Skip to content

Commit 4a5fda9

Browse files
advisory-database[bot]advisory-database[bot]
committed
Publish Advisories
GHSA-22g5-r2x5-97cx GHSA-46jf-c9vx-hh79 GHSA-5g68-f6xg-vf2r GHSA-66fv-p34j-fwgr GHSA-677j-gfv9-ppcc GHSA-ff2c-rpvx-jp6m GHSA-hh8r-75r6-qrg9 GHSA-pw9q-pq7c-rfqw GHSA-r4w3-7jp7-m9g5
1 parent 524f896 commit 4a5fda9

9 files changed

Lines changed: 215 additions & 6 deletions

File tree

‎advisories/unreviewed/2026/07/GHSA-22g5-r2x5-97cx/GHSA-22g5-r2x5-97cx.json‎

Lines changed: 52 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,52 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-22g5-r2x5-97cx",
4+
"modified": "2026-07-07T00:30:59Z",
5+
"published": "2026-07-07T00:30:59Z",
6+
"aliases": [
7+
"CVE-2026-59710"
8+
],
9+
"details": "showdown contains a stored cross-site scripting vulnerability in the parseHeaders function of src/subParsers/makehtml/tables.js that fails to properly escape table header ID attributes. Attackers can inject arbitrary HTML and script-executing SVG elements through double-quote characters in markdown table headers, achieving stored XSS when untrusted markdown is rendered with the default github flavor configuration.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59710"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/showdownjs/showdown/issues/1046"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://github.com/showdownjs/showdown/commit/e5cab1e9a5dcea2bb3cbf888863fa7e65ab37edf"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://github.com/showdownjs/showdown"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://www.vulncheck.com/advisories/showdown-stored-xss-via-unescaped-table-header-id-attribute-injection"
41+
}
42+
],
43+
"database_specific": {
44+
"cwe_ids": [
45+
"CWE-79"
46+
],
47+
"severity": "MODERATE",
48+
"github_reviewed": false,
49+
"github_reviewed_at": null,
50+
"nvd_published_at": "2026-07-06T22:16:50Z"
51+
}
52+
}

‎advisories/unreviewed/2026/07/GHSA-46jf-c9vx-hh79/GHSA-46jf-c9vx-hh79.json‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-46jf-c9vx-hh79",
4-
"modified": "2026-07-06T21:30:37Z",
4+
"modified": "2026-07-07T00:30:58Z",
55
"published": "2026-07-06T12:31:30Z",
66
"aliases": [
77
"CVE-2026-46587"
@@ -22,6 +22,10 @@
2222
{
2323
"type": "WEB",
2424
"url": "https://camel.apache.org/security/CVE-2026-46587.html"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "http://www.openwall.com/lists/oss-security/2026/07/06/15"
2529
}
2630
],
2731
"database_specific": {

‎advisories/unreviewed/2026/07/GHSA-5g68-f6xg-vf2r/GHSA-5g68-f6xg-vf2r.json‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-5g68-f6xg-vf2r",
4-
"modified": "2026-07-06T21:30:37Z",
4+
"modified": "2026-07-07T00:30:58Z",
55
"published": "2026-07-06T12:31:30Z",
66
"aliases": [
77
"CVE-2026-46588"
@@ -22,6 +22,10 @@
2222
{
2323
"type": "WEB",
2424
"url": "https://camel.apache.org/security/CVE-2026-46588.html"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "http://www.openwall.com/lists/oss-security/2026/07/06/16"
2529
}
2630
],
2731
"database_specific": {

‎advisories/unreviewed/2026/07/GHSA-66fv-p34j-fwgr/GHSA-66fv-p34j-fwgr.json‎

Lines changed: 33 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,33 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-66fv-p34j-fwgr",
4+
"modified": "2026-07-07T00:30:59Z",
5+
"published": "2026-07-07T00:30:59Z",
6+
"aliases": [
7+
"CVE-2026-13356"
8+
],
9+
"details": "A malicious webpage could interrupt a pending navigation by enqueuing a synchronous JavaScript dialog, causing the browser UI to display the destination origin in the address bar while continuing to render attacker-controlled content. This vulnerability was fixed in Firefox for iOS 152.3.",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13356"
16+
},
17+
{
18+
"type": "WEB",
19+
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2047768"
20+
},
21+
{
22+
"type": "WEB",
23+
"url": "https://www.mozilla.org/security/advisories/mfsa2026-65"
24+
}
25+
],
26+
"database_specific": {
27+
"cwe_ids": [],
28+
"severity": null,
29+
"github_reviewed": false,
30+
"github_reviewed_at": null,
31+
"nvd_published_at": "2026-07-07T00:16:34Z"
32+
}
33+
}

‎advisories/unreviewed/2026/07/GHSA-677j-gfv9-ppcc/GHSA-677j-gfv9-ppcc.json‎

Lines changed: 33 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,33 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-677j-gfv9-ppcc",
4+
"modified": "2026-07-07T00:30:59Z",
5+
"published": "2026-07-07T00:30:59Z",
6+
"aliases": [
7+
"CVE-2026-38979"
8+
],
9+
"details": "ajenti through v2.2.13 has a clickjacking weakness in the browser-facing login and administrative UI. In ajenti-core/aj/http.py, the core HTTP response path initializes an empty header list, forwards handler-added headers verbatim, and finalizes responses through WSGI start_response() without adding anti-framing protections such as X-Frame-Options or a Content-Security-Policy frame-ancestors restriction.",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-38979"
16+
},
17+
{
18+
"type": "WEB",
19+
"url": "https://github.com/ajenti/ajenti/commit/e54e83888fc7cb10061a18b04c1a7e3100d77f03"
20+
},
21+
{
22+
"type": "WEB",
23+
"url": "https://github.com/ajenti/ajenti"
24+
}
25+
],
26+
"database_specific": {
27+
"cwe_ids": [],
28+
"severity": null,
29+
"github_reviewed": false,
30+
"github_reviewed_at": null,
31+
"nvd_published_at": "2026-07-06T22:16:49Z"
32+
}
33+
}

‎advisories/unreviewed/2026/07/GHSA-ff2c-rpvx-jp6m/GHSA-ff2c-rpvx-jp6m.json‎

Lines changed: 37 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,37 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-ff2c-rpvx-jp6m",
4+
"modified": "2026-07-07T00:30:59Z",
5+
"published": "2026-07-07T00:30:59Z",
6+
"aliases": [
7+
"CVE-2026-38976"
8+
],
9+
"details": "mrubyc through 3.4.1 was found to contain a NULL pointer dereference in src/vm.c in op_super() / OP_SUPER due to a missing runtime guard for top-level super.",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-38976"
16+
},
17+
{
18+
"type": "WEB",
19+
"url": "https://github.com/mrubyc/mrubyc/issues/276"
20+
},
21+
{
22+
"type": "WEB",
23+
"url": "https://github.com/hayat01sh1da/mrubyc/commit/c4aa2a06bfdd13a0f1ae5165c5760a2530314a42"
24+
},
25+
{
26+
"type": "WEB",
27+
"url": "https://github.com/mrubyc/mrubyc"
28+
}
29+
],
30+
"database_specific": {
31+
"cwe_ids": [],
32+
"severity": null,
33+
"github_reviewed": false,
34+
"github_reviewed_at": null,
35+
"nvd_published_at": "2026-07-06T22:16:48Z"
36+
}
37+
}

‎advisories/unreviewed/2026/07/GHSA-hh8r-75r6-qrg9/GHSA-hh8r-75r6-qrg9.json‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-hh8r-75r6-qrg9",
4-
"modified": "2026-07-06T21:30:37Z",
4+
"modified": "2026-07-07T00:30:58Z",
55
"published": "2026-07-06T12:31:30Z",
66
"aliases": [
77
"CVE-2026-49042"
@@ -22,6 +22,10 @@
2222
{
2323
"type": "WEB",
2424
"url": "https://camel.apache.org/security/CVE-2026-49042.html"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "http://www.openwall.com/lists/oss-security/2026/07/06/17"
2529
}
2630
],
2731
"database_specific": {

‎advisories/unreviewed/2026/07/GHSA-pw9q-pq7c-rfqw/GHSA-pw9q-pq7c-rfqw.json‎

Lines changed: 8 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,18 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-pw9q-pq7c-rfqw",
4-
"modified": "2026-07-06T12:31:30Z",
4+
"modified": "2026-07-07T00:30:58Z",
55
"published": "2026-07-06T09:30:30Z",
66
"aliases": [
77
"CVE-2026-55994"
88
],
99
"details": "Improper Input Validation, Exposure of Sensitive Information to an Unauthorized Actor, Server-Side Request Forgery (SSRF) vulnerability in Apache Camel in Iggy component.\n\nThe camel-iggy consumer mapped the user-headers of inbound Iggy messages into the Camel Exchange header map without applying any HeaderFilterStrategy (IggyFetchRecords copied the message user-headers straight into the Exchange). Because nothing blocked the Camel header namespace, an actor able to publish to the consumed Iggy stream/topic could set Camel-internal control headers - including CamelHttpUri (Exchange.HTTP_URI) - simply by supplying them as message user-headers. In a route where the Iggy consumer feeds a downstream HTTP producer, the injected CamelHttpUri redirects the server-side HTTP request to an attacker-chosen destination (server-side request forgery - for example to an internal service or a cloud metadata endpoint). In addition, the HTTP producer resolves Camel property placeholders on the resulting (attacker-controlled) URI, so placeholders embedded in the injected value - such as an environment-variable reference, an application property, or a vault reference - are resolved to their real values and sent to the attacker, disclosing environment variables, application properties and vault secrets.\nThis issue affects Apache Camel: from 4.17.0 before 4.18.3, from 4.19.0 before 4.21.0.\n\nUsers are recommended to upgrade to version 4.21.0, which fixes the issue. If users are on the 4.18.x releases stream, then they are suggested to upgrade to 4.18.3. The fix adds a dedicated IggyHeaderFilterStrategy (and a headerFilterStrategy endpoint option) that filters the Camel header namespace case-insensitively on inbound mapping, so externally-supplied Camel* / camel* headers are no longer copied into the Exchange. For deployments that cannot upgrade immediately, strip the Camel control headers from the inbound message before they reach any downstream producer (for example removeHeaders('Camel*') and removeHeaders('camel*') at the start of the route), restrict who can publish to the consumed Iggy stream/topic, and avoid bridging an untrusted consumer directly into an HTTP producer whose target URI can be driven from message headers.",
10-
"severity": [],
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
14+
}
15+
],
1116
"affected": [],
1217
"references": [
1318
{
@@ -27,7 +32,7 @@
2732
"cwe_ids": [
2833
"CWE-20"
2934
],
30-
"severity": null,
35+
"severity": "HIGH",
3136
"github_reviewed": false,
3237
"github_reviewed_at": null,
3338
"nvd_published_at": "2026-07-06T09:16:39Z"

‎advisories/unreviewed/2026/07/GHSA-r4w3-7jp7-m9g5/GHSA-r4w3-7jp7-m9g5.json‎

Lines changed: 37 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,37 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-r4w3-7jp7-m9g5",
4+
"modified": "2026-07-07T00:30:59Z",
5+
"published": "2026-07-07T00:30:59Z",
6+
"aliases": [
7+
"CVE-2026-38973"
8+
],
9+
"details": "mrubyc through release3.4.1 was found to contain an out-of-bounds read in builtin missing-method lookup inside mrbc_find_method().",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-38973"
16+
},
17+
{
18+
"type": "WEB",
19+
"url": "https://github.com/mrubyc/mrubyc/issues/279%2C"
20+
},
21+
{
22+
"type": "WEB",
23+
"url": "https://github.com/mrubyc/mrubyc/commit/f83a8b67ca1c7c62ac0dd548a363d79f767c4e30"
24+
},
25+
{
26+
"type": "WEB",
27+
"url": "https://github.com/mrubyc/mrubyc"
28+
}
29+
],
30+
"database_specific": {
31+
"cwe_ids": [],
32+
"severity": null,
33+
"github_reviewed": false,
34+
"github_reviewed_at": null,
35+
"nvd_published_at": "2026-07-06T22:16:48Z"
36+
}
37+
}

0 commit comments

Comments
 (0)