Skip to content

Commit 2ec96ce

Browse files
advisory-database[bot]advisory-database[bot]
committed
Publish Advisories
GHSA-24pq-v99h-hj63 GHSA-63qx-qw7q-xchq GHSA-7jpq-3q84-h4j2 GHSA-9h85-xr59-9fh8 GHSA-jf58-7v68-wxqh GHSA-p62g-3997-c6pg GHSA-rh54-3493-vqgc GHSA-v35f-8947-mrhp GHSA-wrf3-7w3v-qwv2
1 parent e73cbde commit 2ec96ce

9 files changed

Lines changed: 465 additions & 1 deletion

File tree

‎advisories/unreviewed/2026/09/GHSA-24pq-v99h-hj63/GHSA-24pq-v99h-hj63.json‎

Lines changed: 56 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,56 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-24pq-v99h-hj63",
4+
"modified": "2026-09-21T00:30:25Z",
5+
"published": "2026-09-21T00:30:25Z",
6+
"aliases": [
7+
"CVE-2026-94094"
8+
],
9+
"details": "A flaw has been found in OpenClaw up to 2026.9.5. Affected is the function createCanvasHostHandler of the file extensions/canvas/src/host/server.ts of the component Canvas Host Route. Executing a manipulation can lead to denial of service. The attack can be launched remotely. The exploit has been published and may be used. Fix suggestion's \"streaming/size-limit\" was never shipped - latest 2026.9.5 still buffers the whole file via readFile() (src/canvas/serve.runtime.ts:17,114), unlike the sibling WS path which caps at 64KB. The vendor was contacted early about this disclosure.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-94094"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/lche511/cve/tree/main/OpenClaw_Canvas_Big_GET_DoS_Report"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://vuldb.com/cve/CVE-2026-94094"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://vuldb.com/submit/882009"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://vuldb.com/vuln/408023"
41+
},
42+
{
43+
"type": "WEB",
44+
"url": "https://vuldb.com/vuln/408023/cti"
45+
}
46+
],
47+
"database_specific": {
48+
"cwe_ids": [
49+
"CWE-404"
50+
],
51+
"severity": "LOW",
52+
"github_reviewed": false,
53+
"github_reviewed_at": null,
54+
"nvd_published_at": "2026-09-20T23:17:03Z"
55+
}
56+
}

‎advisories/unreviewed/2026/09/GHSA-63qx-qw7q-xchq/GHSA-63qx-qw7q-xchq.json‎

Lines changed: 56 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,56 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-63qx-qw7q-xchq",
4+
"modified": "2026-09-21T00:30:25Z",
5+
"published": "2026-09-21T00:30:25Z",
6+
"aliases": [
7+
"CVE-2026-94095"
8+
],
9+
"details": "A vulnerability has been found in Netcore NBR200V2 1.3.241127.071246. Affected by this vulnerability is an unknown functionality of the file /usr/bin/network_tools of the component Traceroute Diagnostic Feature. The manipulation of the argument url leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-94095"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://app.notion.com/p/Netcore-NBR200V2-Vul-3-39f797159f15802296c7f6e110363435"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://vuldb.com/cve/CVE-2026-94095"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://vuldb.com/submit/892986"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://vuldb.com/vuln/408024"
41+
},
42+
{
43+
"type": "WEB",
44+
"url": "https://vuldb.com/vuln/408024/cti"
45+
}
46+
],
47+
"database_specific": {
48+
"cwe_ids": [
49+
"CWE-74"
50+
],
51+
"severity": "HIGH",
52+
"github_reviewed": false,
53+
"github_reviewed_at": null,
54+
"nvd_published_at": "2026-09-21T00:16:59Z"
55+
}
56+
}

‎advisories/unreviewed/2026/09/GHSA-7jpq-3q84-h4j2/GHSA-7jpq-3q84-h4j2.json‎

Lines changed: 56 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,56 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-7jpq-3q84-h4j2",
4+
"modified": "2026-09-21T00:30:25Z",
5+
"published": "2026-09-21T00:30:25Z",
6+
"aliases": [
7+
"CVE-2026-94097"
8+
],
9+
"details": "A vulnerability was determined in Netcore NBR200V2 1.3.241127.071246. This affects an unknown part of the file /www/cgi-bin/network_tools of the component CGI Diagnostic Endpoint. This manipulation of the argument param/key/val causes command injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-94097"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://app.notion.com/p/Netcore-NBR200V2-Vul-5-39f797159f15809dbc06d2d3ae6b1f04"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://vuldb.com/cve/CVE-2026-94097"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://vuldb.com/submit/892990"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://vuldb.com/vuln/408026"
41+
},
42+
{
43+
"type": "WEB",
44+
"url": "https://vuldb.com/vuln/408026/cti"
45+
}
46+
],
47+
"database_specific": {
48+
"cwe_ids": [
49+
"CWE-74"
50+
],
51+
"severity": "CRITICAL",
52+
"github_reviewed": false,
53+
"github_reviewed_at": null,
54+
"nvd_published_at": "2026-09-21T00:16:59Z"
55+
}
56+
}

‎advisories/unreviewed/2026/09/GHSA-9h85-xr59-9fh8/GHSA-9h85-xr59-9fh8.json‎

Lines changed: 60 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,60 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-9h85-xr59-9fh8",
4+
"modified": "2026-09-21T00:30:25Z",
5+
"published": "2026-09-21T00:30:25Z",
6+
"aliases": [
7+
"CVE-2026-94091"
8+
],
9+
"details": "A weakness has been identified in piskvorky gensim up to 4.4.0. The impacted element is the function Load of the file gensim/utils.py of the component Model Loader. This manipulation of the argument fname causes deserialization. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. Maintainer closed #3663 same-day with no comment, PR, or fix; repo's last push (2025-11-01) predates the report, so the unsafe pickle.load in SaveLoad.load remains unguarded at develop HEAD.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-94091"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/piskvorky/gensim/issues/3663"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://github.com/piskvorky/gensim"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://vuldb.com/cve/CVE-2026-94091"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://vuldb.com/submit/952644"
41+
},
42+
{
43+
"type": "WEB",
44+
"url": "https://vuldb.com/vuln/408020"
45+
},
46+
{
47+
"type": "WEB",
48+
"url": "https://vuldb.com/vuln/408020/cti"
49+
}
50+
],
51+
"database_specific": {
52+
"cwe_ids": [
53+
"CWE-20"
54+
],
55+
"severity": "LOW",
56+
"github_reviewed": false,
57+
"github_reviewed_at": null,
58+
"nvd_published_at": "2026-09-20T23:17:02Z"
59+
}
60+
}

‎advisories/unreviewed/2026/09/GHSA-jf58-7v68-wxqh/GHSA-jf58-7v68-wxqh.json‎

Lines changed: 60 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,60 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-jf58-7v68-wxqh",
4+
"modified": "2026-09-21T00:30:25Z",
5+
"published": "2026-09-21T00:30:25Z",
6+
"aliases": [
7+
"CVE-2026-94092"
8+
],
9+
"details": "A vulnerability was detected in dmlc dgl up to 2.1.0. This impacts the function load_info/_read_torch_data of the file utils.py. Performing a manipulation of the argument path results in deserialization. The attack can be initiated remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-94092"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/dmlc/dgl/issues/7932"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://github.com/dmlc/dgl"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://vuldb.com/cve/CVE-2026-94092"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://vuldb.com/submit/952703"
41+
},
42+
{
43+
"type": "WEB",
44+
"url": "https://vuldb.com/vuln/408022"
45+
},
46+
{
47+
"type": "WEB",
48+
"url": "https://vuldb.com/vuln/408022/cti"
49+
}
50+
],
51+
"database_specific": {
52+
"cwe_ids": [
53+
"CWE-20"
54+
],
55+
"severity": "LOW",
56+
"github_reviewed": false,
57+
"github_reviewed_at": null,
58+
"nvd_published_at": "2026-09-20T23:17:03Z"
59+
}
60+
}

‎advisories/unreviewed/2026/09/GHSA-p62g-3997-c6pg/GHSA-p62g-3997-c6pg.json‎

Lines changed: 58 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,58 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-p62g-3997-c6pg",
4+
"modified": "2026-09-21T00:30:25Z",
5+
"published": "2026-09-21T00:30:25Z",
6+
"aliases": [
7+
"CVE-2026-94090"
8+
],
9+
"details": "A security flaw has been discovered in JusticeRage Manalyze 1.0.0. The affected element is the function PE::_parse_debug of the file manape/pe.cpp of the component PE Parser. The manipulation of the argument misc.Length results in integer underflow. The attack may be performed from remote. The patch is identified as 3e299685759f4f767088871de58c5d07f98ee382. A patch should be applied to remediate this issue.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-94090"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/JusticeRage/Manalyze/commit/3e299685759f4f767088871de58c5d07f98ee382"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://github.com/JusticeRage/Manalyze"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://vuldb.com/cve/CVE-2026-94090"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://vuldb.com/submit/952519"
41+
},
42+
{
43+
"type": "WEB",
44+
"url": "https://vuldb.com/vuln/408019"
45+
},
46+
{
47+
"type": "WEB",
48+
"url": "https://vuldb.com/vuln/408019/cti"
49+
}
50+
],
51+
"database_specific": {
52+
"cwe_ids": [],
53+
"severity": "MODERATE",
54+
"github_reviewed": false,
55+
"github_reviewed_at": null,
56+
"nvd_published_at": "2026-09-20T22:16:30Z"
57+
}
58+
}

0 commit comments

Comments
 (0)