OSV.dev · 实时热榜

Keycloak-services: keycloak-services: vault-resolved rotated client secrets leaked via admin rest api Affected packages: Bitnami/keycloak Attributes: Fix available、Severity - 4.9 (Medium)

tarfile extraction filter bypass allows creation of directories outside the destination Affected packages: Bitnami/python Attributes: No fix available、Severity - 6.3 (Medium)

NLTK before 3.10.0 Remote Code Execution via Unsafe Pickle Deserialization Affected packages: github.com/nltk/nltk Attributes: Fix available、Severity - 9.4 (Critical)

mcp-shell has a Secure Mode Allowlist Bypass via Default `/bin/bash` Executable Affected packages: Go/github.com/sonirico/mcp-shell Attributes: Fix available、Severity - 8.4 (High)

praisonaiagents web_crawl vulnerable to SSRF via redirect-following Affected packages: PyPI/praisonaiagents Attributes: Fix available、Severity - 7.5 (High)

praisonaiagents vulnerable to arbitrary file write via unsanitized `user_id` in `FileMemory.__init__()` — path traversal to any writable location Affected packages: PyPI/praisonaiagents Attributes: Fix available、Severity - 7.1 (High)

qwed-mcp has Unsafe SymPy `parse_expr()` Remote Code Execution via Unsanitized Math Expression Input Affected packages: PyPI/qwed-mcp Attributes: Fix available、Severity - 9.8 (Critical)

PraisonAI: [Auth Bypass] `praisonai serve agents --api-key` is silently ignored — agent-invocation routes (`POST /agents`, `POST /agents/{agent_name}`) run unauthenticated Affected packages: PyPI/praisonai Attributes: Fix available、Severity - 7.3 (High)

praisonaiagents vulnerable to SSRF in web_crawl tool via redirect-following and DNS rebinding (validate-then-fetch gap) Affected packages: PyPI/praisonaiagents Attributes: Fix available、Severity - 7.5 (High)

PraisonAI has an origin validation bypass in MCP HTTP Stream transport that allows browser-mediated unauthenticated tool execution on local MCP server Affected packages: PyPI/praisonai Attributes: Fix available、Severity - 6.9 (Medium)

Important: nodejs24 security update Affected packages: Rocky Linux:10/nodejs24 Attributes: Fix available、Severity - 8.6 (High)

Important: python3.12 security update Affected packages: Rocky Linux:10/python3.12 Attributes: Fix available、Severity - 7.3 (High)

Affected packages: Ubuntu:22.04:LTS/openssl、Ubuntu:24.04:LTS/edk2、Ubuntu:24.04:LTS/openssl、Ubuntu:26.04:LTS/edk2、Ubuntu:26.04:LTS/openssl、... 7 more Attributes: No fix available

Keycloak-services: keycloak-services: group hierarchy search discloses hidden parent groups under fgap v2 Affected packages: Bitnami/keycloak Attributes: Fix available、Severity - 2.7 (Low)

tarfile extraction filter bypass allows creation of directories outside the destination Affected packages: Bitnami/python-min Attributes: No fix available、Severity - 6.3 (Medium)

NLTK before 3.10.3 SSRF Protection Bypass via Proxy Affected packages: github.com/nltk/nltk Attributes: Fix available、Severity - 8.7 (High)

OAuth token exchange grants repository scopes for organizations the principal cannot access Affected packages: github.com/hexpm/hexpm Attributes: Fix available、Severity - 8.3 (High)

Explicit organization scopes survive token refresh after membership ends Affected packages: github.com/hexpm/hexpm Attributes: Fix available、Severity - 2.3 (Low)

netfoil vulnerable to improper handling of untrusted DoH response data Affected packages: Go/github.com/tinfoil-factory/netfoil Attributes: Fix available、Severity - 2.7 (Low)

PraisonAI has a Browser Server WebSocket origin validation bypass via unanchored regex (patch bypass of CVE-2026-40289 / GHSA-8x8f-54wf-vv92) Affected packages: PyPI/praisonai Attributes: Fix available、Severity - 9.1 (Critical)

mcp-shell has a Secure Mode Allowlist Bypass via Git Shell Alias Affected packages: Go/github.com/sonirico/mcp-shell Attributes: Fix available、Severity - 8.4 (High)

PraisonAI serve agents --api-key is ignored, allowing unauthenticated remote agent execution Affected packages: PyPI/praisonai Attributes: Fix available、Severity - 8.6 (High)

praisonaiagents has a `web_crawl` SSRF protection bypass via unchecked redirect targets Affected packages: PyPI/praisonaiagents Attributes: Fix available、Severity - 7.7 (High)

Sakai Profile Image Deletion has an IDOR Affected packages: Maven/org.sakaiproject.profile2:profile2-api、Maven/org.sakaiproject.profile2:profile2-impl Attributes: Fix available、Severity - 6.5 (Medium)

PraisonAI: [Path Traversal] agent tools escape the configured workspace via symlinks Affected packages: PyPI/praisonai Attributes: Fix available、Severity - 7.1 (High)

vibeio-http has a DoS vulnerability in HTTP/1.x chunked encoding parser triggered by maliciously crafted chunk lengths Affected packages: crates.io/vibeio-http Attributes: Fix available、Severity - 6.9 (Medium)

3X-UI Vulnerable to Authenticated Arbitrary File Write via Database Import and Xray Log Path Manipulation Affected packages: Go/github.com/mhsanaei/3x-ui/v2、Go/github.com/mhsanaei/3x-ui/v3 Attributes: Fix available、Severity - 7.2 (High)

PraisonAI: `--api-key` flag on `praisonai serve` is not properly enforced Affected packages: PyPI/praisonai Attributes: Fix available、Severity - 8.8 (High)

mcp-contextforge-gateway has RestrictedPython sandbox bypass via getattr builtin in python_sandbox_server Affected packages: PyPI/mcp-contextforge-gateway Attributes: Fix available

A cross-site scripting vulnerability in queryparser/termgenerator_internal.cc in Xapian xapian... Affected packages: Julia/xapian_jll Attributes: No fix available、Severity - 4.4 (Medium)

Malicious code in @deepaksilaych/sess (npm) Affected packages: npm/@deepaksilaych/sess Attributes: No fix available

Malicious code in dotish (npm) Affected packages: npm/dotish Attributes: No fix available

Malicious code in @medisend/shared (npm) Affected packages: npm/@medisend/shared Attributes: No fix available

Important: firefox security update Affected packages: Rocky Linux:10/firefox Attributes: Fix available、Severity - 7.5 (High)

CVE-2023-34152 in imagemagick - Patched by Root Affected packages: Root:Debian:12/imagemagick、Root:Debian:12/rootio-imagemagick Attributes: Fix available、Severity - 9.8 (Critical)

CVE-2026-44169 in mariadb - Patched by Root Affected packages: Root:Debian:12/mariadb、Root:Debian:12/rootio-mariadb Attributes: Fix available

Keycloak-services: keycloak-services: keycloak: fgap v2 role groups endpoint discloses hidden group metadata without group view permission Affected packages: Bitnami/keycloak Attributes: Fix available、Severity - 4.9 (Medium)

tarfile extraction filter bypass allows creation of directories outside the destination Affected packages: Bitnami/libpython Attributes: No fix available、Severity - 6.3 (Medium)

NLTK before 3.10.3 Entity Expansion DoS via ElementTree Affected packages: github.com/nltk/nltk Attributes: Fix available、Severity - 8.7 (High)

tokio-postgres: Panic on a `DataRow` with fewer fields than columns allows denial of service Affected packages: crates.io/tokio-postgres Attributes: Fix available、Severity - 6.9 (Medium)

praisonaiagents: ast_grep_rewrite rewrites arbitrary files without the @require_approval gate enforced on every sibling mutation tool Affected packages: PyPI/praisonaiagents Attributes: Fix available、Severity - 6.1 (Medium)

PraisonAI vulnerable to Server-Side Request Forgery via DNS rebinding bypass in webhook_url validation Affected packages: PyPI/praisonai Attributes: Fix available、Severity - 6.8 (Medium)

PraisonAI workflow include bypasses tools.py autoload opt-in and executes included recipe code Affected packages: PyPI/praisonai、PyPI/praisonaiagents Attributes: Fix available、Severity - 7.8 (High)

PraisonAI: Origin-validation bypass (startswith prefix match) enables unauthenticated cross-site request forgery against the PraisonAI MCP HTTP server Affected packages: PyPI/praisonai Attributes: Fix available、Severity - 7.6 (High)

Sakai Conversations has a Stored XSS Issue Affected packages: Maven/org.sakaiproject.conversations:sakai-conversations-impl、Maven/org.sakaiproject.kernel:sakai-kernel-impl、Maven/org.sakaiproject.rubrics:rubrics-impl Attributes: No fix available、Severity - 8.7 (High)

Gorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key Affected packages: Go/github.com/gorilla/websocket Attributes: Fix available、Severity - 6.9 (Medium)

Cloudreve's remote download file paths can escape the selected destination directory Affected packages: Go/github.com/cloudreve/Cloudreve/v4 Attributes: No fix available、Severity - 5.5 (Medium)

praisonaiagents has an SSRF protection bypass in `spider_tools._host_is_blocked()` via DNS-resolved hostnames (`127.0.0.1.nip.io`) Affected packages: PyPI/praisonaiagents Attributes: Fix available、Severity - 8.5 (High)

Malicious code in livemcp (npm) Affected packages: npm/livemcp Attributes: No fix available

Malicious code in dims-hydration-ui (npm) Affected packages: npm/dims-hydration-ui Attributes: No fix available