Skip to content

Commit 7438d5a

Browse files
advisory-database[bot]advisory-database[bot]
committed
Publish Advisories
GHSA-p2wm-69qx-x25w GHSA-8f88-w9gq-227v GHSA-9c82-3f2r-v942 GHSA-f9rq-5867-x4mq GHSA-ghgx-h467-6r25
1 parent 75f1c32 commit 7438d5a

5 files changed

Lines changed: 191 additions & 2 deletions

File tree

‎advisories/unreviewed/2026/06/GHSA-p2wm-69qx-x25w/GHSA-p2wm-69qx-x25w.json‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-p2wm-69qx-x25w",
4-
"modified": "2026-06-29T21:32:10Z",
4+
"modified": "2026-07-10T03:31:29Z",
55
"published": "2026-06-29T21:32:10Z",
66
"aliases": [
77
"CVE-2026-13757"
@@ -19,6 +19,10 @@
1919
"type": "ADVISORY",
2020
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13757"
2121
},
22+
{
23+
"type": "WEB",
24+
"url": "https://access.redhat.com/errata/RHSA-2026:37469"
25+
},
2226
{
2327
"type": "WEB",
2428
"url": "https://access.redhat.com/security/cve/CVE-2026-13757"

‎advisories/unreviewed/2026/07/GHSA-8f88-w9gq-227v/GHSA-8f88-w9gq-227v.json‎

Lines changed: 60 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,60 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-8f88-w9gq-227v",
4+
"modified": "2026-07-10T03:31:30Z",
5+
"published": "2026-07-10T03:31:30Z",
6+
"aliases": [
7+
"CVE-2026-15318"
8+
],
9+
"details": "A weakness has been identified in Sipeed PicoClaw up to 0.2.9. Affected by this issue is some unknown functionality of the file pkg/channels/mqtt/mqtt.go of the component MQTT Channel Handler. This manipulation of the argument client_id causes incorrect authorization. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. The reported GitHub issue was closed automatically due to inactivity.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15318"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/sipeed/picoclaw/issues/3068"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://github.com/sipeed/picoclaw"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://vuldb.com/cve/CVE-2026-15318"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://vuldb.com/submit/852879"
41+
},
42+
{
43+
"type": "WEB",
44+
"url": "https://vuldb.com/vuln/377258"
45+
},
46+
{
47+
"type": "WEB",
48+
"url": "https://vuldb.com/vuln/377258/cti"
49+
}
50+
],
51+
"database_specific": {
52+
"cwe_ids": [
53+
"CWE-285"
54+
],
55+
"severity": "LOW",
56+
"github_reviewed": false,
57+
"github_reviewed_at": null,
58+
"nvd_published_at": "2026-07-10T02:16:25Z"
59+
}
60+
}

‎advisories/unreviewed/2026/07/GHSA-9c82-3f2r-v942/GHSA-9c82-3f2r-v942.json‎

Lines changed: 60 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,60 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-9c82-3f2r-v942",
4+
"modified": "2026-07-10T03:31:30Z",
5+
"published": "2026-07-10T03:31:30Z",
6+
"aliases": [
7+
"CVE-2026-15320"
8+
],
9+
"details": "A vulnerability was detected in Sipeed PicoClaw up to 0.2.9. This vulnerability affects the function rt.ReloadConfig of the file pkg/channels/pico/pico.go. Performing a manipulation of the argument message.send results in missing authorization. It is possible to initiate the attack remotely. The exploit is now public and may be used. The reported GitHub issue was closed automatically due to inactivity.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15320"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/sipeed/picoclaw/issues/3071"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://github.com/sipeed/picoclaw"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://vuldb.com/cve/CVE-2026-15320"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://vuldb.com/submit/852942"
41+
},
42+
{
43+
"type": "WEB",
44+
"url": "https://vuldb.com/vuln/377260"
45+
},
46+
{
47+
"type": "WEB",
48+
"url": "https://vuldb.com/vuln/377260/cti"
49+
}
50+
],
51+
"database_specific": {
52+
"cwe_ids": [
53+
"CWE-862"
54+
],
55+
"severity": "LOW",
56+
"github_reviewed": false,
57+
"github_reviewed_at": null,
58+
"nvd_published_at": "2026-07-10T03:16:20Z"
59+
}
60+
}

‎advisories/unreviewed/2026/07/GHSA-f9rq-5867-x4mq/GHSA-f9rq-5867-x4mq.json‎

Lines changed: 64 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,64 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-f9rq-5867-x4mq",
4+
"modified": "2026-07-10T03:31:30Z",
5+
"published": "2026-07-10T03:31:30Z",
6+
"aliases": [
7+
"CVE-2026-15319"
8+
],
9+
"details": "A security vulnerability has been detected in Sipeed PicoClaw up to 0.2.9. This affects the function IPAllowlist of the file web/backend/middleware/access_control.go of the component Launcher. Such manipulation leads to improper access controls. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. The name of the patch is 3126. A patch should be applied to remediate this issue.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15319"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/sipeed/picoclaw/issues/3069"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://github.com/sipeed/picoclaw/pull/3126"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://github.com/sipeed/picoclaw"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://vuldb.com/cve/CVE-2026-15319"
41+
},
42+
{
43+
"type": "WEB",
44+
"url": "https://vuldb.com/submit/852884"
45+
},
46+
{
47+
"type": "WEB",
48+
"url": "https://vuldb.com/vuln/377259"
49+
},
50+
{
51+
"type": "WEB",
52+
"url": "https://vuldb.com/vuln/377259/cti"
53+
}
54+
],
55+
"database_specific": {
56+
"cwe_ids": [
57+
"CWE-266"
58+
],
59+
"severity": "MODERATE",
60+
"github_reviewed": false,
61+
"github_reviewed_at": null,
62+
"nvd_published_at": "2026-07-10T03:16:20Z"
63+
}
64+
}

‎advisories/unreviewed/2026/07/GHSA-ghgx-h467-6r25/GHSA-ghgx-h467-6r25.json‎

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -26,7 +26,8 @@
2626
],
2727
"database_specific": {
2828
"cwe_ids": [
29-
"CWE-20"
29+
"CWE-20",
30+
"CWE-77"
3031
],
3132
"severity": "CRITICAL",
3233
"github_reviewed": false,

0 commit comments

Comments
 (0)