OpenPanel versions before 3.0.0 have a SQL injection vulnerability in the profileColumnAccess function within cohort.service.ts. This flaw allows project-read members to inject SQL by providing unescaped profile filter column names. Exploitation can enable attackers to execute subqueries within cohort.preview filters, potentially reading data from other tenants' ClickHouse databases. The vulnerability is fixed in OpenPanel version 3.0.0.
OpenPanel versions before 3.0.0 have a sandbox escape vulnerability in the JavaScript runtime validator. This flaw allows a project member with write access to bypass the AST allowlist by aliasing the Function constructor, enabling arbitrary code execution in the worker process. The vulnerability is fixed in version 3.0.0.
OpenPanel versions before 3.0.0 have an authorization bypass vulnerability that allows unauthenticated attackers to access any project's annotations. This occurs via the public reference.getChartReferences tRPC procedure, where attackers can use guessable slug-based project IDs to retrieve annotation titles, descriptions, and dates across tenants.
OpenPanel before 3.0.0 contains a missing authorization vulnerability in the event.bots tRPC procedure that allows unauthenticated attackers to read bot events by only checking shareOverview row existence. Attackers can send anonymous requests with a projectId to retrieve bot-event names, types, and paths for private or password-protected projects, revealing internal routes.
OpenPanel versions before 3.0.0 have an SQL injection vulnerability that allows authenticated users to read data across tenants. By manipulating the profile.values property parameter, attackers can inject custom SQL SELECT statements to bypass project_id restrictions and access other projects' profiles, events, and sessions. This vulnerability is fixed in version 3.0.0.
OpenPanel versions prior to 3.0.0 contain an SQL injection vulnerability that allows authenticated users to bypass tenant scoping. This occurs because unescaped profile filter names are injected into a JOIN subquery, enabling attackers to manipulate the query with a crafted filter name and trailing comment. This bypasses the project_id WHERE clause and allows reading events from all projects.
OpenPanel versions before 3.0.0 have an authorization vulnerability in the onboarding.project tRPC mutation. This flaw allows non-admin organization members to create projects and generate write-type ingestion credentials, bypassing intended admin-only restrictions. Exploitation can lead to exposure of plaintext secrets, injection of fake analytics events, distortion of business metrics, and unauthorized consumption of the organization's usage budget. The vulnerability has a medium severity score of 5.3 and is fixed in OpenPanel version 3.0.0.
OpenPanel before 3.0.0 contains an information disclosure vulnerability that allows read-level project members to obtain argon2id hashes of ingestion credentials through the client.list tRPC query. Attackers can request client.list with a project ID and receive full Client rows including the secret column, enabling offline verification of leaked secrets without audit trails.
DOMPurify versions from 3.4.4 up to but not including 3.4.17 contain a vulnerability that allows attackers to bypass the SAFE_FOR_TEMPLATES protection. This flaw enables preservation of template expressions in attached shadow roots when using certain return modes, leading to potential cross-site scripting (XSS) when these expressions are merged and evaluated by downstream template engines.
DOMPurify versions before 3.4.17 contain a cross-site scripting (XSS) vulnerability. This flaw allows attacker-controlled event handlers to remain active when an IN_PLACE hook removes a parent or sibling node during sanitization. As a result, attacker markup in detached subtrees is not properly sanitized, enabling event handlers like img onerror to execute after the sanitize() function completes.
DOMPurify versions before 3.4.17 contain a cross-site scripting (XSS) vulnerability. This flaw allows attackers to bypass the SMIL attributeName=href guard when parsing application/xhtml+xml content. The vulnerability arises because the transformCaseFunc function does not lowercase attribute names, enabling malicious SVG elements with animate or set tags to execute JavaScript when users click sanitized links. The issue is fixed in version 3.4.17.
Parse Server before 8.6.105 and 9.0.0 before 9.10.5-alpha.6 does not validate the owning object reference in $relatedTo relation queries, so supplying a query operator instead of an object ID bypasses the owning-object ACL check. A client with read access to at least one object of the owning class can disclose which readable objects are linked to owning objects it cannot read.
CVE-2026-116800 is a local file inclusion vulnerability in WWBN AVideo versions before 29.5.0. It allows unauthenticated attackers to include and execute PHP files outside the intended locale directory by exploiting a path traversal flaw in the Accept-Language header processing. The vulnerability arises from insufficient sanitization of traversal sequences, enabling bypass of single-pass removal in the setLanguage() function. This flaw is fixed in version 29.5.0.
CVE-2026-116602 is a path traversal vulnerability in SourceCodester Online Food Ordering System version 1.0. It affects the unlink function in admin/delete.php, where manipulation of the image_name argument allows remote attackers to traverse directories and potentially delete arbitrary files. The vulnerability has a medium severity score of 6.9 and public exploit code is available.
CVE-2026-106282 is a vulnerability in Chromium's WebOTP feature involving UI misrepresentation. Affected versions are those before and including 155.0.4283.48. The issue has been fixed in version 155.0.4283.48.
Fireblocks' mpc-lib library has a cryptographic fail-open vulnerability in its BIP32 hardened derivation implementation when the private parent key is missing. This flaw breaks the ancestor isolation property, allowing an attacker with a compromised lower-level signer share and knowledge of the chain code to recover higher-level shares up to the root share. The primary MPC secret-sharing layer still prevents full private key reconstruction from a single share compromise, but the hardened derivation no longer provides defense-in-depth isolation between derivation levels. No vendor fix is currently available, and mitigation involves keeping the chain code secret and auditing derivation paths.
A vulnerability was found in Argilla up to 2.8.0. This affects an unknown function of the file argilla-frontend/components/features/annotation/container/fields/text-field/TextField.vue. The manipulation of the argument text results in cross site scripting. The attack can be executed remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
CVE-2026-116555 is a cross-site scripting (XSS) vulnerability in Argilla up to version 2.8.0. It arises from improper handling of the 'template' argument in a component file within the frontend codebase. The vulnerability allows remote attackers to inject malicious scripts. Public exploit code has been disclosed, but no official response or patch has been issued by the project as of the publication date.
A confused deputy attack exists in the StatefulSet controller that allows a user with namespace-scoped write permissions on StatefulSet and ControllerRevision objects to create a cross-namespace pod. An attacker exploiting this vulnerability would have full control over the resulting pod’s metadata and specification, including namespace selection. Note that the cross-namespace pod will be immediately deleted by the garbage collector unless the attacker is able to construct a valid StatefulSet OwnerReference. This would require referencing the UID of an existing StatefulSet in the victim’s namespace.
An NTLM coercion vulnerability exists on Windows nodes when the subPath supplied in a pod's volumeMounts is set to a symbolic link that points to an attacker-controlled network share. When a kubelet resolves symlinks, it does not reject a target that resolves to a UNC path. As a result, the kubelet will transparently attempt to authenticate to the share using NTLM. This allows an attacker to obtain the NetNTLMv2 hash of the account under which the kubelet is running. An attacker could then attempt to crack the hash to retrieve the corresponding password or relay it to impersonate the node, if the node is domain-joined.