workspace-scoped routes allow cross-workspace object access by global object ID

praisonai-platform: Label endpoints' unchecked label_id/issue_id enable cross-workspace label IDOR (edit, delete, link)

PraisonAI CLI automatically resolves @url mentions in prompt text and can read loopback URLs into model context

PraisonAI spider_tools SSRF protection bypass via alternate loopback host encodings

praisonai-platform: IDOR in dependency endpoints allows cross-workspace issue linking, reading, and deletion due to missing ownership checks

praisonai-platform: list_issue_activity returns activity log for any issue regardless of workspace ownership

OpenStack Neutron has an Incorrect Authorization issue

agno contains a SQL injection vulnerability

xiaomusic contains an unauthenticated path traversal vulnerability

Calico Inserts Sensitive Information into Log File

tuf has platform-dependent delegation path matching

github.com/go-git/go-billy: Go-billy: Arbitrary file access due to path traversal vulnerability (CVE-2026-44973)

Arcane Has an Authenticated Arbitrary Host File Read via Docker Compose Include Directives

opentelemetry-go's Schema ParseFile leaks file descriptors on each parse

Shamefile has an arbitrary file read via shamefile.yaml in shame next

local-deep-research has an SSRF bypass in `safe_get`

Casdoor: GetTokenExchangeToken bypass through lack of cross-organization JWT signature check

A flaw was found in KubeVirt's virt-exportserver component

OpenStack Keystone's federated token rescoping mechanism doesn't propagate the original token's expiry to the newly issued token

OpenStack Keystone has an Incorrect Authorization issue