A vulnerability in github.com/eclipse-keypont/crypto11/v2 versions from 2.0.0-rc3 through 2.0.0-rc8 allows an attacker to compromise the confidentiality of shared secrets. The ML-KEM key-pair lookup functions do not verify that the public key matches the private key, enabling an attacker who can open an unauthenticated session and plant a public key object with victim identifiers to receive shared secrets intended for the victim. Versions prior to 2.0.0-rc3 and after 2.0.0-rc8, as well as v1 module paths, are not affected.
Red Hat issued a security advisory for osbuild-composer, a service that builds customized OS artifacts and uploads images to cloud environments. The update addresses multiple vulnerabilities including authorization bypass, cross-site scripting (XSS), arbitrary code execution via XSS, unauthorized information disclosure, and man-in-the-middle attacks via untrusted intermediate certificates. These vulnerabilities stem from components such as gRPC-Go, golang.org/x/net/html, github.com/labstack/echo, and crypto/x509. The update is rated as Important by Red Hat Product Security and applies to Red Hat Enterprise Linux 8.6 variants.
Rembg is a tool to remove images background. Prior to 2.0.82, the public /api/remove endpoint passes attacker-controlled extras.sam_model through rembg/commands/s_command.py to rembg/sessions/sam.py, where it is interpolated into SAM filenames and GitHub download URLs passed to pooch.retrieve() without a pinned hash. An unauthenticated attacker can supply a sam_model value combining path traversal with URL fragment syntax to exploit the HTTP request discarding the fragment while the local POSIX path retains it. The first request primes the attacker-selected path tree, and an identical repeated request downloads malicious ONNX encoder and decoder files beside a readable target file. The graphs can load the target through ONNX external data and encode its bytes into the returned PNG mask, disclosing complete files accessible to the rembg process and allowing arbitrary ONNX computation. This issue is fixed in version 2.0.82.
CVE-2026-102649 is a critical vulnerability in padok-team's burrito Kubernetes operator versions prior to 0.13.0. The vulnerability arises from missing authentication on the POST /api/webhook endpoint when the webhookSecret is omitted or empty in TerraformRepository credentials. This allows unauthenticated attackers who can reach the endpoint and know a tracked repository URL to forge GitHub or GitLab webhook events. Exploitation can lead to unauthorized creation or deletion of TerraformPullRequest custom resources with attacker-controlled branch, base, and ID fields. This can cause unauthorized terraform plan operations and disclosure of plan details in pull request comments. The issue is fixed in version 0.13.0.
CVE-2026-116369 is an OS command injection vulnerability in the github-kanban-mcp-server by Sunwood-ai-labs, affecting versions 0.1 through 0.4.0. The flaw exists in the handleListIssues function in src/handlers/issue-handlers.ts, where manipulation of the state or labels arguments can lead to command injection. This vulnerability can be exploited remotely. Upgrading to version 0.4.1 resolves the issue.
A sophisticated supply chain attack campaign involving 42 compromised GitHub repositories linked to the testmetest npm operation was identified. The attackers used compiled native addons that decrypt hidden payloads at runtime, employing extensive anti-analysis techniques to evade detection in CI environments. The campaign included credential theft, repository hijacking, forged commit timelines, and automated malicious package publishing via GitHub Actions using trusted npm publishing. The infrastructure is also connected to shellpanel exploitation targeting cPanel systems. The attackers deployed polymorphic wrappers embedding execution hooks for AI coding assistants and IDEs, with advanced environment detection to avoid execution in sandboxes, debuggers, and security tools.
A weakness in NocoDB up to version 2026.07.0 affects the validatePassword function in the /auth/user/signup file. This flaw allows improper restriction of excessive authentication attempts, potentially enabling remote attackers to attempt multiple authentications. The attack is characterized by high complexity and difficult exploitability. The vendor has documented this behavior as intentional and has not responded to disclosure attempts, including deleting the related GitHub issue without explanation. The vulnerability has a low CVSS score of 3.7, indicating limited impact.
CVE-2026-116122 is an information disclosure vulnerability in NocoDB version 2026.07.0 affecting the AuthService.validateUser function in the Sign-in Endpoint. The flaw allows remote attackers to manipulate the salt argument to disclose information. The attack complexity is high and exploitability is difficult. The vendor has not responded to disclosure attempts and deleted the related GitHub issue. No patch or remediation information is currently available.
CVE-2026-116121 is a race condition vulnerability in NocoDB version 2026.08.0 affecting the users.service.ts file in the Registration component. The vulnerability can be exploited remotely but requires a high level of complexity, making exploitation difficult. The vendor has not provided any response or patch and even deleted the related GitHub issue. The CVSS 4.0 base score is 6.3, indicating medium severity.
CVE-2026-116119 is a medium severity race condition vulnerability in NocoDB version 2026.08.0 affecting the Password-Reset Flow component. The flaw allows remote attackers to manipulate an unknown part of the users.service.ts file, potentially causing a race condition. The vendor has not responded to disclosure attempts and deleted the related GitHub issue. No patch or official fix information is available.
Since September 15, 2026, the Gheist campaign has been abusing stolen GitHub tokens to commit a malicious workflow named sync-check to accessible repositories. This workflow attempts to print repository secrets into logs, which are then exfiltrated via GitHub's API before the logs are deleted. The campaign has affected over 850 compromised accounts and more than 13,500 planted branches, impacting both personal and enterprise private repositories. GitHub's approval controls have prevented exploitation in public repositories, but private and enterprise repositories remain vulnerable. The campaign operates without a command-and-control server, uses the user agent 'gheist', and has multiple evolving variants. Approximately two-thirds of affected accounts have been removed by GitHub, likely as a response measure.
A vulnerability was found in Travisun Opptrix 0.4.0. Affected is the function Buffer.concat of the file /api/channels/webhook/ of the component preParsing handler. Performing a manipulation results in denial of service. The attack can be initiated remotely. The exploit has been made public and could be used. The project has been completely taken offline and deprecated. The project maintainer explains: "The mentioned security risk was a design flaw that manifested primarily in local environments during earlier stages of version development. We previously addressed and resolved this specific risk; however, because the project was restricted to a small learning scope and the main versions were intended to run exclusively on localhost, the security fix was only pushed directly to our GitHub repository before it went private." This vulnerability only affects products that are no longer supported by the maintainer.
A vulnerability has been found in Travisun Opptrix 0.4.0. This impacts an unknown function of the file /api/system-update/import of the component Import Endpoint. Such manipulation leads to code injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The project has been completely taken offline and deprecated. The project maintainer explains: "The mentioned security risk was a design flaw that manifested primarily in local environments during earlier stages of version development. We previously addressed and resolved this specific risk; however, because the project was restricted to a small learning scope and the main versions were intended to run exclusively on localhost, the security fix was only pushed directly to our GitHub repository before it went private." This vulnerability only affects products that are no longer supported by the maintainer.
A flaw has been found in Travisun Opptrix 0.4.0. This affects an unknown function of the file /api/auth/setup of the component Schedule API. This manipulation causes command injection. It is possible to initiate the attack remotely. The exploit has been published and may be used. The project has been completely taken offline and deprecated. The project maintainer explains: "The mentioned security risk was a design flaw that manifested primarily in local environments during earlier stages of version development. We previously addressed and resolved this specific risk; however, because the project was restricted to a small learning scope and the main versions were intended to run exclusively on localhost, the security fix was only pushed directly to our GitHub repository before it went private." This vulnerability only affects products that are no longer supported by the maintainer.