A security update addresses a medium severity vulnerability in Flatpak affecting multiple specific versions. The vulnerability has a CVSS 4.0 vector indicating local attack vector, low complexity, partial attack complexity, low privileges required, no user interaction, and high impact on confidentiality and integrity. No known exploits are reported in the wild. The affected versions are explicitly listed, and a patch or update is implied by the security update notice.
Red Hat has issued a security advisory for Red Hat Hardened Images RPMs, specifically updating the grafana13.2 package to version 13.2.1-0.2.hum1. This update addresses security vulnerabilities identified by CVE-2026-84394 and CVE-2026-84292. The advisory provides updated RPM packages for aarch64 and x86_64 architectures. No explicit patch status is stated beyond the availability of updated packages.
A vulnerability in the odh-dashboard component of Red Hat OpenShift AI allows any authenticated dashboard user to read Kubernetes Secrets, including sensitive credentials such as the NVIDIA NGC API key and NIM image pull secret, without proper authorization checks. This flaw is due to missing authorization on the GET /api/nim-serving/:nimResource route. While creation and deletion of NIM credentials require admin privileges, the read operation does not, exposing sensitive data. This issue is tracked as CVE-2026-86332 and has a medium severity rating with a CVSS score of 6.5.
Starlette's StaticFiles component on Windows platforms has a vulnerability where resolving UNC paths triggers outbound SMB connections, leaking NTLMv2 credentials. This occurs because os.path.realpath resolves UNC paths before containment checks, causing server-side request forgery (SSRF). The vulnerability affects default configurations (follow_symlink=False) and can expose service account credentials to attackers. Non-Windows systems and configurations using follow_symlink=True are not affected. Mitigations include using dedicated web servers for static files or blocking outbound SMB traffic.
Starlette's request.form() method does not enforce configured limits on max_fields and max_part_size for application/x-www-form-urlencoded content types, allowing unauthenticated attackers to send requests with very large numbers of fields or very large field sizes. This leads to denial of service by blocking the event loop or causing excessive memory allocation. The vulnerability affects versions from 0.4.3 up to but not including 0.5.10_1. A patch is available that enforces these limits for url-encoded bodies.
CVE-2026-58203 affects pydantic-settings versions >=0.4.3 and <0.5.11_1, where NestedSecretsSettingsSource with secrets_nested_subdir=True follows symbolic links outside the configured secrets_dir. This allows local files outside the intended directory to be read into settings, bypassing the secrets_dir_max_size limit. The vulnerability requires the ability to place symlinks inside the secrets directory and is not remotely exploitable by itself. The issue is fixed in pydantic-settings 2.14.2 by restricting directory traversal and consistent size accounting.
The npm package @cyclonedx/cdxgen versions 9.9.5 up to but not including 12.3.3 contains a vulnerability where Docker registry credentials can be forwarded incorrectly due to substring matching of registry hostnames. This causes credentials intended for one private registry to be sent to a different registry whose hostname is a substring of the private registry's hostname. This misbinding of credentials can expose private registry credentials to unintended registries during Docker image pulls via the Docker daemon API.
The MCP Python SDK's deprecated WebSocket server transport does not validate Host or Origin headers during the WebSocket handshake, allowing any web page to connect and issue JSON-RPC requests if the server is exposed without additional protections. This affects applications that explicitly use the deprecated websocket_server transport, which is not part of the MCP specification and must be manually integrated. The vulnerability can lead to unauthorized enumeration and invocation of server tools and resource access depending on the server's exposure. The issue is fixed in version 1.28.1 by adding optional Host and Origin validation, but upgrading alone does not enable validation unless configured. The recommended mitigation is to migrate away from the deprecated transport to Streamable HTTP, which enforces these protections automatically. The WebSocket transport is removed entirely in version 2.
The MCP Python SDK's experimental task handlers feature, when enabled, does not verify session ownership of tasks. This allows any connected client to list, read results from, and cancel tasks created by other clients on the same server. The vulnerability affects servers that enable the experimental tasks feature and use default handlers without session validation. It is fixed in version 1.27.2 and later, which embed session markers in task IDs and restrict task access to the owning session.
A vulnerability in the MCP Python SDK HTTP transports (SSE and Streamable HTTP in stateful mode) allows session hijacking by bypassing authentication checks. Incoming requests are routed to existing sessions based solely on session IDs without verifying the authenticated principal. This enables an attacker who knows or guesses a session ID to send JSON-RPC messages on that session regardless of the bearer token used. The issue affects versions from 0.4.3 up to but not including 0.5.17. A fix is available in version 1.27.2 or later.
A vulnerability in the vllm-orchestrator-gateway component causes the system's production binary to log all incoming authorization headers and full chat payloads, including sensitive data such as bearer tokens and personally identifiable information (PII), to persistent logs. Any user with logging privileges can access this sensitive information, leading to information disclosure.
A critical vulnerability (CVE-2026-15143) exists in the file_type content detector of guardrails-detectors. It allows a remote attacker to supply an arbitrary XML Schema Definition (XSD) string that is processed without proper restrictions. This flaw can lead to server-side requests to arbitrary URLs or local file reads, potentially exposing sensitive information such as cloud provider credentials or internal network services.
A code injection vulnerability (CWE-94) exists in StellarWP GiveWP plugin versions up to and including 4.13.1. This flaw allows improper control over code generation, potentially enabling an attacker with low privileges to execute arbitrary code. The vulnerability has a high severity score of 7.8 (CVSS 3.1) with high impact on confidentiality, integrity, and availability. No patch or remediation information is currently provided.
CVE-2024-26011 is a vulnerability in multiple Fortinet products including FortiManager, FortiOS, FortiPAM, FortiPortal, FortiProxy, and FortiSwitchManager. It involves missing authentication for critical functions, allowing an attacker to execute unauthorized code or commands via specially crafted packets. The vulnerability affects a wide range of versions across these products. The CVSS score is 5.2, indicating a medium severity level. No official patch or remediation is currently available, and no known exploits are reported in the wild.
CVE-2024-21753 is a path traversal vulnerability in Fortinet FortiClientEMS versions 7.2.0 through 7.2.4, 7.0.0 through 7.0.13, 6.4.0 through 6.4.9, 6.2.3 through 6.2.9, 06.02.00 through 06.02.02, 06.00.00 through 06.00.06, 01.02.02 through 01.02.05, and version 6.0.8. This flaw allows an attacker with high privileges to perform denial of service or limited file read/write operations via specially crafted HTTP requests. The vulnerability has a medium severity with a CVSS score of 5.5. No official patch or remediation is currently available, and no known exploits are reported in the wild.