The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the origin of the messages it received. Under the right conditions, this could allow an attacker to perform file operations on the appliance.
A vulnerability in JupyterLab versions 4.5.7 through 4.6.3 and related applications allows a user to mistakenly trust a different document than the one they clicked a command button in. This occurs because the trust prompt marks whichever document is current when the user responds, not necessarily the document containing the clicked button. Trusted documents run commands without further prompts, potentially allowing untrusted documents to execute commands without explicit user confirmation. The issue affects Markdown files and notebooks and can persist across sessions for notebooks due to saving the trusted state to disk. Patches are available in JupyterLab versions 4.6.4 and 4.5.11 and related dependent applications. Workarounds include disabling command linker or choosing "Run Once" instead of "Trust".
The Docker distribution client method manifests.Get() does not verify that the manifest content returned by a registry matches the requested digest. This allows a malicious or compromised registry, or a man-in-the-middle attacker, to serve arbitrary manifest content while claiming it matches the requested digest. Applications relying on digest pinning for supply-chain integrity can be silently undermined. The bundled pull-through proxy is also vulnerable, allowing poisoned manifests to be cached and served to other clients.
An authenticated user in @backstage/backend-defaults versions prior to 0.17.8 could invoke backend actions that were intended to be excluded by an operator's action configuration. Although existing action permissions and downstream authorization checks remain in place, this improper access control could lead to unauthorized action invocation. The issue is patched in version 0.17.8. Until upgrading, it is recommended to restrict access to action invocation endpoints to trusted service callers.
A Zip Slip vulnerability (CVE-2026-103975) exists in the @appium/support package's ZIP extraction functionality. This issue allows an attacker to escape the intended extraction directory by using symbolic links inside the archive. Unlike a previous path traversal vulnerability fixed in version 7.0.6, this flaw involves legitimate entry names with no '..' components, where a symlink points outside the extraction root and subsequent files follow that symlink to write outside the target directory. This vulnerability affects versions prior to 7.2.6 and has a medium severity rating.
tinytag versions 2.0.0 up to but not including 2.3.0 contain a vulnerability where parsing certain crafted M4A files with a zero-sized sub-atom in the `----` atom causes an infinite loop. This results in a denial-of-service condition for applications using tinytag to read such files. The issue is fixed in version 2.3.0. No workarounds exist other than upgrading.
Leantime versions prior to 3.10.0 contain a critical vulnerability allowing any authenticated user, including those with the lowest privilege (readonly), to escalate to full administrative access via unauthorized JSON-RPC methods. This occurs because certain JSON-RPC service methods lack proper per-method authorization checks, enabling privilege escalation and unauthorized plugin management. The vulnerability allows creation of admin accounts without authorization and bypasses web UI role checks. A proof-of-concept demonstrates full admin access gained from a low-privilege session. The CVSS 3.1 score is 8.8 (high severity). A patch is available.
YOURLS versions prior to 1.10.5 contain an unauthenticated path traversal vulnerability that allows attackers to include and execute arbitrary PHP files on the server. This occurs because URL sanitization functions do not properly filter filesystem path traversal sequences, enabling attackers to bypass restrictions and execute code without credentials. The vulnerability can be exploited by requesting crafted URLs containing '../' sequences, leading to remote code execution if a malicious PHP file is present on the server.
Google has introduced new AI-powered defenses on Android to combat increasingly sophisticated messaging scams and call-forwarding abuse. These protections include cloud-based scam analysis using Gemini AI, on-device AI checks for suspicious links, and enhanced warnings for calls and messages from unknown senders. Additional measures block silent call forwarding and verify bank calls to prevent spoofing. These features are rolling out to eligible Android devices and aim to improve detection of fraudulent communications while preserving user privacy.
Temporal Technologies, Inc.'s temporal-proxy versions 0.2.0 through 0.8.0 have an authorization bypass vulnerability due to improper binding of encrypted payloads to namespaces. The proxy selects the decryption key based on an identifier in the payload rather than the request's namespace, allowing an authorized caller for one namespace to decrypt payloads from another namespace. This does not expose new encrypted payloads to attackers nor allow modification of ciphertext. The vulnerability has a medium severity score of 6.0 CVSS v4.0.
An issue in the Linux kernel's virtio-net/TAP networking path affects KVM-based hypervisors running unpatched Linux kernel versions 4.4 through 6.18. This vulnerability allows an attacker with privileged access inside a guest virtual machine to send specially crafted network packets that can corrupt host kernel memory, potentially leading to host memory disclosure or denial of service. AWS-managed compute and container services are not affected, and no action is required for customers using these services.
An authorization flaw in Idira Conjur version 13.9.0 allows an authenticated user with limited privileges to perform unauthorized actions on a policy branch. Under specific circumstances, an attacker could potentially leverage this to retrieve unauthorized secrets, alter administrative access controls on the branch or cause a denial of service (DoS). Idira Security Bulletin CA26-38.
@casl/ability versions 6.7.5 up to but not including 7.0.2 contain a prototype pollution vulnerability in the rulesToFields() function. This flaw allows attackers who can control rule conditions to modify inherited built-in object properties via specially crafted dotted keys such as 'toString.call'. Exploitation can lead to denial of service of the Node.js process running the affected library.
Web3.py 7.15.0 through 7.16.0 and 8.0.0b2 through 8.0.0 contains a server-side request forgery vulnerability because _check_ip_blocked() does not unwrap IPv4-mapped IPv6 addresses in CCIP Read URL validation. Malicious contracts can return OffchainLookup URLs with IPv4-mapped IPv6 hosts or AAAA records, making clients with CCIP Read enabled send requests to loopback, private, or link-local services.
kedro-datasets versions 9.3.0 through 9.6.0 contain a path traversal vulnerability in the MatplotlibDataset.save() function. This flaw allows attackers with limited privileges to write files outside the intended dataset directory by supplying absolute plot names. The vulnerability arises because validate_sub_path() removes leading slashes, but pathlib's join discards the base path when given an absolute path, enabling arbitrary file creation or overwriting wherever the process has write permissions.
Suite Docs versions 4.0.0 through 6.0.1 contain an authorization bypass vulnerability that permits authenticated users to write comments into document threads they do not have access to. This occurs when an attacker, knowing a thread UUID, routes a POST comment request through their own document's resource_id, enabling insertion of comments into another document's thread without proper authorization. The vulnerability has a low severity with a CVSS 4.0 base score of 2.3.
LibreDesk before 2.9.0-rc.8 contains a stored cross-site scripting vulnerability that allows authenticated agents to execute script by uploading SVGs with malformed Content-Type parameters. Attackers can upload an SVG typed 'image/svg+xml; x' via /api/v1/media so GET /uploads/{uuid} serves it inline without sandbox, running script in any viewing agent's or administrator's session.
CVE-2026-111167 is a medium severity out-of-bounds read vulnerability in GNU LibreDWG up to version 0.14.8612. It occurs in the AcDs decoder function acds_private() due to an unchecked schema property type index, allowing attackers to read beyond a static table. Crafted R2004 or R2010+ DWG files with large 'schdat' property type values can trigger this flaw, potentially crashing applications like dwgread or dwg2dxf that use LibreDWG.
libmikmod through 3.3.15 contains a heap out-of-bounds read vulnerability in the IMF_Load() loader that allows attackers to read beyond allocated memory by supplying a crafted IMF module. Attackers can enable the linear-period header flag and map notes to out-of-range samples, causing noteindex indexing far past the heap allocation and crashing applications that load the file.
libmikmod versions up to 3.3.15 contain an out-of-bounds read vulnerability in the MultiTracker loader MTM_Load() due to an unchecked channel count in crafted .mtm files. This can cause memory corruption and application crashes.