@openrewrite/recipes-nodejs 0.52.0-20261009-102010 → 0.52.1

package/dist/resources/advisories-npm.csv

@@ -4539,6 +4539,10 @@ CVE-2026-0933,2026-01-21T23:00:35Z,"Wrangler affected by OS Command Injection in
 CVE-2026-0933,2026-01-21T23:00:35Z,"Wrangler affected by OS Command Injection in `wrangler pages deploy`",wrangler,4.0.0,4.59.1,,HIGH,CWE-78,
 CVE-2026-0969,2026-02-12T03:31:01Z,"next-mdx-remote affected by arbitrary code execution in React server-side rendering of untrusted MDX content",next-mdx-remote,4.3.0,6.0.0,,HIGH,CWE-94,
 CVE-2026-10032,2026-10-02T22:55:49Z,"@a2ui/web_core: `openUrl` permits `javascript:` URI execution via agent-supplied button actions",@a2ui/web_core,0.9.0,0.10.2,,CRITICAL,CWE-79,
+CVE-2026-100409,2026-10-15T20:15:17Z,"OpenNext Cloudflare: Cache interception can bypass middleware protection for encoded paths",@opennextjs/cloudflare,0.3.0,1.20.2,,HIGH,CWE-177;CWE-180,
+CVE-2026-100721,2026-10-05T23:24:29Z,"vm2: NodeVM custom resolution bypasses external path boundaries",vm2,0,3.12.2,,CRITICAL,CWE-863,
+CVE-2026-100722,2026-10-05T23:19:55Z,"vm2: Host Promise rejection from an exposed constructor can terminate the vm2 host process",vm2,0,3.12.2,,HIGH,CWE-248;CWE-703,
+CVE-2026-100723,2026-10-05T23:00:46Z,"vm2: NodeVM zlib Buffers expose pooled host memory across the VM boundary",vm2,0,3.12.2,,MODERATE,CWE-200;CWE-787,
 CVE-2026-101894,2026-09-29T23:49:42Z,"@xhmikosr/decompress: Path traversal via symlink chain",@xhmikosr/decompress,0,10.2.2,,CRITICAL,CWE-22;CWE-59,
 CVE-2026-101894,2026-09-29T23:49:42Z,"@xhmikosr/decompress: Path traversal via symlink chain",@xhmikosr/decompress,11.0.0,11.1.4,,CRITICAL,CWE-22;CWE-59,
 CVE-2026-101894,2026-09-29T23:49:42Z,"@xhmikosr/decompress: Path traversal via symlink chain",decompress,0,,4.2.1,CRITICAL,CWE-22;CWE-59,
@@ -4589,7 +4593,11 @@ CVE-2026-102278,2026-09-29T23:45:17Z,"brace-expansion: DoS via uncontrolled recu
 CVE-2026-102281,2026-09-29T23:54:44Z,"Nest: Remote process termination via a deeply nested microservice message pattern",@nestjs/microservices,0,11.2.4,,HIGH,CWE-248;CWE-674,
 CVE-2026-102281,2026-09-29T23:54:44Z,"Nest: Remote process termination via a deeply nested microservice message pattern",@nestjs/microservices,12.0.0,12.0.2,,HIGH,CWE-248;CWE-674,
 CVE-2026-102282,2026-09-29T18:24:57Z,"adm-zip extraction preserves SUID/SGID bits from untrusted ZIPs -> local privilege escalation",adm-zip,0,0.6.1,,HIGH,CWE-732,
+CVE-2026-102414,2026-10-06T13:40:10Z,"pbkdf2 rehashes long passwords on every iteration, enabling denial of service",pbkdf2,0,3.1.7,,MODERATE,CWE-400,
+CVE-2026-102422,2026-10-06T13:40:36Z,"shell-quote: `quote()` command injection via a line terminator in a token after a `{ comment }` token",shell-quote,1.8.4,1.11.0,,CRITICAL,CWE-78,
+CVE-2026-102527,2026-10-15T20:15:27Z,"Nuxt OG Image cache poisoning through derivable cache keys on unsigned dynamic image routes",nuxt-og-image,6.2.5,6.7.0,,MODERATE,CWE-349,
 CVE-2026-102599,2026-09-29T23:44:33Z,"Socket.IO: Engine.IO Protocol Revision Mismatch DoS",engine.io,6.6.0,6.6.10,,HIGH,CWE-248,
+CVE-2026-102600,2026-10-05T23:44:21Z,"Socket.IO: Prototype Pollution via Unsafe Client Session Lookup","@socket.io/cluster-engine",0,0.1.1,,HIGH,CWE-20,
 CVE-2026-102672,2026-09-29T18:06:59Z,"Electron: Local race condition in Squirrel.Mac update installation on macOS",electron,0,39.8.10,,MODERATE,CWE-367,
 CVE-2026-102672,2026-09-29T18:06:59Z,"Electron: Local race condition in Squirrel.Mac update installation on macOS",electron,40.0.0-alpha.1,41.10.5,,MODERATE,CWE-367,
 CVE-2026-102672,2026-09-29T18:06:59Z,"Electron: Local race condition in Squirrel.Mac update installation on macOS",electron,42.0.0-alpha.1,42.0.0-beta.2,,MODERATE,CWE-367,
@@ -4612,18 +4620,269 @@ CVE-2026-102677,2026-09-29T18:02:01Z,"Electron: Sandboxed preload code cache can
 CVE-2026-102677,2026-09-29T18:02:01Z,"Electron: Sandboxed preload code cache can be poisoned by a compromised renderer",electron,43.0.0-beta.1,43.5.0,,HIGH,CWE-20;CWE-345,
 CVE-2026-102677,2026-09-29T18:02:01Z,"Electron: Sandboxed preload code cache can be poisoned by a compromised renderer",electron,44.0.0-alpha.1,44.0.0-beta.6,,HIGH,CWE-20;CWE-345,
 CVE-2026-10281,2026-06-01T21:30:42Z,"Claw Orchestrator is missing authentication for the component API Endpoint","@enderfga/claw-orchestrator",0,3.5.6,,MODERATE,CWE-287,
+CVE-2026-102826,2026-10-05T23:48:05Z,"simple-git allows command execution through unblocked Git configuration includes",simple-git,0,4.0.0,,HIGH,CWE-77;CWE-78,
+CVE-2026-102827,2026-10-05T23:47:58Z,"simple-git: unsafe-operations plugin bypass via git long-option abbreviation (--receive-p/--exe) -> command execution (residual of CVE-2026-28291)",simple-git,0,4.0.0,,HIGH,CWE-77;CWE-88,
+CVE-2026-102828,2026-10-05T23:48:14Z,"simple-git unsafe-operation guard does not block trailer command configuration",simple-git,3.15.0,4.0.1,,CRITICAL,CWE-184;CWE-78,
+CVE-2026-102829,2026-10-05T23:48:21Z,"simple-git: `VISUAL` editor environment variable is omitted from unsafe editor detection",@simple-git/argv-parser,0,2.0.1,,CRITICAL,CWE-184;CWE-78,
 CVE-2026-10291,2026-06-02T00:31:57Z,"Claw Orchestrator has inefficient regular expression complexity via validateRegex()","@enderfga/claw-orchestrator",0,3.7.1,,MODERATE,CWE-1333;CWE-400,
 CVE-2026-102983,2026-09-30T23:40:12Z,"Astro: Netlify Image CDN allowlist bypass enables SSRF",@astrojs/netlify,5.2.0,8.2.4,,MODERATE,CWE-625;CWE-918,
 CVE-2026-102984,2026-09-30T23:29:40Z,"Astro: Malformed port in the Host header can crash the Node adapter",@astrojs/node,0,11.1.3,,HIGH,CWE-248,
+CVE-2026-102989,2026-10-15T20:22:20Z,"TanStack Router: Unauthenticated reflected XSS in TanStack Start server-function responses","@tanstack/start-server-core",1.143.12,1.169.39,,CRITICAL,CWE-79,
+CVE-2026-102989,2026-10-15T20:22:20Z,"TanStack Router: Unauthenticated reflected XSS in TanStack Start server-function responses",@tanstack/react-start,1.143.12,1.168.60,,CRITICAL,CWE-79,
+CVE-2026-102989,2026-10-15T20:22:20Z,"TanStack Router: Unauthenticated reflected XSS in TanStack Start server-function responses",@tanstack/solid-start,1.143.12,1.168.57,,CRITICAL,CWE-79,
+CVE-2026-102989,2026-10-15T20:22:20Z,"TanStack Router: Unauthenticated reflected XSS in TanStack Start server-function responses",@tanstack/vue-start,1.143.12,1.168.56,,CRITICAL,CWE-79,
 CVE-2026-102990,2026-10-01T14:42:42Z,"basic-ftp: Quadratic-time CPU denial of service in Client.list() Unix directory-listing parser (RE_LINE backtracking)",basic-ftp,0,6.2.1,,HIGH,CWE-1333,
 CVE-2026-102992,2026-10-01T15:03:33Z,"piscina: Prototype-pollution gadget in ThreadPool.options allows RCE via execArgv / loadBalancer / env",piscina,0,4.9.4,,CRITICAL,CWE-1321,
 CVE-2026-102992,2026-10-01T15:03:33Z,"piscina: Prototype-pollution gadget in ThreadPool.options allows RCE via execArgv / loadBalancer / env",piscina,5.0.0,5.3.2,,CRITICAL,CWE-1321,
 CVE-2026-102992,2026-10-01T15:03:33Z,"piscina: Prototype-pollution gadget in ThreadPool.options allows RCE via execArgv / loadBalancer / env",piscina,6.0.0-rc.1,6.0.0-rc.5,,CRITICAL,CWE-1321,
+CVE-2026-103918,2026-10-05T17:32:32Z,"@orpc/zod: Prototype injection in smart coercion",@orpc/zod,0,1.14.10,,MODERATE,CWE-1321;CWE-915,
+CVE-2026-103921,2026-10-05T22:56:56Z,"GraphQL Tools: TLS Certificate Validation Disabled in Legacy GraphQL WebSocket Executor","@graphql-tools/executor-legacy-ws",0,1.1.35,,HIGH,CWE-295,
+CVE-2026-103922,2026-10-05T22:53:10Z,"Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path",@capacitor/android,6.0.0,6.2.2,,CRITICAL,CWE-346;CWE-441,
+CVE-2026-103922,2026-10-05T22:53:10Z,"Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path",@capacitor/android,7.0.0,7.6.9,,CRITICAL,CWE-346;CWE-441,
+CVE-2026-103922,2026-10-05T22:53:10Z,"Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path",@capacitor/android,8.0.0,,8.3.4,CRITICAL,CWE-346;CWE-441,
+CVE-2026-103922,2026-10-05T22:53:10Z,"Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path",@capacitor/android,8.3.5,8.4.3,,CRITICAL,CWE-346;CWE-441,
+CVE-2026-103922,2026-10-05T22:53:10Z,"Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path",@capacitor/android,8.5.0,8.5.1,,CRITICAL,CWE-346;CWE-441,
+CVE-2026-103922,2026-10-05T22:53:10Z,"Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path",@capacitor/ios,6.0.0,6.2.2,,CRITICAL,CWE-346;CWE-441,
+CVE-2026-103922,2026-10-05T22:53:10Z,"Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path",@capacitor/ios,7.0.0,7.6.9,,CRITICAL,CWE-346;CWE-441,
+CVE-2026-103922,2026-10-05T22:53:10Z,"Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path",@capacitor/ios,8.0.0,,8.3.4,CRITICAL,CWE-346;CWE-441,
+CVE-2026-103922,2026-10-05T22:53:10Z,"Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path",@capacitor/ios,8.3.5,8.4.3,,CRITICAL,CWE-346;CWE-441,
+CVE-2026-103922,2026-10-05T22:53:10Z,"Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path",@capacitor/ios,8.5.0,8.5.1,,CRITICAL,CWE-346;CWE-441,
+CVE-2026-103923,2026-10-05T23:41:05Z,"KaTeX: Existing prototype pollution can bypass trust restrictions",katex,0.11.0,0.18.2,,LOW,CWE-807,
+CVE-2026-103975,2026-10-15T20:18:56Z,"Appium: Symlink based Zip Slip in @appium/support ZIP extraction",@appium/support,0,7.2.6,,MODERATE,CWE-59,
+CVE-2026-104150,2026-10-15T20:09:52Z,"AdonisJS HTTP Server: Uncontrolled Resource Consumption and Inefficient Regular Expression Complexity",@adonisjs/http-server,0,8.2.2,,MODERATE,CWE-1333;CWE-400,
+CVE-2026-104150,2026-10-15T20:09:52Z,"AdonisJS HTTP Server: Uncontrolled Resource Consumption and Inefficient Regular Expression Complexity",@adonisjs/http-server,9.0.0,9.1.1,,MODERATE,CWE-1333;CWE-400,
+CVE-2026-104182,2026-10-05T22:49:27Z,"stream-json: JSONC parser and verifier re-scan the whole accumulated comment on every input chunk",stream-json,0,3.6.0,,MODERATE,CWE-407,
+CVE-2026-104183,2026-10-05T22:49:19Z,"stream-json has a prototype pollution issue: Assembler writes this.current[this.key] on plain objects",stream-json,0,3.6.0,,MODERATE,CWE-1321,
+CVE-2026-104844,2026-10-05T22:53:54Z,"PostCSS: Quadratic complexity in flat selector parsing allows CPU exhaustion",postcss-selector-parser,0,7.1.6,,MODERATE,CWE-400;CWE-407,
+CVE-2026-104845,2026-10-05T23:40:40Z,"Seroval: Memory exhaustion via unchecked TypedArray length in JSON deserialization",seroval,0,1.6.3,,HIGH,CWE-770,
+CVE-2026-104846,2026-10-05T23:40:43Z,"Seroval: `fromJSON()` Promise thenable assimilation invokes plugin-produced callables (bypass of GHSA-mv8w-475r-vwqw)",seroval,0.12.0,1.6.2,,CRITICAL,CWE-843,
+CVE-2026-104847,2026-10-05T22:36:06Z,"ProseMirror has a XSS vulnerability in prosemirror-view's paste handling",prosemirror-view,0,1.42.3,,HIGH,CWE-79,
+CVE-2026-104848,2026-10-05T22:50:01Z,"Tinypool: Prototype Pollution gadget in worker options leads to Remote Code Execution",tinypool,0,2.1.1,,CRITICAL,CWE-1321,
+CVE-2026-104849,2026-10-05T22:49:52Z,"Tinypool: Prototype Pollution Gadget to RCE in run() options",tinypool,0,2.1.2,,CRITICAL,CWE-1321;CWE-94,
+CVE-2026-104850,2026-10-06T15:35:44Z,"MCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP server","@modelcontextprotocol/client",2.0.0,2.2.0,,HIGH,CWE-345;CWE-522,
+CVE-2026-104850,2026-10-06T15:35:44Z,"MCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP server","@modelcontextprotocol/sdk",1.12.0,1.31.0,,HIGH,CWE-345;CWE-522,
+CVE-2026-104852,2026-10-05T22:56:46Z,"GraphQL Tools has prototype pollution in well-established utility function `mergeDeep`",@graphql-tools/utils,0,12.0.1,,HIGH,CWE-1321,
+CVE-2026-104853,2026-10-05T23:28:35Z,"Nx: Path traversal in nx migrate package-migrations extraction",nx,13.10.0,22.7.10,,MODERATE,CWE-22;CWE-73,
+CVE-2026-104853,2026-10-05T23:28:35Z,"Nx: Path traversal in nx migrate package-migrations extraction",nx,23.0.0,23.2.1,,MODERATE,CWE-22;CWE-73,
+CVE-2026-104854,2026-10-05T23:28:43Z,"Nx daemon and plugin worker sockets are accessible to other local users",nx,14.6.0,22.7.9,,HIGH,CWE-269;CWE-732,
+CVE-2026-104854,2026-10-05T23:28:43Z,"Nx daemon and plugin worker sockets are accessible to other local users",nx,23.0.0,23.1.2,,HIGH,CWE-269;CWE-732,
+CVE-2026-104859,2026-10-05T23:29:13Z,"@nx/docker: OS command injection in the @nx/docker release pipeline",@nx/docker,21.4.0,22.7.8,,HIGH,CWE-78,
+CVE-2026-104859,2026-10-05T23:29:13Z,"@nx/docker: OS command injection in the @nx/docker release pipeline",@nx/docker,23.0.0,23.1.1,,HIGH,CWE-78,
 CVE-2026-104861,2026-10-02T23:18:02Z,"probe-image-size: Quadratic-time Denial of Service in the SVG Parser",probe-image-size,0,7.4.0,,HIGH,CWE-1333;CWE-400,
+CVE-2026-104871,2026-10-05T22:53:45Z,"Angular SSR: Path Traversal to Sibling Directories in CommonEngine on Windows",@angular/ssr,0,,19.2.27,MODERATE,CWE-22,
+CVE-2026-104871,2026-10-05T22:53:45Z,"Angular SSR: Path Traversal to Sibling Directories in CommonEngine on Windows",@angular/ssr,20.0.0,20.3.36,,MODERATE,CWE-22,
+CVE-2026-104871,2026-10-05T22:53:45Z,"Angular SSR: Path Traversal to Sibling Directories in CommonEngine on Windows",@angular/ssr,21.0.0,21.2.23,,MODERATE,CWE-22,
+CVE-2026-104871,2026-10-05T22:53:45Z,"Angular SSR: Path Traversal to Sibling Directories in CommonEngine on Windows",@angular/ssr,22.0.0,22.1.7,,MODERATE,CWE-22,
+CVE-2026-104872,2026-10-05T22:52:44Z,"Multiple @opentelemetry/instrumentation-* packages expose database username via unconditional db.user span attribute","@opentelemetry/instrumentation-cassandra-driver",0,0.66.0,,MODERATE,CWE-532,
+CVE-2026-104872,2026-10-05T22:52:44Z,"Multiple @opentelemetry/instrumentation-* packages expose database username via unconditional db.user span attribute","@opentelemetry/instrumentation-knex",0,0.65.0,,MODERATE,CWE-532,
+CVE-2026-104872,2026-10-05T22:52:44Z,"Multiple @opentelemetry/instrumentation-* packages expose database username via unconditional db.user span attribute","@opentelemetry/instrumentation-mongoose",0,0.67.0,,MODERATE,CWE-532,
+CVE-2026-104872,2026-10-05T22:52:44Z,"Multiple @opentelemetry/instrumentation-* packages expose database username via unconditional db.user span attribute","@opentelemetry/instrumentation-mysql",0,0.67.0,,MODERATE,CWE-532,
+CVE-2026-104872,2026-10-05T22:52:44Z,"Multiple @opentelemetry/instrumentation-* packages expose database username via unconditional db.user span attribute","@opentelemetry/instrumentation-mysql2",0,0.67.0,,MODERATE,CWE-532,
+CVE-2026-104872,2026-10-05T22:52:44Z,"Multiple @opentelemetry/instrumentation-* packages expose database username via unconditional db.user span attribute","@opentelemetry/instrumentation-oracledb",0,0.46.0,,MODERATE,CWE-532,
+CVE-2026-104872,2026-10-05T22:52:44Z,"Multiple @opentelemetry/instrumentation-* packages expose database username via unconditional db.user span attribute","@opentelemetry/instrumentation-pg",0,0.73.0,,MODERATE,CWE-532,
+CVE-2026-104872,2026-10-05T22:52:44Z,"Multiple @opentelemetry/instrumentation-* packages expose database username via unconditional db.user span attribute","@opentelemetry/instrumentation-tedious",0,0.40.0,,MODERATE,CWE-532,
+CVE-2026-104891,2026-10-07T18:03:42Z,"mppx-condition-gate: Free-access path grants on a self-declared wallet without proving control","@insumermodel/mppx-condition-gate",0,3.0.0,,HIGH,CWE-290;CWE-863,
+CVE-2026-104891,2026-10-07T18:03:42Z,"mppx-condition-gate: Free-access path grants on a self-declared wallet without proving control","@insumermodel/mppx-token-gate",0,1.0.4,,HIGH,CWE-290;CWE-863,
+CVE-2026-105642,2026-10-07T20:43:08Z,"Ghost: Remote Code Execution via Bookmark Card Images",ghost,6.56.0,6.67.0,,HIGH,CWE-1395;CWE-94,
+CVE-2026-105643,2026-10-07T20:43:05Z,"Ghost: Stored XSS via Embed Card Previews",ghost,6.34.0,6.67.0,,HIGH,CWE-653;CWE-79,
+CVE-2026-105644,2026-10-07T20:43:03Z,"Ghost : Stored XSS via SVG Files in Content Imports",ghost,4.0.0,6.67.0,,MODERATE,CWE-434;CWE-79,
+CVE-2026-105645,2026-10-07T20:43:00Z,"Ghost: Regular Expression Denial of Service in External Media Inliner",ghost,5.37.0,6.67.0,,MODERATE,CWE-1333,
+CVE-2026-105646,2026-10-07T20:42:53Z,"Ghost: Regular Expression Denial of Service in Content Import",ghost,4.0.0,6.67.0,,MODERATE,CWE-1333,
+CVE-2026-105647,2026-10-07T20:35:32Z,"Ghost: Server-Side Request Forgery in Bookmark Fetching",ghost,6.54.1,6.65.0,,MODERATE,CWE-367;CWE-918,
+CVE-2026-105648,2026-10-07T20:35:27Z,"Ghost: Private IP Filtering Bypass via IPv6 Transition Addresses",ghost,6.0.9,6.65.0,,MODERATE,CWE-184;CWE-918,
+CVE-2026-105649,2026-10-07T20:35:22Z,"Ghost: Stored XSS via SVG Uploads Bypassing Sanitization",ghost,4.22.0,6.65.0,,HIGH,CWE-434;CWE-79,
+CVE-2026-105650,2026-10-07T20:27:46Z,"Ghost: Stored XSS via oEmbed Photo Responses",ghost,2.5.0,6.64.0,,HIGH,CWE-184;CWE-79,
+CVE-2026-105651,2026-10-07T20:27:41Z,"Ghost: Stored XSS via Bookmark Card Images",ghost,5.94.0,6.64.0,,HIGH,CWE-434;CWE-79,
+CVE-2026-105652,2026-10-07T20:27:22Z,"Ghost: Password Hash Ordering Disclosure in Ghost Admin API",ghost,0.7.2,6.64.0,,LOW,CWE-203;CWE-943,
+CVE-2026-105675,2026-10-07T20:26:19Z,"Ghost: Invite Token Disclosure in Ghost Admin API",ghost,4.39.0,6.64.0,,HIGH,CWE-203;CWE-943,
+CVE-2026-105676,2026-10-07T20:26:14Z,"Ghost: Path Traversal via Locale Setting",ghost,1.20.0,6.64.0,,MODERATE,CWE-22;CWE-73,
+CVE-2026-105677,2026-10-07T20:26:08Z,"Ghost: Remote Code Execution via Theme Translation Files",ghost,6.10.3,6.64.0,,HIGH,CWE-22;CWE-829;CWE-94,
+CVE-2026-105678,2026-10-07T20:26:03Z,"Ghost: Editors Could Promote Staff Users to Their Own Role",ghost,0.5.0,6.64.0,,MODERATE,CWE-269;CWE-863,
+CVE-2026-105679,2026-10-07T20:25:58Z,"Ghost: Stored XSS via File Uploads on Local Storage",ghost,6.22.1,6.64.0,,HIGH,CWE-434;CWE-79,
+CVE-2026-105680,2026-10-07T18:05:32Z,"Ghost: Authorization Issue Allowed Author Role to Delete any Post",ghost,5.81.0,6.60.0,,MODERATE,CWE-862,
+CVE-2026-105681,2026-10-07T16:18:00Z,"Ghost: Authorization Bypass in Comments Feature",ghost,5.9.0,6.44.1,,MODERATE,CWE-943,
+CVE-2026-105682,2026-10-07T16:17:57Z,"Ghost: Server-Side Request Forgery in Webhook Trigger",ghost,1.18.0,6.27.0,,LOW,CWE-918,
+CVE-2026-105683,2026-10-07T16:17:54Z,"Ghost: Path Traversal Vulnerability in Ghost ImageSize Service",ghost,6.14.0,6.27.0,,LOW,CWE-35,
+CVE-2026-105799,2026-10-06T15:32:34Z,"LangChain: RediSearch Filter Injection via Unescaped Tag/Text Values",@langchain/redis,0,1.1.1,,LOW,CWE-943,
+CVE-2026-105800,2026-10-06T15:33:33Z,"i18next-http-backend incomplete URL validation permits SSRF",i18next-http-backend,0,4.0.2,,LOW,CWE-74;CWE-918,
+CVE-2026-105804,2026-10-06T15:38:37Z,"Payload: Password hashes use insufficient PBKDF2 iterations",payload,3.0.0,3.90.0,,MODERATE,CWE-916,
+CVE-2026-105804,2026-10-06T15:38:37Z,"Payload: Password hashes use insufficient PBKDF2 iterations",payload,4.0.0-canary.0,4.0.0-canary.34,,MODERATE,CWE-916,
+CVE-2026-105805,2026-10-06T15:38:32Z,"Payload: Sort queries could expose protected field information",payload,0,3.88.0,,MODERATE,CWE-200;CWE-863,
+CVE-2026-105805,2026-10-06T15:38:32Z,"Payload: Sort queries could expose protected field information",payload,4.0.0-canary.0,4.0.0-canary.27,,MODERATE,CWE-200;CWE-863,
+CVE-2026-105806,2026-10-06T16:09:31Z,"Payload: Improper access control for MCP API keys",@payloadcms/plugin-mcp,3.61.0,3.88.0,,HIGH,CWE-862,
+CVE-2026-105844,2026-10-06T16:09:23Z,"Payload: Prototype pollution in Payload Import Export plugin","@payloadcms/plugin-import-export",3.0.0,3.88.0,,CRITICAL,CWE-1321,
+CVE-2026-105844,2026-10-06T16:09:23Z,"Payload: Prototype pollution in Payload Import Export plugin","@payloadcms/plugin-import-export",4.0.0-canary.0,4.0.0-canary.27,,CRITICAL,CWE-1321,
+CVE-2026-105845,2026-10-06T16:09:17Z,"Payload: SQL Injection in SQLite and Postgres",payload,3.0.0,3.88.0,,CRITICAL,CWE-89,
+CVE-2026-105845,2026-10-06T16:09:17Z,"Payload: SQL Injection in SQLite and Postgres",payload,4.0.0-canary.0,4.0.0-canary.27,,CRITICAL,CWE-89,
+CVE-2026-105846,2026-10-06T16:09:13Z,"Payload: Untrusted redirect URL parameter exploit",@payloadcms/next,3.31.0,3.88.0,,MODERATE,CWE-601,
+CVE-2026-105846,2026-10-06T16:09:13Z,"Payload: Untrusted redirect URL parameter exploit",@payloadcms/next,4.0.0-canary.0,4.0.0-canary.27,,MODERATE,CWE-601,
+CVE-2026-105846,2026-10-06T16:09:13Z,"Payload: Untrusted redirect URL parameter exploit",payload,3.40.0,3.88.0,,MODERATE,CWE-601,
+CVE-2026-105846,2026-10-06T16:09:13Z,"Payload: Untrusted redirect URL parameter exploit",payload,4.0.0-canary.0,4.0.0-canary.27,,MODERATE,CWE-601,
+CVE-2026-105847,2026-10-06T16:09:04Z,"Payload: Polymorphic join queries could disclose hidden fields",payload,3.0.0,3.90.0,,HIGH,CWE-200;CWE-639,
+CVE-2026-105847,2026-10-06T16:09:04Z,"Payload: Polymorphic join queries could disclose hidden fields",payload,4.0.0-canary.0,4.0.0-canary.34,,HIGH,CWE-200;CWE-639,
+CVE-2026-105848,2026-10-06T16:09:46Z,"Payload: Insufficient Access Control in Stripe REST Proxy","@payloadcms/plugin-stripe",0,3.90.0,,MODERATE,CWE-749;CWE-862,
+CVE-2026-105848,2026-10-06T16:09:46Z,"Payload: Insufficient Access Control in Stripe REST Proxy","@payloadcms/plugin-stripe",4.0.0-canary.0,4.0.0-canary.34,,MODERATE,CWE-749;CWE-862,
+CVE-2026-105849,2026-10-06T16:18:16Z,"Payload vulnerable to API key disclosure through ordinary document reads",payload,3.0.0,3.90.0,,HIGH,CWE-201;CWE-862,
+CVE-2026-105849,2026-10-06T16:18:16Z,"Payload vulnerable to API key disclosure through ordinary document reads",payload,4.0.0-canary.0,4.0.0-canary.34,,HIGH,CWE-201;CWE-862,
+CVE-2026-105850,2026-10-06T16:17:54Z,"Payload Ecommerce has an order confirmation validation issue","@payloadcms/plugin-ecommerce",0,3.90.0,,HIGH,CWE-837,
+CVE-2026-105850,2026-10-06T16:17:54Z,"Payload Ecommerce has an order confirmation validation issue","@payloadcms/plugin-ecommerce",4.0.0-canary.0,4.0.0-canary.34,,HIGH,CWE-837,
+CVE-2026-105852,2026-10-06T16:17:32Z,"Payload relationship-query authorization bypass",payload,0,3.90.0,,MODERATE,CWE-862,
+CVE-2026-105852,2026-10-06T16:17:32Z,"Payload relationship-query authorization bypass",payload,4.0.0-canary.0,4.0.0-canary.34,,MODERATE,CWE-862,
+CVE-2026-105853,2026-10-06T16:17:28Z,"Payload: Token refresh and password reset responses may expose restricted user fields",payload,3.0.0,3.90.0,,HIGH,CWE-200,
+CVE-2026-105853,2026-10-06T16:17:28Z,"Payload: Token refresh and password reset responses may expose restricted user fields",payload,4.0.0-canary.0,4.0.0-canary.34,,HIGH,CWE-200,
+CVE-2026-105854,2026-10-06T16:18:27Z,"Payload: ReDoS in Multipart Content-Type Validation",payload,3.0.0,3.90.0,,HIGH,CWE-1333;CWE-400,
+CVE-2026-105854,2026-10-06T16:18:27Z,"Payload: ReDoS in Multipart Content-Type Validation",payload,4.0.0-canary.0,4.0.0-canary.34,,HIGH,CWE-1333;CWE-400,
+CVE-2026-105855,2026-10-06T16:21:52Z,"Payload didn't enforce field-level password update restrictions",payload,0,3.90.0,,HIGH,CWE-284,
+CVE-2026-105855,2026-10-06T16:21:52Z,"Payload didn't enforce field-level password update restrictions",payload,4.0.0-canary.0,4.0.0-canary.34,,HIGH,CWE-284,
+CVE-2026-105856,2026-10-07T20:30:04Z,"Payload: SQL injection in SQLite/Postgres","@payloadcms/db-vercel-postgres",3.0.0,3.73.0,,HIGH,CWE-89,
+CVE-2026-105856,2026-10-07T20:30:04Z,"Payload: SQL injection in SQLite/Postgres",@payloadcms/db-d1-sqlite,3.0.0,3.90.0,,HIGH,CWE-89,
+CVE-2026-105856,2026-10-07T20:30:04Z,"Payload: SQL injection in SQLite/Postgres",@payloadcms/db-d1-sqlite,4.0.0-canary.0,4.0.0-canary.34,,HIGH,CWE-89,
+CVE-2026-105856,2026-10-07T20:30:04Z,"Payload: SQL injection in SQLite/Postgres",@payloadcms/db-postgres,3.0.0,3.73.0,,HIGH,CWE-89,
+CVE-2026-105856,2026-10-07T20:30:04Z,"Payload: SQL injection in SQLite/Postgres",@payloadcms/db-sqlite,3.0.0,3.90.0,,HIGH,CWE-89,
+CVE-2026-105856,2026-10-07T20:30:04Z,"Payload: SQL injection in SQLite/Postgres",@payloadcms/db-sqlite,4.0.0-canary.0,4.0.0-canary.34,,HIGH,CWE-89,
+CVE-2026-105857,2026-10-07T20:28:33Z,"Payload Form Builder has an RCE issue","@payloadcms/plugin-form-builder",0,3.90.0,,CRITICAL,CWE-1321;CWE-94,
+CVE-2026-105857,2026-10-07T20:28:33Z,"Payload Form Builder has an RCE issue","@payloadcms/plugin-form-builder",4.0.0-canary.0,4.0.0-canary.34,,CRITICAL,CWE-1321;CWE-94,
+CVE-2026-105858,2026-10-07T20:29:58Z,"Payload: Remote Code Execution through first-register",payload,0,3.90.0,,HIGH,CWE-1321;CWE-94,
+CVE-2026-105858,2026-10-07T20:29:58Z,"Payload: Remote Code Execution through first-register",payload,4.0.0-canary.0,4.0.0-canary.34,,HIGH,CWE-1321;CWE-94,
+CVE-2026-105859,2026-10-07T20:28:27Z,"Payload: Unauthorized update to collection documents",payload,0,3.90.0,,CRITICAL,CWE-639;CWE-862,
+CVE-2026-105859,2026-10-07T20:28:27Z,"Payload: Unauthorized update to collection documents",payload,4.0.0-canary.0,4.0.0-canary.34,,CRITICAL,CWE-639;CWE-862,
+CVE-2026-105860,2026-10-07T20:29:53Z,"Payload has a tenant authorization bypass in Multi-Tenant Plugin","@payloadcms/plugin-multi-tenant",0,3.90.0,,HIGH,CWE-862,
+CVE-2026-105860,2026-10-07T20:29:53Z,"Payload has a tenant authorization bypass in Multi-Tenant Plugin","@payloadcms/plugin-multi-tenant",4.0.0-canary.0,4.0.0-canary.34,,HIGH,CWE-862,
+CVE-2026-105861,2026-10-07T20:29:41Z,"Payload external upload trust validation issue",payload,3.0.0,3.90.0,,HIGH,CWE-200;CWE-346,
+CVE-2026-105861,2026-10-07T20:29:41Z,"Payload external upload trust validation issue",payload,4.0.0-canary.0,4.0.0-canary.34,,HIGH,CWE-200;CWE-346,
+CVE-2026-105862,2026-10-07T20:29:36Z,"Payload: Bypassed sanitization of user uploaded SVGs",payload,0,3.90.0,,HIGH,CWE-434;CWE-79,
+CVE-2026-105862,2026-10-07T20:29:36Z,"Payload: Bypassed sanitization of user uploaded SVGs",payload,4.0.0-canary.0,4.0.0-canary.34,,HIGH,CWE-434;CWE-79,
+CVE-2026-105863,2026-10-07T20:28:18Z,"Payload authentication token field handling issue",payload,3.0.0,3.90.0,,CRITICAL,CWE-290;CWE-915,
+CVE-2026-105863,2026-10-07T20:28:18Z,"Payload authentication token field handling issue",payload,4.0.0-canary.0,4.0.0-canary.34,,CRITICAL,CWE-290;CWE-915,
+CVE-2026-105864,2026-10-07T20:29:27Z,"@payloadcms/plugin-multi-tenant has a cross-tenant create issue","@payloadcms/plugin-multi-tenant",0,3.90.0,,MODERATE,CWE-863,
+CVE-2026-105864,2026-10-07T20:29:27Z,"@payloadcms/plugin-multi-tenant has a cross-tenant create issue","@payloadcms/plugin-multi-tenant",4.0.0-canary.0,4.0.0-canary.34,,MODERATE,CWE-863,
+CVE-2026-105865,2026-10-07T20:29:09Z,"Payload: Incomplete validation during the upload file lifecycle",payload,0,3.90.0,,HIGH,CWE-22;CWE-73,
+CVE-2026-105865,2026-10-07T20:29:09Z,"Payload: Incomplete validation during the upload file lifecycle",payload,4.0.0-canary.0,4.0.0-canary.34,,HIGH,CWE-22;CWE-73,
+CVE-2026-105866,2026-10-07T20:29:04Z,"Payload: Unauthenticated account-lockout denial of service",payload,0,3.90.0,,MODERATE,CWE-307;CWE-645,
+CVE-2026-105866,2026-10-07T20:29:04Z,"Payload: Unauthenticated account-lockout denial of service",payload,4.0.0-canary.0,4.0.0-canary.34,,MODERATE,CWE-307;CWE-645,
+CVE-2026-105867,2026-10-07T20:28:59Z,"Payload: Client uploads could overwrite S3 objects",@payloadcms/storage-s3,0,3.90.0,,HIGH,CWE-639,
+CVE-2026-105867,2026-10-07T20:28:59Z,"Payload: Client uploads could overwrite S3 objects",@payloadcms/storage-s3,4.0.0-canary.0,4.0.0-canary.34,,HIGH,CWE-639,
+CVE-2026-105868,2026-10-07T20:28:53Z,"Payload: Uploaded XML files could execute same-origin JavaScript",payload,0,3.90.0,,HIGH,CWE-434,
+CVE-2026-105868,2026-10-07T20:28:53Z,"Payload: Uploaded XML files could execute same-origin JavaScript",payload,4.0.0-canary.0,4.0.0-canary.34,,HIGH,CWE-434,
+CVE-2026-106100,2026-10-07T16:19:57Z,"Payload: Field-level write access bypass in Payload on MongoDB",@payloadcms/db-mongodb,0,3.87.0,,HIGH,CWE-639;CWE-915,
+CVE-2026-106100,2026-10-07T16:19:57Z,"Payload: Field-level write access bypass in Payload on MongoDB",@payloadcms/db-mongodb,4.0.0-canary.0,4.0.0-canary.20,,HIGH,CWE-639;CWE-915,
+CVE-2026-106101,2026-10-07T20:23:47Z,"Quasar Framework: DOM Clobbering in Quasar openURL() SafariViewController Integration Causes Client-Side Denial of Service",quasar,0,2.32.2,,LOW,CWE-843,
+CVE-2026-106102,2026-10-07T16:14:22Z,"Quasar Framework: Stored/Reflected XSS via unescaped SSR meta tag rendering in getHead()",quasar,0,2.22.0,,CRITICAL,CWE-116;CWE-79,
+CVE-2026-106103,2026-10-07T16:14:14Z,"Quasar Framework: Path Traversal / Arbitrary File Write via crafted Icon Genie profile",@quasar/icongenie,0,6.1.1,,HIGH,CWE-22;CWE-73,
+CVE-2026-106104,2026-10-07T16:14:31Z,"Quasar Framework: Super-linear regex backtracking on User-Agent lets one request stall a Quasar SSR server",quasar,0,2.23.3,,HIGH,CWE-1333,
+CVE-2026-106105,2026-10-07T16:16:18Z,"Quasar Framework: Development TLS private keys are cached with overly permissive filesystem permissions",@quasar/app-vite,0,3.3.0,,HIGH,CWE-732,
+CVE-2026-106105,2026-10-07T16:16:18Z,"Quasar Framework: Development TLS private keys are cached with overly permissive filesystem permissions",@quasar/cli,0,5.0.4,,HIGH,CWE-732,
+CVE-2026-106105,2026-10-07T16:16:18Z,"Quasar Framework: Development TLS private keys are cached with overly permissive filesystem permissions",@quasar/ssl-certificate,0,2.1.0,,HIGH,CWE-732,
+CVE-2026-106106,2026-10-07T16:16:12Z,"Quasar Framework: SSR/SSG dev error page discloses the full shell environment and its </script> escape is bypassable",@quasar/app-vite,0,3.3.0,,HIGH,CWE-497;CWE-79,
+CVE-2026-106106,2026-10-07T16:16:12Z,"Quasar Framework: SSR/SSG dev error page discloses the full shell environment and its </script> escape is bypassable",@quasar/render-ssr-error,0,2.2.4,,HIGH,CWE-497;CWE-79,
+CVE-2026-106107,2026-10-07T16:16:03Z,"Quasar Framework: App Vite SSR and SSG nonce attributes are not safely constrained",@quasar/app-vite,0,3.3.0,,HIGH,CWE-116;CWE-79,
+CVE-2026-106108,2026-10-07T16:14:41Z,"Quasar Framework: App Vite SSG page output paths can escape the configured distribution directory",@quasar/app-vite,3.1.0,3.3.0,,MODERATE,CWE-22,
+CVE-2026-106109,2026-10-07T16:14:35Z,"Quasar Framework: App Vite build cleanup can recursively remove unsafe configured output directories",@quasar/app-vite,1.0.0,3.3.0,,MODERATE,CWE-22;CWE-73,
+CVE-2026-106119,2026-10-08T17:52:22Z,"LangChain: MongoDBChatMessageHistory query injection can allow cross-session access",@langchain/mongodb,0,1.3.1,,MODERATE,CWE-943,
+CVE-2026-106120,2026-10-07T16:19:09Z,"LiquidJS: ownPropertyOnly bypass for inherited array indices in first/last/join/reverse/slice/compact, `.first`/`.last`, negative index, and for-loop iteration",liquidjs,0,10.27.2,,MODERATE,CWE-200,
+CVE-2026-106444,2026-10-08T17:52:37Z,"Handlebars: JavaScript Injection via Unsafe Inline Embedding of Precompiled Templates",handlebars,4.0.0,4.7.10,,MODERATE,CWE-116,
+CVE-2026-106445,2026-10-08T17:52:26Z,"Handlebars: JavaScript Injection via Own Property Check Bypass",handlebars,3.0.0,4.7.10,,CRITICAL,CWE-1289;CWE-184,
+CVE-2026-106446,2026-10-08T17:52:32Z,"Handlebars: JavaScript Injection via AST Type Confusion in compile (bypass of CVE-2026-33937)",handlebars,4.0.0,4.7.10,,CRITICAL,CWE-843;CWE-94,
+CVE-2026-106455,2026-10-07T20:25:19Z,"Backstage: Improper validation of MkDocs plugin configuration in TechDocs","@backstage/plugin-techdocs-node",0.11.12,1.14.7,,HIGH,CWE-918,
+CVE-2026-106455,2026-10-07T20:25:19Z,"Backstage: Improper validation of MkDocs plugin configuration in TechDocs","@backstage/plugin-techdocs-node",1.15.0,1.15.5,,HIGH,CWE-918,
+CVE-2026-106456,2026-10-07T20:25:13Z,"Backstage: Inconsistent credential enforcement for overlapping proxy routes","@backstage/plugin-proxy-backend",0.5.0,0.6.18,,MODERATE,CWE-863,
+CVE-2026-106457,2026-10-07T20:25:25Z,"Backstage: Insufficient audience validation in the Cloudflare Access auth provider","@backstage/plugin-auth-backend-module-cloudflare-access-provider",0.1.0,0.5.0,,MODERATE,CWE-287,
+CVE-2026-106458,2026-10-07T20:25:08Z," Backstage: Inconsistent repository filtering in Bitbucket Server catalog event updates","@backstage/plugin-catalog-backend-module-bitbucket-server",0.4.0,0.5.15,,MODERATE,CWE-863,
+CVE-2026-106459,2026-10-07T20:25:01Z,"Backstage: Improper input validation in Sentry scaffolder actions","@backstage/plugin-scaffolder-backend-module-sentry",0.3.0,0.3.8,,HIGH,CWE-200;CWE-918,
+CVE-2026-106460,2026-10-07T20:23:52Z,"Backstage: Explicit negative email verification can be ignored during shared OAuth profile normalization","@backstage/plugin-auth-node",0.3.0,0.6.15,,MODERATE,CWE-287,
+CVE-2026-106460,2026-10-07T20:23:52Z,"Backstage: Explicit negative email verification can be ignored during shared OAuth profile normalization","@backstage/plugin-auth-node",0.7.0,0.7.5,,MODERATE,CWE-287,
+CVE-2026-106461,2026-10-07T17:58:55Z,"Backstage: Incorrect authorization in scaffolder task listing","@backstage/plugin-scaffolder-backend",0,4.1.0,,MODERATE,CWE-863,
+CVE-2026-106462,2026-10-07T18:01:53Z,"Backstage's scaffolder credential handling may allow unintended GitHub authentication fallback","@backstage/plugin-scaffolder-backend",0,4.1.0,,MODERATE,CWE-441;CWE-863,
+CVE-2026-106462,2026-10-07T18:01:53Z,"Backstage's scaffolder credential handling may allow unintended GitHub authentication fallback","@backstage/plugin-scaffolder-backend-module-azure",0,0.2.25,,MODERATE,CWE-441;CWE-863,
+CVE-2026-106462,2026-10-07T18:01:53Z,"Backstage's scaffolder credential handling may allow unintended GitHub authentication fallback","@backstage/plugin-scaffolder-backend-module-bitbucket-cloud",0,0.3.10,,MODERATE,CWE-441;CWE-863,
+CVE-2026-106462,2026-10-07T18:01:53Z,"Backstage's scaffolder credential handling may allow unintended GitHub authentication fallback","@backstage/plugin-scaffolder-backend-module-bitbucket-server",0,0.2.25,,MODERATE,CWE-441;CWE-863,
+CVE-2026-106462,2026-10-07T18:01:53Z,"Backstage's scaffolder credential handling may allow unintended GitHub authentication fallback","@backstage/plugin-scaffolder-backend-module-github",0,0.9.13,,MODERATE,CWE-441;CWE-863,
+CVE-2026-106462,2026-10-07T18:01:53Z,"Backstage's scaffolder credential handling may allow unintended GitHub authentication fallback","@backstage/plugin-scaffolder-backend-module-gitlab",0,0.11.10,,MODERATE,CWE-441;CWE-863,
+CVE-2026-106463,2026-10-07T18:01:39Z,"Backstage has improper authorization in GitLab organizational user ingestion","@backstage/plugin-catalog-backend-module-gitlab",0,0.8.7,,MODERATE,CWE-863,
+CVE-2026-106486,2026-10-07T18:01:26Z,"Backstage has iImproper filesystem validation in Bitbucket pull-request scaffolder actions","@backstage/plugin-scaffolder-backend-module-bitbucket-cloud",0,0.3.10,,HIGH,CWE-22;CWE-59,
+CVE-2026-106486,2026-10-07T18:01:26Z,"Backstage has iImproper filesystem validation in Bitbucket pull-request scaffolder actions","@backstage/plugin-scaffolder-backend-module-bitbucket-server",0,0.2.25,,HIGH,CWE-22;CWE-59,
+CVE-2026-106487,2026-10-07T18:01:08Z,"Backstage: Unsupported catalog cluster authentication mode in kubernetes backend","@backstage/plugin-kubernetes-backend",0,0.21.10,,LOW,CWE-441,
+CVE-2026-106488,2026-10-07T18:01:02Z,"Backstage: Improper authentication in the OIDC provider","@backstage/plugin-auth-backend-module-oidc-provider",0,0.4.20,,HIGH,CWE-287,
+CVE-2026-106489,2026-10-07T18:00:06Z,"Backstage: Improper authorization enforcement for TechDocs static content","@backstage/plugin-techdocs-backend",0,2.2.4,,MODERATE,CWE-22;CWE-862,
+CVE-2026-106490,2026-10-07T18:00:00Z,"Backstage: Improper input validation in TechDocs static content requests","@backstage/plugin-techdocs-backend",0,2.2.4,,MODERATE,CWE-22;CWE-23,
+CVE-2026-106491,2026-10-07T17:59:49Z,"Backstage: Improper input validation in proxy-backend","@backstage/plugin-proxy-backend",0,0.6.17,,MODERATE,CWE-20;CWE-22,
+CVE-2026-106492,2026-10-07T17:59:43Z,"Backstage: Improper preservation of access restrictions during service credential delegation","@backstage/backend-defaults",0,0.17.8,,HIGH,CWE-269;CWE-863,
+CVE-2026-106493,2026-10-07T17:59:55Z,"Backstage: Cloud storage catalog locations may cross configured storage boundaries","@backstage/backend-defaults",0,0.17.8,,LOW,CWE-22,
+CVE-2026-106493,2026-10-07T17:59:55Z,"Backstage: Cloud storage catalog locations may cross configured storage boundaries","@backstage/plugin-catalog-backend-module-aws",0,0.4.27,,LOW,CWE-22,
+CVE-2026-106493,2026-10-07T17:59:55Z,"Backstage: Cloud storage catalog locations may cross configured storage boundaries","@backstage/plugin-catalog-backend-module-azure",0,0.3.21,,LOW,CWE-22,
+CVE-2026-106494,2026-10-07T17:59:38Z,"Backstage: Improper input validation in cloud storage URL readers","@backstage/backend-defaults",0,0.17.8,,MODERATE,CWE-22;CWE-73,
+CVE-2026-106495,2026-10-15T20:21:54Z,"Backstage: Improper access control in backend action invocation","@backstage/backend-defaults",0,0.17.8,,MODERATE,CWE-284,
+CVE-2026-106496,2026-10-07T17:59:32Z,"Backstage: Inconsistent enforcement of allowed location types during catalog processing","@backstage/plugin-catalog-backend",0,3.9.1,,LOW,CWE-22;CWE-863,
+CVE-2026-106498,2026-10-07T17:59:24Z,"Backstage: Improper URL validation in catalog entity placeholder resolution","@backstage/plugin-catalog-backend",0,3.9.1,,HIGH,CWE-863;CWE-918,
+CVE-2026-106499,2026-10-07T17:59:14Z,"Backstage: Secret-derived values may be exposed in scaffolder task logs","@backstage/plugin-scaffolder-backend",0,4.1.0,,MODERATE,CWE-532,
+CVE-2026-106500,2026-10-07T17:59:02Z,"Backstage: Improper task state validation in Scaffolder backend","@backstage/plugin-scaffolder-backend",0,4.1.0,,HIGH,CWE-362;CWE-59,
+CVE-2026-106501,2026-10-07T17:59:19Z,"Backstage: Sensitive information exposure in Scaffolder","@backstage/plugin-scaffolder-backend",0,3.3.1,,CRITICAL,CWE-200;CWE-201,
+CVE-2026-106501,2026-10-07T17:59:19Z,"Backstage: Sensitive information exposure in Scaffolder","@backstage/plugin-scaffolder-backend",3.4.0,3.4.1,,CRITICAL,CWE-200;CWE-201,
+CVE-2026-106501,2026-10-07T17:59:19Z,"Backstage: Sensitive information exposure in Scaffolder","@backstage/plugin-scaffolder-backend",4.0.0,4.0.3,,CRITICAL,CWE-200;CWE-201,
+CVE-2026-106501,2026-10-07T17:59:19Z,"Backstage: Sensitive information exposure in Scaffolder","@backstage/plugin-scaffolder-backend",4.0.4,4.1.0,,CRITICAL,CWE-200;CWE-201,
+CVE-2026-106502,2026-10-07T16:24:51Z,"Backstage may expose sensitive information in Scaffolder task failure events","@backstage/plugin-scaffolder-backend",0,4.1.0,,MODERATE,CWE-532,
+CVE-2026-106503,2026-10-07T17:59:08Z,"Backstage: Scaffolder action input authorization bypass","@backstage/plugin-scaffolder-backend",0,3.3.1,,HIGH,CWE-178;CWE-284,
+CVE-2026-106503,2026-10-07T17:59:08Z,"Backstage: Scaffolder action input authorization bypass","@backstage/plugin-scaffolder-backend",3.4.0,3.4.1,,HIGH,CWE-178;CWE-284,
+CVE-2026-106503,2026-10-07T17:59:08Z,"Backstage: Scaffolder action input authorization bypass","@backstage/plugin-scaffolder-backend",4.0.0,4.0.3,,HIGH,CWE-178;CWE-284,
+CVE-2026-106503,2026-10-07T17:59:08Z,"Backstage: Scaffolder action input authorization bypass","@backstage/plugin-scaffolder-backend",4.0.4,4.1.0,,HIGH,CWE-178;CWE-284,
+CVE-2026-106504,2026-10-07T16:24:29Z,"Backstage has sensitive information exposure in scaffolder task logs","@backstage/plugin-scaffolder-backend",0,4.1.0,,MODERATE,CWE-532,
+CVE-2026-106505,2026-10-07T16:23:52Z,"Backstage: Bypass of MkDocs configuration sanitizer in TechDocs backend","@backstage/plugin-techdocs-node",0,1.15.4,,HIGH,CWE-426;CWE-436,
+CVE-2026-106506,2026-10-07T16:24:12Z,"Backstage has improper input validation in scaffolder task list ordering","@backstage/plugin-scaffolder-backend",0,4.1.0,,MODERATE,CWE-202;CWE-203,
+CVE-2026-106508,2026-10-07T16:23:46Z,"Backstage has potential file exposure through local TechDocs publisher","@backstage/plugin-techdocs-node",0,1.15.4,,MODERATE,CWE-22;CWE-59,
+CVE-2026-106509,2026-10-07T16:23:30Z,"Backstage: Improper validation of MkDocs theme configuration in TechDocs","@backstage/plugin-techdocs-node",0,1.15.4,,HIGH,CWE-1336;CWE-94,
+CVE-2026-106510,2026-10-07T18:03:22Z,"Backstage: Remote code execution via crafted markdown_extensions in TechDocs mkdocs.yml","@backstage/plugin-techdocs-node",0,1.15.4,,HIGH,CWE-183;CWE-470,
+CVE-2026-106557,2026-10-07T16:22:58Z,"Backstage has improper input validation in TechDocs Markdown extension configuration","@backstage/plugin-techdocs-node",0,1.15.4,,HIGH,CWE-22;CWE-918,
+CVE-2026-106558,2026-10-07T18:03:12Z,"Backstage: Improper validation of TechDocs MkDocs configuration","@backstage/plugin-techdocs-node",0,1.15.4,,HIGH,CWE-502,
+CVE-2026-106559,2026-10-07T18:03:06Z,"Backstage: Improper input validation in Confluence to Markdown scaffolder module","@backstage/plugin-scaffolder-backend-module-confluence-to-markdown",0,0.3.25,,MODERATE,CWE-22;CWE-73,
+CVE-2026-106560,2026-10-07T18:02:59Z,"Backstage: Improper repository path validation in a Scaffolder backend module","@backstage/plugin-scaffolder-backend-module-confluence-to-markdown",0,0.3.25,,HIGH,CWE-22,
+CVE-2026-106561,2026-10-07T18:02:30Z,"Backstage has a sensitive information disclosure in Kubernetes resource queries","@backstage/plugin-kubernetes-backend",0,0.21.9,,MODERATE,CWE-200;CWE-863,
+CVE-2026-106562,2026-10-07T18:02:52Z,"Backstage has incorrect authorization in search engine permission filtering","@backstage/plugin-search-backend",0,2.1.6,,MODERATE,CWE-754;CWE-863,
+CVE-2026-106562,2026-10-07T18:02:52Z,"Backstage has incorrect authorization in search engine permission filtering","@backstage/plugin-search-backend-module-elasticsearch",0,1.8.7,,MODERATE,CWE-754;CWE-863,
+CVE-2026-106563,2026-10-07T18:02:37Z,"Backstage: Improper entity validation in deprecated Kubernetes services endpoint","@backstage/plugin-kubernetes-backend",0,0.21.8,,MODERATE,CWE-20;CWE-862,
 CVE-2026-10690,2026-06-03T00:30:27Z,"DesktopCommanderMCP is vulnerable to SSRF","@wonderwhy-er/desktop-commander",0,,0.2.37,LOW,CWE-918,
 CVE-2026-10691,2026-06-03T00:30:27Z,"DesktopCommanderMCP is vulnerable to Uncontrolled Resource Consumption","@wonderwhy-er/desktop-commander",0,0.2.39,,LOW,CWE-400,
+CVE-2026-107296,2026-10-08T17:39:30Z,"msgpack5: Decoding negative int64 values mutates the input buffer",msgpack5,0,6.1.0,,LOW,CWE-471,
+CVE-2026-107297,2026-10-08T17:39:46Z,"msgpack5: Quadratic parsing in the streaming decoder",msgpack5,0,6.1.0,,MODERATE,CWE-407,
+CVE-2026-107298,2026-10-08T17:39:51Z,"msgpack5: Deeply nested input can exhaust the decoder stack",msgpack5,0,6.1.0,,MODERATE,CWE-674,
+CVE-2026-107299,2026-10-08T17:40:01Z,"msgpack5: Reserved byte can cause unbounded stream buffering",msgpack5,0,6.1.0,,MODERATE,CWE-228,
+CVE-2026-107300,2026-10-08T17:40:06Z,"msgpack5: Many buffered values can exhaust the streaming decoder stack",msgpack5,0,6.1.0,,HIGH,CWE-674,
+CVE-2026-107301,2026-10-08T17:39:57Z,"msgpack5: Partial options disable prototype protection",msgpack5,0,6.1.0,,MODERATE,CWE-1321,
+CVE-2026-107302,2026-10-08T17:40:10Z,"msgpack5: Truncated map32 headers throw an unexpected error",msgpack5,0,6.1.0,,HIGH,CWE-125,
+CVE-2026-107303,2026-10-08T17:40:29Z,"JHipster: Generated Applications Allow Stored XSS via Unrestricted Blob ContentType Opened as Same-Origin Blob",generator-jhipster,0,9.4.0,,HIGH,CWE-79,
+CVE-2026-107303,2026-10-08T17:40:29Z,"JHipster: Generated Applications Allow Stored XSS via Unrestricted Blob ContentType Opened as Same-Origin Blob",react-jhipster,0,1.1.0,,HIGH,CWE-79,
 CVE-2026-10732,2026-06-05T09:33:46Z,"decompress: Arbitrary File Write via Archive Extraction (Zip Slip)",decompress,0,,4.2.1,MODERATE,CWE-22;CWE-29,
+CVE-2026-107375,2026-10-08T17:40:37Z,"JHipster: SQL Injection in the Parameter of JHipster-Generated Reactive (WebFlux + R2DBC) Applicationssort",generator-jhipster,7.0.0,9.4.0,,HIGH,CWE-89,
+CVE-2026-107382,2026-10-08T19:42:04Z,"MariaDB Connector/Node.js: Uncaught exception crashes the client during ed25519 authentication with zero-configuration TLS",mariadb,3.3.0,3.5.4,,MODERATE,CWE-248,
+CVE-2026-107383,2026-10-08T19:42:11Z,"MariaDB Connector/Node.js exposes uninitialized process memory through malformed GeoJSON parameters",mariadb,0,3.2.5,,HIGH,CWE-200,
+CVE-2026-107383,2026-10-08T19:42:11Z,"MariaDB Connector/Node.js exposes uninitialized process memory through malformed GeoJSON parameters",mariadb,3.3.0,3.3.4,,HIGH,CWE-200,
+CVE-2026-107383,2026-10-08T19:42:11Z,"MariaDB Connector/Node.js exposes uninitialized process memory through malformed GeoJSON parameters",mariadb,3.4.0,3.4.7,,HIGH,CWE-200,
+CVE-2026-107383,2026-10-08T19:42:11Z,"MariaDB Connector/Node.js exposes uninitialized process memory through malformed GeoJSON parameters",mariadb,3.5.0-rc.0,3.5.4,,HIGH,CWE-200,
+CVE-2026-107384,2026-10-08T19:42:23Z,"MariaDB Connector/Node.js: SQL injection through object keys in SET expansion (permitSetMultiParamEntries)",mariadb,3.2.0,3.2.5,,HIGH,CWE-89,
+CVE-2026-107384,2026-10-08T19:42:23Z,"MariaDB Connector/Node.js: SQL injection through object keys in SET expansion (permitSetMultiParamEntries)",mariadb,3.3.0,3.3.4,,HIGH,CWE-89,
+CVE-2026-107384,2026-10-08T19:42:23Z,"MariaDB Connector/Node.js: SQL injection through object keys in SET expansion (permitSetMultiParamEntries)",mariadb,3.4.0,3.4.7,,HIGH,CWE-89,
+CVE-2026-107384,2026-10-08T19:42:23Z,"MariaDB Connector/Node.js: SQL injection through object keys in SET expansion (permitSetMultiParamEntries)",mariadb,3.5.0-rc.0,3.5.4,,HIGH,CWE-89,
+CVE-2026-107385,2026-10-08T19:42:28Z,"MariaDB Connector/Node.js: SQL injection in the text protocol when the session uses NO_BACKSLASH_ESCAPES",mariadb,0,3.2.5,,HIGH,CWE-89,
+CVE-2026-107385,2026-10-08T19:42:28Z,"MariaDB Connector/Node.js: SQL injection in the text protocol when the session uses NO_BACKSLASH_ESCAPES",mariadb,3.3.0,3.3.4,,HIGH,CWE-89,
+CVE-2026-107385,2026-10-08T19:42:28Z,"MariaDB Connector/Node.js: SQL injection in the text protocol when the session uses NO_BACKSLASH_ESCAPES",mariadb,3.4.0,3.4.7,,HIGH,CWE-89,
+CVE-2026-107385,2026-10-08T19:42:28Z,"MariaDB Connector/Node.js: SQL injection in the text protocol when the session uses NO_BACKSLASH_ESCAPES",mariadb,3.5.0-rc.0,3.5.4,,HIGH,CWE-89,
+CVE-2026-107387,2026-10-08T19:43:22Z,"music-metadata: Uncontrolled memory allocation in APEv2 parser",music-metadata,0,11.16.0,,MODERATE,CWE-789,
+CVE-2026-107388,2026-10-08T19:43:17Z,"music-metadata: ID3v2 tag size not validated before allocation, causing memory exhaustion DoS",music-metadata,0,11.16.0,,MODERATE,CWE-789,
+CVE-2026-107389,2026-10-08T19:43:09Z,"music-metadata: EBML parser trusts element lengths, allowing memory exhaustion or process abort",music-metadata,0,11.16.0,,MODERATE,CWE-789,
+CVE-2026-107391,2026-10-08T19:43:25Z,"music-metadata: MP4 stsd sample-entry size==0 causes a synchronous infinite loop (DoS) — unreleased regression on master",music-metadata,0,11.16.0,,MODERATE,CWE-400;CWE-835,
+CVE-2026-107392,2026-10-08T19:40:45Z,"music-metadata: uncatchable process crash parsing a crafted `.dsf` (residual of GHSA-v6c2-xwv6-8xf7)",music-metadata,0,11.15.0,,MODERATE,CWE-248;CWE-400,
+CVE-2026-107718,2026-10-08T22:09:06Z,"AdonisJS: Unencoded route parameters can produce open redirects",@adonisjs/http-server,0,8.2.3,,MODERATE,CWE-601,
+CVE-2026-107718,2026-10-08T22:09:06Z,"AdonisJS: Unencoded route parameters can produce open redirects",@adonisjs/http-server,9.0.0,9.3.0,,MODERATE,CWE-601,
+CVE-2026-107719,2026-10-08T22:10:35Z,"fast-jwt: Verifier cache accepts expired JWTs without iat.",fast-jwt,0,6.3.4,,MODERATE,CWE-613,
+CVE-2026-107720,2026-10-08T22:02:12Z,"fast-jwt: createVerifier accepts unsigned JWTs when key is '' or null and algorithms is explicitly set",fast-jwt,0,6.3.1,,HIGH,CWE-20;CWE-347,
+CVE-2026-107721,2026-10-08T22:02:02Z,"fast-jwt clockTolerance: Infinity silently bypasses both exp and nbf validation (and persists in the verifier cache)",fast-jwt,0,6.3.0,,MODERATE,CWE-613;CWE-682,
+CVE-2026-107722,2026-10-08T22:02:07Z,"fast-jwt: Incomplete patch of CVE-2026-34950: Non-whitespace key-prefix re-enables RSA→HS256 algorithm confusion",fast-jwt,6.2.0,6.3.0,,CRITICAL,CWE-347,
+CVE-2026-107723,2026-10-08T22:01:58Z,"fast-jwt : Silent claim-validator bypass when JWT payload is a JSON array",fast-jwt,0,6.3.0,,HIGH,CWE-1287,
+CVE-2026-107724,2026-10-08T22:01:53Z,"fast-jwt treats raw public JWK JSON as an HMAC secret, enabling HS256 token forgery",fast-jwt,6.2.4,6.3.0,,HIGH,CWE-347,
 CVE-2026-10802,2026-06-04T12:30:26Z,"Keystone: GraphQL API Endpoint Lacks Query Depth Limits",@keystone-6/core,0,,6.5.3,LOW,CWE-400,
+CVE-2026-108259,2026-10-09T20:56:52Z,"Tina: Code injection via unescaped Git branch name in generated client source",@tinacms/cli,0,3.0.0,,HIGH,CWE-94,
+CVE-2026-108260,2026-10-09T20:56:45Z,"@tinacms/web-components: `tina-markdown` writes rich-text link URLs into `href` without scheme validation, allowing stored XSS",@tinacms/web-components,0,0.2.1,,HIGH,CWE-79;CWE-83,
+CVE-2026-108261,2026-10-09T20:56:48Z,"TinaCMS admin preview iframe loads an attacker-controlled origin from the URL fragment",@tinacms/app,0,2.5.14,,CRITICAL,CWE-346;CWE-441;CWE-601,
+CVE-2026-108261,2026-10-09T20:56:48Z,"TinaCMS admin preview iframe loads an attacker-controlled origin from the URL fragment",tinacms,0,3.14.0,,CRITICAL,CWE-346;CWE-441;CWE-601,
 CVE-2026-11330,2026-06-05T15:32:23Z,"claude-mem: The computeObservationContentHash Function is Vulnerable to Hash Collision",claude-mem,0,12.0.0,,LOW,CWE-327,
 CVE-2026-11393,2026-07-29T16:10:46Z,"AgentCore CLI Bedrock Agent Import Vulnerable to Code Injection via Improper Triple-Quote Escaping",@aws/agentcore,0.3.0-preview.7.0,,0.3.0-preview.9.0,HIGH,CWE-94,
 CVE-2026-11393,2026-07-29T16:10:46Z,"AgentCore CLI Bedrock Agent Import Vulnerable to Code Injection via Improper Triple-Quote Escaping",@aws/agentcore,0.4.0,0.14.2,,HIGH,CWE-94,
@@ -4967,7 +5226,7 @@ CVE-2026-25253,2026-02-02T23:41:05Z,"OpenClaw/Clawdbot has 1-Click RCE via Authe
 CVE-2026-25474,2026-02-17T18:46:16Z,"OpenClaw has a Telegram webhook request forgery (missing `channels.telegram.webhookSecret`) → auth bypass",openclaw,0,2026.2.1,,HIGH,CWE-345,
 CVE-2026-25475,2026-02-04T19:02:51Z,"OpenClaw Vulnerable to Local File Inclusion via MEDIA: Path Extraction",openclaw,0,2026.1.30,,MODERATE,CWE-200;CWE-22,
 CVE-2026-25520,2026-02-05T20:41:28Z,"@nyariv/sandboxjs has a Sandbox Escape issue",@nyariv/sandboxjs,0,0.8.29,,CRITICAL,CWE-74,
-CVE-2026-25521,2026-02-02T22:21:54Z,"locutus is vulnerable to Prototype Pollution",locutus,2.0.12,2.0.39,,CRITICAL,CWE-1321,
+CVE-2026-25521,2026-02-02T22:21:54Z,"locutus is vulnerable to Prototype Pollution",locutus,2.0.12,2.0.39,,CRITICAL,CWE-1321;CWE-915,
 CVE-2026-25528,2026-02-09T20:36:59Z,"LangSmith Client SDK Affected by Server-Side Request Forgery via Tracing Header Injection",langsmith,0.3.41,0.4.6,,MODERATE,CWE-918,
 CVE-2026-25533,2026-02-05T17:49:35Z,"Sandbox escape via infinite recursion and error objects",@enclave-vm/core,0,2.10.1,,MODERATE,CWE-835,
 CVE-2026-25533,2026-02-05T17:49:35Z,"Sandbox escape via infinite recursion and error objects",enclave-vm,0,,2.7.0,MODERATE,CWE-835,
@@ -5608,7 +5867,7 @@ CVE-2026-33151,2026-03-18T17:26:14Z,"socket.io allows an unbounded number of bin
 CVE-2026-33163,2026-03-18T19:49:27Z,"Parse Server leaks protected fields via LiveQuery afterEvent trigger",parse-server,0,8.6.50,,HIGH,CWE-200,
 CVE-2026-33163,2026-03-18T19:49:27Z,"Parse Server leaks protected fields via LiveQuery afterEvent trigger",parse-server,9.0.0,9.6.0-alpha.35,,HIGH,CWE-200,
 CVE-2026-33226,2026-03-18T20:22:11Z,"Budibase Unrestricted Server-Side Request Forgery (SSRF) via REST Datasource Query Preview",budibase,0,,3.30.6,HIGH,CWE-918,
-CVE-2026-33228,2026-03-19T17:43:54Z,"Prototype Pollution via parse() in NodeJS flatted",flatted,0,3.4.2,,HIGH,CWE-1321,
+CVE-2026-33228,2026-03-19T17:43:54Z,"Prototype Pollution via parse() in NodeJS flatted",flatted,0,3.4.2,,HIGH,CWE-1321;CWE-915,
 CVE-2026-33244,2026-06-03T20:33:01Z,"React Router has stored XSS via unescaped Location header in prerendered redirect HTML",react-router,7.5.1,7.13.2,,MODERATE,CWE-79,
 CVE-2026-33245,2026-06-03T20:33:32Z,"React Router vulnerable to XSS in unstable RSC redirect handling via javascript: redirect targets",react-router,7.7.0,7.13.2,,HIGH,CWE-79,
 CVE-2026-33285,2026-03-25T17:40:53Z,"LiquidJS: memoryLimit Bypass through Negative Range Values Leads to Process Crash",liquidjs,0,,10.24.0,HIGH,CWE-20;CWE-400,
@@ -7476,6 +7735,7 @@ CVE-2026-57141,2026-06-18T14:26:37Z,"PraisonAI: Remote Code Execution via Sandbo
 CVE-2026-57439,2026-09-24T19:24:30Z,"CyberChef: Prototype pollution in Series Chart operation",cyberchef,0,11.2.0,,MODERATE,CWE-1321;CWE-79,
 CVE-2026-57441,2026-06-18T14:30:43Z,"MCPVault: PathFilter restricted-directory deny-list bypass via case and trailing dot/space equivalence",@bitbonsai/mcpvault,0,0.11.4,,MODERATE,CWE-178;CWE-41,
 CVE-2026-57442,2026-06-19T21:42:24Z,"MCPVault: PathFilter restricted directories (.git/.obsidian/node_modules) only denied at vault root, not nested",@bitbonsai/mcpvault,0,0.11.5,,MODERATE,CWE-22;CWE-538,
+CVE-2026-57449,2026-10-07T14:00:45Z,"Actual Sync Server: CORS Proxy GitHub API Allowlist Prefix Bypass Leaks Private Repositories Through the Server GitHub Token",@actual-app/sync-server,0,26.7.0,,HIGH,CWE-200;CWE-284;CWE-863,
 CVE-2026-57494,2026-06-18T17:20:55Z,"AgenticMail: Cross-agent task authorization bypass in AgenticMail API",@agenticmail/api,0,0.9.64,,HIGH,CWE-639;CWE-862,
 CVE-2026-57495,2026-06-18T17:21:27Z,"AgenticMail: Unauthenticated inbound mail triggers bypassPermissions resume of the operator's Claude Code session (bridge-wake)",@agenticmail/claudecode,0,0.2.39,,HIGH,CWE-306,
 CVE-2026-57495,2026-06-18T17:21:27Z,"AgenticMail: Unauthenticated inbound mail triggers bypassPermissions resume of the operator's Claude Code session (bridge-wake)",@agenticmail/codex,0,0.1.33,,HIGH,CWE-306,
@@ -7572,6 +7832,7 @@ CVE-2026-59992,2026-08-19T21:56:30Z,"Tina: Broken Access Control: arbitrary buck
 CVE-2026-59992,2026-08-19T21:56:30Z,"Tina: Broken Access Control: arbitrary bucket-key write/delete in `next-tinacms-s3` (and sibling production media adapters)",next-tinacms-dos,0,23.0.4,,MODERATE,CWE-639;CWE-862,
 CVE-2026-59992,2026-08-19T21:56:30Z,"Tina: Broken Access Control: arbitrary bucket-key write/delete in `next-tinacms-s3` (and sibling production media adapters)",next-tinacms-s3,0,23.0.4,,MODERATE,CWE-639;CWE-862,
 CVE-2026-6011,2026-04-10T06:31:38Z,"OpenClaw vulnerable to SSRF in src/agents/tools/web-fetch.ts",openclaw,0,2026.1.29,,LOW,CWE-918,
+CVE-2026-61426,2026-10-08T22:01:29Z,"PraisonAI: AgentOS defaults to network-exposed no-auth mode, allowing unauthenticated agent invocation and instruction disclosure",praisonai,0,1.7.3,,HIGH,CWE-200;CWE-284;CWE-306,
 CVE-2026-61534,2026-09-11T22:11:38Z,"yayson: Prototype pollution in Store/LegacyStore deserialization",yayson,0,4.3.0,,CRITICAL,CWE-1321,
 CVE-2026-61556,2026-09-03T17:45:26Z,"LiquidJS has an infinite loop vulnerability in its `strip_html` filter",liquidjs,10.26.0,10.27.1,,HIGH,CWE-835,
 CVE-2026-61559,2026-09-15T20:57:28Z,"@zereight/mcp-gitlab Vulnerable to Server-Side Request Forgery",@zereight/mcp-gitlab,0.0.1,2.1.27,,CRITICAL,CWE-918,
@@ -7966,6 +8227,10 @@ CVE-2026-73425,2026-07-20T23:24:34Z,"@astrojs/netlify generates an overly-broad
 CVE-2026-73426,2026-03-12T17:29:30Z,"Trix has a Stored XSS vulnerability through serialized attributes",trix,0,2.1.17,,MODERATE,CWE-79,
 CVE-2026-73427,2026-03-29T15:22:17Z,"Trix is vulnerable to XSS through JSON deserialization bypass in drag-and-drop (Level0InputController)",trix,0,2.1.18,,LOW,CWE-79,
 CVE-2026-73428,2026-07-24T16:18:01Z,"Trix: Stored XSS via HTMLParser attribute injection on paste",trix,0,2.1.18,,MODERATE,CWE-79,
+CVE-2026-73483,2026-10-07T16:17:02Z,"Flowise NodeVM sandbox escape via puppeteer allowlist - authenticated RCE and arbitrary file read via Chromium",flowise,0,3.1.3,,CRITICAL,,
+CVE-2026-73483,2026-10-07T16:17:02Z,"Flowise NodeVM sandbox escape via puppeteer allowlist - authenticated RCE and arbitrary file read via Chromium",flowise-components,0,3.1.3,,CRITICAL,,
+CVE-2026-73487,2026-10-07T16:17:21Z,"Flowise Prompt Injection to RCE and SSRF via CSV/Airtable Agent Python Validator Bypass",flowise,0,3.1.3,,CRITICAL,CWE-94,
+CVE-2026-73487,2026-10-07T16:17:21Z,"Flowise Prompt Injection to RCE and SSRF via CSV/Airtable Agent Python Validator Bypass",flowise-components,0,3.1.3,,CRITICAL,CWE-94,
 CVE-2026-73561,2026-07-24T21:47:29Z,"@anephenix/hub: Unauthenticated WebSocket RPC Waiter Resource Exhaustion",@anephenix/hub,0,0.2.16,,HIGH,CWE-400,
 CVE-2026-73562,2026-07-24T16:22:34Z,"Mongoose: Prototype pollution in mongoose update casting via __proto__-prefixed dotted path (Schema._getSchema/path getter)",mongoose,0,6.13.10,,MODERATE,CWE-1321,
 CVE-2026-73562,2026-07-24T16:22:34Z,"Mongoose: Prototype pollution in mongoose update casting via __proto__-prefixed dotted path (Schema._getSchema/path getter)",mongoose,7.0.0,7.8.10,,MODERATE,CWE-1321,
@@ -7994,6 +8259,7 @@ CVE-2026-73844,2026-09-03T14:49:10Z,"CKAN MCP Server: Information disclosure via
 CVE-2026-73845,2026-09-02T14:52:21Z,"CKAN MCP Server: MQA server allowlist bypass via unanchored regex (`isValidMqaServer`)","@aborruso/ckan-mcp-server",0,0.4.112,,MODERATE,CWE-20;CWE-625;CWE-918,
 CVE-2026-73846,2026-09-03T14:49:22Z,"CKAN MCP Server: Cache-key canonicalization collision enables cache confusion / poisoning","@aborruso/ckan-mcp-server",0,0.4.112,,MODERATE,CWE-345;CWE-436,
 CVE-2026-7446,2026-04-30T00:31:22Z,"mcp-server-semgrep has a Command Injection issue",mcp-server-semgrep,0,1.0.1,,MODERATE,CWE-77,
+CVE-2026-74866,2026-10-05T22:33:44Z,"@fastify/busboy vulnerable to CRLF injection via multipart Content-Disposition filename and name",@fastify/busboy,0,3.2.2,,MODERATE,CWE-93,
 CVE-2026-75510,2026-09-22T20:34:35Z,"Novu: Stored XSS in In-App Inbox via notification redirect.url javascript: scheme",@novu/js,0,3.18.0,,MODERATE,CWE-79,
 CVE-2026-75604,2026-09-08T20:51:40Z,"Next.js: Unauthenticated Remote Code Execution on windows-hosted servers",next,13.4.0,15.5.24,,CRITICAL,CWE-22,
 CVE-2026-75604,2026-09-08T20:51:40Z,"Next.js: Unauthenticated Remote Code Execution on windows-hosted servers",next,16.0.0,16.3.3,,CRITICAL,CWE-22,
@@ -8033,6 +8299,7 @@ CVE-2026-7645,2026-05-02T18:30:27Z,"sublinear-time-solver has a Path Traversal I
 CVE-2026-76844,2026-09-29T16:59:18Z,"webpack-dev-middleware vulnerable to Path Traversal via non-slash-terminated publicPath",webpack-dev-middleware,0,7.4.6,,HIGH,CWE-22,
 CVE-2026-76844,2026-09-29T16:59:18Z,"webpack-dev-middleware vulnerable to Path Traversal via non-slash-terminated publicPath",webpack-dev-middleware,8.0.0,8.3.0,,HIGH,CWE-22,
 CVE-2026-76845,2026-08-24T15:31:51Z,"adm-zip extraction follows destination symlinks, allowing arbitrary file overwrite",adm-zip,0.5.9,,0.6.0,MODERATE,CWE-59,
+CVE-2026-76894,2026-10-16T19:23:48Z,"ckan-mcp-server: DataStore Table UI resource does not validate postMessage origin (in) and posts to targetOrigin ""*"" (out)","@aborruso/ckan-mcp-server",0,0.4.112,,LOW,CWE-345;CWE-940,
 CVE-2026-76909,2026-09-22T20:34:38Z,"Unleash: CR-approval email renders user-controlled raw HTML",unleash-server,0,8.0.3,,LOW,CWE-79,
 CVE-2026-76910,2026-09-22T20:34:40Z,"Unleash: Clone-feature lets a user copy a feature from a project they cannot read",unleash-server,0,8.0.3,,MODERATE,CWE-639,
 CVE-2026-76969,2026-09-08T03:31:13Z,"@sap/cds-mtx: Credential disclosure in multitenant applications using SAP Cloud Application Programming Model (CAP)",@sap/cds-mtxs,0,1.18.4,,CRITICAL,CWE-522,
@@ -8071,8 +8338,10 @@ CVE-2026-82393,2026-09-02T14:36:59Z,"pnpm: A tarball dependency's manifest `name
 CVE-2026-82393,2026-09-02T14:36:59Z,"pnpm: A tarball dependency's manifest `name` escapes node_modules → arbitrary file write/overwrite on install",pnpm,11.0.0,11.11.0,,HIGH,CWE-22;CWE-73;CWE-94,
 CVE-2026-82404,2026-09-03T19:52:08Z,"TOON: Prototype pollution when decoding untrusted TOON input",@toon-format/toon,0,2.3.1,,HIGH,CWE-1321,
 CVE-2026-82417,2026-09-02T14:45:13Z,"qs: Denial of Service via Attacker Controlled isBuffer",qs,2.2.5,6.16.0,,MODERATE,CWE-248;CWE-703,
+CVE-2026-82533,2026-09-08T18:32:01Z,"DeepSeek Harness contains an authentication bypass vulnerability in local HTTP control-plane API","@deepseek-ai/dsh-client-connection",0,0.1.2-alpha.1,,CRITICAL,CWE-807,
 CVE-2026-82562,2026-09-02T14:46:57Z,"qs array-limit bypass via bracket-key comma parsing",qs,6.14.2,6.16.0,,MODERATE,CWE-770,
 CVE-2026-82659,2026-06-18T14:28:05Z,"Nodemailer: Message-level raw option bypasses disableFileAccess/disableUrlAccess, enabling arbitrary file read and full-response SSRF in the delivered message",nodemailer,0,9.0.1,,HIGH,CWE-73;CWE-918,
+CVE-2026-82662,2026-06-15T17:34:48Z,"Nodemailer: Improper TLS Certificate Validation in OAuth2 Token Fetch Enables Credential Interception",nodemailer,0,8.0.8,,HIGH,CWE-295,
 CVE-2026-83605,2026-09-08T20:30:51Z,"xmldom: Attribute name injection via setAttribute() bypasses requireWellFormed",@xmldom/xmldom,0.7.0,0.8.14,,HIGH,CWE-91,
 CVE-2026-83605,2026-09-08T20:30:51Z,"xmldom: Attribute name injection via setAttribute() bypasses requireWellFormed",@xmldom/xmldom,0.9.0,0.9.11,,HIGH,CWE-91,
 CVE-2026-83605,2026-09-08T20:30:51Z,"xmldom: Attribute name injection via setAttribute() bypasses requireWellFormed",xmldom,0,,0.6.0,HIGH,CWE-91,
@@ -8146,6 +8415,8 @@ CVE-2026-84947,2026-09-29T18:18:51Z,"undici vulnerable to response truncation vi
 CVE-2026-84961,2026-09-29T18:17:15Z,"undici vulnerable to TLS certificate validation bypass via dropped connect options in BalancedPool",undici,7.24.1,7.29.1,,HIGH,CWE-295,
 CVE-2026-84961,2026-09-29T18:17:15Z,"undici vulnerable to TLS certificate validation bypass via dropped connect options in BalancedPool",undici,8.0.0,8.10.2,,HIGH,CWE-295,
 CVE-2026-84992,2026-09-18T17:17:36Z,"md-editor-v3: XSS via fenced-code language rendering bypass",md-editor-v3,0,6.5.4,,MODERATE,CWE-79,
+CVE-2026-84994,2026-10-15T20:22:00Z,"Qwik: Crashing any Qwik Server via Resource thenable",@builder.io/qwik,0,1.20.0,,HIGH,CWE-248,
+CVE-2026-84994,2026-10-15T20:22:00Z,"Qwik: Crashing any Qwik Server via Resource thenable",@qwik.dev/core,0,2.0.0-beta37,,HIGH,CWE-248,
 CVE-2026-85008,2026-09-29T18:16:28Z,"undici vulnerable to caching and replay of unsafe HTTP method responses",undici,7.0.0,7.29.1,,LOW,CWE-345,
 CVE-2026-85008,2026-09-29T18:16:28Z,"undici vulnerable to caching and replay of unsafe HTTP method responses",undici,8.0.0,8.10.2,,LOW,CWE-345,
 CVE-2026-85014,2026-09-29T18:10:32Z,"undici vulnerable to Denial of Service via WebSocketStream unclean close",undici,7.0.0,7.29.1,,MODERATE,CWE-248;CWE-754,
@@ -8162,6 +8433,7 @@ CVE-2026-85715,2026-09-17T16:30:00Z,"ExifReader: DoS via Crafted HEIC/AVIF iloc
 CVE-2026-85730,2026-09-09T18:07:11Z,"smol-toml: Denial of Service via malformed TOML documents",smol-toml,0,1.7.1,,HIGH,CWE-606;CWE-835,
 CVE-2026-86038,2026-09-17T17:29:31Z,"libp2p: Gossipsub StrictSign accepts attacker-signed messages as a victim RSA peer ID",@libp2p/gossipsub,15.0.0,16.0.5,,HIGH,CWE-345;CWE-347,
 CVE-2026-86039,2026-09-17T18:01:38Z,"libp2p: PeerStore accepts attacker-signed PeerRecords for a victim peer ID and stores certified attacker addresses",@libp2p/peer-store,8.0.0,12.0.24,,HIGH,CWE-290;CWE-345,
+CVE-2026-86063,2026-10-15T20:22:07Z,"Claude Code: Plugin Hash Pin Bypass Allows Bypass of Hash Pinning","@anthropic-ai/claude-code",0,2.1.179,,HIGH,CWE-494;CWE-829,
 CVE-2026-86073,2026-09-10T21:21:49Z,"n8n: Per-Resource OAuth Consent Bypass via Unbound Refresh Token Resource Substitution",n8n,0,2.37.7,,MODERATE,CWE-863,
 CVE-2026-86073,2026-09-10T21:21:49Z,"n8n: Per-Resource OAuth Consent Bypass via Unbound Refresh Token Resource Substitution",n8n,2.38.0,2.38.1,,MODERATE,CWE-863,
 CVE-2026-86074,2026-09-10T21:18:48Z,"n8n: Instance AI Credential Setup Accepts Unvalidated Probe URL from Fetched Content",n8n,0,2.37.7,,MODERATE,CWE-918,
@@ -8200,7 +8472,9 @@ CVE-2026-86439,2026-09-25T19:32:05Z,"Knowns Unrestricted Path Traversal leading
 CVE-2026-86472,2026-09-29T23:54:25Z,"fast-uri vulnerable to inconsistent host case normalization via percent-encoded octets",fast-uri,0,2.4.7,,MODERATE,CWE-178,
 CVE-2026-86472,2026-09-29T23:54:25Z,"fast-uri vulnerable to inconsistent host case normalization via percent-encoded octets",fast-uri,3.0.0,3.1.8,,MODERATE,CWE-178,
 CVE-2026-86472,2026-09-29T23:54:25Z,"fast-uri vulnerable to inconsistent host case normalization via percent-encoded octets",fast-uri,4.0.0,4.1.5,,MODERATE,CWE-178,
+CVE-2026-86540,2026-10-06T18:58:38Z,"knowns OS Command Injection via Insecure LSP Binary Path Config in .knowns/config.json",knowns,0,0.30.0,,HIGH,"CWE-427;CWE-78;CWE-829;CWE-94",
 CVE-2026-8657,2026-05-16T06:30:29Z," jsondiffpatch patch APIs are vulnerable to prototype pollution",jsondiffpatch,0,0.7.6,,HIGH,CWE-1321,
+CVE-2026-86597,2026-10-05T22:55:47Z,"Snowflake drivers writes sensitive information to logs",snowflake-sdk,0,3.3.0,,MODERATE,CWE-532,
 CVE-2026-86818,2026-09-29T23:51:16Z,"fast-uri vulnerable to mailto header injection via percent-encoded field-name desynchronization",fast-uri,4.1.3,4.1.5,,MODERATE,CWE-172;CWE-436,
 CVE-2026-86993,2026-09-10T21:07:45Z,"n8n: Log Streaming Event Destinations Decrypt Generic-Auth Credentials Without Ownership Check",n8n,0,1.123.76,,MODERATE,CWE-862,
 CVE-2026-86993,2026-09-10T21:07:45Z,"n8n: Log Streaming Event Destinations Decrypt Generic-Auth Credentials Without Ownership Check",n8n,2.0.0,2.37.7,,MODERATE,CWE-862,
@@ -8218,6 +8492,7 @@ CVE-2026-8766,2026-05-18T00:31:36Z,"@kilocode/cli Vulnerable to Exposure of Sens
 CVE-2026-8769,2026-05-18T00:31:37Z,"@ai-sdk/provider-utils has an Uncontrolled Resource Consumption issue",@ai-sdk/provider-utils,0,3.0.28,,LOW,CWE-400,
 CVE-2026-8769,2026-05-18T00:31:37Z,"@ai-sdk/provider-utils has an Uncontrolled Resource Consumption issue",@ai-sdk/provider-utils,4.0.0-beta.10,4.0.33,,LOW,CWE-400,
 CVE-2026-8769,2026-05-18T00:31:37Z,"@ai-sdk/provider-utils has an Uncontrolled Resource Consumption issue",@ai-sdk/provider-utils,5.0.0-beta.0,5.0.1,,LOW,CWE-400,
+CVE-2026-87776,2026-10-05T23:28:01Z,"compression vulnerable to Denial of Service via memory leak on premature response close",compression,0,1.8.2,,HIGH,CWE-401;CWE-459,
 CVE-2026-87859,2026-09-28T21:33:08Z,"morgan vulnerable to Log Injection via unescaped double quote in quoted log fields",morgan,0,1.12.1,,MODERATE,CWE-117,
 CVE-2026-88056,2026-09-10T20:19:43Z,"Angular: SSRF and Cross-Origin Credential Disclosure via URL Resolution Discrepancy in SSR",@angular/platform-server,0,,19.2.25,HIGH,CWE-918,
 CVE-2026-88056,2026-09-10T20:19:43Z,"Angular: SSRF and Cross-Origin Credential Disclosure via URL Resolution Discrepancy in SSR",@angular/platform-server,20.0.0,20.3.30,,HIGH,CWE-918,
@@ -8249,31 +8524,58 @@ CVE-2026-8814,2026-05-29T17:52:26Z,"ExifReader is vulnerable to denial of servic
 CVE-2026-88932,2026-09-28T21:34:58Z,"multer vulnerable to Denial of Service via orphaned disk writes on aborted uploads",multer,2.2.0,2.4.0,,MODERATE,CWE-400;CWE-459,
 CVE-2026-88976,2026-09-17T20:32:47Z,"@platejs/core HTML deserialization can trigger browser behavior during parsing",@platejs/core,0,53.3.11,,MODERATE,CWE-79,
 CVE-2026-88976,2026-09-17T20:32:47Z,"@platejs/core HTML deserialization can trigger browser behavior during parsing",@platejs/core,54.0.0-beta.0,,54.0.0-beta.1,MODERATE,CWE-79,
+CVE-2026-90711,2026-10-05T23:30:26Z,"proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet",proxy-addr,1.1.0,2.0.8,,CRITICAL,CWE-290;CWE-348;CWE-697,
+CVE-2026-90771,2026-09-13T12:31:12Z,"joi messages compilation allows prototype replacement through __proto__ error codes",joi,0,17.13.8,,MODERATE,CWE-1321,
+CVE-2026-90771,2026-09-13T12:31:12Z,"joi messages compilation allows prototype replacement through __proto__ error codes",joi,18.0.0,18.2.9,,MODERATE,CWE-1321,
+CVE-2026-90776,2026-09-30T14:41:01Z,"Nodemailer addressparser: O(n^2) on comment-joined addresses enables a remote DoS (reachable via mailparser)",nodemailer,9.1.0,10.0.5,,HIGH,CWE-400;CWE-407,
 CVE-2026-91127,2026-09-18T17:19:42Z,"File Viewer: DOM XSS via unsafe hyperlink schemes in the legacy DOC renderer",@file-viewer/doc,0,2.3.1,,HIGH,CWE-79;CWE-83,
 CVE-2026-91127,2026-09-18T17:19:42Z,"File Viewer: DOM XSS via unsafe hyperlink schemes in the legacy DOC renderer",msdoc-viewer,0,0.2.2,,HIGH,CWE-79;CWE-83,
 CVE-2026-92081,2026-09-30T23:53:44Z,"fastify vulnerable to Denial of Service via unhandled exception on HTTP/2 trailer responses",fastify,0,5.12.5,,MODERATE,CWE-248,
+CVE-2026-92599,2026-09-29T18:07:42Z,"joi: Quadratic regular-expression backtracking in `Joi.string().isoDate()`",joi,17.2.0,17.13.7,,HIGH,CWE-1333,
+CVE-2026-92599,2026-09-29T18:07:42Z,"joi: Quadratic regular-expression backtracking in `Joi.string().isoDate()`",joi,18.0.0,18.2.6,,HIGH,CWE-1333,
 CVE-2026-92708,2026-10-01T15:18:06Z,"devalue: `stringify`/`uneval` serialize shared memory",devalue,5.1.0,5.9.3,,HIGH,CWE-200;CWE-226,
 CVE-2026-9277,2026-06-09T14:27:15Z,"shell-quote quote() does not escape newlines in object .op values",shell-quote,1.1.0,1.8.4,,CRITICAL,CWE-77;CWE-78,
+CVE-2026-92933,2026-10-05T22:37:40Z,"vm2: util.getCallSites() bypasses GHSA-v27g-jcqj-v8rw host-frame redaction, leaks host call stack",vm2,0,3.11.8,,MODERATE,CWE-200;CWE-693,
+CVE-2026-92934,2026-10-05T22:38:04Z,"vm2 sandbox escape to host RCE via revisited host-wrapped AggregateError bypassing Error sanitization cycle short-circuit",vm2,0,3.11.8,,CRITICAL,CWE-693,
 CVE-2026-92935,2026-10-01T15:34:58Z,"vm2: NodeVM nesting guard accepts array-shaped require and permits host RCE",vm2,3.11.4,3.11.7,,CRITICAL,CWE-913,
+CVE-2026-92936,2026-10-05T22:35:31Z,"vm2 leaks absolute host filesystem paths to sandbox code via error stack formatting",vm2,3.11.0,3.11.7,,MODERATE,CWE-209;CWE-497,
 CVE-2026-92937,2026-10-01T15:32:10Z,"vm2: GHSA-m283-3h24-438v fix bypass leads to host RCE via call/apply indirection",vm2,3.11.6,3.11.7,,CRITICAL,CWE-693;CWE-94,
 CVE-2026-92938,2026-10-01T15:29:04Z,"vm2 allows a sandboxed plugin to execute native code through `node:sqlite`",vm2,3.11.3,3.11.7,,CRITICAL,CWE-693,
 CVE-2026-92939,2026-10-01T15:28:36Z,"vm2 crypto builtin loads attacker native code through setEngine",vm2,3.11.3,3.11.7,,CRITICAL,CWE-114,
 CVE-2026-92940,2026-10-01T15:38:26Z,"vm2 exposes host HTTPS credentials and TLS traffic through globalAgent",vm2,3.11.3,3.11.7,,CRITICAL,CWE-668,
 CVE-2026-92941,2026-10-01T15:27:28Z,"vm2 NodeVM can replace the host process TLS trust store",vm2,3.11.3,3.11.7,,CRITICAL,CWE-732,
+CVE-2026-92942,2026-10-05T22:35:04Z,"vm2: timeout Option Bypass via FinalizationRegistry Cleanup Callback (Unbounded Host Event-Loop Block)",vm2,0,3.11.7,,HIGH,CWE-400;CWE-841,
 CVE-2026-92944,2026-10-01T15:28:07Z,"vm2 sandbox escape on Node.js 26 through a stale PromiseThenLookupChain protector",vm2,3.10.2,3.11.7,,CRITICAL,CWE-693;CWE-913,
 CVE-2026-92945,2026-10-01T15:26:45Z,"vm2: External module allowlist uses a raw prefix test, so a prefix-sharing sibling package is treated as allowlisted",vm2,0,3.11.7,,MODERATE,CWE-22;CWE-863,
+CVE-2026-92946,2026-10-05T22:34:50Z,"vm2: NodeVM `require.external` without an explicit `require.root` grants unrestricted host filesystem access and full RCE",vm2,0,3.11.7,,CRITICAL,CWE-913,
+CVE-2026-92947,2026-10-05T22:34:35Z,"vm2: Sandboxed code can read and write host-realm memory via Node's shared Buffer pool",vm2,0,3.11.7,,CRITICAL,CWE-200;CWE-653;CWE-668,
 CVE-2026-92948,2026-10-01T15:41:31Z,"vm2: NodeVM builtin allowlist bypass via node:test.run() execArgv allows sandbox escape",vm2,3.9.6,3.11.7,,CRITICAL,CWE-693,
 CVE-2026-92949,2026-10-01T15:35:25Z,"vm2: vm.freeze()/vm.readonly() bypass via accessor descriptor",vm2,3.9.6,3.11.7,,MODERATE,CWE-471;CWE-693,
 CVE-2026-92950,2026-10-01T15:40:45Z,"vm2 CLI provides no sandbox isolation - host-realm require() is reachable from sandboxed scripts",vm2,0,3.11.7,,HIGH,CWE-1188;CWE-453;CWE-829,
 CVE-2026-92951,2026-10-01T15:37:19Z,"vm2 Custom Module Resolver Can Bypass the External Package Allowlist by Loading a Colliding Host Package",vm2,0,3.11.7,,CRITICAL,CWE-706;CWE-829;CWE-863,
 CVE-2026-92952,2026-10-01T15:42:15Z,"vm2: Incomplete nodejs.* symbol filtering lets sandbox override host WebStream state checks",vm2,3.11.4,3.11.7,,MODERATE,CWE-669,
+CVE-2026-92953,2026-10-05T22:45:22Z,"vm2: Default VM can mutate host TypedArray and ArrayBuffer intrinsics after the host-prototype pollution fix",vm2,3.11.0,3.11.8,,CRITICAL,CWE-1321;CWE-913,
+CVE-2026-92954,2026-10-05T22:45:48Z,"vm2: Host-returned Promise rejection can bypass vm2's unhandled-rejection hardening and terminate the host process",vm2,3.10.0,3.11.8,,CRITICAL,CWE-248;CWE-703,
+CVE-2026-92955,2026-10-05T22:47:09Z,"vm2: Sandbox Escape (NodeVM)",vm2,0,3.11.8,,CRITICAL,CWE-913,
+CVE-2026-92956,2026-10-05T22:34:22Z,"vm2 sandbox escape via WebAssembly.compileStreaming Promise species bypass",vm2,3.10.1,3.11.7,,CRITICAL,CWE-693;CWE-913,
 CVE-2026-92957,2026-10-01T15:36:01Z,"vm2: NodeVM node:-prefixed negative builtin deny bypass exposes child_process",vm2,0,3.11.7,,CRITICAL,CWE-269;CWE-284,
 CVE-2026-92958,2026-10-01T15:36:48Z,"vm2: NodeVM builtin denylist bypass via fs/promises despite -fs, allowing host filesystem writes",vm2,0,3.11.7,,HIGH,CWE-269;CWE-284,
+CVE-2026-92959,2026-10-05T22:47:34Z,"vm2: `allowAsync: false` can be bypassed through Promise thenable assimilation in VM and NodeVM",vm2,0,3.11.8,,HIGH,CWE-693,
 CVE-2026-9358,2026-05-26T13:30:30Z,"postcss-selector-parser allows denial of service through uncontrolled AST recursion",postcss-selector-parser,6.1.0,6.1.3,,LOW,CWE-404,
 CVE-2026-9358,2026-05-26T13:30:30Z,"postcss-selector-parser allows denial of service through uncontrolled AST recursion",postcss-selector-parser,7.1.0,7.1.3,,LOW,CWE-404,
+CVE-2026-93605,2026-10-07T18:05:00Z,"vm2 contains a sandbox escape vulnerability",vm2,0,3.12.1,,CRITICAL,CWE-693;CWE-913,
 CVE-2026-93687,2026-09-18T18:31:41Z,"braces vulnerable to stack-exhaustion denial of service through deeply nested patterns",braces,0,,3.0.3,HIGH,CWE-674,
 CVE-2026-93748,2026-09-18T18:31:44Z,"http-cache-semantics max-stale handling can disclose cross-user cached responses",http-cache-semantics,0,,4.2.0,HIGH,CWE-524,
+CVE-2026-93749,2026-09-18T18:31:44Z,"source-map-js allows event-loop denial of service through indexed source-map section offsets",source-map-js,1.0.0,1.2.2,,HIGH,CWE-1284,
 CVE-2026-93981,2026-09-30T23:46:16Z,"hono/jsx renders plain strings unescaped in boundary components, leading to XSS",hono,0,4.13.7,,MODERATE,CWE-79,
+CVE-2026-94483,2026-10-07T20:30:55Z,"Next.js has Server-Side Request Forgery in Image Optimization",next,16.0.0,16.3.8,,HIGH,CWE-918,
+CVE-2026-94484,2026-10-07T20:31:13Z,"Next.js has cache poisoning in SSG/ISR rendering that leads to cross-user content substitution and persistent denial of service",next,15.0.0,15.5.27,,MODERATE,CWE-524,
+CVE-2026-94484,2026-10-07T20:31:13Z,"Next.js has cache poisoning in SSG/ISR rendering that leads to cross-user content substitution and persistent denial of service",next,16.0.0,16.3.8,,MODERATE,CWE-524,
+CVE-2026-94485,2026-10-07T20:31:33Z,"Next.js has information disclosure in App Router metadata image routes via dynamicParams bypass",next,16.0.0,16.3.8,,MODERATE,CWE-346,
+CVE-2026-94486,2026-10-07T20:31:51Z,"Next.js has information disclosure in development server's Model Context Protocol endpoint",next,16.0.0,16.3.8,,LOW,CWE-346,
+CVE-2026-94543,2026-10-07T20:32:06Z,"Next.js has cache poisoning of SSG and ISR pages in self-hosted applications",next,15.0.0,15.5.27,,MODERATE,CWE-524,
+CVE-2026-94543,2026-10-07T20:32:06Z,"Next.js has cache poisoning of SSG and ISR pages in self-hosted applications",next,16.0.0,16.3.8,,MODERATE,CWE-524,
+CVE-2026-94544,2026-10-07T20:32:13Z,"Next.js: Pending `use cache` fill can leak Draft Mode content into regular responses and persisted pages",next,16.3.0,16.3.8,,MODERATE,CWE-524,
 CVE-2026-9495,2026-05-26T13:30:54Z,"@koa/router has an Access Control Bypass",@koa/router,14.0.0,15.0.0,,MODERATE,CWE-284,
 CVE-2026-9496,2026-05-26T13:30:54Z,"pacote is vulnerable to Denial of Service (DoS) via the addGitSha function",pacote,11.2.7,21.5.1,,HIGH,CWE-1333;CWE-400,
 CVE-2026-9520,2026-05-26T13:30:53Z,"Blitz has a Cross-site Scripting issue",blitz,0,,3.0.2,LOW,CWE-79,
@@ -8288,6 +8590,7 @@ CVE-2026-9679,2026-06-19T14:21:30Z,"undici vulnerable to HTTP header injection v
 CVE-2026-9679,2026-06-19T14:21:30Z,"undici vulnerable to HTTP header injection via Set-Cookie percent-decoding",undici,8.0.0,8.5.0,,MODERATE,CWE-93,
 CVE-2026-9697,2026-06-18T14:28:21Z,"undici vulnerable to TLS certificate validation bypass via dropped requestTls in SOCKS5 ProxyAgent",undici,7.23.0,7.28.0,,HIGH,CWE-295,
 CVE-2026-9697,2026-06-18T14:28:21Z,"undici vulnerable to TLS certificate validation bypass via dropped requestTls in SOCKS5 ProxyAgent",undici,8.0.0,8.5.0,,HIGH,CWE-295,
+CVE-2026-97058,2026-09-24T15:31:31Z,"sprintf-js vulnerable to denial of service through unbounded precision specifiers",sprintf-js,0,,1.1.3,MODERATE,CWE-1284,
 CVE-2026-97711,2026-09-30T15:40:05Z,"Serialize JavaScript: Cross-site scripting (XSS) via unescaped </script> in serialized function bodies",serialize-javascript,7.1.1,7.1.2,,LOW,CWE-79;CWE-80,
 GHSA-224h-p7p5-rh85,2020-09-01T17:32:26Z,"Directory Traversal in wenluhong1",wenluhong1,0.0.0,,,HIGH,CWE-22,
 GHSA-224p-v68g-5g8f,2025-08-26T18:45:55Z,"GraphQL Armor Max-Depth Plugin Bypass via fragment caching","@escape.tech/graphql-armor-max-depth",0,2.4.2,,MODERATE,CWE-400,
@@ -8329,6 +8632,7 @@ GHSA-29fh-xcjr-p7rx,2020-09-03T17:02:22Z,"Malicious Package in web3-eht",web3-eh
 GHSA-29h2-jr22-frmh,2026-09-25T19:31:08Z,"OpenZeppelin Confidential Contracts `VestingWalletConfidential`: a malicious ERC-7984 token is able to extract private data from the vesting wallet","@openzeppelin/confidential-contracts",0,0.3.2,,HIGH,CWE-284,
 GHSA-29h2-jr22-frmh,2026-09-25T19:31:08Z,"OpenZeppelin Confidential Contracts `VestingWalletConfidential`: a malicious ERC-7984 token is able to extract private data from the vesting wallet","@openzeppelin/confidential-contracts",0.4.0-rc.0,0.4.2,,HIGH,CWE-284,
 GHSA-29h2-jr22-frmh,2026-09-25T19:31:08Z,"OpenZeppelin Confidential Contracts `VestingWalletConfidential`: a malicious ERC-7984 token is able to extract private data from the vesting wallet","@openzeppelin/confidential-contracts",0.5.0-rc.0,0.5.2,,HIGH,CWE-284,
+GHSA-29x6-9qh5-83gg,2026-09-17T15:32:15Z,"Duplicate Advisory: NodeVM `require.external` without an explicit `require.root` grants unrestricted host filesystem access and full RCE",vm2,0,,3.11.6,CRITICAL,CWE-913,
 GHSA-2c83-wfv3-q25f,2021-09-07T23:07:56Z,"Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in ZMarkdown",rebber,0,5.2.1,,CRITICAL,CWE-78,
 GHSA-2cf5-4w76-r9qv,2020-09-04T14:57:38Z,"Arbitrary Code Execution in handlebars",handlebars,0,3.0.8,,HIGH,CWE-94,
 GHSA-2cf5-4w76-r9qv,2020-09-04T14:57:38Z,"Arbitrary Code Execution in handlebars",handlebars,4.0.0,4.5.2,,HIGH,CWE-94,
@@ -8376,6 +8680,7 @@ GHSA-2rqg-gjgv-84jm,2026-03-13T20:55:30Z,"OpenClaw: Gateway `agent` calls could
 GHSA-2rx9-3g3h-c2jv,2026-09-01T18:59:22Z,"pnpm: pacquet trust-lockfile install can create dependency symlinks outside the project",pnpm,12.0.0-alpha.0,12.0.0-alpha.5,,HIGH,CWE-22;CWE-59;CWE-73,
 GHSA-2vg6-77g8-24mp,2026-07-07T20:56:45Z,"Better Auth: Stale sessions persist after user deletion across admin, anonymous, and SCIM flows",@better-auth/scim,1.6.0,1.6.11,,LOW,CWE-459;CWE-613;CWE-672,
 GHSA-2vg6-77g8-24mp,2026-07-07T20:56:45Z,"Better Auth: Stale sessions persist after user deletion across admin, anonymous, and SCIM flows",better-auth,0.3.4,1.6.11,,LOW,CWE-459;CWE-613;CWE-672,
+GHSA-2vh9-cv26-p97m,2026-09-17T15:32:14Z,"Duplicate Advisory: vm2: util.getCallSites() bypasses GHSA-v27g host-frame redaction, leaks host call stack",vm2,0,,3.11.7,MODERATE,CWE-200,
 GHSA-2vqq-jgxx-fxjc,2020-09-11T21:24:33Z,"Malicious Package in motiv.scss",motiv.scss,0.4.20,0.4.21,,CRITICAL,CWE-506,
 GHSA-2vww-6p9h-5g8j,2026-07-10T15:31:41Z,"Duplicate Advisory: Authenticated Users Can Exhaust Temporary Disk Storage via Data-Table File Uploads",n8n,0,,,MODERATE,CWE-770,
 GHSA-2vx9-7wpg-88jq,2026-05-19T15:55:43Z,"n8n: Legacy ExecuteWorkflow Node Bypassed File Path Restrictions",n8n,0,2.19.3,,MODERATE,CWE-22,
@@ -8477,6 +8782,7 @@ GHSA-3xc7-xg67-pw99,2019-06-05T20:43:10Z,"Sensitive Data Exposure in sequelize-c
 GHSA-3xx2-mqjm-hg9x,2026-04-16T22:49:46Z,"Paperclip: Cross-tenant agent API key IDOR in `/agents/:id/keys` routes allows full victim-company compromise",@paperclipai/server,0,2026.416.0,,CRITICAL,CWE-639,
 GHSA-435c-qcpm-wjw5,2020-09-03T17:05:43Z,"Malicious Package in fs-extar",fs-extar,0.0.0,,,CRITICAL,CWE-506,
 GHSA-4363-x42f-xph6,2020-09-03T17:05:14Z,"Malicious Package in hw-trnasport-u2f",hw-trnasport-u2f,0.0.0,,,CRITICAL,CWE-506,
+GHSA-43rv-jrfh-9mrr,2026-09-27T03:31:03Z,"Duplicate Advisory: vm2: NodeVM zlib Buffers expose pooled host memory across the VM boundary",vm2,0,3.12.2,,MODERATE,CWE-200,
 GHSA-43vf-2x6g-p2m5,2020-09-02T21:33:26Z,"Malicious Package in browserift",browserift,0,,,CRITICAL,CWE-506,
 GHSA-442j-39wm-28r2,2026-03-29T15:16:37Z,"Handlebars.js has a Property Access Validation Bypass in container.lookup",handlebars,4.0.0,4.7.9,,LOW,CWE-367,
 GHSA-44c9-4rg5-qjgq,2026-03-19T03:30:57Z,"Duplicate Advisory: web_search citation redirect SSRF via private-network-allowing policy",openclaw,0,,,MODERATE,CWE-918,
@@ -8553,6 +8859,7 @@ GHSA-4xcv-9jjx-gfj3,2019-07-05T21:07:58Z,"Denial of Service in mem",mem,0,4.0.0,
 GHSA-4xf9-pgvv-xx67,2020-09-03T20:27:46Z,"Duplicate Advisory: Regular Expression Denial of Service in simple-markdown",simple-markdown,0,0.5.2,,MODERATE,CWE-400,
 GHSA-4xg9-g7qj-jhg4,2020-09-03T20:46:36Z,"Malicious Package in comander",comander,0.0.0,,,CRITICAL,CWE-506,
 GHSA-4xgp-xrg3-c73w,2020-09-11T21:10:29Z,"Malicious Package in commqnder",commqnder,0,,,CRITICAL,CWE-506,
+GHSA-4xmw-hh9q-4q7c,2026-09-17T15:32:14Z,"Duplicate Advisory: vm2 sandbox escape to host RCE via revisited host-wrapped AggregateError bypassing Error sanitization cycle short-circuit",vm2,0,,3.11.7,CRITICAL,CWE-693,
 GHSA-4xrh-5m3m-328w,2026-05-21T20:44:12Z,"@hulumi/policies: CIS 1.16 admin policy bypass for inline and attached IAM policies",@hulumi/policies,0,1.3.2,,HIGH,CWE-269,
 GHSA-525j-hqq2-66r4,2026-04-17T21:59:55Z,"OpenClaw: Sandbox browser CDP relay could expose DevTools protocol on 0.0.0.0",openclaw,0,2026.4.10,,HIGH,CWE-1327;CWE-284,
 GHSA-52c9-458g-whrf,2020-09-03T22:58:17Z,"Malicious Package in js-3ha3",js-3ha3,0.0.0,,,CRITICAL,CWE-506,
@@ -8562,6 +8869,7 @@ GHSA-5327-gfq5-8f4m,2020-09-03T21:56:23Z,"Malicious Package in buffer-xmr",buffe
 GHSA-533p-g2hq-qr26,2020-09-04T17:16:35Z,"Command Injection in treekill",treekill,0.0.0,,,HIGH,CWE-77,
 GHSA-534w-2vm4-89xr,2026-03-03T23:18:26Z,"OpenClaw's Zalo group sender allowlist bypass permits unauthorized GROUP dispatch",openclaw,0,2026.2.24,,MODERATE,CWE-284;CWE-863,
 GHSA-536f-268f-6gxc,2020-09-03T22:17:36Z,"Malicious Package in buffermxor",buffermxor,0.0.0,,,CRITICAL,CWE-506,
+GHSA-538q-xxpg-6h4r,2026-09-17T15:32:16Z,"Duplicate Advisory: vm2 sandbox escape via WebAssembly.compileStreaming Promise species bypass",vm2,3.10.1,,3.11.6,CRITICAL,CWE-693,
 GHSA-53mj-mc38-q894,2020-09-01T19:40:41Z,"Remote Memory Exposure in openwhisk",openwhisk,0,3.3.1,,MODERATE,,
 GHSA-53rv-hcvm-rpp9,2025-01-14T22:03:59Z,"Lodestar snappy decompression issue",@lodestar/reqresp,0,1.25.0,,LOW,CWE-703,
 GHSA-5478-66c3-rhxr,2026-04-08T21:50:51Z,"Pretext: Algorithmic Complexity (DoS) in the text analysis phase",@chenglou/pretext,0,0.0.5,,HIGH,CWE-407,
@@ -8604,6 +8912,7 @@ GHSA-5c6j-r48x-rmvq,2026-02-28T02:50:45Z,"Serialize JavaScript is Vulnerable to
 GHSA-5c7w-4wm3-85vw,2026-07-02T19:00:12Z,"@asymmetric-effort/specifyjs: GraphQL gql tag allows metacharacter injection","@asymmetric-effort/specifyjs",0,0.2.136,,MODERATE,CWE-943,
 GHSA-5ccf-884p-4jjq,2025-03-20T12:32:51Z,"Open WebUI Unauthenticated Multipart Boundary Denial of Service (DoS) Vulnerability",open-webui,0,,0.3.21,HIGH,CWE-400,
 GHSA-5cp4-xmrw-59wf,2020-08-05T21:47:02Z,"XSS via JQLite DOM manipulation functions in AngularJS",angular,0,1.8.0,,MODERATE,CWE-79,
+GHSA-5cwm-p7pj-gqp2,2026-09-08T09:35:39Z,"Duplicate Advisory: Sensitive information written to logs by Snowflake drivers",snowflake-sdk,0,,,MODERATE,CWE-532,
 GHSA-5f7h-p83x-5vc2,2026-04-10T00:30:29Z,"Duplicate Advisory: OpenClaw: Nextcloud Talk room allowlist matched colliding room names instead of stable room tokens",openclaw,0,,,LOW,CWE-807,
 GHSA-5f7m-mmpc-qhh4,2019-05-23T09:27:00Z,"mysql Node.JS Module Vulnerable to Remote Memory Exposure",mysql,2.0.0-alpha8,2.14.0,,MODERATE,CWE-201,
 GHSA-5ff8-jcf9-fw62,2020-09-04T17:55:35Z,"Cross-Site Scripting in markdown-it-katex",markdown-it-katex,0.0.0,,,HIGH,CWE-79,
@@ -8647,6 +8956,7 @@ GHSA-5rrq-pxf6-6jx5,2022-01-08T00:22:42Z,"Prototype Pollution in node-forge debu
 GHSA-5v72-xg48-5rpm,2019-06-04T19:37:52Z,"Denial of Service in ws",ws,0.6.0,1.1.5,,HIGH,CWE-400,
 GHSA-5v72-xg48-5rpm,2019-06-04T19:37:52Z,"Denial of Service in ws",ws,2.0.0,3.3.1,,HIGH,CWE-400,
 GHSA-5v7r-jg9r-vq44,2020-09-03T21:19:46Z,"Insecure Cryptography Algorithm in simple-crypto-js",simple-crypto-js,0,2.3.0,,MODERATE,CWE-327,
+GHSA-5v7w-95g5-pj6q,2026-09-17T15:32:16Z,"Duplicate Advisory: Default VM can mutate host TypedArray and ArrayBuffer intrinsics after the host-prototype pollution fix",vm2,3.11.0,,3.11.7,CRITICAL,CWE-913,
 GHSA-5vfw-jc4p-fj39,2026-07-22T12:32:17Z,"Duplicate Advisory: Member-Level Users Can Execute Other Users' MCP Server Trigger Workflows via Missing OAuth Authorization Check",n8n,0,,,MODERATE,CWE-863,
 GHSA-5vj8-3v2h-h38v,2020-09-04T18:04:08Z,"Remote Code Execution in next",next,0.9.9,5.1.0,,HIGH,CWE-20,
 GHSA-5vjq-5jmg-39xq,2026-04-16T01:34:39Z,"Renovate affected by remote code execution was possible using the bazel-module or bazelisk managers, when using lockFileMaintenance",renovate,43.65.0,43.102.11,,MODERATE,CWE-94,
@@ -8664,6 +8974,7 @@ GHSA-62gx-5q78-wrvx,2026-07-15T21:56:45Z,"obsidian-local-rest-api: Authenticated
 GHSA-6343-m2qr-66gf,2020-09-03T23:10:41Z,"Malicious Package in js-sja3",js-sja3,0.0.0,,,CRITICAL,CWE-506,
 GHSA-6394-6h9h-cfjg,2019-06-07T21:12:35Z,"Regular Expression Denial of Service",nwmatcher,0,1.4.4,,MODERATE,CWE-400,
 GHSA-63f5-hhc7-cx6p,2026-03-16T20:40:23Z,"OpenClaw bootstrap setup codes could be replayed to escalate pending pairing scopes before approval",openclaw,0,2026.3.13,,HIGH,CWE-269,
+GHSA-63m2-qqch-jxv2,2026-09-17T15:32:14Z,"Duplicate Advisory: vm2 leaks absolute host filesystem paths to sandbox code via error stack formatting",vm2,3.11.0,,3.11.6,MODERATE,CWE-209,
 GHSA-644f-hrff-mf96,2025-12-02T18:30:35Z,"Duplicate Advisory: Authentication Bypass via Default JWT Secret in NocoBase docker-compose Deployments",@nocobase/auth,0,1.9.23,,LOW,,
 GHSA-6475-r3vj-m8vf,2026-01-08T21:52:45Z,"AWS SDK for JavaScript v3 adopted defense in depth enhancement for region parameter value",@smithy/config-resolver,0,4.4.0,,LOW,CWE-20,
 GHSA-6477-wvjj-47v6,2026-04-24T00:31:52Z,"Duplicate Advisory: OpenClaw: Zalo replay dedupe keys could suppress messages across chats or senders",openclaw,0,2026.4.2,,MODERATE,CWE-706,
@@ -8687,6 +8998,7 @@ GHSA-6623-4q32-82v8,2026-09-19T12:32:10Z,"Duplicate Advisory: hono/jsx renders p
 GHSA-664h-gpgq-h6xx,2026-06-17T13:55:59Z,"n8n: Wrong OAuth Scope on Evaluation Test Runs Endpoints",n8n,0,1.123.55,,MODERATE,CWE-863,
 GHSA-664h-gpgq-h6xx,2026-06-17T13:55:59Z,"n8n: Wrong OAuth Scope on Evaluation Test Runs Endpoints",n8n,2.0.0-rc.0,2.25.7,,MODERATE,CWE-863,
 GHSA-664h-gpgq-h6xx,2026-06-17T13:55:59Z,"n8n: Wrong OAuth Scope on Evaluation Test Runs Endpoints",n8n,2.26.0,2.26.2,,MODERATE,CWE-863,
+GHSA-6688-9rhm-gjv2,2026-10-05T23:43:53Z,"DOMPurify: IN_PLACE returns a force-removed rawtext root whose text carries attacker markup — pure HTML reparse executes",dompurify,0,3.4.16,,LOW,CWE-79,
 GHSA-66mv-xh68-h6v2,2020-09-03T15:48:53Z,"Denial of Service in @commercial/hapi",@commercial/hapi,0,16.8.2,,HIGH,,
 GHSA-66mv-xh68-h6v2,2020-09-03T15:48:53Z,"Denial of Service in @commercial/hapi",@commercial/hapi,17.0.0,17.9.2,,HIGH,,
 GHSA-66mv-xh68-h6v2,2020-09-03T15:48:53Z,"Denial of Service in @commercial/hapi",@commercial/hapi,18.0.0,18.4.1,,HIGH,,
@@ -8717,10 +9029,10 @@ GHSA-6fcr-9h9g-23fq,2020-09-02T21:50:51Z,"Denial of Service in ipfs-bitswap",ipf
 GHSA-6fh5-8wq8-w3wr,2020-09-04T15:09:55Z,"Prototype Pollution in unflatten",unflatten,0.0.0,,,HIGH,CWE-1321,
 GHSA-6fvh-fgmg-3x7v,2026-09-17T15:32:16Z,"Duplicate Advisory: vm2 Custom Module Resolver Can Bypass the External Package Allowlist by Loading a Colliding Host Package",vm2,0,,3.11.6,CRITICAL,CWE-706,
 GHSA-6g25-pc82-vfwp,2026-03-03T00:39:40Z,"OpenClaw: macOS beta onboarding exposed PKCE verifier via OAuth state",openclaw,0,2026.2.25,,MODERATE,CWE-200,
-GHSA-6h2x-m376-mqjq,2026-09-29T18:07:42Z,"joi: Quadratic regular-expression backtracking in `Joi.string().isoDate()`",joi,17.2.0,17.13.7,,HIGH,CWE-1333,
-GHSA-6h2x-m376-mqjq,2026-09-29T18:07:42Z,"joi: Quadratic regular-expression backtracking in `Joi.string().isoDate()`",joi,18.0.0,18.2.6,,HIGH,CWE-1333,
 GHSA-6hqm-hm2v-3p2p,2026-08-01T15:30:27Z,"Duplicate Advisory: Axios: NO_PROXY bypass for 0.0.0.0 local addresses in axios",axios,1.0.0,,,MODERATE,CWE-183,
 GHSA-6hxq-p678-4hr2,2026-09-04T17:33:20Z,"SimpleWebAuthn: Registration verification does not sufficiently ensure that attestation certificates chain to a trust anchor",@simplewebauthn/server,0,13.3.2,,LOW,CWE-295;CWE-296,
+GHSA-6j9g-8fxc-25hq,2026-08-13T12:31:09Z,"Duplicate Advisory: Flowise contains an unauthenticated sandbox escape",flowise,0,3.1.3,,CRITICAL,CWE-78,
+GHSA-6j9g-8fxc-25hq,2026-08-13T12:31:09Z,"Duplicate Advisory: Flowise contains an unauthenticated sandbox escape",flowise-components,0,3.1.3,,CRITICAL,CWE-78,
 GHSA-6jg8-7333-554w,2019-10-04T17:56:12Z,"Sandbox Breakout in realms-shim",realms-shim,0,1.2.0,,CRITICAL,,
 GHSA-6jg8-7333-554w,2019-10-04T17:56:12Z,"Sandbox Breakout in realms-shim",ses,0,0.6.3,,CRITICAL,,
 GHSA-6jgm-4w45-vh8j,2026-09-17T15:32:14Z,"Duplicate Advisory: vm2 crypto builtin loads attacker native code through setEngine",vm2,3.11.3,,3.11.6,CRITICAL,CWE-114,
@@ -8728,6 +9040,7 @@ GHSA-6jm4-83g2-35gv,2026-06-16T21:31:57Z,"Duplicate Advisory: memory-wiki shared
 GHSA-6jrj-vc65-c983,2024-08-26T15:17:40Z,"unzip-stream allows Arbitrary File Write via artifact extraction",unzip-stream,0,0.3.2,,HIGH,CWE-22,
 GHSA-6m6m-j2hm-pxrg,2020-09-03T17:37:05Z,"Malicious Package in cicada-render",cicada-render,0.0.0,,,CRITICAL,CWE-506,
 GHSA-6mrq-7r7m-hh4p,2020-09-03T22:52:58Z,"Malicious Package in hs-sha3",hs-sha3,0.0.0,,,CRITICAL,CWE-506,
+GHSA-6ph4-r249-58p2,2026-09-08T00:30:22Z,"Duplicate Advisory: knowns vulnerable to command injection",knowns,0,0.30.0,,HIGH,CWE-78,
 GHSA-6q22-g298-grjh,2026-04-04T06:13:25Z,"Directus: Unauthenticated Denial of Service via GraphQL Alias Amplification of Expensive Health Check Resolver",directus,0,11.17.0,,HIGH,CWE-400;CWE-770,
 GHSA-6q2v-vfwp-pvwh,2026-03-29T15:30:20Z,"Duplicate Advisory: OpenClaw's skills-install-download can be redirected outside the tools root by rebinding the validated base path",openclaw,0,2026.3.8,,MODERATE,CWE-367,
 GHSA-6qc7-jgq7-34rf,2020-09-02T20:18:18Z,"Malicious Package in exprss",exprss,0,,,CRITICAL,CWE-506,
@@ -8813,6 +9126,7 @@ GHSA-7qg7-6g3g-8vxg,2020-09-03T22:46:25Z,"Malicious Package in bwffer-xor",bwffe
 GHSA-7r5f-7qr4-pf6q,2020-09-03T19:03:33Z,"Sandbox Breakout / Arbitrary Code Execution in notevil",notevil,0,1.3.2,,HIGH,,
 GHSA-7r9x-hr76-jr96,2020-09-04T17:26:18Z,"Command Injection in giting",giting,0.0.0,,,CRITICAL,CWE-77,
 GHSA-7rgr-72hp-9wp3,2025-10-06T03:31:38Z,"Duplicate Advisory: Flowise is vulnerable to stored XSS via ""View Messages"" allows credential theft in FlowiseAI admin panel",flowise,0,3.0.5,,HIGH,CWE-79,
+GHSA-7rr2-8fr3-fjqx,2026-09-27T03:31:03Z,"Duplicate Advisory: vm2: Host Promise rejection from an exposed constructor can terminate the vm2 host process",vm2,0,3.12.2,,HIGH,CWE-248,
 GHSA-7rx3-28cr-v5wh,2026-03-29T15:17:15Z,"Handlebars.js has a Prototype Method Access Control Gap via Missing __lookupSetter__ Blocklist Entry",handlebars,4.6.0,4.7.9,,MODERATE,CWE-1321,
 GHSA-7rx4-c5vx-g8w3,2026-05-14T18:26:02Z,"Karakeep SDK has SSRF via metascraper-logo-favicon that bypasses validateUrl protections",@karakeep/sdk,0,0.32.0,,HIGH,CWE-918,
 GHSA-7v28-g2pq-ggg8,2022-06-17T01:16:03Z,"Ghost vulnerable to remote code execution in locale setting change",ghost,0,4.48.2,,MODERATE,,
@@ -8960,6 +9274,7 @@ GHSA-92hr-gmr6-h8cp,2026-08-17T17:49:21Z,"Etherpad addressed weak token RNG, log
 GHSA-92jp-89mq-4374,2026-04-17T20:08:01Z,"OpenClaw: Sandbox noVNC helper route exposed interactive browser session credentials",openclaw,2026.2.21,2026.4.10,,MODERATE,CWE-306,
 GHSA-93rg-2xm5-2p9v,2026-05-04T21:14:17Z,"OpenClaw's Gateway Control UI bootstrap config required Gateway auth",openclaw,0,2026.4.22,,MODERATE,CWE-287,
 GHSA-943q-mwmv-hhvh,2026-03-02T23:32:22Z,"OpenClaw: Gateway /tools/invoke tool escalation + ACP permission auto-approval",openclaw,0,2026.2.14,,HIGH,CWE-78,
+GHSA-9538-79j2-h62h,2026-09-17T15:32:16Z,"Duplicate Advisory: `allowAsync: false` can be bypassed through Promise thenable assimilation in VM and NodeVM",vm2,0,,3.11.7,HIGH,CWE-693,
 GHSA-95cg-3r4g-7w6j,2020-09-03T23:01:29Z,"Malicious Package in js-rha3",js-rha3,0.0.0,,,CRITICAL,CWE-506,
 GHSA-96h4-vgxj-gvm2,2026-09-30T14:44:21Z,"Nest: Unbounded memory growth in the NestJS TCP microservice transport",@nestjs/microservices,0,11.2.5,,MODERATE,CWE-770,
 GHSA-96h4-vgxj-gvm2,2026-09-30T14:44:21Z,"Nest: Unbounded memory growth in the NestJS TCP microservice transport",@nestjs/microservices,12.0.0,12.0.3,,MODERATE,CWE-770,
@@ -8994,6 +9309,7 @@ GHSA-9h6g-pr28-7cqp,2024-01-31T22:42:54Z,"nodemailer ReDoS when trying to send a
 GHSA-9hc2-hjx8-q6pv,2026-07-14T19:52:41Z,"TidGi Desktop Remote Code Execution via Malicious TiddlyWiki Repository Import — Tiddler Startup Module Auto-Execution",tidgi,0,,0.13.0,CRITICAL,CWE-94,
 GHSA-9hc2-w9gg-q6jw,2020-09-01T21:07:41Z,"Malicious Package in boogeyman",boogeyman,0.0.0,,,CRITICAL,CWE-506,
 GHSA-9hqj-38j2-5jgm,2020-09-01T21:19:23Z,"Command Injection in ascii-art",ascii-art,0,1.4.4,,LOW,CWE-77,
+GHSA-9hxx-m5g2-2q3h,2026-09-18T15:32:19Z,"Duplicate Advisory: vm2 contains a sandbox escape vulnerability",vm2,0,3.12.1,,CRITICAL,CWE-693,
 GHSA-9j32-3m66-mc4m,2026-05-11T18:31:47Z,"Duplicate Advisory: OpenClaw: Hook mapping templates could bypass hook session-key opt-in",openclaw,0,2026.4.20,,MODERATE,CWE-863,
 GHSA-9m65-766c-r333,2026-05-14T16:37:10Z,"TanStack Start - Server Core: Inbound server-function request deserialization could invoke a sibling client-referenced server function","@tanstack/start-server-core",0,1.167.30,,MODERATE,CWE-502;CWE-843,
 GHSA-9mjp-gv34-3jcf,2020-09-02T18:37:35Z,"Malicious Package in aasync",aasync,0,,,CRITICAL,CWE-506,
@@ -9071,6 +9387,7 @@ GHSA-c7pp-x73h-4m2v,2020-09-02T15:53:46Z,"Cross-Site Scripting in bootstrap-vue"
 GHSA-c7w3-x93f-qmm8,2026-03-26T22:26:46Z,"Nodemailer has SMTP command injection due to unsanitized `envelope.size` parameter",nodemailer,0,8.0.4,,LOW,CWE-93,
 GHSA-c85p-9pvr-f7f5,2026-06-13T00:34:33Z,"Duplicate Advisory: OpenClaw: Node pairing reconnection could confuse approval scope state",openclaw,0,2026.5.27,,MODERATE,CWE-367,
 GHSA-c8w7-9w9h-x69q,2026-06-16T21:31:58Z,"Duplicate Advisory: Slack reaction events could ignore reaction notification settings",openclaw,0,,2026.5.7,MODERATE,CWE-862,
+GHSA-c9wr-qm7p-p6vc,2026-09-27T03:31:03Z,"Duplicate Advisory: vm2: NodeVM custom resolution bypasses external path boundaries",vm2,0,3.12.2,,CRITICAL,CWE-863,
 GHSA-cc2g-gq8c-r332,2026-08-19T19:15:01Z,"grok-faf-mcp has an arbitrary local file read via unconfined `path` argument in FAF tools",grok-faf-mcp,0,1.5.3,,HIGH,CWE-200;CWE-22;CWE-73,
 GHSA-cc4f-hjpj-g9p8,2026-04-16T21:21:12Z,"Flowise: Weak Default JWT Secrets",flowise,0,3.1.0,,MODERATE,CWE-327,
 GHSA-cc9r-2j5m-2m83,2026-09-08T21:32:51Z,"Nodemailer: Recipient-domain validation bypass via RFC 5322 comment mis-parsing leads to email delivery to an attacker-controlled domain",nodemailer,6.9.16,9.1.0,,MODERATE,CWE-20;CWE-436,
@@ -9197,6 +9514,7 @@ GHSA-fr4h-3cph-29xv,2026-06-27T00:02:51Z,"pnpm: Hoisted install imports lockfile
 GHSA-fr4h-3cph-29xv,2026-06-27T00:02:51Z,"pnpm: Hoisted install imports lockfile alias outside node_modules",pnpm,11.0.0,11.7.0,,HIGH,CWE-22;CWE-73,
 GHSA-fr4j-65pv-gjjj,2026-01-13T20:28:16Z,"Renovate vulnerable to arbitrary command injection via npm manager and malicious Renovate configuration",renovate,35.63.0,40.33.0,,MODERATE,CWE-77,
 GHSA-fr9g-2m2h-c27j,2023-08-16T06:30:24Z,"Duplicate Advisory: @excalidraw/excalidraw Cross-site Scripting vulnerability",@excalidraw/excalidraw,0,0.15.3,,MODERATE,CWE-79,
+GHSA-frj6-5rhh-vwfw,2026-08-31T09:30:29Z,"Duplicate Advisory: Nodemailer: Improper TLS Certificate Validation in OAuth2 Token Fetch Enables Credential Interception",nodemailer,0,,8.0.7,HIGH,CWE-295,
 GHSA-frr5-j3mh-h9ch,2026-05-06T21:31:42Z,"Duplicate Advisory: OpenClaw: OpenShell FS bridge reads pin and verify the opened file before returning bytes",openclaw,0,2026.4.22,,MODERATE,CWE-367,
 GHSA-frvp-7c67-39w9,2026-07-21T18:17:25Z,"Node.js Adapter for Hono: Path traversal in `serve-static` on Windows via encoded backslash (`%5C`)",@hono/node-server,0,1.19.15,,MODERATE,CWE-22,
 GHSA-frvp-7c67-39w9,2026-07-21T18:17:25Z,"Node.js Adapter for Hono: Path traversal in `serve-static` on Windows via encoded backslash (`%5C`)",@hono/node-server,2.0.0,2.0.5,,MODERATE,CWE-22,
@@ -9212,11 +9530,14 @@ GHSA-g27f-9qjv-22pm,2026-02-17T21:31:39Z,"OpenClaw log poisoning (indirect promp
 GHSA-g2c4-4m64-vxm3,2020-09-03T22:15:25Z,"Malicious Package in buffer-yor",buffer-yor,0.0.0,,,CRITICAL,CWE-506,
 GHSA-g2f6-pwvx-r275,2026-03-16T20:41:12Z,"OpneClaw accepts unsanitized iMessage attachment paths which allowed SCP remote-path command injection",openclaw,0,2026.3.13,,HIGH,CWE-78,
 GHSA-g2gw-q38m-vjfc,2026-06-19T22:10:39Z,"Lokka: Azure Resource Manager URL path validation issue",@merill/lokka,0,2.1.2,,HIGH,CWE-918,
+GHSA-g2v6-rqmx-r4w6,2026-10-05T22:50:55Z,"@vue/server-renderer: XSS via missing CR in attribute-name blacklist",@vue/server-renderer,0,3.5.42,,HIGH,CWE-116;CWE-79,
+GHSA-g2v6-rqmx-r4w6,2026-10-05T22:50:55Z,"@vue/server-renderer: XSS via missing CR in attribute-name blacklist",@vue/server-renderer,3.6.0-rc.0,3.6.0-rc.6,,HIGH,CWE-116;CWE-79,
 GHSA-g336-c7wv-8hp3,2020-09-01T15:58:06Z,"Cross-Site Scripting in swagger-ui",swagger-ui,0,2.2.1,,CRITICAL,CWE-79,
 GHSA-g35x-j6jj-8g7j,2023-05-02T16:51:25Z,"@mittwald/kubernetes's secret contents leaked via debug logging",@mittwald/kubernetes,0,3.5.0,,MODERATE,CWE-532,
 GHSA-g375-h3v6-4873,2026-04-17T21:48:57Z,"OpenClaw: Heartbeat owner downgrade missed local async exec completion events",openclaw,2026.3.31,2026.4.10,,MODERATE,CWE-269,
 GHSA-g376-whg7-896m,2020-09-01T18:45:53Z,"Directory Traversal in yjmyjmyjm",yjmyjmyjm,0.0.0,,,HIGH,CWE-22,
 GHSA-g37j-v5gh-g25c,2020-09-03T23:06:48Z,"Malicious Package in js-shi3",js-shi3,0.0.0,,,CRITICAL,CWE-506,
+GHSA-g3pq-3vvx-36w6,2026-07-11T15:30:23Z,"Duplicate Advisory: PraisonAI: AgentOS defaults to network-exposed no-auth mode, allowing unauthenticated agent invocation and instruction disclosure",praisonai,0,,,HIGH,CWE-200,
 GHSA-g3qj-j598-cxmq,2026-03-24T19:10:38Z,"fido2-lib is vulnerable to DoS via cbor-extract heap buffer over-read in CBOR attestation parsing",fido2-lib,0,3.5.8,,HIGH,CWE-125;CWE-126;CWE-1395,
 GHSA-g3qw-9pgp-xpj4,2020-09-01T21:08:44Z,"Out-of-bounds Read in njwt",njwt,0,1.0.0,,LOW,CWE-125,
 GHSA-g43v-9x7q-83pq,2026-05-21T20:43:58Z,"@hulumi/policies: HULUMI-H1 SecureBucket parent spoof bypass",@hulumi/policies,0,1.3.2,,HIGH,CWE-284,
@@ -9233,6 +9554,10 @@ GHSA-g74r-ffvr-5q9f,2019-06-03T17:26:44Z,"Memory Exposure in concat-stream",conc
 GHSA-g74r-ffvr-5q9f,2019-06-03T17:26:44Z,"Memory Exposure in concat-stream",concat-stream,1.5.0,1.5.2,,MODERATE,CWE-200,
 GHSA-g753-jx37-7xwh,2020-06-30T16:05:08Z,"ECDSA signature vulnerability of Minerva timing attack in jsrsasign",jsrsasign,4.0.0,8.0.13,,MODERATE,CWE-362,
 GHSA-g796-jqmx-wf9q,2026-06-16T21:32:00Z,"Duplicate Advisory: macOS Swift exec allowlist missed combined POSIX inline flags",openclaw,0,,2026.5.5,MODERATE,CWE-184,
+GHSA-g7fw-3gjp-g5hf,2026-10-05T23:27:44Z,"OpenClaw: Channel read actions could skip target allowlists",@openclaw/feishu,0,2026.8.1,,MODERATE,CWE-862;CWE-863,
+GHSA-g7fw-3gjp-g5hf,2026-10-05T23:27:44Z,"OpenClaw: Channel read actions could skip target allowlists",@openclaw/googlechat,0,2026.8.1,,MODERATE,CWE-862;CWE-863,
+GHSA-g7fw-3gjp-g5hf,2026-10-05T23:27:44Z,"OpenClaw: Channel read actions could skip target allowlists",@openclaw/matrix,0,2026.8.1,,MODERATE,CWE-862;CWE-863,
+GHSA-g7fw-3gjp-g5hf,2026-10-05T23:27:44Z,"OpenClaw: Channel read actions could skip target allowlists",@openclaw/msteams,0,2026.8.1,,MODERATE,CWE-862;CWE-863,
 GHSA-g7h8-p22m-2rvx,2020-09-04T15:08:46Z,"Prototype Pollution in flat-wrap",flat-wrap,0.0.0,,,HIGH,CWE-1321,
 GHSA-g7mw-5cq6-fv82,2020-09-02T21:20:40Z,"Cross-Site Scripting in wangeditor",wangeditor,0,,,HIGH,CWE-79,
 GHSA-g7r4-m6w7-qqqr,2026-06-12T20:08:53Z,"esbuild allows arbitrary file read when running the development server on Windows",esbuild,0.27.3,0.28.1,,LOW,CWE-22,
@@ -9264,6 +9589,7 @@ GHSA-gfjr-xqhm-qvv3,2020-09-02T20:16:09Z,"Malicious Package in aysnc",aysnc,0,,,
 GHSA-gfm8-g3vm-53jh,2020-09-03T17:21:19Z,"Malicious Package in leetlog",leetlog,0.1.2,,,CRITICAL,CWE-506,
 GHSA-gfmx-pph7-g46x,2026-04-09T14:22:14Z,"OpenClaw: Lower-trust background runtime output is injected into trusted `System:` events, and local async exec completion misses the intended `exec-event` downgrade",openclaw,0,2026.4.8,,HIGH,CWE-501,
 GHSA-gfp8-mp24-5vxg,2026-05-21T20:43:27Z,"@hulumi/baseline: CloudTrail selector tampering events were not fully detected",@hulumi/baseline,0,1.3.2,,MODERATE,CWE-778,
+GHSA-gg6f-mhqm-f7gp,2026-09-17T15:32:16Z,"Duplicate Advisory: Sandbox Escape (NodeVM)",vm2,0,,3.11.7,CRITICAL,CWE-913,
 GHSA-gg6r-gp4c-89hp,2026-10-02T22:39:00Z,"Trigger.dev: V1 coordinator default-secret unauth Socket.IO",trigger.dev,0,4.5.4,,CRITICAL,CWE-200;CWE-798;CWE-862,
 GHSA-ggm6-h3mx-cmmp,2026-03-19T03:30:57Z,"Duplicate Advisory: safeBins stdin-only bypass via sort output and recursive grep flags",openclaw,0,,2026.2.17,LOW,CWE-78,
 GHSA-ghvf-qf6h-g8x5,2026-08-20T18:42:21Z,"NocoBase: Arbitrary File Write chained with Local file Inclusion leads to Remote code execution",@nocobase/server,0,2.1.5,,HIGH,"CWE-209;CWE-434;CWE-73;CWE-829",
@@ -9441,6 +9767,9 @@ GHSA-jf6w-m8jw-jfxc,2026-03-13T15:48:11Z,"OpenClaw: Write-scoped callers could r
 GHSA-jf8x-wg7f-p3w8,2020-09-03T18:22:33Z,"Malicious Package in cage-js",cage-js,0.0.0,,,CRITICAL,CWE-506,
 GHSA-jfcc-rm7f-xgf8,2020-09-03T20:36:35Z,"Cross-Site Scripting in mavon-editor",mavon-editor,0,2.8.2,,MODERATE,CWE-79,
 GHSA-jfx5-7mr2-g8hg,2020-09-03T17:31:41Z,"Malicious Package in alico",alico,0.0.0,,,CRITICAL,CWE-506,
+GHSA-jggr-w7fw-pc2j,2026-10-05T22:52:09Z,"fast-copy: Stack exhaustion in fast-copy when copying deeply-nested values",fast-copy,0,2.2.0,,MODERATE,CWE-674,
+GHSA-jggr-w7fw-pc2j,2026-10-05T22:52:09Z,"fast-copy: Stack exhaustion in fast-copy when copying deeply-nested values",fast-copy,3.0.0,3.1.0,,MODERATE,CWE-674,
+GHSA-jggr-w7fw-pc2j,2026-10-05T22:52:09Z,"fast-copy: Stack exhaustion in fast-copy when copying deeply-nested values",fast-copy,4.0.0,4.1.0,,MODERATE,CWE-674,
 GHSA-jh67-3wqw-cvhr,2020-09-03T23:13:52Z,"Malicious Package in js-sxa3",js-sxa3,0.0.0,,,CRITICAL,CWE-506,
 GHSA-jh8h-6c9q-7gmw,2026-02-26T22:45:41Z,"n8n has an Authentication Bypass in its Chat Trigger Node",n8n,0,1.123.22,,MODERATE,CWE-287,
 GHSA-jh8h-6c9q-7gmw,2026-02-26T22:45:41Z,"n8n has an Authentication Bypass in its Chat Trigger Node",n8n,2.0.0,2.9.3,,MODERATE,CWE-287,
@@ -9526,6 +9855,7 @@ GHSA-mfcp-34xw-p57x,2020-09-03T21:20:52Z,"Authentication Bypass in saml2-js",sam
 GHSA-mg69-6j3m-jvgw,2020-09-03T15:45:08Z,"HTML Injection in marky-markdown",marky-markdown,0.0.0,,,HIGH,CWE-79,
 GHSA-mg85-8mv5-ffjr,2020-09-03T15:45:40Z,"Denial of Service in ammo",ammo,0.0.0,,,HIGH,,
 GHSA-mgff-xpg3-3gwc,2020-09-03T19:42:25Z,"Malicious Package in bsae-x",bsae-x,0.0.0,,,CRITICAL,CWE-506,
+GHSA-mgj2-jqjq-q8gg,2026-09-17T15:32:16Z,"Duplicate Advisory: vm2: Host-returned Promise rejection can bypass vm2's unhandled-rejection hardening and terminate the host process",vm2,3.10.0,,3.11.7,CRITICAL,CWE-248,
 GHSA-mgv2-57vj-99xc,2019-10-07T16:54:24Z,"Low severity vulnerability that affects eye.js",eye.js,1.2.0,1.2.1,,LOW,,
 GHSA-mh5c-679w-hh4r,2020-09-03T21:12:01Z,"Denial of Service in mongodb",mongodb,0,3.1.13,,HIGH,,
 GHSA-mh6f-8j2x-4483,2018-11-26T23:58:21Z,"Critical severity vulnerability that affects event-stream and flatmap-stream",event-stream,3.3.6,4.0.0,,CRITICAL,CWE-506,
@@ -9546,6 +9876,7 @@ GHSA-mq9h-cwc2-6j5r,2020-09-03T17:42:27Z,"Malicious Package in midway-dataproxy"
 GHSA-mqhr-6j6h-74p5,2026-07-24T21:22:51Z," Budibase: Unauthenticated REST Datasource Credential Theft via Cross-Origin Auth Leak ",@budibase/server,0,,3.38.1,CRITICAL,CWE-200,
 GHSA-mrr8-v49w-3333,2023-07-10T19:08:10Z,"sweetalert2 contains potentially undesirable behavior",sweetalert2,11.6.14,11.22.4,,LOW,CWE-440,
 GHSA-mrvx-jmjw-vggc,2026-06-19T21:42:46Z," SearXNG MCP Server: DNS-resolved Private Hostname SSRF in `web_url_read`",mcp-searxng,0,1.7.1,,HIGH,CWE-918,
+GHSA-mrx9-2rrp-rhpx,2026-09-17T00:31:27Z,"Duplicate Advisory: joi: Quadratic regular-expression backtracking in `Joi.string().isoDate()`",joi,18.0.0,,,HIGH,CWE-1333,
 GHSA-mvch-rh6h-2m47,2020-09-11T21:10:29Z,"Malicious Package in equest",equest,0,,,CRITICAL,CWE-506,
 GHSA-mvrp-3cvx-c325,2023-10-04T14:46:06Z,"Zod denial of service vulnerability during email validation",express-zod-api,0,10.0.0-beta1,,HIGH,CWE-1333,
 GHSA-mvw6-62qv-vmqf,2025-07-25T06:30:30Z,"Duplicate Advisory: Koa Open Redirect via Referrer Header (User-Controlled)",koa,0,3.0.1,,LOW,CWE-601,
@@ -9632,7 +9963,6 @@ GHSA-pqhr-mp3f-hrpp,2026-03-31T23:26:29Z,"Nuxt OG Image vulnerable to Server-Sid
 GHSA-pqpp-2363-649v,2020-09-02T18:22:30Z,"Cross-Site Scripting in buttle",buttle,0,,,MODERATE,CWE-79,
 GHSA-pqxw-g93w-hj9x,2026-10-02T22:39:48Z,"Trigger.dev Self-Hosted Deployment: Default Secrets allow Unauthenticated Infrastructure Compromise",trigger.dev,0,4.5.6,,HIGH,CWE-1393;CWE-653,
 GHSA-pr66-whqj-rq5p,2026-04-24T00:31:51Z,"Duplicate Advisory: OpenClaw: Discord Component Interaction Misclassifies Group DM as Direct Message",openclaw,0,2026.3.31,,LOW,CWE-351,
-GHSA-prgh-xp8r-p3m5,2026-09-30T14:41:01Z,"Nodemailer addressparser: O(n^2) on comment-joined addresses enables a remote DoS (reachable via mailparser)",nodemailer,9.1.0,10.0.5,,HIGH,CWE-400;CWE-407,
 GHSA-prmc-5v5w-c465,2021-04-06T17:32:38Z,"Client TLS credentials sent raw to server in npm package nats",nats,2.0.0-201,2.0.0-209,,CRITICAL,CWE-522,
 GHSA-pv6r-vchh-cxg9,2020-09-03T20:42:09Z,"Denial of Service in apostrophe",apostrophe,0,2.97.1,,LOW,CWE-400,
 GHSA-pvcr-8mvp-w8qr,2026-07-24T21:42:51Z," Budibase: Chat-Link Handoff Identity Confusion (Same-Tenant Account-Link CSRF)",@budibase/server,0,,3.38.1,HIGH,CWE-285;CWE-345;CWE-352,
@@ -9751,6 +10081,7 @@ GHSA-r4m5-47cq-6qg8,2020-09-04T17:25:13Z,"Server-Side Request Forgery in ftp-srv
 GHSA-r4m5-47cq-6qg8,2020-09-04T17:25:13Z,"Server-Side Request Forgery in ftp-srv",ftp-srv,3.0.0,3.1.2,,HIGH,CWE-918,
 GHSA-r4m5-47cq-6qg8,2020-09-04T17:25:13Z,"Server-Side Request Forgery in ftp-srv",ftp-srv,4.0.0,4.3.4,,HIGH,CWE-918,
 GHSA-r4q5-vmmm-2653,2026-04-14T01:11:11Z,"follow-redirects leaks Custom Authentication Headers to Cross-Domain Redirect Targets",follow-redirects,0,1.16.0,,MODERATE,CWE-200,
+GHSA-r4xh-jqrq-34v2,2026-10-05T23:41:14Z,"smol-toml: Quadratic-time parse() from parseKey rescanning to end of document on each key line",smol-toml,0,1.9.0,,MODERATE,CWE-407,
 GHSA-r587-7jh2-4qr3,2020-08-26T19:32:50Z,"Server secret was included in static assets and served to clients",flood,2.0.0,3.0.0,,CRITICAL,,
 GHSA-r5w7-f542-q2j4,2025-01-28T20:37:26Z,"Potential DoS when using ContextLines integration","@sentry/google-cloud-serverless",8.10.0,8.49.0,,LOW,CWE-774,
 GHSA-r5w7-f542-q2j4,2025-01-28T20:37:26Z,"Potential DoS when using ContextLines integration",@sentry/astro,8.10.0,8.49.0,,LOW,CWE-774,
@@ -9767,7 +10098,6 @@ GHSA-r5xw-q988-826m,2020-09-01T19:39:37Z,"Remote Memory Exposure in mongoose",mo
 GHSA-r5xw-q988-826m,2020-09-01T19:39:37Z,"Remote Memory Exposure in mongoose",mongoose,4.0.0,4.3.6,,MODERATE,CWE-201,
 GHSA-r742-7j4h-hjr8,2020-09-03T23:27:36Z,"Malicious Package in arsenic-tabasco-cyborg-peanut-butter","arsenic-tabasco-cyborg-peanut-butter",0.0.0,,,CRITICAL,CWE-506,
 GHSA-r747-33r4-rmjw,2026-05-06T21:31:42Z,"Duplicate Advisory: OpenClaw: QQBot direct media upload skipped URL SSRF validation",openclaw,0,2026.4.20,,MODERATE,CWE-918,
-GHSA-r7g4-qg5f-qqm2,2026-06-15T17:34:48Z,"Nodemailer: Improper TLS Certificate Validation in OAuth2 Token Fetch Enables Credential Interception",nodemailer,0,8.0.8,,MODERATE,CWE-295,
 GHSA-r7p2-r9g4-4xph,2026-04-24T00:31:51Z,"Duplicate Advisory: OpenClaw: Gateway hello snapshots exposed host config and state paths to non-admin clients",openclaw,0,2026.4.2,,MODERATE,CWE-497,
 GHSA-r7vr-gr74-94p8,2026-03-13T20:55:09Z,"OpenClaw: Command-authorized non-owners could reach owner-only `/config` and `/debug` surfaces",openclaw,0,2026.3.12,,HIGH,CWE-285,
 GHSA-r7vv-6763-m739,2026-06-16T21:31:58Z,"Duplicate Advisory: Skill-command dispatch could skip before-tool-call hooks",openclaw,0,,2026.5.5,LOW,CWE-693,
@@ -9863,11 +10193,13 @@ GHSA-vhf8-cg2h-cg3p,2026-07-22T22:07:04Z,"n8n: SSRF Protection Bypass via MCP Cl
 GHSA-vhf8-cg2h-cg3p,2026-07-22T22:07:04Z,"n8n: SSRF Protection Bypass via MCP Client Node",n8n,2.32.0,2.32.1,,MODERATE,CWE-918,
 GHSA-vj2p-7pgw-g2wf,2026-03-27T15:46:53Z,"Postiz App has a High-Severity SSRF Vulnerability via Next.js",postiz,0,,2.0.12,HIGH,CWE-1395;CWE-918,
 GHSA-vjc7-jrh9-9j86,2026-07-06T21:22:10Z,"9router has unauthenticated CRUD on /api/providers and Full API Key Leak via /api/usage/stats",9router,0,,0.4.41,CRITICAL,CWE-200;CWE-306;CWE-862,
+GHSA-vjcv-9j33-wj62,2026-09-17T15:32:14Z,"Duplicate Advisory: vm2: timeout Option Bypass via FinalizationRegistry Cleanup Callback (Unbounded Host Event-Loop Block)",vm2,0,,3.11.6,HIGH,CWE-400,
 GHSA-vjf3-2gpj-233v,2026-02-26T22:45:13Z,"n8n has an SSO Enforcement Bypass in its Self-Service Settings API",n8n,0,2.8.0,,MODERATE,CWE-269;CWE-284;CWE-287,
 GHSA-vjh7-7g9h-fjfh,2025-02-12T19:47:52Z,"Elliptic's private key extraction in ECDSA upon signing a malformed input (e.g. a string)",elliptic,0,6.6.1,,CRITICAL,CWE-200,
 GHSA-vjqw-w5jr-g9w5,2026-03-29T15:30:19Z,"Duplicate Advisory: OpenClaw: Feishu webhook mode accepted forged events when only `verificationToken` was configured",openclaw,0,2026.3.12,,HIGH,CWE-347,
 GHSA-vjvw-wcmw-pr26,2020-09-04T17:37:08Z,"Insufficient Entropy in parsel",parsel,0.0.0,,,CRITICAL,CWE-331,
 GHSA-vm29-7mq3-9jrg,2026-03-31T12:31:35Z,"Duplicate Advisory: OpenClaw: Unavailable local auth SecretRefs could fall through to remote credentials in local mode",OpenClaw,0,2026.3.11,,LOW,CWE-636,
+GHSA-vm5r-23w9-m8hx,2026-09-13T12:31:12Z,"Duplicate Advisory: Nodemailer addressparser: O(n^2) on comment-joined addresses enables a remote DoS (reachable via mailparser)",nodemailer,9.1.0,,10.0.4,HIGH,CWE-407,
 GHSA-vm67-mh96-95mq,2020-09-03T21:40:48Z,"Malicious Package in bubfer-xor",bubfer-xor,0.0.0,,,CRITICAL,CWE-506,
 GHSA-vm6v-w6q2-mrrq,2020-09-03T19:20:05Z,"Malicious Package in bb-builder",bb-builder,0.0.0,,,CRITICAL,CWE-506,
 GHSA-vm7j-4rj6-mw2p,2020-09-03T21:08:42Z,"Malicious Package in ember_cli_babe",ember_cli_babe,0.0.0,,,CRITICAL,CWE-506,
@@ -9909,6 +10241,8 @@ GHSA-vxp4-25qp-86qh,2017-10-24T18:33:36Z,"Moderate severity vulnerability that a
 GHSA-w28w-gp39-m4p6,2026-07-24T16:23:59Z,"Prompty: Server-Side Template Injection to Remote Code Execution in the @prompty/core Nunjucks Renderer",@prompty/core,0,0.1.5,,CRITICAL,CWE-1336;CWE-94,
 GHSA-w28w-gp39-m4p6,2026-07-24T16:23:59Z,"Prompty: Server-Side Template Injection to Remote Code Execution in the @prompty/core Nunjucks Renderer",@prompty/core,2.0.0-alpha.1,2.0.0-beta.5,,CRITICAL,CWE-1336;CWE-94,
 GHSA-w2fm-25vw-vh7f,2026-04-01T23:58:50Z,"mcp-handler has a tool response leak across concurrent client sessions ('Race Condition')",mcp-handler,0,1.1.0,,HIGH,CWE-1395;CWE-362,
+GHSA-w2vw-w76x-qr89,2026-10-05T23:29:06Z,"Nx: OS command injection via git revisions and remote refs",nx,14.0.0,22.7.8,,HIGH,CWE-78;CWE-88,
+GHSA-w2vw-w76x-qr89,2026-10-05T23:29:06Z,"Nx: OS command injection via git revisions and remote refs",nx,23.0.0,23.1.1,,HIGH,CWE-78;CWE-88,
 GHSA-w32g-5hqp-gg6q,2020-09-02T15:41:41Z,"Cross-Site Scripting in mermaid",mermaid,0,8.2.3,,HIGH,CWE-79,
 GHSA-w37m-7fhw-fmv9,2025-12-11T22:49:56Z,"Next Server Actions Source Code Exposure ",next,15.0.0-canary.0,15.0.6,,MODERATE,CWE-1395;CWE-497;CWE-502,
 GHSA-w37m-7fhw-fmv9,2025-12-11T22:49:56Z,"Next Server Actions Source Code Exposure ",next,15.1.1-canary.0,15.1.10,,MODERATE,CWE-1395;CWE-497;CWE-502,
@@ -10008,6 +10342,7 @@ GHSA-wmpv-c2jp-j2xg,2021-11-15T23:28:18Z,"ERC1155Supply vulnerability in OpenZep
 GHSA-wmpv-c2jp-j2xg,2021-11-15T23:28:18Z,"ERC1155Supply vulnerability in OpenZeppelin Contracts",@openzeppelin/contracts,4.2.0,4.3.3,,LOW,,
 GHSA-wp2p-q35g-3rjj,2020-09-01T21:13:01Z,"Malicious Package in soket.io",soket.io,0,,,CRITICAL,CWE-506,
 GHSA-wpfc-3w63-g4hm,2020-09-01T21:09:48Z,"Malicious Package in axois",axois,0,,,CRITICAL,CWE-506,
+GHSA-wq5f-xc86-pv6w,2026-10-06T13:43:57Z,"sharp : Vulnerability in librsvg dependency CVE-2026-96889",sharp,0,0.35.5,,HIGH,CWE-1395;CWE-416,
 GHSA-wq64-hcrf-8m56,2026-07-22T12:32:17Z,"Duplicate Advisory: n8n: Privilege Escalation and Code Execution via Full Public API Key Scope Assignment to Token Exchange JWTs",n8n,0,,,HIGH,CWE-269,
 GHSA-wq95-wr7m-26h4,2025-10-06T03:31:38Z,"Duplicate Advisory: Flowise Stored XSS vulnerability through logs in chatbot",flowise,0,3.0.5,,HIGH,CWE-79,
 GHSA-wqg3-r97q-73xm,2026-09-17T15:32:15Z,"Duplicate Advisory: NodeVM builtin allowlist bypass via node:test.run() execArgv allows sandbox escape",vm2,3.9.6,,3.11.6,CRITICAL,CWE-693,
@@ -10055,6 +10390,7 @@ GHSA-x4rf-4mqf-cm8w,2020-08-19T22:44:22Z,"Open Redirect in ecstatic",ecstatic,0,
 GHSA-x4rf-4mqf-cm8w,2020-08-19T22:44:22Z,"Open Redirect in ecstatic",ecstatic,3.0.0,3.3.2,,MODERATE,,
 GHSA-x4rf-4mqf-cm8w,2020-08-19T22:44:22Z,"Open Redirect in ecstatic",ecstatic,4.0.0,4.1.2,,MODERATE,,
 GHSA-x565-32qp-m3vf,2024-04-11T21:30:30Z,"phin may include sensitive headers in subsequent requests after redirect",phin,0,3.7.1,,MODERATE,CWE-200,
+GHSA-x5qg-8pq6-39h6,2026-09-17T15:32:15Z,"Duplicate Advisory: Sandboxed code can read and write host-realm memory via Node's shared Buffer pool",vm2,0,,3.11.6,CRITICAL,CWE-200,
 GHSA-x5rw-q4pp-hg5g,2026-10-01T15:15:13Z,"devalue: stringifyAsync can cause an unhandled rejection despite a caught returned promise",devalue,5.8.0,5.9.3,,HIGH,CWE-248;CWE-755,
 GHSA-x6ch-c6rv-f7wh,2020-09-02T18:34:22Z,"Malicious Package in asymc",asymc,0,,,CRITICAL,CWE-506,
 GHSA-x6gq-467r-hwcc,2020-09-01T21:14:05Z,"Malicious Package in soket.js",soket.js,0,,,CRITICAL,CWE-506,