📡 GitHub-Advisory · 2026-05-07 GHSA-pj6q-4vq4-r8cg - Ech0 allows PUT /api/echo/like/:id unauthenticated: anonymous callers to modify GHSA-pj6q-4vq4-r8cg MEDIUM go/github.com/lin-snow/Ech0 CVE: Summary PUT /api/echo/like/:id at internal/router/echo.go:12 is registered on PublicRouterGroup with no authentication and no rate limit. Anonymous callers increment

📡 GitHub-Advisory · 2026-05-07 GHSA-rgj7-vg8v-j4wr - Ech0's Unauthenticated Like Endpoint Enables Arbitrary Engagement Metric Inflati GHSA-rgj7-vg8v-j4wr MEDIUM go/github.com/lin-snow/ech0 CVE: Summary No authentication is required to invoke PUT /api/echo/like/:id. The handler is registered on the public router group. The service increments fav_count for

📡 GitHub-Advisory · 2026-05-07 GHSA-3v85-fqvh-7rxf - Ech0's RSS feed renders unescaped tag names and raw-HTML markdown, stored XSS ag GHSA-3v85-fqvh-7rxf MEDIUM go/github.com/lin-snow/Ech0 CVE: Summary The public RSS/Atom feed at /rss renders two attacker-controlled surfaces without HTML escaping. Tag names flow through fmt.Appendf(renderedContent, "

📡 GitHub-Advisory · 2026-05-07 GHSA-rj4g-rqgh-rx9h - Ech0 comment model's Email field returned on public /api/comments endpoints GHSA-rj4g-rqgh-rx9h MEDIUM go/github.com/lin-snow/Ech0 CVE: Summary The Comment model serializes its Email field through the public comment-listing API. internal/model/comment/comment.go:33 uses json:"email", while

📡 GitHub-Advisory · 2026-05-07 CVE-2026-44523 - Note Mark has a JWT Secret Weakness that allows Full Account Takeover via Token CVE-2026-44523 GHSA-q6mh-rqwh-g786 CRITICAL go/github.com/enchant97/note-mark/backend CVE: CVE-2026-44523 Summary No minimum length or entropy is enforced on the JWT_SECRET configuration value. The application accepts any base64-decodable secret regardless

📡 GitHub-Advisory · 2026-05-07 CVE-2026-44522 - Note Mark: Arbitrary File Write via Path Traversal in Asset Names Leads to Remot CVE-2026-44522 GHSA-g49p-4qxj-88v3 HIGH go/github.com/enchant97/note-mark/backend CVE: CVE-2026-44522 Description The Note Mark application allows authenticated users to upload assets to notes via POST /api/notes/{noteID}/assets, where the

📡 GitHub-Advisory · 2026-05-07 GHSA-h4fw-6r7f-w494 - Webauthn has a User Verification Downgrade via Default-Open ClientOverridePolicy GHSA-h4fw-6r7f-w494 LOW composer/web-auth/webauthn-framework CVE: Summary In version 5.3.0 of the Symfony bundle, Webauthn\Bundle\Policy\ClientOverridePolicy defaulted to allowing all client overrides, including userVerification. A client could send {"userVerification": "discouraged&

📡 GitHub-Advisory · 2026-05-07 GHSA-cwfq-rfcr-8hmp - Zebra's Transparent SIGHASH_SINGLE Handling Diverges from zcashd for Correspondi GHSA-cwfq-rfcr-8hmp CRITICAL rust/zebrad CVE: `Zebra` Transparent `SIGHASH_SINGLE` Corresponding-Output Handling Diverges From `zcashd` Summary For V5+ transparent spends, Zebra and zcashd disagree on the same consensus rule: SIGHASH_SINGLE must fail when the

📡 GitHub-Advisory · 2026-05-07 CVE-2026-44497 - Zebra has Consensus Divergence in Transparent Sighash Hash-Type Handling due to CVE-2026-44497 GHSA-gq4h-3grw-2rhv CRITICAL rust/zebra-script CVE: CVE-2026-44497 CVE-2026-44497: Consensus Divergence in Transparent Sighash Hash-Type Handling due to Stale Buffer Summary The fix for https://github.com/ZcashFoundation/zebra/security/advisories/GHSA-8m29-fpq5-89jj introduced a separate issue

📡 GitHub-Advisory · 2026-05-07 CVE-2026-44500 - Zebra Vulnerable to Allocation Amplification in Inbound Network Deserializers CVE-2026-44500 GHSA-438q-jx8f-cccv MEDIUM rust/zebra-network CVE: CVE-2026-44500 CVE-2026-44500: Allocation Amplification in Inbound Network Deserializers Summary Several inbound deserialization paths in Zebra allocated buffers sized against generic transport or block-size ceilings before the tighter protocol or consensus limits

📡 GitHub-Advisory · 2026-05-07 CVE-2026-44498 - Zebra's Block Validator Undercounts Coinbase and P2SH Sigops CVE-2026-44498 GHSA-jv4h-j224-23cc CRITICAL rust/zebrad CVE: CVE-2026-44498 Zebra's block validator undercounts transparent signature operations against the 20000-sigop block limit (MAX_BLOCK_SIGOPS), allowing it to accept blocks that zcashd rejects with bad-blk-sigops. A miner

📡 GitHub-Advisory · 2026-05-07 CVE-2026-44589 - nuxt-og-image SSRF — bypass of GHSA-pqhr-mp3f-hrpp / v6.2.5 fix (IPv6 + redirect CVE-2026-44589 GHSA-c2rm-g55x-8hr5 LOW npm/nuxt-og-image CVE: CVE-2026-44589 Summary The isBlockedUrl() denylist introduced in nuxt-og-image@6.2.5 to remediate GHSA-pqhr-mp3f-hrpp (Dmitry Prokhorov / Positive Technologies, March 2026) is incomplete. The patch advisory states "Decimal/hexadecimal

📡 GitHub-Advisory · 2026-05-07 CVE-2026-42879 - FacturaScripts Vulnerable to Authenticated Remote Code Execution (RCE) via GIF I CVE-2026-42879 GHSA-vf3q-frmr-vrr9 MEDIUM composer/facturascripts/facturascripts CVE: CVE-2026-42879 CVE-2026-42879 - FacturaScripts - Authenticated Unrestricted File Upload via MIME Type Bypass Summary An authenticated unrestricted file upload vulnerability exists in FacturaScripts' product image upload functionality.

📡 GitHub-Advisory · 2026-05-07 CVE-2026-42878 - FacturaScripts Vulnerable to Unauthenticated phpinfo() Disclosure via Installer CVE-2026-42878 GHSA-vrxf-vrc4-22p7 MEDIUM composer/facturascripts/facturascripts CVE: CVE-2026-42878 Summary An unauthenticated information disclosure vulnerability in the Installer controller allows any remote attacker to trigger phpinfo() on a fresh FacturaScripts deployment by requesting /?phpinfo=TRUE, exposing full PHP configuration,

📡 NVD-Latest · 2026-05-07 CVE-2026-40981 (CVSS 7.5) - When using Google Secrets Manager as a backend for the Spring Cloud Config serve CVE-2026-40981 CVE-2026-40981 CVSS:7.5 When using Google Secrets Manager as a backend for the Spring Cloud Config server a client can craft a request to the config server

📡 NVD-Latest · 2026-05-07 CVE-2026-41002 (CVSS 7.2) - The base directory (`spring.cloud.config.server.git.basedir`) used by the Spring CVE-2026-41002 CVE-2026-41002 CVSS:7.2 The base directory (spring.cloud.config.server.git.basedir) used by the Spring Cloud Config Server to clone Git repositories to is susceptible to time-of-check-time-of-use

📡 NVD-Latest · 2026-05-07 CVE-2026-41640 (CVSS 7.5) - NocoBase is an AI-powered no-code/low-code platform for building business applic CVE-2026-41640 CVE-2026-41640 CVSS:7.5 NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions. Prior to version 2.0.39, the queryParentSQL() function in the core database

📡 NVD-Latest · 2026-05-07 CVE-2026-41660 (CVSS 7.1) - Admidio is an open-source user management solution. Prior to version 5.0.9, a lo CVE-2026-41660 CVE-2026-41660 CVSS:7.1 Admidio is an open-source user management solution. Prior to version 5.0.9, a logic error in Admidio's two-factor authentication reset

📡 NVD-Latest · 2026-05-07 CVE-2026-41669 (CVSS 8.2) - Admidio is an open-source user management solution. Prior to version 5.0.9, the CVE-2026-41669 CVE-2026-41669 CVSS:8.2 Admidio is an open-source user management solution. Prior to version 5.0.9, the Admidio SAML Identity Provider implementation discards the return value of

📡 NVD-Latest · 2026-05-07 CVE-2026-41139 (CVSS 8.8) - Math.js is an extensive math library for JavaScript and Node.js. From version 13 CVE-2026-41139 CVE-2026-41139 CVSS:8.8 Math.js is an extensive math library for JavaScript and Node.js. From version 13.1.0 to before version 15.2.0,

📡 NVD-Latest · 2026-05-07 CVE-2026-41143 (CVSS 8.8) - YesWiki is a wiki system written in PHP. Prior to version 4.6.1, YesWiki bazar m CVE-2026-41143 CVE-2026-41143 CVSS:8.8 YesWiki is a wiki system written in PHP. Prior to version 4.6.1, YesWiki bazar module contains a SQL injection

📡 NVD-Latest · 2026-05-07 CVE-2026-41641 (CVSS 7.2) - NocoBase is an AI-powered no-code/low-code platform for building business applic CVE-2026-41641 CVE-2026-41641 CVSS:7.2 NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions. Prior to version 2.0.39, the checkSQL() validation function that blocks dangerous

📡 NVD-Latest · 2026-05-07 CVE-2026-4348 (CVSS 7.5) - The BetterDocs Pro plugin for WordPress is vulnerable to SQL Injection via the ` CVE-2026-4348 CVE-2026-4348 CVSS:7.5 The BetterDocs Pro plugin for WordPress is vulnerable to SQL Injection via the get_current_letter_docs and docs_sort_by_letter AJAX actions in

📡 NVD-Latest · 2026-05-07 CVE-2026-6692 (CVSS 8.8) - The Slider Revolution plugin for WordPress is vulnerable to Arbitrary File Uploa CVE-2026-6692 CVE-2026-6692 CVSS:8.8 The Slider Revolution plugin for WordPress is vulnerable to Arbitrary File Upload in versions 7.0.0 to 7.0.10 via the '_get_media_

📡 NVD-Latest · 2026-05-07 CVE-2026-7252 (CVSS 8.1) - The WP-Optimize – Cache, Compress images, Minify & Clean database to boost page CVE-2026-7252 CVE-2026-7252 CVSS:8.1 The WP-Optimize – Cache, Compress images, Minify & Clean database to boost page speed & performance plugin for WordPress is vulnerable to arbitrary file deletion due to