cases32.json

[
  {
    "slug": "appium-mcp-79",
    "lang": "node",
    "cwe": "CWE-79",
    "cwe_name": "Cross-site Scripting",
    "repo": "appium/appium-mcp",
    "fix_sha": "e222bbbd6fe2b656a320efcd143563f08061a83d",
    "vuln_file": "src/ui/mcp-ui-utils.ts",
    "advisory_url": "https://github.com/advisories/GHSA-x975-rgx4-5fh4",
    "cve": null,
    "severity": "high",
    "desc": "`appium-mcp`'s `createLocatorGeneratorUI` function interpolates attacker-controlled element attributes — `text`, `content-desc`, `resource-id`, and locator selector values — directly into an HTML temp"
  },
  {
    "slug": "arc-22",
    "lang": "go",
    "cwe": "CWE-22",
    "cwe_name": "Path Traversal",
    "repo": "Basekick-Labs/arc",
    "fix_sha": "91bdc29d1a02178ccf8c66375eccf85203108dfb",
    "vuln_file": "cmd/arc/main.go",
    "advisory_url": "https://github.com/advisories/GHSA-p2j4-c4g6-rpf5",
    "cve": "CVE-2026-47735",
    "severity": "high",
    "desc": "Arc's user-SQL validator (`internal/api/query.go:ValidateSQLRequest`) blocked only `read_parquet(` and `arc_partition_agg(` via regex denylist."
  },
  {
    "slug": "async-http-client-200",
    "lang": "java",
    "cwe": "CWE-200",
    "cwe_name": "Information Exposure",
    "repo": "AsyncHttpClient/async-http-client",
    "fix_sha": "3b0e3e9e",
    "vuln_file": "client/src/main/java/org/asynchttpclient/netty/handler/intercept/Redirect30xInterceptor.java",
    "advisory_url": "https://github.com/advisories/GHSA-fmxf-pm6p-7xgm",
    "cve": "CVE-2026-45300",
    "severity": "high",
    "desc": "async-http-client leaks `Cookie` headers to cross-origin redirect targets."
  },
  {
    "slug": "camel-288",
    "lang": "java",
    "cwe": "CWE-288",
    "cwe_name": "CWE-288",
    "repo": "apache/camel",
    "fix_sha": "6ec12cbebfc1b6360cdaac1c1f8c681864911695",
    "vuln_file": "components/camel-platform-http-main/src/main/java/org/apache/camel/component/platform/http/main/authentication/BasicAuthenticationConfigurer.java",
    "advisory_url": "https://github.com/advisories/GHSA-27vm-5vpj-rp5g",
    "cve": "CVE-2026-40022",
    "severity": "high",
    "desc": "When authentication is enabled on the Apache Camel embedded HTTP server or embedded management server (camel-platform-http-main) and a non-root context path such as /api or /admin is configured via ca"
  },
  {
    "slug": "camel-915",
    "lang": "java",
    "cwe": "CWE-915",
    "cwe_name": "Object Attribute Modification",
    "repo": "apache/camel",
    "fix_sha": "05cffa5ec05ff2ec3c50a77825625da6e426e7a8",
    "vuln_file": "components/camel-coap/src/main/java/org/apache/camel/coap/CamelCoapResource.java",
    "advisory_url": "https://github.com/advisories/GHSA-695c-x5gc-94gj",
    "cve": "CVE-2026-33453",
    "severity": "critical",
    "desc": "Apache Camel's camel-coap component is vulnerable to header injection because it maps CoAP request URI query parameters directly into Camel message headers without applying a HeaderFilterStrategy."
  },
  {
    "slug": "devguard-285",
    "lang": "go",
    "cwe": "CWE-285",
    "cwe_name": "Improper Authorization",
    "repo": "l3montree-dev/devguard",
    "fix_sha": "1be88ec1309a5dc0566e35a23bdc4ea3ecd11417",
    "vuln_file": "middlewares/access_control_middlewares.go",
    "advisory_url": "https://github.com/advisories/GHSA-6p54-fw2f-q7gf",
    "cve": "CVE-2026-48089",
    "severity": "high",
    "desc": "On a DevGuard API instance with one or more **public assets**, any authenticated user — including users from a different organization with no membership or role in the affected org/project — can creat"
  },
  {
    "slug": "dex-285",
    "lang": "go",
    "cwe": "CWE-285",
    "cwe_name": "Improper Authorization",
    "repo": "dexidp/dex",
    "fix_sha": "204dbb2e3ff7692af3b7ca4362b1ee46fb43c227",
    "vuln_file": "connector/authproxy/authproxy.go",
    "advisory_url": "https://github.com/advisories/GHSA-7qjx-gp9h-65qj",
    "cve": null,
    "severity": "high",
    "desc": "`server/handlers.go::handleTokenExchange` (lines 1804-1893) does not call `isConnectorAllowed(client.AllowedConnectors, connID)` before issuing tokens, while sibling handlers do."
  },
  {
    "slug": "dnsproxy-362",
    "lang": "go",
    "cwe": "CWE-362",
    "cwe_name": "CWE-362",
    "repo": "AdguardTeam/dnsproxy",
    "fix_sha": "f00d992ce9567a50f596853978ad6500acfdcf1d",
    "vuln_file": "internal/cmd/proxy.go",
    "advisory_url": "https://github.com/advisories/GHSA-xgx4-4h9w-53pv",
    "cve": "CVE-2026-47703",
    "severity": "medium",
    "desc": "This report covers the client-triggered DoQ forwarding path in:  - `dnsproxy` `v0.81.2` (`adguard/dnsproxy:v0.81.2`) - `AdGuard Home` `v0.107.74` (`adguard/adguardhome:latest`, image version label `v0"
  },
  {
    "slug": "dulwich-78",
    "lang": "python",
    "cwe": "CWE-78",
    "cwe_name": "OS Command Injection",
    "repo": "jelmer/dulwich",
    "fix_sha": "e3331b3b3a122fc313460182f928f59723580b7b",
    "vuln_file": "dulwich/merge_drivers.py",
    "advisory_url": "https://github.com/advisories/GHSA-9277-mp7x-85jf",
    "cve": "CVE-2026-42563",
    "severity": "high",
    "desc": "Dulwich's `ProcessMergeDriver` substitutes the file path (from the git tree, controllable by an attacker via a malicious branch) into the merge driver command via the `%P` placeholder and executes it "
  },
  {
    "slug": "epa4all-client-295",
    "lang": "java",
    "cwe": "CWE-295",
    "cwe_name": "CWE-295",
    "repo": "oviva-ag/epa4all-client",
    "fix_sha": "e13fa838c7b2c7e66f9abfffbe108a85f2f4d0c6",
    "vuln_file": "vau/vau-httpclient/src/main/java/com/oviva/telematik/vau/httpclient/internal/SignedPublicKeysTrustValidatorFactory.java",
    "advisory_url": "https://github.com/advisories/GHSA-g8r3-5hwf-qp96",
    "cve": "CVE-2026-44900",
    "severity": "high",
    "desc": "In SignedPublicKeysTrustValidatorImpl.isTrusted(), the ECDSA signature verification at line 45 discards the boolean return value of Signature.verify()."
  },
  {
    "slug": "hono-185",
    "lang": "node",
    "cwe": "CWE-185",
    "cwe_name": "CWE-185",
    "repo": "honojs/hono",
    "fix_sha": "c831020fb1fa2e929d222f6c84e1abfe013e512b",
    "vuln_file": "src/middleware/ip-restriction/index.ts",
    "advisory_url": "https://github.com/advisories/GHSA-xrhx-7g5j-rcj5",
    "cve": "CVE-2026-47674",
    "severity": "medium",
    "desc": "The `ip-restriction` middleware (`hono/ip-restriction`) compares incoming IP addresses against configured deny and allow rules using string equality after partial normalization."
  },
  {
    "slug": "httpcomponents-client-304",
    "lang": "java",
    "cwe": "CWE-304",
    "cwe_name": "CWE-304",
    "repo": "apache/httpcomponents-client",
    "fix_sha": "726eac2323d370435d8afca1e0540aa099927f18",
    "vuln_file": "httpclient5/src/main/java/org/apache/hc/client5/http/impl/DefaultAuthenticationStrategy.java",
    "advisory_url": "https://github.com/advisories/GHSA-v468-qcjx-r72w",
    "cve": "CVE-2026-40542",
    "severity": "high",
    "desc": "Missing critical step in authentication in Apache HttpClient 5.6 allows an attacker to cause the client to accept SCRAM-SHA-256 authentication without proper mutual authentication verification."
  },
  {
    "slug": "jupyter-server-79",
    "lang": "python",
    "cwe": "CWE-79",
    "cwe_name": "Cross-site Scripting",
    "repo": "jupyter-server/jupyter_server",
    "fix_sha": "6cbee8d65e71abac851c4492fea987ad080580bd",
    "vuln_file": "jupyter_server/nbconvert/handlers.py",
    "advisory_url": "https://github.com/advisories/GHSA-fcw5-x6j4-ccmp",
    "cve": "CVE-2026-44727",
    "severity": "critical",
    "desc": "The nbconvert HTTP handlers in jupyter_server render user-authored notebook HTML under the Jupyter origin without a sandbox directive in their `Content-Security-Policy`."
  },
  {
    "slug": "klever-go-400",
    "lang": "go",
    "cwe": "CWE-400",
    "cwe_name": "Uncontrolled Resource Consumption",
    "repo": "klever-io/klever-go",
    "fix_sha": "333f6ec910906e227705fc5767dc897d8fbfc862",
    "vuln_file": "common/errors.go",
    "advisory_url": "https://github.com/advisories/GHSA-74m6-4hjp-7226",
    "cve": null,
    "severity": "high",
    "desc": "The decompression-error path in `MultiDataInterceptor.ProcessReceivedMessage` now releases the global throttler slot before returning (guarded `defer` after `StartProcessing()`, disabled when the asyn"
  },
  {
    "slug": "langflow-200",
    "lang": "python",
    "cwe": "CWE-200",
    "cwe_name": "Information Exposure",
    "repo": "langflow-ai/langflow",
    "fix_sha": "99da6d05879758b7757521e88d5aee0aff55d41f",
    "vuln_file": "src/backend/base/langflow/api/v1/endpoints.py",
    "advisory_url": "https://github.com/advisories/GHSA-x223-p2gf-v735",
    "cve": "CVE-2026-55450",
    "severity": "critical",
    "desc": "Unauthenticated users can upload any amount of data to the server without any limitations."
  },
  {
    "slug": "langflow-639",
    "lang": "python",
    "cwe": "CWE-639",
    "cwe_name": "Authorization Bypass Through User-Controlled Key",
    "repo": "langflow-ai/langflow",
    "fix_sha": "2c9f498d664a3c32698b57d7c5e752625291060e",
    "vuln_file": "src/backend/base/langflow/api/v1/endpoints.py",
    "advisory_url": "https://github.com/advisories/GHSA-qrpv-q767-xqq2",
    "cve": "CVE-2026-55255",
    "severity": "critical",
    "desc": "Insecure Direct Object Reference (IDOR) vulnerability in `/api/v1/responses` endpoint allows an authenticated attacker to execute any flow belonging to another user by specifying the victim's flow ID "
  },
  {
    "slug": "mcp-toolbox-287",
    "lang": "go",
    "cwe": "CWE-287",
    "cwe_name": "Improper Authentication",
    "repo": "googleapis/mcp-toolbox",
    "fix_sha": "dfd66ee7de6fe9750d932d30bf3b67a2f4d2a176",
    "vuln_file": "internal/auth/auth.go",
    "advisory_url": "https://github.com/advisories/GHSA-8fcc-w5hv-4gxv",
    "cve": "CVE-2026-11717",
    "severity": "critical",
    "desc": "An authentication bypass vulnerability exists in the generic opaque token validation path (validateOpaqueToken) of googleapis/mcp-toolbox."
  },
  {
    "slug": "mcp-toolbox-287-2",
    "lang": "go",
    "cwe": "CWE-287",
    "cwe_name": "Improper Authentication",
    "repo": "googleapis/mcp-toolbox",
    "fix_sha": "1d8df0df590383ba56091b6e4d7c37ab7d7d9749",
    "vuln_file": "internal/auth/generic/generic.go",
    "advisory_url": "https://github.com/advisories/GHSA-wcpr-6g7x-p44r",
    "cve": "CVE-2026-11718",
    "severity": "critical",
    "desc": "An authentication bypass vulnerability exists in the generic opaque token validation path (validateOpaqueToken) of googleapis/mcp-toolbox."
  },
  {
    "slug": "nebula-mesh-285",
    "lang": "go",
    "cwe": "CWE-285",
    "cwe_name": "Improper Authorization",
    "repo": "forgekeep/nebula-mesh",
    "fix_sha": "8baaace54c2a23e7c351b3efab5a31ab07b125dc",
    "vuln_file": "internal/api/audit.go",
    "advisory_url": "https://github.com/advisories/GHSA-qm33-p5p9-f8vg",
    "cve": "CVE-2026-47726",
    "severity": "high",
    "desc": "`internal/api/audit.go:12` — `handleGetAuditLog` does no admin check."
  },
  {
    "slug": "nebula-mesh-862",
    "lang": "go",
    "cwe": "CWE-862",
    "cwe_name": "Missing Authorization",
    "repo": "forgekeep/nebula-mesh",
    "fix_sha": "9d8bcd7667ecd0c2975cc71fb35a02fe131f76f2",
    "vuln_file": "internal/api/audit.go",
    "advisory_url": "https://github.com/advisories/GHSA-598g-h2vc-h5vg",
    "cve": "CVE-2026-47724",
    "severity": "critical",
    "desc": "The `/api/v1/*` route surface trusts the bearer token alone for authorisation on most endpoints."
  },
  {
    "slug": "nezha-862",
    "lang": "go",
    "cwe": "CWE-862",
    "cwe_name": "Missing Authorization",
    "repo": "nezhahq/nezha",
    "fix_sha": "02129f16fb1572ef57c7e8dd7d03f84d39b8b586",
    "vuln_file": "service/singleton/crontask.go",
    "advisory_url": "https://github.com/advisories/GHSA-4g6j-g789-rghm",
    "cve": "CVE-2026-48119",
    "severity": "high",
    "desc": "Nezha accepts service-monitor `TaskResult` messages from an authenticated agent based only on whether the reported service ID exists."
  },
  {
    "slug": "nhost-306",
    "lang": "go",
    "cwe": "CWE-306",
    "cwe_name": "Missing Authentication",
    "repo": "nhost/nhost",
    "fix_sha": "e407511627d2c2c1137a70e9ca1ca31095d23479",
    "vuln_file": "cli/clienv/appid.go",
    "advisory_url": "https://github.com/advisories/GHSA-64cj-qvx5-m4f3",
    "cve": "CVE-2026-47671",
    "severity": "medium",
    "desc": "The hidden `nhost configserver` used by `nhost dev` exposes the Mimir GraphQL API with dummy authorization directives and permissive CORS."
  },
  {
    "slug": "openbao-617",
    "lang": "go",
    "cwe": "CWE-617",
    "cwe_name": "Reachable Assertion",
    "repo": "openbao/openbao",
    "fix_sha": "db57c62602b25da12951f3f0edb888e7c4da61e5",
    "vuln_file": "builtin/logical/transit/backend.go",
    "advisory_url": "https://github.com/advisories/GHSA-8w8f-r2xv-4q4j",
    "cve": "CVE-2026-55776",
    "severity": "medium",
    "desc": "On OpenBao 2.5.4 and 2.5.2(and likely earlier versions also), an authenticated caller with write access to `transit/keys/*` can crash the OpenBao server by issuing a single key-creation request that c"
  },
  {
    "slug": "openmrs-core-94",
    "lang": "java",
    "cwe": "CWE-94",
    "cwe_name": "Code Injection",
    "repo": "openmrs/openmrs-core",
    "fix_sha": "8d1c193",
    "vuln_file": "api/src/main/java/org/openmrs/util/ConceptReferenceRangeUtility.java",
    "advisory_url": "https://github.com/advisories/GHSA-xj4f-8jjg-vx4q",
    "cve": "CVE-2026-41258",
    "severity": "critical",
    "desc": "The `ConceptReferenceRangeUtility.evaluateCriteria()` method in OpenMRS Core evaluates database-stored criteria strings as Apache Velocity templates without any sandbox configuration."
  },
  {
    "slug": "opentelemetry-go-789",
    "lang": "go",
    "cwe": "CWE-789",
    "cwe_name": "CWE-789",
    "repo": "open-telemetry/opentelemetry-go",
    "fix_sha": "aa1894e09e3fe66860c7885cb40f98901b35277f",
    "vuln_file": "baggage/baggage.go",
    "advisory_url": "https://github.com/advisories/GHSA-5wrp-cwcj-q835",
    "cve": "CVE-2026-41178",
    "severity": "medium",
    "desc": "https://github.com/open-telemetry/opentelemetry-go/pull/7880 removed raw-length rejection and it causes `Parse` to process arbitrarily large/invalid baggage headers and log errors, enabling DoS via ov"
  },
  {
    "slug": "opentelemetry-operator-200",
    "lang": "go",
    "cwe": "CWE-200",
    "cwe_name": "Information Exposure",
    "repo": "open-telemetry/opentelemetry-operator",
    "fix_sha": "95a8c2a3dc64a762d3ab8eba8c903b5702a03a9c",
    "vuln_file": "apis/v1alpha1/opentelemetrycollector_types.go",
    "advisory_url": "https://github.com/advisories/GHSA-cxh2-4639-vmc5",
    "cve": "CVE-2026-47701",
    "severity": "high",
    "desc": "Repository: github.com/open-telemetry/opentelemetry-operator Component: cmd/otel-allocator (TargetAllocator) Companion: Prometheus Operator API types (CRDs)    OpenTelemetry Operator's TargetAllocator"
  },
  {
    "slug": "pdm-22",
    "lang": "python",
    "cwe": "CWE-22",
    "cwe_name": "Path Traversal",
    "repo": "pdm-project/pdm",
    "fix_sha": "41aa5f94a30e51b1a460af27312dd9dc532aad5a",
    "vuln_file": "src/pdm/installers/installers.py",
    "advisory_url": "https://github.com/advisories/GHSA-78v8-vpjp-cjqh",
    "cve": "CVE-2026-47764",
    "severity": "high",
    "desc": "InstallDestination.write_to_fs() in src/pdm/installers/installers.py overrides the base class to add symlink/hardlink support but replaces the safe _path_with_destdir() (which validates via Path.resol"
  },
  {
    "slug": "python-zeep-918",
    "lang": "python",
    "cwe": "CWE-918",
    "cwe_name": "Server-Side Request Forgery",
    "repo": "mvantellingen/python-zeep",
    "fix_sha": "83eb07bc6c84d841329d4f88856fecdba86f753e",
    "vuln_file": "src/zeep/exceptions.py",
    "advisory_url": "https://github.com/advisories/GHSA-4cc2-g9w2-fhf6",
    "cve": null,
    "severity": "medium",
    "desc": "When parsing a WSDL or XSD document, python-zeep follows transitive references — xsd:import, xsd:include, wsdl:import, and lxml entity/DTD resolution — and will fetch http/https URLs found in those re"
  },
  {
    "slug": "tilt-306",
    "lang": "go",
    "cwe": "CWE-306",
    "cwe_name": "Missing Authentication",
    "repo": "tilt-dev/tilt",
    "fix_sha": "47393fba7f6ef5e305d5e814551feef8e4acbc0a",
    "vuln_file": "internal/cli/flags.go",
    "advisory_url": "https://github.com/advisories/GHSA-c73q-8xxr-rgqm",
    "cve": "CVE-2026-55884",
    "severity": "critical",
    "desc": "The Tilt HUD HTTP server exposes state-changing and sensitive-read endpoints with no authentication."
  },
  {
    "slug": "vert-x-295",
    "lang": "java",
    "cwe": "CWE-770",
    "cwe_name": "Allocation of Resources Without Limits or Throttling",
    "repo": "eclipse-vertx/vert.x",
    "fix_sha": "c64a707b6de83feeb0317e848345684860f0ab2f",
    "vuln_file": "vertx-core/src/main/java/io/vertx/core/internal/tls/SslContextProvider.java",
    "advisory_url": "https://github.com/advisories/GHSA-3g76-f9xq-8vp6",
    "cve": "CVE-2026-6860",
    "severity": "medium",
    "desc": "Unbounded server-side SNI `SslContext` cache growth in Vert.x TLS handling: a peer can present many distinct SNI names to exhaust memory (resource-exhaustion / DoS). [relabeled from CWE-295: the maintainer fix bounds the cache]"
  },
  {
    "slug": "yt-dlp-200",
    "lang": "python",
    "cwe": "CWE-200",
    "cwe_name": "Information Exposure",
    "repo": "yt-dlp/yt-dlp",
    "fix_sha": "2726572520238356bcf64aba2040228648b44c82",
    "vuln_file": "yt_dlp/downloader/external.py",
    "advisory_url": "https://github.com/advisories/GHSA-f7j3-774f-rfhj",
    "cve": "CVE-2026-50019",
    "severity": "medium",
    "desc": "If curl is used an external downloader for yt-dlp, cookies may be leaked to an unintended host upon HTTP redirect or when the host for download fragments differs from their parent manifest's."
  },
  {
    "slug": "yt-dlp-78",
    "lang": "python",
    "cwe": "CWE-78",
    "cwe_name": "OS Command Injection",
    "repo": "yt-dlp/yt-dlp",
    "fix_sha": "5faffa999fd33b373d47773e8ee639d072accec2",
    "vuln_file": "yt_dlp/YoutubeDL.py",
    "advisory_url": "https://github.com/advisories/GHSA-69qj-pvh9-c5wg",
    "cve": null,
    "severity": "high",
    "desc": "yt-dlp's `--exec` option is vulnerable to arbitrary command injection when handling untrusted metadata if the argument uses standard string formatting (e.g."
  }
]