•about 17 hours ago•CVE-2026-71556
7.1CVE-2026-71556: Symbolic Link Directory Traversal in go-git
A symbolic link directory traversal vulnerability was identified in go-git, a pure Go implementation of the Git specification. This vulnerability allows an attacker to construct a repository that, when checked out or processed, bypasses directory boundaries to write or overwrite arbitrary files on the host filesystem.
5 views•5 min read
•about 18 hours ago•CVE-2026-71557
6.3CVE-2026-71557: Path Traversal and Configuration Overwrite in go-git Filesystem Storage Engine
CVE-2026-71557 is a path traversal vulnerability in go-git, a pure-Go implementation of Git. In vulnerable versions, the filesystem-backed storage engine fails to validate reference names before mapping them to on-disk paths. An attacker hosting a malicious Git server can advertise references containing directory traversal sequences, such as 'refs/heads/../../config', to write or overwrite files outside the intended reference storage directory.
5 views•7 min read
•about 19 hours ago•GHSA-7C4V-FWGW-9RF7
5.3GHSA-7c4v-fwgw-9rf7: Nuxt Dev Server Discloses Project Root and Workspace UUID via Chrome DevTools Endpoint
An information disclosure vulnerability in the Nuxt development server allows adjacent network attackers to retrieve the absolute project root directory and a persistent workspace UUID by querying the unprotected Chrome DevTools workspace endpoint. This occurs when the development server is bound to a network-reachable interface, allowing requests that bypass the header-based security verification checks.
5 views•7 min read
•about 20 hours ago•CVE-2026-66062
5.3CVE-2026-66062: Regular Expression Denial of Service (ReDoS) in SvelteKit Content Negotiation
A Regular Expression Denial of Service (ReDoS) vulnerability exists in SvelteKit's content negotiation header parser prior to version 2.70.2. An unauthenticated remote attacker can exploit this vulnerability by sending a crafted Accept header with highly repetitive malformed values. This triggers catastrophic backtracking on the single-threaded Node.js/Bun event loop, leading to CPU exhaustion and full denial of service.
5 views•6 min read
•about 21 hours ago•CVE-2026-15895
8.4CVE-2026-15895: OS Command Injection in AWS jsii-diff CLI
An OS command injection vulnerability exists in the npm package loading component of the jsii-diff CLI tool within the AWS jsii framework. Prior to version 1.131.0, when parsing package specifiers prefixed with `npm:`, the tool concatenated user-controlled inputs directly into a shell execution string via child_process.exec. This allows attackers to execute arbitrary shell commands under the context of the running Node.js process.
5 views•7 min read
•about 22 hours ago•CVE-2026-63220
4.8CVE-2026-63220: Trust of Untrusted Reverse Proxy Headers in CodeIgniter4
CodeIgniter4 versions prior to v4.7.4 contain a protocol-spoofing vulnerability due to improper verification of upstream reverse proxy forwarding headers. Remote, unauthenticated attackers can inject headers like X-Forwarded-Proto to deceive the framework into identifying an insecure HTTP request as a secure HTTPS connection.
7 views•7 min read
•about 23 hours ago•CVE-2026-63221
9.4CVE-2026-63221: SQL Injection in CodeIgniter4 Query Builder deleteBatch()
An SQL injection vulnerability exists in the Query Builder component of the CodeIgniter4 full-stack PHP framework. The vulnerability is located within the compilation logic of the batch delete operation, deleteBatch(). When an application chains where() conditions prior to calling deleteBatch(), the Query Builder fails to enforce or respect the escaping flags of the parameters bound to the WHERE clauses. Instead of passing these parameters through the database driver standard escaping logic, the compilation engine interpolates the raw, unescaped bound values directly into the compiled SQL string, allowing remote attackers to execute arbitrary SQL commands.
6 views•8 min read
•about 24 hours ago•CVE-2026-63222
7.5CVE-2026-63222: Remote Code Execution via Path Traversal in CodeIgniter4 File Upload Handler
CVE-2026-63222 details a high-severity path traversal vulnerability in CodeIgniter4 versions prior to 4.7.4. The flaw lies within the `UploadedFile::move()` handler, which falls back to unsanitized, client-provided file names from the HTTP multipart request when a target name is not explicitly passed. An unauthenticated remote attacker can exploit this flaw to traverse arbitrary server directories, write malicious PHP payloads to the public-facing web root, and execute arbitrary code on the target system.
7 views•6 min read
•1 day ago•CVE-2026-63223
9.8CVE-2026-63223: Unrestricted File Upload leading to Remote Code Execution in CodeIgniter4
A critical unrestricted file upload vulnerability (CWE-434) in CodeIgniter4 allows unauthenticated remote attackers to execute arbitrary code. By bypassing weak validation filters in the `is_image` and `mime_in` rules, an attacker can upload a malicious PHP payload disguised as a valid image file.
7 views•6 min read
•1 day ago•CVE-2026-67422
7.5CVE-2026-67422: Regular Expression Denial of Service in pymdown-extensions
A high-severity Regular Expression Denial of Service (ReDoS) vulnerability in pymdown-extensions versions prior to 11.0.1 affects the Caret, Tilde, BetterEm, and MagicLink inline processors. When parsing user-supplied Markdown content containing malicious sequences of formatting delimiters, the regular expression engine is forced into catastrophic backtracking, resulting in CPU exhaustion and application denial of service.
9 views•5 min read
•1 day ago•CVE-2026-71847
8.7CVE-2026-71847: Use-After-Free in Ruby JSON Gem ResumableParser
A technical analysis of the use-after-free (UAF) vulnerability in the Ruby JSON gem (CVE-2026-71847) that impacts versions 2.20.0 through 2.21.1. This vulnerability occurs when parsing incomplete stream data containing duplicate keys.
6 views•6 min read
•1 day ago•CVE-2026-71848
5.3CVE-2026-71848: Algorithmic Complexity Denial of Service in Hono languageDetector Middleware
An Algorithmic Complexity Denial of Service (DoS) vulnerability exists in the Hono web application framework within its languageDetector middleware. From version 4.12.0 to 4.12.33, the progressive language-tag truncation routine (normalizeLanguage) performs string operations with a quadratic time complexity O(N^2) relative to the number of hyphen-separated subtags in the user-supplied language tag. This allows an unauthenticated remote attacker to cause resource exhaustion and CPU spikes, resulting in a full denial of service of the single-threaded JavaScript runtime.
5 views•5 min read