Skip to content

Commit 16adc3c

Browse files
advisory-database[bot]advisory-database[bot]
committed
Publish Advisories
GHSA-cq86-v72j-qxrj GHSA-wr93-5xph-995g GHSA-2cpw-3v2x-mh42 GHSA-3c8x-fp36-75xv GHSA-3wfp-66vf-pgv2 GHSA-4grg-xfv8-q8cj GHSA-53fm-c92p-fxxw GHSA-7238-mjjf-8jj4 GHSA-c6jr-7xqv-9vjv GHSA-hcgg-qj5x-56wj GHSA-hwwr-jxp3-vffw GHSA-mxw2-g58m-hfwm GHSA-p33j-7gxx-7v4f GHSA-p5g8-hwm5-93cc GHSA-pvcc-qwc9-278x GHSA-r976-2rf7-fgwv GHSA-rm49-qjx7-5qm5 GHSA-v5q7-f26g-qxgh GHSA-w3gv-q645-g39f GHSA-xf2r-mj9x-vg5q GHSA-xfxp-2jm6-g29w GHSA-xr2h-v539-xc2h
1 parent a348a0f commit 16adc3c

22 files changed

Lines changed: 899 additions & 2 deletions

File tree

‎advisories/unreviewed/2026/08/GHSA-cq86-v72j-qxrj/GHSA-cq86-v72j-qxrj.json‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-cq86-v72j-qxrj",
4-
"modified": "2026-09-18T12:31:14Z",
4+
"modified": "2026-09-21T09:31:08Z",
55
"published": "2026-08-12T21:31:43Z",
66
"aliases": [
77
"CVE-2026-73433"
@@ -47,6 +47,10 @@
4747
"type": "WEB",
4848
"url": "https://access.redhat.com/errata/RHSA-2026:68645"
4949
},
50+
{
51+
"type": "WEB",
52+
"url": "https://access.redhat.com/errata/RHSA-2026:69232"
53+
},
5054
{
5155
"type": "WEB",
5256
"url": "https://access.redhat.com/security/cve/CVE-2026-73433"

‎advisories/unreviewed/2026/08/GHSA-wr93-5xph-995g/GHSA-wr93-5xph-995g.json‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-wr93-5xph-995g",
4-
"modified": "2026-09-17T18:31:27Z",
4+
"modified": "2026-09-21T09:31:08Z",
55
"published": "2026-08-06T09:30:31Z",
66
"aliases": [
77
"CVE-2026-18649"
@@ -55,6 +55,10 @@
5555
"type": "WEB",
5656
"url": "https://access.redhat.com/errata/RHSA-2026:65999"
5757
},
58+
{
59+
"type": "WEB",
60+
"url": "https://access.redhat.com/errata/RHSA-2026:69232"
61+
},
5862
{
5963
"type": "WEB",
6064
"url": "https://access.redhat.com/security/cve/CVE-2026-18649"

‎advisories/unreviewed/2026/09/GHSA-2cpw-3v2x-mh42/GHSA-2cpw-3v2x-mh42.json‎

Lines changed: 40 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,40 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-2cpw-3v2x-mh42",
4+
"modified": "2026-09-21T09:31:08Z",
5+
"published": "2026-09-21T09:31:08Z",
6+
"aliases": [
7+
"CVE-2026-94217"
8+
],
9+
"details": "A flaw was found in the User-Managed Access (UMA) implementation of Keycloak. The issue occurs in the authorization token endpoint when processing permission tickets. If two different users own resources with the same name, the system incorrectly merges the permissions from both resources when one user requests an authorization token. This allows an attacker to gain access scopes on a victim's resource that were never intended to be shared.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-94217"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://access.redhat.com/security/cve/CVE-2026-94217"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2537313"
29+
}
30+
],
31+
"database_specific": {
32+
"cwe_ids": [
33+
"CWE-862"
34+
],
35+
"severity": "LOW",
36+
"github_reviewed": false,
37+
"github_reviewed_at": null,
38+
"nvd_published_at": "2026-09-21T07:16:54Z"
39+
}
40+
}

‎advisories/unreviewed/2026/09/GHSA-3c8x-fp36-75xv/GHSA-3c8x-fp36-75xv.json‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-3c8x-fp36-75xv",
4+
"modified": "2026-09-21T09:31:08Z",
5+
"published": "2026-09-21T09:31:08Z",
6+
"aliases": [
7+
"CVE-2026-47321"
8+
],
9+
"details": "The CompressionFilter class uses ZLib to deflate and inflate data sent and received. When we inflate incoming data, the filter does not control the resulting size, and create a buffer no matter what.\n\nSome compressed data may have a compression ration greater than 1 thousand, leading to an exhaustion of the application memory, as we don't control the deflated size.\n\n\n\n\nThe fix adds such a control by allowing the application developer to provide a fixed size limit, which when reached throws an exception. It also allows the user to provide a compression ratio that should not be exceeded, protected the application from small inflated files that inflate in gigantic files, but with a grace limit for the resulting size (1Mb) to avoid false positive (like a very small file inflating with a high ratio, but resulting with a acceptable size, like a few thousands bytes)\n\n\n\n\nFor application using this feature, it is highly recommended to create the CompressionFilter and to pass the maximum limit as a forth constructor parameter, maxDecompressedSize:\n\n\n\n\npublic CompressionFilter(final boolean compressInbound, final boolean compressOutbound, final int compressionLevel, final int maxDecompressedSize)Optionally one can also provide a maxDecompressRatio fifth parameter, and a decompressRatioMinSize sixth parameter to allow small inflated files with a high compression ratio to still be accepted.\n\n\n\n\nHere are the additional constructor:\n\n\n\n\n\n\npublic CompressionFilter(final boolean compressInbound, final boolean compressOutbound,\n\n\n\n final int compressionLevel, final int maxDecompressedSize,\n\n\n\n final long maxDecompressRatio, final long decompressRatioMinSize)\n\n\n\n\n\n\n\n\nAlso note that a fluent API has been added to spare the users the pain to call a constructor with that many parameters:\n\n\n\n\n\n\n CompressionFilter compressionFilter = new CompressionFilter()\n\n    .setCompressionLevel(Zlib.COMPRESSION_MAX)\n\n  .setMaxDecompressedSize(1_000_000)\n\n  .setMaxDecompressRatio(100).\n\n  .setDecompressRatioMinSize(100_000); \n\n\n\n\n\n\n\n\n\nApplications using Apache MINA are advised to upgrade and configure their CompressionFilter instance.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47321"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://lists.apache.org/thread/y7xj1bl8qo47p9bktb11hg5v6k1d4dyj"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-409"
30+
],
31+
"severity": "HIGH",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2026-09-21T08:16:37Z"
35+
}
36+
}

‎advisories/unreviewed/2026/09/GHSA-3wfp-66vf-pgv2/GHSA-3wfp-66vf-pgv2.json‎

Lines changed: 52 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,52 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-3wfp-66vf-pgv2",
4+
"modified": "2026-09-21T09:31:08Z",
5+
"published": "2026-09-21T09:31:08Z",
6+
"aliases": [
7+
"CVE-2026-94146"
8+
],
9+
"details": "A vulnerability was found in BioStar BIOS Update Utility 1.9.7.3. This issue affects the function sub_110BC of the file BSMEM64_W10.sys of the component IOCTL Handler. The manipulation of the argument PhysicalAddress/Size results in write-what-where condition. Attacking locally is a requirement. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-94146"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://vuldb.com/cve/CVE-2026-94146"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://vuldb.com/submit/894066"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://vuldb.com/vuln/408061"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://vuldb.com/vuln/408061/cti"
41+
}
42+
],
43+
"database_specific": {
44+
"cwe_ids": [
45+
"CWE-119"
46+
],
47+
"severity": "HIGH",
48+
"github_reviewed": false,
49+
"github_reviewed_at": null,
50+
"nvd_published_at": "2026-09-21T07:16:53Z"
51+
}
52+
}

‎advisories/unreviewed/2026/09/GHSA-4grg-xfv8-q8cj/GHSA-4grg-xfv8-q8cj.json‎

Lines changed: 34 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,34 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-4grg-xfv8-q8cj",
4+
"modified": "2026-09-21T09:31:09Z",
5+
"published": "2026-09-21T09:31:09Z",
6+
"aliases": [
7+
"CVE-2026-85113"
8+
],
9+
"details": "The GiveWP WordPress plugin before 4.16.9 does not remove shortcode delimiters from donor-supplied values before rendering them on public pages, and the shortcode stripping it applies can be defeated by nesting, allowing unauthenticated users to execute arbitrary shortcodes registered on the site.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85113"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://wpscan.com/vulnerability/b092c718-9a29-4153-894f-47892e7ba423"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [],
29+
"severity": "MODERATE",
30+
"github_reviewed": false,
31+
"github_reviewed_at": null,
32+
"nvd_published_at": "2026-09-21T09:17:06Z"
33+
}
34+
}

‎advisories/unreviewed/2026/09/GHSA-53fm-c92p-fxxw/GHSA-53fm-c92p-fxxw.json‎

Lines changed: 40 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,40 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-53fm-c92p-fxxw",
4+
"modified": "2026-09-21T09:31:09Z",
5+
"published": "2026-09-21T09:31:09Z",
6+
"aliases": [
7+
"CVE-2026-15801"
8+
],
9+
"details": "A vulnerability was found in CRI-O related to the container checkpoint and restore feature. When CRI-O is configured to restore containers from checkpoint archives, insufficient validation of restore metadata may allow a user with sufficient privileges to perform unintended operations on the host filesystem. Successful exploitation requires that container checkpoint and restore functionality is enabled, which is not the default configuration. An attacker must also be able to trigger restoration of a container from untrusted checkpoint content.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15801"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://access.redhat.com/security/cve/CVE-2026-15801"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500823"
29+
}
30+
],
31+
"database_specific": {
32+
"cwe_ids": [
33+
"CWE-22"
34+
],
35+
"severity": "HIGH",
36+
"github_reviewed": false,
37+
"github_reviewed_at": null,
38+
"nvd_published_at": "2026-09-21T09:17:05Z"
39+
}
40+
}

‎advisories/unreviewed/2026/09/GHSA-7238-mjjf-8jj4/GHSA-7238-mjjf-8jj4.json‎

Lines changed: 40 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,40 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-7238-mjjf-8jj4",
4+
"modified": "2026-09-21T09:31:08Z",
5+
"published": "2026-09-21T09:31:08Z",
6+
"aliases": [
7+
"CVE-2026-94213"
8+
],
9+
"details": "A flaw was found in the Authorization Services component of Keycloak, an open-source identity and access management solution. The issue occurs in the policy evaluation endpoint, which is used by administrators to test how access policies apply to specific users. Due to missing authorization checks, a delegated administrator with limited viewing privileges can access the full profile and role information of any user in the realm, even if they are not permitted to view user details. This could lead to the exposure of sensitive information such as email addresses and assigned security roles.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-94213"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://access.redhat.com/security/cve/CVE-2026-94213"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2537310"
29+
}
30+
],
31+
"database_specific": {
32+
"cwe_ids": [
33+
"CWE-862"
34+
],
35+
"severity": "MODERATE",
36+
"github_reviewed": false,
37+
"github_reviewed_at": null,
38+
"nvd_published_at": "2026-09-21T07:16:54Z"
39+
}
40+
}

‎advisories/unreviewed/2026/09/GHSA-c6jr-7xqv-9vjv/GHSA-c6jr-7xqv-9vjv.json‎

Lines changed: 56 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,56 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-c6jr-7xqv-9vjv",
4+
"modified": "2026-09-21T09:31:08Z",
5+
"published": "2026-09-21T09:31:08Z",
6+
"aliases": [
7+
"CVE-2026-94144"
8+
],
9+
"details": "A flaw has been found in drogonframework drogon up to 1.9.13. This affects the function makeCriteria in the library orm_lib/src/Criteria.cc of the component ORM. Executing a manipulation of the argument filter can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-94144"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://gist.github.com/2H-K/bf8328f70f72196545b0d9589367cb6a"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://vuldb.com/cve/CVE-2026-94144"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://vuldb.com/submit/893929"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://vuldb.com/vuln/408059"
41+
},
42+
{
43+
"type": "WEB",
44+
"url": "https://vuldb.com/vuln/408059/cti"
45+
}
46+
],
47+
"database_specific": {
48+
"cwe_ids": [
49+
"CWE-74"
50+
],
51+
"severity": "MODERATE",
52+
"github_reviewed": false,
53+
"github_reviewed_at": null,
54+
"nvd_published_at": "2026-09-21T07:16:53Z"
55+
}
56+
}

‎advisories/unreviewed/2026/09/GHSA-hcgg-qj5x-56wj/GHSA-hcgg-qj5x-56wj.json‎

Lines changed: 29 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,29 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-hcgg-qj5x-56wj",
4+
"modified": "2026-09-21T09:31:08Z",
5+
"published": "2026-09-21T09:31:08Z",
6+
"aliases": [
7+
"CVE-2026-82187"
8+
],
9+
"details": "The Web to Print Online Designer WordPress plugin before 2.15.0 does not validate the type or extension of uploaded files, and hands the token protecting those uploads to any visitor who asks for it, allowing unauthenticated attackers to upload arbitrary files, including PHP ones, and run code on the server.",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-82187"
16+
},
17+
{
18+
"type": "WEB",
19+
"url": "https://wpscan.com/vulnerability/d3e49486-6c08-41d5-86c9-3aaff670fc63"
20+
}
21+
],
22+
"database_specific": {
23+
"cwe_ids": [],
24+
"severity": null,
25+
"github_reviewed": false,
26+
"github_reviewed_at": null,
27+
"nvd_published_at": "2026-09-21T07:16:53Z"
28+
}
29+
}

0 commit comments

Comments
 (0)