Threats affecting pkg:bitnami/rclone

Missing Authorization vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fluent CRM: from n/a through 3.2.6.

RTIR extends RT's HTML scrubber to allow an internal link placeholder, and the extension lets through any link that merely contains the placeholder, including links using the executable javascript: scheme. The change applies to the whole RT instance once RTIR is installed, not only to RTIR's own queues. Anyone who can add HTML content to a ticket on such an instance can store such a link. That includes an unauthenticated sender of HTML email to the Incident Reports queue, which RTIR opens to everyone by default. Script runs when a user clicks the link, in that user's session, and can act in RT with that user's authority. This issue was fixed in version 5.0.11 and 6.0.4

Blender before 4.5.15 and 5.x before 5.2.3 contains a heap out-of-bounds access vulnerability in read_struct() that skips size validation when a .blend file's SDNA struct layout compares equal. Attackers can supply a crafted .blend file with short blocks so field reads, writes, and pointer dereferences overrun heap memory, causing crashes or code execution.

Blender before 4.5.15 and 5.x before 5.2.3 contains an out-of-bounds read vulnerability in blo_bhead_id_* accessors in readfile.cc that read ID fields without block length checks. Attackers can supply a crafted .blend file with short ID blocks that, when browsed or appended from, causes heap over-reads leading to crashes or heap memory disclosure.

CVE-2026-119720 is a heap out-of-bounds read vulnerability in Blender versions before 4.5.15 and 5.x before 5.2.3. It occurs in the read_file_dna() function when processing a crafted .blend file with a truncated GLOB block, leading to a crash.

Blender versions before 4.5.15 and 5.x before 5.2.3 have a heap buffer overflow vulnerability in the blend file thumbnail extractor. This is caused by a 32-bit integer overflow in the thumb_data_vertical_flip() function. Maliciously crafted .blend files with specially designed TEST block dimensions can trigger out-of-bounds writes when previewed by blender-thumbnailer or the Windows shell extension, potentially leading to crashes or code execution.

Blender versions before 4.5.15 and 5.x before 5.2.3 have a heap buffer overflow vulnerability due to an integer overflow in the ptcache_data_alloc() function when reading point cache files. An attacker can craft a malicious point cache file with a large totpoint value alongside a .blend file to cause a crash or potentially execute arbitrary code with user privileges.

pybars4 through 0.9.13 contains a code injection vulnerability in pybars/_compiler.py that allows attackers to execute Python code via unescaped bracketed path segments in Handlebars templates. Attackers can supply a template with a crafted segment in a helper or block argument to break out of the generated resolve() string literal and execute code in the application process.

pybars3 versions up to 0.9.7 have a critical code injection vulnerability in the pybars/_compiler.py component. This flaw allows template authors to execute arbitrary Python code by supplying crafted Handlebars templates with unescaped bracketed path segments. Exploitation requires supplying malicious segments in helper or block arguments to break out of string literals and run Python code within the application process.

NocoDB versions prior to 2026.08.0 have a clickjacking vulnerability due to missing X-Frame-Options and CSP frame-ancestors headers. This allows attackers to embed the authenticated interface in a frame on a malicious site, potentially tricking signed-in users into performing unintended actions such as modifying or deleting records, changing sharing settings, or inviting collaborators.

The My Calendar WordPress plugin versions 3.8.8 through 3.8.10 contain a shortcode injection vulnerability. This flaw allows unauthenticated attackers to execute registered shortcodes via the 'mcs' search parameter, leading to potential content injection and spoofing on any page or post. The vulnerability is fixed in version 3.8.11.

Paperclip 2026.403.0 before 2026.416.0 contains a remote code execution vulnerability that allows agent API key holders to set cleanupCommand and teardownCommand via PATCH /api/execution-workspaces/:id. When the workspace is archived, cleanupExecutionWorkspaceArtifacts runs these commands through a shell as the Paperclip server process, executing attacker-chosen OS commands on the server host.

PipesHub versions before 0.10.0 have a server-side request forgery (SSRF) vulnerability in the ImageParser._fetch_single_url function. This flaw allows attackers to cause the indexing service to fetch internal network addresses by embedding crafted image URLs in documents. Attackers can exploit this by supplying Markdown or HTML content through uploads, synced mailboxes, or web connectors to access loopback, private network, or cloud metadata endpoints. The vulnerability is fixed in version 0.10.0.

PipesHub versions before 0.10.0 have a rate limit bypass vulnerability in the getClientIp() function. This flaw allows unauthenticated attackers to evade per-IP throttling by spoofing the X-Forwarded-For or X-Real-IP HTTP headers. By rotating these header values, attackers can obtain new rate-limit buckets on authentication endpoints, facilitating password spraying and flooding of OTP or password-reset emails. The vulnerability is fixed in version 0.10.0.

PipesHub versions from 0.3.0 up to but not including 0.10.0 have an event type injection vulnerability that allows authenticated users with crawl:write scope to delete connectors by injecting malicious values into the :connector path segment. This bypasses intended authorization checks and can lead to removal of connector instances and purging of record embeddings.

Grimoire before 1.0.0 contains an unauthenticated server-side request forgery vulnerability in the /api/fetch-metadata POST handler that passes user-supplied URLs to getMetadata() without authentication checks. Attackers can submit URLs targeting loopback, internal-network, or cloud metadata endpoints and read the parsed title, description, and page content returned.

abp-next-admin versions 10.4.0 through 10.7.0 have an authorization bypass vulnerability in the BlobManagement download-by-name endpoint. Authenticated users can exploit this flaw to access files belonging to other tenants by supplying a victim tenantId in the request path, causing the system to switch tenant context improperly.

SonicJS versions up to 3.0.0 have a missing authorization vulnerability in certain API write routes. Authenticated users with author or editor roles can bypass document access controls and administrator restrictions to create, modify, publish, or soft-delete documents belonging to other users. This occurs because the API only checks coarse role labels rather than fine-grained permissions.

InternLM lmdeploy versions 0.9.0 through 0.18.0 contain a critical unauthenticated remote code execution vulnerability. The flaw arises from unsafe deserialization of pickled data sent to the /update_weights endpoint, allowing attackers to execute arbitrary OS commands as the api_server process by submitting crafted base64-encoded pickle payloads.

SerpBear before 3.1.1 contains a missing authentication vulnerability in pages/api/notify.ts that allows remote unauthenticated attackers to trigger notification emails because verifyUser() is never called. Attackers can repeatedly POST to /api/notify, optionally with a domain parameter, to exhaust SMTP rate limits, trigger provider abuse flags and flood recipients.