Threats affecting pkg:generic/quickjs

rssant versions 1.9.0 through 1.9.1 have an authorization bypass vulnerability allowing unauthenticated attackers to read stories from unpublished feeds via the anonymous publish.story_get endpoint. This occurs because the UnionStory.get_by_feed_offset function ignores the only_publish flag, enabling enumeration of feed IDs and offsets to access private feed stories.

Codefriar sf-mcp versions up to 1.3.2 contain an OS command injection vulnerability. This flaw arises because the escapeValue() function does not properly neutralize shell metacharacters such as backticks and $() substitutions. As a result, crafted Salesforce CLI tool flag values can lead to arbitrary shell command execution with the privileges of the MCP server user. The vulnerability has a high severity score of 8.5 and affects all versions from 0 up to and including 1.3.2. A patch is available, and since this is a cloud service, the vendor manages remediation server-side.

ATXP Gemini CLI extension versions up to 1.0.0 contain an OS command injection vulnerability in the runAtxp() function. This flaw allows attackers to execute arbitrary shell commands by injecting special shell substitution syntax into unsanitized parameters such as message_id, subject, or query. The injection can be triggered via crafted email or SMS content, leading to command execution with the privileges of the user running the CLI extension.

DroidMind versions up to 0.4.0 have a command injection vulnerability that allows attackers to bypass shell command allowlists using command substitution techniques. This enables execution of restricted commands like reboot on connected Android devices via certain Device methods.

An OS command injection vulnerability exists in the ai-sdlc plugin MCP server up to version 0.31.2. This flaw allows attackers with limited privileges to execute arbitrary OS commands by injecting shell metacharacters into the 'repo' argument. The vulnerability arises because the unvalidated 'repo' input is directly interpolated into commands executed via execSync(), specifically 'gh issue view' or 'gh pr view'.

SDL_image versions up to 2.8.12 and 3.4.8 contain a stack out-of-bounds read vulnerability in the IMG_LoadLBM_IO() function. This occurs due to missing validation of the bitplane count when HAM mode is enabled, allowing crafted ILBM files with excessive HAM bitplanes to cause memory disclosure or crashes.

CVE-2026-117556 is a heap out-of-bounds read vulnerability in zchunk versions before 1.5.5. The flaw occurs in the read_preface() function where the total header length is incorrectly passed to compressed integer parsing functions, leading to reads beyond the allocated heap buffer. A crafted .zck file with a header ending inside a compressed integer can trigger this, causing application crashes.

CImg versions up to 4.0.6 have a heap out-of-bounds read vulnerability in the _load_bmp() function caused by an integer overflow in calculating the row byte count. This flaw allows an attacker to craft a malicious BMP file with a large header width that causes the byte count to wrap, potentially leading to crashes or disclosure of heap memory into the decoded image.

Admidio versions prior to 5.0.17 have an improper access control vulnerability that allows authenticated users to bypass server-side restrictions on event guest registration. Specifically, attackers can manipulate the additional_guests field to register more guests than allowed, exhausting event capacity and preventing other users from registering.

Umbraco CMS versions before 17.7.2 and 18.2.2 contain an authentication bypass vulnerability via an open redirect flaw. This allows unauthenticated attackers to register attacker-controlled OAuth redirect URIs by manipulating the Host header. Exploitation involves sending signed-in users authorization links with response_mode=form_post to capture authorization codes, which attackers then redeem using HTTP Basic client credentials. Successful exploitation can hijack back-office sessions and execute code through Razor templates.

Check Point Research identified a malware campaign named Yoba that abuses the popularity of AI tools like ChatGPT and Claude by creating fake GitHub projects impersonating AI desktop applications such as GPT-5.6 Sol, GPT-6 Astra, and Claude Opus. These projects host malicious installers containing a dropper and loader that fetch and execute malware. The campaign uses DLL sideloading with legitimate signed binaries to evade detection and employs strong operational security by avoiding traditional command-and-control infrastructure, instead using Telegram, Tor, Catbox, and DNS over HTTPS. The threat actor shows indicators of Russian origin and operates primarily in the UTC-4 timezone. The malicious releases are hosted on GitHub without password protection, leveraging SEO poisoning to appear in top Google search results and lure victims.

This analysis discusses how AI is expanding the attack surface of critical infrastructure managed by state, local, and education (SLED) agencies. Cyber attackers often target under-resourced SLED organizations operating critical infrastructure such as water systems, hospitals, and emergency services. AI adoption by these agencies and adversaries' use of AI automation complicate security efforts. A whole-of-state cybersecurity approach, treating all local entities as a unified defensive perimeter, is recommended to mitigate risks. The report highlights concerns about aging operational technology, limited cyber staff in small communities, and unclear governance responsibilities. Attacks on smaller entities can have cascading effects on larger systems and public safety. Insider threats and excessive access privileges further increase risk. Nearly 90% of state CIOs rate cyberattacks on critical systems as a high concern.

CVE-2026-92546 is an authentication bypass vulnerability in Keepnet Labs Cybersecurity Inc.'s Agentic AI / Agentic Ally product. The flaw allows an attacker to bypass authentication by spoofing, potentially granting unauthorized access. The vulnerability affects versions before commit 0ef61f2e and has a high severity rating with a CVSS score of 7.5. A fix is available in version 0ef61f2e.

CVE-2026-116627 is a cross-site scripting (XSS) vulnerability in Devolutions PowerShell Universal versions 2026.3.0 and earlier. It affects the notifications feature, allowing an authenticated user with permission to create notifications to execute arbitrary JavaScript in another user's browser via a crafted notification target URL. This vulnerability is fixed in version 2026.3.1.

CVE-2026-15586 is a vulnerability in İdvlabs Software and Consulting Services Inc.'s Ontime product that allows brute force attacks due to improper restriction of excessive authentication attempts. The vulnerability affects versions up to and including 2026-10-27. The vendor was contacted but did not respond to the disclosure. The CVSS score is 5.3, indicating a medium severity level.

Dell PowerProtect Data Domain versions 7.7.1.0 through LTS 2026, including specific LTS2024, LTS2025, and LTS2026 release versions, contain a stack-based buffer overflow vulnerability. This flaw could be exploited by a high privileged attacker with remote access to cause a denial of service condition. The vulnerability does not impact confidentiality or integrity but affects availability. The CVSS score is 4.9 (medium severity). No patch or remediation information is provided in the available data.

Dell PowerProtect Data Domain versions 7.7.1.0 through 8.7 (Feature Release), 7.13.1.0 through 7.13.1.80 (LTS2024), 8.3.1.0 through 8.3.1.40 (LTS2025), and 8.6.1.0 through 8.6.1.20 (LTS2026) contain an improper access control vulnerability. This flaw allows an unauthenticated remote attacker to potentially cause a denial of service. The vulnerability does not impact confidentiality but can affect system availability. No public exploits or known active exploitation have been reported. The CVSS v3.1 base score is 6.5, indicating a medium severity level.

Dell PowerProtect Data Domain versions 7.7.1.0 through 8.7 (Feature Release), 7.13.1.0 through 7.13.1.80 (LTS2024), 8.3.1.0 through 8.3.1.40 (LTS2025), and 8.6.1.0 through 8.6.1.20 (LTS2026) contain an improper privilege management vulnerability. This flaw allows a high privileged attacker with local access to potentially elevate their privileges further. The vulnerability has a CVSS score of 6.3, indicating a medium severity impact. No public exploits or known active exploitation have been reported. No patch or remediation information is currently provided.

Dell PowerProtect Data Domain versions 7.7.1.0 through 8.7 (Feature Release), 7.13.1.0 through 7.13.1.80 (LTS2024), 8.3.1.0 through 8.3.1.40 (LTS2025), and 8.6.1.0 through 8.6.1.20 (LTS2026) contain an improper privilege management vulnerability. This flaw could allow a high privileged attacker with remote access to elevate their privileges. The vulnerability has a CVSS score of 6.7, indicating a medium severity level. No public exploits or known in-the-wild exploitation have been reported. Patch or remediation information is not provided in the available data.

Dell PowerProtect Data Domain versions 7.7.1.0 through 8.7 (Feature Release), 7.13.1.0 through 7.13.1.80 (LTS2024), 8.3.1.0 through 8.3.1.40 (LTS2025), and 8.6.1.0 through 8.6.1.20 (LTS2026) contain a stack-based buffer overflow vulnerability. This flaw could be exploited by a high privileged attacker with remote access to cause a denial of service. The vulnerability does not impact confidentiality or integrity. No public exploits or known active exploitation have been reported. The CVSS v3.1 base score is 4.9 (medium severity).