OSV.dev · 实时热榜

Affected packages: Debian:11/libxfont、Debian:12/libxfont、Debian:13/libxfont、Debian:14/libxfont Attributes: No fix available

Affected packages: Debian:11/qpid-proton、Debian:12/qpid-proton、Debian:13/qpid-proton、Debian:14/qpid-proton Attributes: No fix available

Open WebUI: Same-origin XSS to account takeover via terminal file-preview iframe hardcoding allow-same-origin Affected packages: PyPI/open-webui Attributes: Fix available、Severity - 8.2 (High)

Ghost: Archived Offers can be Redeemed Affected packages: npm/ghost Attributes: Fix available、Severity - 4.8 (Medium)

Flowise: Pyodide validator Unicode homoglyph bypass leads to RCE Affected packages: npm/flowise、npm/flowise-components Attributes: Fix available、Severity - 9.5 (Critical)

Flowise: Unauthenticated Property Injection into Flow Execution Context via Ungated ` overrideConfig ` Spread in Prediction API Affected packages: npm/flowise Attributes: Fix available、Severity - 8.8 (High)

Open WebUI: Instance-wide stall via automation recurrence rules that force multi-second parsing Affected packages: PyPI/open-webui Attributes: Fix available、Severity - 6.5 (Medium)

Ghost: Database Backup Path Traversal Affected packages: npm/ghost Attributes: Fix available、Severity - 5.5 (Medium)

Ghost: Mobiledoc image-size fetch SSRF Affected packages: npm/ghost Attributes: Fix available、Severity - 5.4 (Medium)

Open WebUI: Users denied the image-generation permission can still generate images via chat completions Affected packages: PyPI/open-webui Attributes: Fix available、Severity - 4.3 (Medium)

Flowise: Broken Access Control in Stripe Subscription Endpoints Allows Cross-Tenant Billing Manipulation Affected packages: npm/flowise Attributes: Fix available、Severity - 8.3 (High)

Ghost Content API filter bypass reveals private fields Affected packages: npm/ghost Attributes: Fix available、Severity - 5.3 (Medium)

Flowise: ` DELETE /api/v1/chatflows/:id ` does not validate resource type, allowing ` agentflows:delete ` and ` chatflows:delete ` to delete each other’s flow type Affected packages: npm/flowise Attributes: Fix available、Severity - 7.1 (High)

Electron: Off-screen rendering trusts GPU-supplied geometry over shared-memory size Affected packages: npm/electron Attributes: Fix available、Severity - 3.9 (Low)

Open WebUI: Stored XSS via unescaped KaTeX render-error fallback in rendered messages Affected packages: PyPI/open-webui Attributes: Fix available、Severity - 8.7 (High)

Flowise: CSV Agent Remote Code Execution via Pyodide Code Injection — Root Shell Verified Affected packages: npm/flowise、npm/flowise-components Attributes: Fix available、Severity - 9.2 (Critical)

Open WebUI: SSRF into internal services via unvalidated sub-resource requests in the Playwright web loader Affected packages: PyPI/open-webui Attributes: Fix available、Severity - 7.7 (High)

Flowise: Cross-Workspace OAuth2 Credential Metadata Leak Affected packages: npm/flowise Attributes: Fix available、Severity - 7.6 (High)

Flowise RCE via SQLite Record Manager Node Affected packages: npm/flowise、npm/flowise-components Attributes: Fix available、Severity - 9.4 (Critical)

Electron: Cross-origin iframe can position native autofill popup Affected packages: npm/electron Attributes: Fix available、Severity - 3.1 (Low)

Flowise: CVE-2025-8943 Patch Bypass: npm_config_yes bypasses MCP environment variable blocklist (Unauthenticated RCE) Affected packages: npm/flowise、npm/flowise-components Attributes: Fix available、Severity - 8.7 (High)

Ghost: Paid gift memberships obtainable at minimal cost via the donations feature Affected packages: npm/ghost Attributes: Fix available、Severity - 5.3 (Medium)

Malicious code in @zzzgenesis00/etherjs (npm) Affected packages: npm/@zzzgenesis00/etherjs Attributes: No fix available

Malicious code in bigops-customer (npm) Affected packages: npm/bigops-customer Attributes: No fix available

Malicious code in @zzzgenesis00/mnemonic-to-key (npm) Affected packages: npm/@zzzgenesis00/mnemonic-to-key Attributes: No fix available

Malicious code in @wethenorth12/test-fresh (npm) Affected packages: npm/@wethenorth12/test-fresh Attributes: No fix available

Malicious code in time-utils-helper (npm) Affected packages: npm/time-utils-helper Attributes: No fix available

Malicious code in statist-browser-typed-client-sme.platform.web.teasers (npm) Affected packages: npm/statist-browser-typed-client-sme.platform.web.teasers Attributes: No fix available

Malicious code in trailserver (npm) Affected packages: npm/trailserver Attributes: No fix available

Malicious code in bpm-foundation-test-jest (npm) Affected packages: npm/bpm-foundation-test-jest Attributes: No fix available

Updated acl attr packages fix security vulnerabilities Affected packages: Mageia:10/acl、Mageia:10/attr、Mageia:9/acl、Mageia:9/attr Attributes: Fix available

Affected packages: MinimOS/datahub-frontend-react-fips Attributes: Fix available

Affected packages: MinimOS/rancher-machine Attributes: No fix available

Affected packages: MinimOS/calico-3.29-apiserver-compat-fips、MinimOS/calico-3.29-apiserver-fips、MinimOS/calico-3.29-app-policy-fips、MinimOS/calico-3.29-calicoctl-fips、MinimOS/calico-3.29-cni-compat-fips、... 10 more Attributes: No fix available

Affected packages: MinimOS/strimzi-kafka-operator-1.0-kafka-thirdparty-libs-cc Attributes: No fix available

Affected packages: MinimOS/tomcat-fips-11.0 Attributes: Fix available

Affected packages: MinimOS/rancher-fleet-agent-fips-0.12 Attributes: Fix available

Affected packages: MinimOS/glibc-2.39、MinimOS/glibc-2.39-dev、MinimOS/glibc-2.39-iconv、MinimOS/glibc-2.39-ld-linux、MinimOS/glibc-2.39-libc-bin、... 11 more Attributes: Fix available

Affected packages: MinimOS/strimzi-kafka-operator-fips-1.0-cluster-operator Attributes: No fix available

Red Hat Security Advisory: skopeo security update Affected packages: Red Hat:rhel_eus:9.6::appstream/skopeo、Red Hat:rhel_eus:9.6::appstream/skopeo-debuginfo、Red Hat:rhel_eus:9.6::appstream/skopeo-debugsource、Red Hat:rhel_eus:9.6::appstream/skopeo-tests Attributes: Fix available、Severity - 7.5 (High)

Moderate: kernel security, bug fix, and enhancement update Affected packages: Rocky Linux:8/kernel Attributes: Fix available、Severity - 5.8 (Medium)

Low: kernel security, bug fix, and enhancement update Affected packages: Rocky Linux:9/kernel Attributes: Fix available、Severity - 5.5 (Medium)

Affected packages: Debian:11/libxfont、Debian:12/libxfont、Debian:13/libxfont、Debian:14/libxfont Attributes: No fix available

Affected packages: Debian:11/qpid-proton、Debian:12/qpid-proton、Debian:13/qpid-proton、Debian:14/qpid-proton Attributes: No fix available

Open WebUI: Tool source code disclosed to read-only users via the tool list and get endpoints Affected packages: PyPI/open-webui Attributes: Fix available、Severity - 6.5 (Medium)

Flowise: Unauthenticated Credential Abuse via Text-to-Speech Endpoint Allows Unauthorized Use of Private Chatflow TTS Credentials Affected packages: npm/flowise Attributes: Fix available、Severity - 6.3 (Medium)

Open WebUI: Any authenticated user can reach internal services and cloud metadata via NAT64-encoded URLs Affected packages: PyPI/open-webui Attributes: Fix available、Severity - 7.1 (High)

Ghost: File Upload Content-Type Spoofing Affected packages: npm/ghost Attributes: Fix available、Severity - 5.4 (Medium)

Electron: Permission Check Handler Receives Main Frame Origin Instead of Requesting Iframe Origin Affected packages: npm/electron Attributes: Fix available、Severity - 5.9 (Medium)

Flowise: SSRF Protection Bypass via IPv4-Mapped IPv6 Addresses Affected packages: npm/flowise Attributes: Fix available、Severity - 7.6 (High)