•about 5 hours ago•GHSA-HXJG-93WC-H8P8
8.8GHSA-hxjg-93wc-h8p8: Cross-Site Request Forgery in Komari Management Interface
A high-severity Cross-Site Request Forgery (CSRF) vulnerability exists in the Komari server monitoring tool. The administrative interface sets authentication cookies without restrictive SameSite or Secure attributes, and lacks any CSRF validation, enabling unauthenticated remote attackers to execute arbitrary commands or modify backend settings by exploiting administrative sessions.
5 views•5 min read
•about 8 hours ago•CVE-2026-88002
6.5CVE-2026-88002: Infinite Loop Denial of Service in Open WebUI Chat History Reconstruction
An infinite loop vulnerability (CWE-835) in Open WebUI versions 0.5.0 through 0.11.0 allows authenticated attackers to cause a complete and persistent Denial of Service (DoS) of the backend. By submitting a specially crafted chat history containing cyclic message references that omit internal message identifiers, the cycle detection mechanism is bypassed. This triggers an infinite synchronous traversal that blocks the single-threaded asyncio event loop and exhausts system memory, causing the application to crash.
5 views•7 min read
•about 9 hours ago•CVE-2026-88001
5.0CVE-2026-88001: Server-Side Request Forgery via Redirect Bypass in Open WebUI
Server-Side Request Forgery (SSRF) vulnerability in Open WebUI (v0.9.5 to v0.11.1) allows authenticated users to bypass private IP and host filter lists by abusing HTTP redirect handling or using IP literals with the aiohttp client.
7 views•7 min read
•about 10 hours ago•CVE-2026-88000
6.5CVE-2026-88000: Denial of Service via Infinite Loop in Open WebUI Chat History Deletion
An authenticated denial-of-service vulnerability exists in Open WebUI versions 0.10.0 up to 0.11.0. By uploading a malformed chat history containing cyclical child message references and requesting a message deletion, an attacker can trigger an infinite loop. Since Open WebUI relies on Python's single-threaded asyncio event loop, the CPU-bound loop blocks all incoming connections, freezing the service for all users.
8 views•6 min read
•about 13 hours ago•CVE-2026-71328
8.8CVE-2026-71328: Heap-Based Buffer Overflow in Microsoft .NET and Visual Studio Parser
A heap-based buffer overflow vulnerability (CVE-2026-71328) exists within the parser component of Microsoft Visual Studio and Microsoft .NET runtimes. This vulnerability permits an unauthenticated remote attacker to execute arbitrary code with the privileges of the running application, provided they can convince a user to load a maliciously crafted project file, solution, or stream.
7 views•7 min read
•about 14 hours ago•CVE-2026-69439
8.8CVE-2026-69439: Heap-based Buffer Overflow in Microsoft .NET and Visual Studio
CVE-2026-69439 is a high-severity elevation of privilege vulnerability in Microsoft .NET and Visual Studio, originating from a heap-based buffer overflow (CWE-122) within native parsing libraries. An unauthenticated attacker can achieve code execution under the privileges of the active process by convincing a user to open a specially crafted project, metadata stream, or dependency.
13 views•6 min read
•about 15 hours ago•CVE-2026-85730
8.2CVE-2026-85730: Infinite Loop Denial of Service in smol-toml Parser
Prior to version 1.7.1, smol-toml is vulnerable to an infinite loop Denial of Service when parsing a malformed TOML payload containing an unclosed comment inside an array or inline table.
8 views•7 min read
•about 16 hours ago•CVE-2026-69522
8.8.NET and Visual Studio Remote Code Execution Vulnerability (CVE-2026-69522)
CVE-2026-69522 is a high-severity Remote Code Execution (RCE) vulnerability in Microsoft .NET runtimes, .NET Framework, and Visual Studio caused by a heap-based buffer overflow (CWE-122). An unauthenticated attacker can exploit this flaw by inducing a user to open a malicious project file or by transmitting crafted payloads over the network, leading to arbitrary code execution within the context of the running application.
13 views•7 min read
•about 17 hours ago•CVE-2026-69304
5.9CVE-2026-69304: Denial of Service via Request Decompression Data Amplification in ASP.NET Core
An Improper Handling of Highly Compressed Data (Data Amplification) vulnerability (CVE-2026-69304) exists in Microsoft ASP.NET Core and Microsoft .NET. It allows unauthenticated remote attackers to trigger resource exhaustion and denial of service via highly compressed request payloads.
6 views•7 min read
•about 20 hours ago•CVE-2026-84361
7.7CVE-2026-84361: Remote Code Execution in Composer Perforce VCS Driver
A critical remote code execution vulnerability exists in the Composer PHP dependency manager due to improper neutralization of command parameters passed to the Perforce CLI client. Unauthenticated attackers can exploit this flaw via crafted package metadata in custom repositories or lock files, triggering arbitrary OS command execution when a user or automated CI/CD pipeline runs Composer commands.
8 views•6 min read
•about 21 hours ago•CVE-2026-84376
6.3CVE-2026-84376: Authorization Bypass via Missing Path-Segment Boundary Validation in Astro
An authorization bypass vulnerability exists in the Astro web framework prior to version 7.2.4. When configured with a non-root base path, Astro's routing engine stripped the base path from incoming request URLs using an insecure prefix-match check without verifying path-segment boundaries. This created a path parser differential between user-defined middleware and the internal router. An unauthenticated attacker could bypass route-based authorization checks to access administrative or privileged endpoints by altering the path prefix segment.
8 views•6 min read
•about 22 hours ago•GHSA-26W7-CXV4-GFX2
9.8GHSA-26W7-CXV4-GFX2: Remote Code Execution in Astro via Outdated Sharp Native Dependency
A critical remote code execution vulnerability in Astro's image optimization pipeline allows unauthenticated attackers to trigger memory corruption via malformed AVIF images, due to outdated native dependencies in the sharp package.
9 views•7 min read