Publish Advisories

advisory-database[bot] · advisory-database[bot] · commit 0a101044c30e · 2026-06-09T10:33:13.000Z
GHSA-8489-44mv-ggj8 GHSA-h5cw-625j-3rxh GHSA-5cvp-p7p4-mcx9 GHSA-7h26-hg47-p9hx GHSA-8xvp-7hj6-mcj9 GHSA-9mvm-4gwg-v8mp GHSA-c3px-h233-h6fq GHSA-ccfq-2454-f5xw GHSA-gxx6-h3g6-vwjh GHSA-jpjh-jm2p-39hh GHSA-jxxr-4gwj-5jf2 GHSA-mc57-h6j3-3hmv GHSA-pf9c-ch8r-2958 GHSA-q2pj-8v84-9mh5 GHSA-qg89-qwwh-5f3j GHSA-w8j3-pq8g-8m7w GHSA-wmm3-h9qj-p5v6 GHSA-x7m9-mwc2-g6w2 GHSA-xc4x-2452-5gc9
diff --git a/advisories/github-reviewed/2022/01/GHSA-8489-44mv-ggj8/GHSA-8489-44mv-ggj8.json b/advisories/github-reviewed/2022/01/GHSA-8489-44mv-ggj8/GHSA-8489-44mv-ggj8.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-8489-44mv-ggj8",
-  "modified": "2025-05-09T12:33:01Z",
+  "modified": "2026-06-09T10:31:58Z",
   "published": "2022-01-04T16:14:20Z",
   "aliases": [
     "CVE-2021-44832"
@@ -174,6 +174,14 @@
       "type": "WEB",
       "url": "https://lists.debian.org/debian-lts-announce/2021/12/msg00036.html"
     },
+    {
+      "type": "WEB",
+      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EVV25FXL4FU5X6X5BSL7RLQ7T6F65MRA"
+    },
+    {
+      "type": "WEB",
+      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T57MPJUW3MA6QGWZRTMCHHMMPQNVKGFC"
+    },
     {
       "type": "WEB",
       "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EVV25FXL4FU5X6X5BSL7RLQ7T6F65MRA"
@@ -190,6 +198,10 @@
       "type": "WEB",
       "url": "https://security.netapp.com/advisory/ntap-20220104-0001"
     },
+    {
+      "type": "WEB",
+      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd"
+    },
     {
       "type": "WEB",
       "url": "https://www.oracle.com/security-alerts/cpuapr2022.html"
diff --git a/advisories/github-reviewed/2026/01/GHSA-h5cw-625j-3rxh/GHSA-h5cw-625j-3rxh.json b/advisories/github-reviewed/2026/01/GHSA-h5cw-625j-3rxh/GHSA-h5cw-625j-3rxh.json
@@ -1,13 +1,13 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-h5cw-625j-3rxh",
-  "modified": "2026-01-11T14:54:18Z",
+  "modified": "2026-06-09T10:31:49Z",
   "published": "2026-01-08T20:57:09Z",
   "aliases": [
     "CVE-2026-22030"
   ],
   "summary": "React Router has CSRF issue in Action/Server Action Request Processing",
-  "details": "React Router (or Remix v2) is vulnerable to CSRF attacks on document POST requests to UI routes when using server-side route `action` handlers in [Framework Mode](https://reactrouter.com/start/modes#framework), or when using React Server Actions in the new unstable RSC modes.\n\n> [!NOTE]\n> This does not impact applications that use [Declarative Mode](https://reactrouter.com/start/modes#declarative) (`<BrowserRouter>`) or [Data Mode](https://reactrouter.com/start/modes#data) (`createBrowserRouter`/`<RouterProvider>`).",
+  "details": "React Router (or Remix v2) is vulnerable to CSRF attacks on document POST requests to UI routes when using server-side route `action` handlers in [Framework Mode](https://reactrouter.com/start/modes#framework), or when using React Server Actions in the new unstable RSC modes.\n\n> [!NOTE]\n> This does not impact your application if you are using [Declarative Mode](https://reactrouter.com/start/modes#declarative) (`<BrowserRouter>`) or [Data Mode](https://reactrouter.com/start/modes#data) (`createBrowserRouter`/`<RouterProvider>`).",
   "severity": [
     {
       "type": "CVSS_V3",
diff --git a/advisories/github-reviewed/2026/05/GHSA-5cvp-p7p4-mcx9/GHSA-5cvp-p7p4-mcx9.json b/advisories/github-reviewed/2026/05/GHSA-5cvp-p7p4-mcx9/GHSA-5cvp-p7p4-mcx9.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-5cvp-p7p4-mcx9",
-  "modified": "2026-05-18T14:20:06Z",
+  "modified": "2026-06-09T10:30:37Z",
   "published": "2026-05-18T14:20:06Z",
   "aliases": [
     "CVE-2026-45577"
@@ -40,6 +40,10 @@
       "type": "WEB",
       "url": "https://github.com/markmhendrickson/neotoma/security/advisories/GHSA-5cvp-p7p4-mcx9"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45577"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/markmhendrickson/neotoma"
@@ -57,6 +61,6 @@
     "severity": "MODERATE",
     "github_reviewed": true,
     "github_reviewed_at": "2026-05-18T14:20:06Z",
-    "nvd_published_at": null
+    "nvd_published_at": "2026-05-29T18:17:10Z"
   }
 }
diff --git a/advisories/github-reviewed/2026/05/GHSA-7h26-hg47-p9hx/GHSA-7h26-hg47-p9hx.json b/advisories/github-reviewed/2026/05/GHSA-7h26-hg47-p9hx/GHSA-7h26-hg47-p9hx.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-7h26-hg47-p9hx",
-  "modified": "2026-05-18T13:44:47Z",
+  "modified": "2026-06-09T10:30:21Z",
   "published": "2026-05-18T13:44:47Z",
   "aliases": [
     "CVE-2026-45625"
@@ -43,6 +43,10 @@
       "type": "WEB",
       "url": "https://github.com/getarcaneapp/arcane/security/advisories/GHSA-7h26-hg47-p9hx"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45625"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/getarcaneapp/arcane"
@@ -55,6 +59,6 @@
     "severity": "CRITICAL",
     "github_reviewed": true,
     "github_reviewed_at": "2026-05-18T13:44:47Z",
-    "nvd_published_at": null
+    "nvd_published_at": "2026-05-29T18:17:10Z"
   }
 }
diff --git a/advisories/github-reviewed/2026/05/GHSA-8xvp-7hj6-mcj9/GHSA-8xvp-7hj6-mcj9.json b/advisories/github-reviewed/2026/05/GHSA-8xvp-7hj6-mcj9/GHSA-8xvp-7hj6-mcj9.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-8xvp-7hj6-mcj9",
-  "modified": "2026-05-29T15:30:13Z",
+  "modified": "2026-06-09T10:30:16Z",
   "published": "2026-05-29T15:30:13Z",
   "aliases": [
     "CVE-2026-48501"
@@ -43,6 +43,10 @@
       "type": "WEB",
       "url": "https://github.com/cli/cli/security/advisories/GHSA-8xvp-7hj6-mcj9"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48501"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/cli/cli"
@@ -59,6 +63,6 @@
     "severity": "HIGH",
     "github_reviewed": true,
     "github_reviewed_at": "2026-05-29T15:30:13Z",
-    "nvd_published_at": null
+    "nvd_published_at": "2026-05-29T16:16:31Z"
   }
 }
diff --git a/advisories/github-reviewed/2026/05/GHSA-9mvm-4gwg-v8mp/GHSA-9mvm-4gwg-v8mp.json b/advisories/github-reviewed/2026/05/GHSA-9mvm-4gwg-v8mp/GHSA-9mvm-4gwg-v8mp.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-9mvm-4gwg-v8mp",
-  "modified": "2026-05-18T13:59:22Z",
+  "modified": "2026-06-09T10:30:26Z",
   "published": "2026-05-18T13:59:22Z",
   "aliases": [
     "CVE-2026-45626"
@@ -40,6 +40,10 @@
       "type": "WEB",
       "url": "https://github.com/getarcaneapp/arcane/security/advisories/GHSA-9mvm-4gwg-v8mp"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45626"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/getarcaneapp/arcane"
@@ -52,6 +56,6 @@
     "severity": "MODERATE",
     "github_reviewed": true,
     "github_reviewed_at": "2026-05-18T13:59:22Z",
-    "nvd_published_at": null
+    "nvd_published_at": "2026-05-29T18:17:10Z"
   }
 }
diff --git a/advisories/github-reviewed/2026/05/GHSA-c3px-h233-h6fq/GHSA-c3px-h233-h6fq.json b/advisories/github-reviewed/2026/05/GHSA-c3px-h233-h6fq/GHSA-c3px-h233-h6fq.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-c3px-h233-h6fq",
-  "modified": "2026-05-28T22:39:25Z",
+  "modified": "2026-06-09T10:30:55Z",
   "published": "2026-05-28T22:39:25Z",
   "aliases": [
     "CVE-2026-47179"
@@ -43,6 +43,10 @@
       "type": "WEB",
       "url": "https://github.com/getarcaneapp/arcane/security/advisories/GHSA-c3px-h233-h6fq"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47179"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/getarcaneapp/arcane/commit/b6cbffabf61dbc3f12a28d3b5830e3c6b7e67daf"
@@ -59,6 +63,6 @@
     "severity": "HIGH",
     "github_reviewed": true,
     "github_reviewed_at": "2026-05-28T22:39:25Z",
-    "nvd_published_at": null
+    "nvd_published_at": "2026-05-29T18:17:12Z"
   }
 }
diff --git a/advisories/github-reviewed/2026/05/GHSA-ccfq-2454-f5xw/GHSA-ccfq-2454-f5xw.json b/advisories/github-reviewed/2026/05/GHSA-ccfq-2454-f5xw/GHSA-ccfq-2454-f5xw.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-ccfq-2454-f5xw",
-  "modified": "2026-05-12T22:24:05Z",
+  "modified": "2026-06-09T10:32:18Z",
   "published": "2026-05-12T22:24:05Z",
   "aliases": [
     "CVE-2026-44652"
@@ -43,6 +43,10 @@
       "type": "WEB",
       "url": "https://github.com/SillyTavern/SillyTavern/security/advisories/GHSA-ccfq-2454-f5xw"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44652"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/SillyTavern/SillyTavern"
@@ -59,6 +63,6 @@
     "severity": "MODERATE",
     "github_reviewed": true,
     "github_reviewed_at": "2026-05-12T22:24:05Z",
-    "nvd_published_at": null
+    "nvd_published_at": "2026-05-29T19:16:25Z"
   }
 }
diff --git a/advisories/github-reviewed/2026/05/GHSA-gxx6-h3g6-vwjh/GHSA-gxx6-h3g6-vwjh.json b/advisories/github-reviewed/2026/05/GHSA-gxx6-h3g6-vwjh/GHSA-gxx6-h3g6-vwjh.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-gxx6-h3g6-vwjh",
-  "modified": "2026-05-12T22:23:30Z",
+  "modified": "2026-06-09T10:32:08Z",
   "published": "2026-05-12T22:23:30Z",
   "aliases": [
     "CVE-2026-44649"
@@ -43,6 +43,10 @@
       "type": "WEB",
       "url": "https://github.com/SillyTavern/SillyTavern/security/advisories/GHSA-gxx6-h3g6-vwjh"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44649"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/SillyTavern/SillyTavern"
@@ -62,6 +66,6 @@
     "severity": "CRITICAL",
     "github_reviewed": true,
     "github_reviewed_at": "2026-05-12T22:23:30Z",
-    "nvd_published_at": null
+    "nvd_published_at": "2026-05-29T19:16:24Z"
   }
 }
diff --git a/advisories/github-reviewed/2026/05/GHSA-jpjh-jm2p-39hh/GHSA-jpjh-jm2p-39hh.json b/advisories/github-reviewed/2026/05/GHSA-jpjh-jm2p-39hh/GHSA-jpjh-jm2p-39hh.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-jpjh-jm2p-39hh",
-  "modified": "2026-05-23T00:16:56Z",
+  "modified": "2026-06-09T10:30:50Z",
   "published": "2026-05-23T00:16:56Z",
   "aliases": [
     "CVE-2026-47125"
@@ -43,6 +43,10 @@
       "type": "WEB",
       "url": "https://github.com/getarcaneapp/arcane/security/advisories/GHSA-jpjh-jm2p-39hh"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47125"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/getarcaneapp/arcane"
@@ -55,6 +59,6 @@
     "severity": "HIGH",
     "github_reviewed": true,
     "github_reviewed_at": "2026-05-23T00:16:56Z",
-    "nvd_published_at": null
+    "nvd_published_at": "2026-05-29T18:17:12Z"
   }
 }
diff --git a/advisories/github-reviewed/2026/05/GHSA-jxxr-4gwj-5jf2/GHSA-jxxr-4gwj-5jf2.json b/advisories/github-reviewed/2026/05/GHSA-jxxr-4gwj-5jf2/GHSA-jxxr-4gwj-5jf2.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-jxxr-4gwj-5jf2",
-  "modified": "2026-05-18T16:22:01Z",
+  "modified": "2026-06-09T10:32:28Z",
   "published": "2026-05-18T16:22:01Z",
   "aliases": [
     "CVE-2026-45149"
@@ -40,6 +40,10 @@
       "type": "WEB",
       "url": "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-jxxr-4gwj-5jf2"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45149"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/juliangruber/brace-expansion/commit/c0b095bdc52bc4c36dc88deddbadabc49f8371e5"
@@ -56,6 +60,6 @@
     "severity": "MODERATE",
     "github_reviewed": true,
     "github_reviewed_at": "2026-05-18T16:22:01Z",
-    "nvd_published_at": null
+    "nvd_published_at": "2026-05-29T20:16:25Z"
   }
 }
diff --git a/advisories/github-reviewed/2026/05/GHSA-mc57-h6j3-3hmv/GHSA-mc57-h6j3-3hmv.json b/advisories/github-reviewed/2026/05/GHSA-mc57-h6j3-3hmv/GHSA-mc57-h6j3-3hmv.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-mc57-h6j3-3hmv",
-  "modified": "2026-05-18T16:22:27Z",
+  "modified": "2026-06-09T10:32:44Z",
   "published": "2026-05-18T16:22:27Z",
   "aliases": [
     "CVE-2026-46384"
@@ -44,6 +44,10 @@
       "type": "WEB",
       "url": "https://github.com/iskorotkov/avro/security/advisories/GHSA-mc57-h6j3-3hmv"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46384"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/iskorotkov/avro"
@@ -59,6 +63,6 @@
     "severity": "HIGH",
     "github_reviewed": true,
     "github_reviewed_at": "2026-05-18T16:22:27Z",
-    "nvd_published_at": null
+    "nvd_published_at": "2026-05-29T20:16:27Z"
   }
 }
diff --git a/advisories/github-reviewed/2026/05/GHSA-pf9c-ch8r-2958/GHSA-pf9c-ch8r-2958.json b/advisories/github-reviewed/2026/05/GHSA-pf9c-ch8r-2958/GHSA-pf9c-ch8r-2958.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-pf9c-ch8r-2958",
-  "modified": "2026-05-18T15:32:43Z",
+  "modified": "2026-06-09T10:30:43Z",
   "published": "2026-05-18T15:32:43Z",
   "aliases": [
     "CVE-2026-45660"
@@ -59,6 +59,10 @@
       "type": "WEB",
       "url": "https://github.com/statamic/cms/security/advisories/GHSA-pf9c-ch8r-2958"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45660"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/statamic/cms"
@@ -71,6 +75,6 @@
     "severity": "MODERATE",
     "github_reviewed": true,
     "github_reviewed_at": "2026-05-18T15:32:43Z",
-    "nvd_published_at": null
+    "nvd_published_at": "2026-05-29T18:17:11Z"
   }
 }
diff --git a/advisories/github-reviewed/2026/05/GHSA-q2pj-8v84-9mh5/GHSA-q2pj-8v84-9mh5.json b/advisories/github-reviewed/2026/05/GHSA-q2pj-8v84-9mh5/GHSA-q2pj-8v84-9mh5.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-q2pj-8v84-9mh5",
-  "modified": "2026-05-18T14:19:27Z",
+  "modified": "2026-06-09T10:30:32Z",
   "published": "2026-05-18T14:19:26Z",
   "aliases": [
     "CVE-2026-45627"
@@ -43,6 +43,10 @@
       "type": "WEB",
       "url": "https://github.com/getarcaneapp/arcane/security/advisories/GHSA-q2pj-8v84-9mh5"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45627"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/getarcaneapp/arcane"
@@ -55,6 +59,6 @@
     "severity": "HIGH",
     "github_reviewed": true,
     "github_reviewed_at": "2026-05-18T14:19:26Z",
-    "nvd_published_at": null
+    "nvd_published_at": "2026-05-29T18:17:10Z"
   }
 }
diff --git a/advisories/github-reviewed/2026/05/GHSA-qg89-qwwh-5f3j/GHSA-qg89-qwwh-5f3j.json b/advisories/github-reviewed/2026/05/GHSA-qg89-qwwh-5f3j/GHSA-qg89-qwwh-5f3j.json
diff --git a/advisories/github-reviewed/2026/05/GHSA-w8j3-pq8g-8m7w/GHSA-w8j3-pq8g-8m7w.json b/advisories/github-reviewed/2026/05/GHSA-w8j3-pq8g-8m7w/GHSA-w8j3-pq8g-8m7w.json
diff --git a/advisories/github-reviewed/2026/05/GHSA-wmm3-h9qj-p5v6/GHSA-wmm3-h9qj-p5v6.json b/advisories/github-reviewed/2026/05/GHSA-wmm3-h9qj-p5v6/GHSA-wmm3-h9qj-p5v6.json
diff --git a/advisories/github-reviewed/2026/05/GHSA-x7m9-mwc2-g6w2/GHSA-x7m9-mwc2-g6w2.json b/advisories/github-reviewed/2026/05/GHSA-x7m9-mwc2-g6w2/GHSA-x7m9-mwc2-g6w2.json
diff --git a/advisories/github-reviewed/2026/05/GHSA-xc4x-2452-5gc9/GHSA-xc4x-2452-5gc9.json b/advisories/github-reviewed/2026/05/GHSA-xc4x-2452-5gc9/GHSA-xc4x-2452-5gc9.json
