phi versions 0.1.1 through 0.28.4 have an improper link resolution vulnerability that allows malicious repositories to bypass workspace-only write restrictions. This is due to lexical-only path checks in the permission gate, enabling attackers to commit symbolic links pointing outside the workspace. By combining this with prompt injection, attackers can cause the write tool to write attacker-controlled content to external files without user approval.
Floci versions from 1.1.0 up to but not including 2.2.0 contain a critical code injection vulnerability in the VtlTemplateEngine component. This flaw allows unauthenticated attackers to execute arbitrary OS commands within the Floci JVM by exploiting unrestricted Velocity mapping templates. Specifically, attackers can create a REST API with a MOCK integration that uses $util reflection to access Runtime or ProcessBuilder, enabling command execution.
Cohere Python SDK versions 5.11.0 through 7.2.0 contain a path traversal vulnerability in the _s3_models_dir_to_tarfile function. This flaw allows attackers who can write model archives to the victim's S3 prefix to include absolute or relative paths in tar archives, leading to arbitrary file overwrite on the host system running the SDK.
CVE-2026-94590 is a medium severity vulnerability in CodePeople2 Sell Downloads that involves improper verification of the source of a communication channel. This flaw allows exploitation of trusted credentials, potentially leading to unauthorized access or actions. The vulnerability affects Sell Downloads versions from the initial release up to 1.2.3 inclusive. There is no information provided about available patches or vendor advisories.
CVE-2026-57806 is a high-severity reflected cross-site scripting (XSS) vulnerability in the drfuri Martfury WooCommerce Marketplace WordPress Theme. It affects versions from 0 up to and including 3.3.9. The vulnerability arises from improper neutralization of input during web page generation, allowing an attacker to inject malicious scripts that could impact confidentiality, integrity, and availability. No patch or remediation information is currently provided.
A critical SQL Injection vulnerability (CVE-2026-105889) exists in Tickera's event ticketing system up to version 3.6.0.6. This vulnerability allows an unauthenticated attacker to perform blind SQL injection, potentially leading to high confidentiality impact and limited availability impact. No patch or remediation information is currently provided.
Phi versions 0.3.0 through 0.28.4 have a permission bypass vulnerability that allows spawned sub-agents to escape workspace-only write and readonly restrictions. This occurs when an attacker supplies an unchecked working directory to the agent_spawn function, enabling unapproved file writes in locations writable by the user.
Mealie versions 3.26.0 through 3.28.0 have a server-side request forgery (SSRF) vulnerability in the OpenID Connect avatar fetch feature. This flaw allows authenticated OIDC users who can control their picture URL to cause the server to send GET requests to arbitrary ports on the identity provider's internal address during login. The vulnerability arises because the allowlist for the identity provider hostname ignores port validation.
CVE-2026-108593 is a high-severity code injection vulnerability in decolua 9router versions 0.4.1 through 0.5.99. It affects the POST /api/cli-tools/hermes-settings endpoint, allowing authenticated dashboard users to inject arbitrary keys into the Hermes Agent config.yaml file. By submitting a specially crafted baseUrl containing double quotes and newlines, attackers can add a hooks_auto_accept setting and a hooks.post_llm_call shell command. This command is executed by the Hermes Agent without user approval after an LLM call, potentially enabling unauthorized code execution.
mini-swe-agent versions 1.10.0 through 2.4.6 have an information exposure vulnerability due to sandboxed commands inheriting the host environment. This occurs because the BubblewrapEnvironment component uses bwrap without the --clearenv option, allowing environment variables such as API keys to be exposed. Attackers can exploit this via prompt injection in processed task content to read and exfiltrate sensitive environment variables over the network.
InnoShop version 0.9.2 has a local file disclosure vulnerability that allows authenticated administrators with files_create permission to read arbitrary server files. This is achieved by abusing the AI Core MCP file_upload tool's source argument with file:// or php:// stream wrappers, enabling exposure of sensitive files such as the .env file containing APP_KEY and database credentials.
CVE-2026-106610 is a critical vulnerability in the miniOrange OTP verification plugin that allows incorrect privilege assignment leading to privilege escalation. It affects versions from the initial release up to 5.5.7. The vulnerability has a high CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability.
CVE-2026-96341 is a high-severity vulnerability in WPMU DEV Forminator that allows incorrect privilege assignment leading to privilege escalation. It affects Forminator versions from the initial release up to 1.57.3. The vulnerability can be exploited remotely without authentication and requires no user interaction. The impact includes unauthorized modification of data, but does not affect confidentiality or availability.
CVE-2026-105892 is a critical path traversal vulnerability in rtCamp Inc.'s rtMedia plugin for WordPress, BuddyPress, and bbPress. It allows an attacker to improperly access restricted directories by manipulating pathnames. This affects versions from the initial release up to 4.7.13. The vulnerability has a high CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability.
CVE-2026-104398 is a critical deserialization of untrusted data vulnerability in the VillaTheme AFFI – Affiliate Marketing for WooCommerce plugin. This flaw allows object injection, potentially leading to full compromise of confidentiality, integrity, and availability. It affects versions from initial release up to 1.0.10 inclusive. No patch or remediation information is provided in the source data.
CVE-2026-103071 is a high-severity vulnerability in the VillaTheme Thank You Page Customizer for WooCommerce plugin. It allows an attacker to perform code injection due to improper control of code generation. This affects versions from initial releases up to 1.2.3 inclusive. The vulnerability has a CVSS score of 7.5, indicating it can be exploited remotely without authentication and requires no user interaction. There is no information about a patch or fix being available at this time.
CVE-2026-103357 is a missing authorization vulnerability in the VillaTheme GIFT4U plugin for WooCommerce. It affects versions from the initial release up to 1.1.3. The flaw allows attackers to exploit incorrectly configured access control security levels, potentially leading to unauthorized actions. The vulnerability has a medium severity rating with a CVSS score of 6.9. No official patch or remediation details are provided in the available data.