Plane, an open-source project management tool, has an authorization bypass vulnerability in versions 1.3.1 and earlier. The public project asset endpoint /api/public/assets/v2/anchor/{anchor} allows authenticated users to perform write operations without verifying workspace or project membership. This enables unauthorized creation and soft-deletion of FileAsset records across projects, potentially causing cross-workspace file injection, storage abuse, and data loss. The issue is fixed in version 1.4.0.
Metalama.Framework versions before 2026.1.19 load and execute compile-time assemblies and helper tools from predictable temporary directories on Linux and macOS. These directories are world-writable system temp locations, allowing a local unprivileged user to plant malicious DLLs that get executed by higher-privileged build or IDE processes. This results in local privilege escalation and arbitrary code execution. Windows default configurations are not affected due to per-user temp directory protections. The issue is fixed in version 2026.1.19 by relocating caches to per-user application data directories.
Markdown Preview Enhanced for Visual Studio Code versions prior to 0.8.30 contain a vulnerability where the webview message handler accepts attacker-controlled commands and arguments without validation. This allows JavaScript executing in the preview webview to invoke privileged extension commands, including file modification and code execution. Exploitation requires a separate JavaScript execution vector in the webview, but no additional authorization checks exist. The issue is fixed in version 0.8.30.
Markdown Preview Enhanced for Visual Studio Code versions prior to 0.8.30 contains a cross-site scripting (XSS) vulnerability. The extension reads repository-controlled .crossnote/head.html content and inserts it into the preview webview's head without removing executable script content. This allows script execution before React and DOMPurify initialize, enabling malicious scripts to run when opening a Markdown preview in a malicious repository without further user interaction. The issue is fixed in version 0.8.30.
Markdown Preview Enhanced for Visual Studio Code prior to version 0.8.30 contains a vulnerability where the _crossnote.updateMarkdown command accepts arbitrary URIs and attacker-controlled content, allowing file writes without proper validation. This can be exploited by JavaScript executing in the preview webview to write files accessible by the user's OS privileges. The vulnerability is fixed in version 0.8.30.
Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.29, Markdown Preview Enhanced evaluates repository-controlled .crossnote/config.js and .crossnote/parser.js files with vm.runInNewContext, which does not provide a security boundary from the Node.js host realm. Opening a Markdown file in a malicious repository automatically loads these files, and prototype-chain traversal can reach the host Function constructor and process object, allowing operating-system commands to execute as the victim account without further interaction. Both configuration evaluation and parser-hook evaluation are affected, and the attack does not depend on module-scoped require being available. This issue is fixed in version 0.8.29.
Markdown Preview Enhanced for Visual Studio Code versions prior to 0.8.28 contains an OS command injection vulnerability. This occurs when a user opens a malicious Markdown file and clicks a crafted external or unsupported-scheme link, causing shell metacharacters to be interpreted by the Windows command shell. This allows execution of arbitrary commands with the privileges of the current user. The vulnerability is fixed in version 0.8.28.
CVE-2026-110667 is a medium severity vulnerability in cemtan sar2html version 4.0.0 involving hard-coded credentials due to manipulation of the SECRET_KEY argument in sar2html.py. This flaw allows remote attackers to exploit the hard-coded credentials. The project has been informed but has not yet responded or issued a fix.
CVE-2026-102354 is a time-of-check to time-of-use (TOCTOU) race condition vulnerability in BentoPDF versions prior to 2.8.7. The issue arises from a DNS-over-HTTPS safety check performed separately from the outbound fetch, allowing an attacker controlling authoritative DNS to potentially bypass hostname resolution checks under specific conditions. Exploitation requires precise timing and network conditions, and the vulnerability is fixed in version 2.8.7.
A vulnerability in Sentry versions 26.5.0 through 26.7.1 allows an attacker controlling a SAML identity provider to link their identity to a victim's Sentry account via a socially engineered malicious URL. This improper authentication issue requires a browser that accepts cross-site cookie contexts, such as Firefox with SameSite=None cookies or Chromium with third-party cookies enabled. The vulnerability is fixed in version 26.7.2 and was remediated in the Sentry SaaS environment on July 27, 2026.
Eclipse Vert.x versions 4.0.0 through 4.5.34, 5.0.0 through 5.0.12, 5.1.0 through 5.1.9, and 5.2.0 contain a vulnerability in the vertx-mail-client component. The issue arises because CR (\r) and LF (\n) characters in user-supplied email header names and values are not sanitized before being written into the SMTP DATA section. This allows an attacker controlling these inputs to inject arbitrary email headers or manipulate the message body. Additionally, MIME part metadata fields are also affected by this lack of validation. A secondary weakness permits a bare LF in a From display-name to bypass encoding and be sent unchanged. Exploitation requires the attacker to control header or attachment metadata fields passed to the mail client, such as through a web form or API. The vulnerability has a CVSS 4.0 score of 6.9 (medium severity).
A C++11 single-file header-only cross platform HTTP/HTTPS library. It's extremely easy to setup. Just include httplib.h file in your code!
Security Fix(es):
cpp-httplib is a C++ header-only HTTP/HTTPS library. Prior to 0.51.0, create_redirect_client() removes Host, Proxy-Authorization, and Authorization headers when following a cross-origin 301, 302, 307, or 308 redirect but leaves Cookie headers attached. detail::redirect() copies the request for those redirect codes, so cookies supplied directly or through default_headers_ are sent to the redirect target. An attacker who controls a redirect response, or a network position for a non-HTTPS origin, can receive session cookies intended for the original origin. A 303 redirect is not affected because that path clears all request headers. This issue is fixed in version 0.51.0.(CVE-2026-102944)
Nexent versions up to and including 2.7.0 contain an authorization bypass vulnerability in the check_file_access function. This flaw allows authenticated users in multi-tenant deployments to access knowledge-base files belonging to other tenants by circumventing tenant comparison checks. Attackers can list objects using GET /file/storage for presigned URLs or download files via GET /file/download/{object_name}. The vulnerability has a high severity with a CVSS 4.0 score of 7.1.
Blinko versions up to 1.8.8 have an authorization bypass vulnerability in the /api/file route. Authenticated users can exploit a flawed owner check to access private attachments of other users by supplying a filename pattern based on basename and millisecond timestamp. This allows unauthorized reading of private, non-shared files.
Sure versions 0.7.0 through 0.7.6-alpha.6 have a missing authorization vulnerability in the Transactions::BulkUpdatesController#create function. This flaw allows authenticated family members with read-only or no sharing permissions to modify other members' transaction details such as dates, names, notes, categories, merchants, and tags. This can lead to corruption of budgets and reports.
holaOS versions up to 2026.822.1 have a missing authorization vulnerability in channel-gateway connectors. This flaw allows any messaging-platform user to submit agent tasks because the authorization check (#isAllowed) incorrectly permits all senders when the allowFrom list is empty. Consequently, attackers who can message the operator's bots on platforms like Telegram, Slack, or Discord can cause the workspace agent to execute configured tools on the operator's machine.
holaOS versions up to 2026.822.1 contain an authorization bypass vulnerability in the channel-gateway Telegram connector. The vulnerability arises because the connector authorizes senders based on mutable usernames instead of immutable numeric IDs. This flaw allows attackers who register a released username listed in the allowFrom configuration to submit commands to the bound workspace agent, potentially executing configured tools on the operator's machine.
Gitingest versions up to 0.3.1 contain a vulnerability where unauthenticated attackers can exploit symlink following in the ingest_query single-file blob ingestion feature. This allows attackers to read server files accessible to the service user by submitting symlink blob URLs, potentially exposing sensitive data up to 10 MB in size.
CVE-2026-110764 is an authorization bypass vulnerability in iflytek astron-rpa versions up to 1.1.6. It affects the /file/download endpoint of the resource-service, allowing authenticated users to download files belonging to other tenants by supplying their fileId. The vulnerability arises because the FileMapper.getFile function does not verify file ownership or tenant association, and file IDs are predictable due to their time-ordered Snowflake format. This enables attackers to enumerate and access S3-stored files of other tenants without proper authorization.
lamp-boot versions 4.16.0-java17 through 4.21.2-java17 have an insecure direct object reference vulnerability in the oauth module's /anyone/findDeptByCompany endpoint. This flaw allows authenticated low-privilege users to bypass URI permission checks and sequentially enumerate employee IDs to access department membership information of all employees within the tenant. The vulnerability has a medium severity with a CVSS 4.0 base score of 5.3.