Skip to content

Commit 4a89dbf

Browse files
advisory-database[bot]advisory-database[bot]
committed
Advisory Database Sync
1 parent 0dd36fd commit 4a89dbf

56 files changed

Lines changed: 1793 additions & 47 deletions

File tree

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

‎advisories/unreviewed/2026/03/GHSA-rjf5-cxrf-4rvw/GHSA-rjf5-cxrf-4rvw.json‎

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,9 @@
2525
}
2626
],
2727
"database_specific": {
28-
"cwe_ids": [],
28+
"cwe_ids": [
29+
"CWE-77"
30+
],
2931
"severity": "HIGH",
3032
"github_reviewed": false,
3133
"github_reviewed_at": null,

‎advisories/unreviewed/2026/04/GHSA-28r5-hvrv-cvq5/GHSA-28r5-hvrv-cvq5.json‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-28r5-hvrv-cvq5",
4+
"modified": "2026-04-07T15:30:49Z",
5+
"published": "2026-04-07T15:30:49Z",
6+
"aliases": [
7+
"CVE-2026-23818"
8+
],
9+
"details": "A vulnerability has been identified in the graphical user interface (GUI) of HPE Aruba Networking Private 5G Core On-Prem that could allow an attacker to abuse an open redirect vulnerability in the login flow using a crafted URL. Successful exploitation may redirect an authenticated user to an attacker-controlled server hosting a spoofed login page prompting the unsuspecting victim to give away their credentials, which could then be captured by the attacker, before being redirected back to the legitimate login page.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23818"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05032en_us&docLocale=en_US"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-601"
30+
],
31+
"severity": "HIGH",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2026-04-07T13:16:45Z"
35+
}
36+
}

‎advisories/unreviewed/2026/04/GHSA-3593-xf56-f85v/GHSA-3593-xf56-f85v.json‎

Lines changed: 40 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,40 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-3593-xf56-f85v",
4+
"modified": "2026-04-07T15:30:51Z",
5+
"published": "2026-04-07T15:30:50Z",
6+
"aliases": [
7+
"CVE-2026-5627"
8+
],
9+
"details": "A path traversal vulnerability exists in mintplex-labs/anything-llm versions up to and including 1.9.1, within the `AgentFlows` component. The vulnerability arises from improper handling of user input in the `loadFlow` and `deleteFlow` methods in `server/utils/agentFlows/index.js`. Specifically, the combination of `path.join` and `normalizePath` allows attackers to bypass directory restrictions and access or delete arbitrary `.json` files on the server. This can lead to information disclosure, such as leaking sensitive configuration files containing API keys, or denial of service by deleting critical files like `package.json`. The issue is resolved in version 1.12.1.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5627"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://github.com/mintplex-labs/anything-llm/commit/3444b9b0aa6764d72d53670ab4b1aaccdc6b7017"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://huntr.com/bounties/597d41c5-7ea0-4786-80f4-bd536ec66374"
29+
}
30+
],
31+
"database_specific": {
32+
"cwe_ids": [
33+
"CWE-29"
34+
],
35+
"severity": "CRITICAL",
36+
"github_reviewed": false,
37+
"github_reviewed_at": null,
38+
"nvd_published_at": "2026-04-07T14:16:24Z"
39+
}
40+
}

‎advisories/unreviewed/2026/04/GHSA-46r5-x6jq-v8g6/GHSA-46r5-x6jq-v8g6.json‎

Lines changed: 40 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,40 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-46r5-x6jq-v8g6",
4+
"modified": "2026-04-07T15:30:50Z",
5+
"published": "2026-04-07T15:30:50Z",
6+
"aliases": [
7+
"CVE-2026-33866"
8+
],
9+
"details": "MLflow is vulnerable to an authorization bypass affecting the AJAX endpoint used to download saved model artifacts. Due to missing access‑control validation, a user without permissions to a given experiment can directly query this endpoint and retrieve model artifacts they are not authorized to access.\n\n \nThis issue affects MLflow version through 3.10.1",
10+
"severity": [
11+
{
12+
"type": "CVSS_V4",
13+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33866"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://github.com/mlflow/mlflow/pull/21708"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://cert.pl/en/posts/2026/04/CVE-2026-33865"
29+
}
30+
],
31+
"database_specific": {
32+
"cwe_ids": [
33+
"CWE-862"
34+
],
35+
"severity": "MODERATE",
36+
"github_reviewed": false,
37+
"github_reviewed_at": null,
38+
"nvd_published_at": "2026-04-07T13:16:47Z"
39+
}
40+
}

‎advisories/unreviewed/2026/04/GHSA-4wx7-2hfw-hhff/GHSA-4wx7-2hfw-hhff.json‎

Lines changed: 11 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,18 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-4wx7-2hfw-hhff",
4-
"modified": "2026-04-06T15:31:28Z",
4+
"modified": "2026-04-07T15:30:42Z",
55
"published": "2026-04-06T15:31:28Z",
66
"aliases": [
77
"CVE-2026-31151"
88
],
99
"details": "An issue in the login mechanism of Kaleris YMS v7.2.2.1 allows attackers to bypass login verification to access the application 's resources.",
10-
"severity": [],
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
14+
}
15+
],
1116
"affected": [],
1217
"references": [
1318
{
@@ -24,8 +29,10 @@
2429
}
2530
],
2631
"database_specific": {
27-
"cwe_ids": [],
28-
"severity": null,
32+
"cwe_ids": [
33+
"CWE-288"
34+
],
35+
"severity": "CRITICAL",
2936
"github_reviewed": false,
3037
"github_reviewed_at": null,
3138
"nvd_published_at": "2026-04-06T15:17:09Z"

‎advisories/unreviewed/2026/04/GHSA-542q-mcfv-688v/GHSA-542q-mcfv-688v.json‎

Lines changed: 40 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,40 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-542q-mcfv-688v",
4+
"modified": "2026-04-07T15:30:52Z",
5+
"published": "2026-04-07T15:30:52Z",
6+
"aliases": [
7+
"CVE-2026-5383"
8+
],
9+
"details": "An issue that could allow access to Explorer groups from outside of the authorized organization scope has been resolved. This is an instance of CWE-863: Incorrect Authorization, and has an estimated CVSS score of CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:L (4.4 Medium). This issue was fixed in version 4.0.260208.0 of the runZero Explorer.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:L"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5383"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://help.runzero.com/docs/release-notes/#402602080"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://www.runzero.com/advisories/runzero-explorer-cve-2026-5383"
29+
}
30+
],
31+
"database_specific": {
32+
"cwe_ids": [
33+
"CWE-863"
34+
],
35+
"severity": "MODERATE",
36+
"github_reviewed": false,
37+
"github_reviewed_at": null,
38+
"nvd_published_at": "2026-04-07T15:17:48Z"
39+
}
40+
}

‎advisories/unreviewed/2026/04/GHSA-5fhv-ppcw-vh7h/GHSA-5fhv-ppcw-vh7h.json‎

Lines changed: 40 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,40 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-5fhv-ppcw-vh7h",
4+
"modified": "2026-04-07T15:30:52Z",
5+
"published": "2026-04-07T15:30:52Z",
6+
"aliases": [
7+
"CVE-2026-5375"
8+
],
9+
"details": "An issue that could allow a user with access to a credential to view sensitive fields through an API response has been resolved. This is an instance of CWE-200: Exposure of Sensitive Information to an Unauthorized Actor, and has an estimated CVSS score of CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N (2.7 Low). This issue was fixed in version 4.0.260203.0 of the runZero Platform.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5375"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://help.runzero.com/docs/release-notes/#402602030"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://www.runzero.com/advisories/runzero-platform-api-cred-infoleak-cve-2026-5375"
29+
}
30+
],
31+
"database_specific": {
32+
"cwe_ids": [
33+
"CWE-200"
34+
],
35+
"severity": "LOW",
36+
"github_reviewed": false,
37+
"github_reviewed_at": null,
38+
"nvd_published_at": "2026-04-07T15:17:47Z"
39+
}
40+
}

‎advisories/unreviewed/2026/04/GHSA-5h6h-2wjp-jc72/GHSA-5h6h-2wjp-jc72.json‎

Lines changed: 8 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,18 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-5h6h-2wjp-jc72",
4-
"modified": "2026-04-07T06:30:27Z",
4+
"modified": "2026-04-07T15:30:48Z",
55
"published": "2026-04-07T06:30:27Z",
66
"aliases": [
77
"CVE-2026-20433"
88
],
99
"details": "In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01088681; Issue ID: MSV-4460.",
10-
"severity": [],
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
14+
}
15+
],
1116
"affected": [],
1217
"references": [
1318
{
@@ -23,7 +28,7 @@
2328
"cwe_ids": [
2429
"CWE-787"
2530
],
26-
"severity": null,
31+
"severity": "HIGH",
2732
"github_reviewed": false,
2833
"github_reviewed_at": null,
2934
"nvd_published_at": "2026-04-07T04:17:12Z"

‎advisories/unreviewed/2026/04/GHSA-5mf9-h53q-7mhq/GHSA-5mf9-h53q-7mhq.json‎

Lines changed: 39 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,39 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-5mf9-h53q-7mhq",
4+
"modified": "2026-04-07T15:30:51Z",
5+
"published": "2026-04-07T15:30:51Z",
6+
"aliases": [
7+
"CVE-2026-33033"
8+
],
9+
"details": "An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30.\n`MultiPartParser` allows remote attackers to degrade performance by submitting multipart uploads with `Content-Transfer-Encoding: base64` including excessive whitespace.\nEarlier, unsupported Django series (such as 5.0.x, 4.1.x, and 3.2.x) were not evaluated and may also be affected.\nDjango would like to thank Seokchan Yoon for reporting this issue.",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33033"
16+
},
17+
{
18+
"type": "WEB",
19+
"url": "https://docs.djangoproject.com/en/dev/releases/security"
20+
},
21+
{
22+
"type": "WEB",
23+
"url": "https://groups.google.com/g/django-announce"
24+
},
25+
{
26+
"type": "WEB",
27+
"url": "https://www.djangoproject.com/weblog/2026/apr/07/security-releases"
28+
}
29+
],
30+
"database_specific": {
31+
"cwe_ids": [
32+
"CWE-407"
33+
],
34+
"severity": null,
35+
"github_reviewed": false,
36+
"github_reviewed_at": null,
37+
"nvd_published_at": "2026-04-07T15:17:39Z"
38+
}
39+
}

‎advisories/unreviewed/2026/04/GHSA-5qcv-4rpc-jp93/GHSA-5qcv-4rpc-jp93.json‎

Lines changed: 40 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,40 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-5qcv-4rpc-jp93",
4+
"modified": "2026-04-07T15:30:50Z",
5+
"published": "2026-04-07T15:30:50Z",
6+
"aliases": [
7+
"CVE-2026-35554"
8+
],
9+
"details": "A race condition in the Apache Kafka Java producer client’s buffer pool management can cause messages to be silently delivered to incorrect topics.\n\nWhen a produce batch expires due to delivery.timeout.ms while a network request containing that batch is still in flight, the batch’s ByteBuffer is prematurely deallocated and returned to the buffer pool. If a subsequent producer batch—potentially destined for a different topic—reuses this freed buffer before the original network request completes, the buffer contents may become corrupted. This can result in messages being delivered to unintended topics without any error being reported to the producer.\n\n\nData Confidentiality:\nMessages intended for one topic may be delivered to a different topic, potentially exposing sensitive data to consumers who have access to the destination topic but not the intended source topic.\n\nData Integrity:\nConsumers on the receiving topic may encounter unexpected or incompatible messages, leading to deserialization failures, processing errors, and corrupted downstream data.\n\nThis issue affects Apache Kafka versions ≤ 3.9.1, ≤ 4.0.1, and  ≤ 4.1.1.\n\nKafka users are advised to upgrade to 3.9.2, 4.0.2, 4.1.2, 4.2.0, or later to address this vulnerability.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35554"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://issues.apache.org/jira/browse/KAFKA-19012"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://lists.apache.org/thread/f07x7j8ovyqhjd1to25jsnqbm6wj01d6"
29+
}
30+
],
31+
"database_specific": {
32+
"cwe_ids": [
33+
"CWE-362"
34+
],
35+
"severity": "HIGH",
36+
"github_reviewed": false,
37+
"github_reviewed_at": null,
38+
"nvd_published_at": "2026-04-07T14:16:23Z"
39+
}
40+
}

0 commit comments

Comments
 (0)