Envoy Gateway: xDS Control Plane Information Disclosure when operating in GatewayNamespaceMode

CVE-2026-53714

### Impact When Envoy Gateway runs in GatewayNamespaceMode (`provider.kubernetes.deploy.type=GatewayNamespace`), the xDS

历史摘要 · 未重新核验 · GitHub Advisory

Envoy Gateway: Authentication Bypass via Improper Input Validation in EnvoyExtensionPolicy Lua Allows Secret Disclosure

CVE-2026-53713

### Impact The `to_absolute_normalized_path` function (security.lua:28-43) does not collapse redundant path separators

历史摘要 · 未重新核验 · GitHub Advisory

Envoy Gateway: Wasm cache ServeHTTP reads mappingPath2Cache without lock

CVE-2026-53715

Vulnerability report without repro case. Repro case may be added later after harness is complete. **Preconditions (4):*

历史摘要 · 未重新核验 · GitHub Advisory

Envoy Gateway: OCI layer extraction allocates make([]byte, h.Size) from untrusted tar header

CVE-2026-53717

Vulnerability report without repro case. Repro case may be added later after harness is complete. **Preconditions (4):*

历史摘要 · 未重新核验 · GitHub Advisory

Envoy Gateway: Nil-dereference when SecurityPolicy targets TCPRoute without spec.authorization

CVE-2026-53719

Vulnerability report without repro case. Repro case may be added later after harness is complete. **Preconditions (4):*

历史摘要 · 未重新核验 · GitHub Advisory

Envoy Gateway: Wasm HTTP fetch decompresses gzip without output-size limit

CVE-2026-53716

Vulnerability report without repro case. Repro case may be added later after harness is complete. **Preconditions (4):*

历史摘要 · 未重新核验 · GitHub Advisory

Envoy Gateway custom backendRef cross-namespace ReferenceGrant bypass

CVE-2026-53718

### Impact Envoy Gateway accepts extension-managed custom backendRefs from an HTTPRoute to a backend resource in another

历史摘要 · 未重新核验 · GitHub Advisory

kumactl connects to control plane without verifying TLS certificate when no CA is configured

CVE-2026-50166

When an operator adds an HTTPS control plane profile to `kumactl` without providing a CA certificate, `kumactl` disables

历史摘要 · 未重新核验 · GitHub Advisory

ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation)

CVE-2026-58196

# Security Advisory: SSRF in remote MCP server authentication discovery **Severity:** High. **CWE:** CWE-918. **Affecte

历史摘要 · 未重新核验 · GitHub Advisory

Pomerium Pre-Auth Memory Exhaustion via Unbounded zstd Decompression in HPKE Callback

CVE-2026-50285

## Summary The HPKE V2 URL decode path in `pkg/hpke/url.go` decompresses attacker-controlled zstd data without any size

历史摘要 · 未重新核验 · GitHub Advisory

dd-trace-go: Improper parsing of W3C baggage headers may lead to DoS

CVE-2026-50274

### Impact Datadog tracing libraries that implement W3C baggage propagation parse incoming baggage HTTP headers without

历史摘要 · 未重新核验 · GitHub Advisory

open-feature-operator: Cross-namespace FeatureFlagSource and InProcessConfiguration resolution exposes spec contents on multi-tenant clusters

CVE-2026-54495

## Summary A namespaced `FeatureFlagSource` or `InProcessConfiguration` resource can be referenced cross-namespace via

历史摘要 · 未重新核验 · GitHub Advisory

safeurl is Missing IPv6 CIDR Ranges in Blocklist

CVE-2026-54452

The `privateNetworks` blocklist was found to be missing newly added CIDR ranges. More specifically, the following CIDR r

历史摘要 · 未重新核验 · GitHub Advisory

ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway

CVE-2026-54450

## Summary ToolHive's hand-rolled private/reserved-IP SSRF guard (`networking.IsPrivateIP` in `pkg/networking/utilities

历史摘要 · 未重新核验 · GitHub Advisory

Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend

CVE-2026-61549

### Impact A privilege escalation vulnerability affects Woodpecker instances using the **Kubernetes backend**. The pip

历史摘要 · 未重新核验 · GitHub Advisory

Nebula-mesh allows non-admin operators to disable webhook SSRF protection via `allow_private`

### Summary Non-admin operators (role `user`) can set `allow_private: true` on their own managed webhook subscription (

历史摘要 · 未重新核验 · GitHub Advisory

nebula-mesh: Certificate revocation is never enforced at the mesh

CVE-2026-61699

### Summary nebula-mesh revokes a host by adding its certificate fingerprint to a per-CA blocklist and shipping that li

历史摘要 · 未重新核验 · GitHub Advisory

nebula-mesh: Web UI host creation ignores configured enrollment token TTL and mints 24-hour bearer enrollment tokens

CVE-2026-55513

### Summary The `nebula-mgmt` Web UI host-creation path ignores both the server-wide `enrollment_token_ttl` security set

历史摘要 · 未重新核验 · GitHub Advisory

nebula-mesh: Unauthenticated OIDC login endpoint allocates unbounded in-memory state entries without rate limiting

CVE-2026-55512

### Summary When OIDC is enabled, `GET /ui/oidc/login` is reachable without authentication and is registered outside the

历史摘要 · 未重新核验 · GitHub Advisory

Anyquery: Local File Read (LFR) via Unrestricted SQLite Virtual Table Modules in Server Mode

CVE-2026-54629

## Summary Anyquery's `server` mode lacks input sanitization and access control over its built-in SQLite virtual table m

历史摘要 · 未重新核验 · GitHub Advisory