pnpm: Tarball hash of GitHub git dependencies is not stored in lockfile

CVE-2026-48995

### Summary A malicious `codeload.github.com` server can serve whatever tarball it wants and pnpm will install it regar

历史摘要 · 未重新核验 · GitHub Advisory

@actual-app/web has CSV Formula Injection in Transaction Export via Imported Payee/Notes Fields

CVE-2026-50179

## Summary `exportToCSV` and `exportQueryToCSV` in `packages/loot-core/src/server/transactions/export/export-to-csv.ts`

历史摘要 · 未重新核验 · GitHub Advisory

@budibase/backend-core has potential SSRF DNS rebinding bypass in outbound fetch validation

CVE-2026-54353

Summary Authenticated users with automation permissions can bypass Budibase's SSRF blacklist through DNS rebinding. Th

历史摘要 · 未重新核验 · GitHub Advisory

Budibase has arbitrary file read by workspace-builder via PWA-zip symlink upload

CVE-2026-54352

## Summary `POST /api/pwa/process-zip` at `packages/server/src/api/routes/static.ts:24` accepts a builder-uploaded `.zi

历史摘要 · 未重新核验 · GitHub Advisory

Budibase: Mass Assignment in Webhook Trigger Allows Cross-Workspace Automation Execution via appId Override

CVE-2026-54351

## Summary The webhook trigger endpoint in Budibase is publicly accessible and passes the full HTTP request body into a

历史摘要 · 未重新核验 · GitHub Advisory

@actual-app/sync-server: Disabled OpenID users keep access through existing session tokens

CVE-2026-49229

### Summary In OpenID multi-user mode, disabling a user only blocks future OpenID login for that identity. Existing Act

历史摘要 · 未重新核验 · GitHub Advisory

Budibase: POST /api/attachments/:datasourceId/url is unauthenticated and lets anonymous callers mint S3 PUT pre-signed URLs using stored datasource IAM credentials

CVE-2026-50137

## Summary The Budibase server route `POST /api/attachments/:datasourceId/url` ([`packages/server/src/api/routes/static

历史摘要 · 未重新核验 · GitHub Advisory

Budibase: Unauthenticated S3 signed upload URL generation allows arbitrary writes with stored datasource credentials

CVE-2026-50136

The application server exposes an unauthenticated endpoint that generates S3 `PutObject` presigned URLs using credential

历史摘要 · 未重新核验 · GitHub Advisory

Budibase has an Account Impersonation Issue — Chat Identity Link Hijacking via Missing Consent & CSRF

CVE-2026-50132

## Title **Chat Identity Link Hijacking — Attacker Can Silently Map Their Slack/Discord Identity to Any Authenticated B

历史摘要 · 未重新核验 · GitHub Advisory

devbridge-autocomplete has XSS in its default formatters: formatGroup and formatResult fail to escape HTML in untrusted inputs

### Summary The default `formatGroup` and `formatResult` functions in `devbridge-autocomplete` concatenate values into

历史摘要 · 未重新核验 · GitHub Advisory

scimPatch vulnerable to prototype pollution via unfiltered keys in patch

CVE-2026-48170

## Summary `scim-patch` performs prototype pollution when applying a SCIM PATCH operation whose `value` object contains

历史摘要 · 未重新核验 · GitHub Advisory

Budibase: SSRF via OAuth2 token endpoint URL reaches internal hosts and cloud metadata

CVE-2026-48153

## Summary `fetchToken` in the OAuth2 SDK makes a POST to a builder-supplied URL with plain node-fetch, skipping the `b

历史摘要 · 未重新核验 · GitHub Advisory

@actual-app/sync-server's missing authorization on GET /secret/:name allows non-admin OpenID users to enumerate admin-configured bank-sync secrets

CVE-2026-46700

## Summary In `@actual-app/sync-server`, the `GET /secret/:name` endpoint (`app-secrets.js:53`) checks only that the ca

历史摘要 · 未重新核验 · GitHub Advisory

@actual-app/cli `--format csv` Output Vulnerable to CSV Formula Injection via Custom `escapeCsv` Helper

CVE-2026-46672

## Summary `@actual-app/cli` ships a hand-rolled CSV serializer in `packages/cli/src/output.ts` (used whenever the glob

历史摘要 · 未重新核验 · GitHub Advisory

Lokka: Azure Resource Manager URL path validation issue

Lokka versions prior to 2.1.2 constructed Azure Resource Manager request URLs using direct string concatenation with use

历史摘要 · 未重新核验 · GitHub Advisory

@jhb.software/payload-cloudinary-plugin: Arbitrary Cloudinary API Parameter Signing

## Arbitrary Cloudinary API Parameter Signing in @jhb.software/payload-cloudinary-plugin ### Summary `@jhb.software/pa

历史摘要 · 未重新核验 · GitHub Advisory

appium-mcp: Unescaped Locator Data XSS in MCP-UI Resource (createLocatorGeneratorUI)

## Unescaped Locator Data XSS in MCP-UI Resource (createLocatorGeneratorUI) ### Summary `appium-mcp`'s `createLocatorG

历史摘要 · 未重新核验 · GitHub Advisory

Uni-CLI: Legacy HTTP MCP transport accepted browser-originated localhost requests

## Impact Uni-CLI versions before 0.225.2 exposed the legacy JSON-RPC-over-HTTP MCP transport on loopback without valid

历史摘要 · 未重新核验 · GitHub Advisory

parse-server: LiveQuery discloses object data to a subscriber across an ACL read-access change

### Impact A Parse Server LiveQuery subscriber can receive object field values they are not authorized to read when a s

历史摘要 · 未重新核验 · GitHub Advisory

SearXNG MCP Server: DNS-resolved Private Hostname SSRF in `web_url_read`

## DNS-resolved Private Hostname SSRF in `web_url_read` ### Summary The `web_url_read` MCP tool in `mcp-searxng` is vu

历史摘要 · 未重新核验 · GitHub Advisory