Advisory Database Sync

Author: advisory-database[bot]

advisories/unreviewed/2026/05/GHSA-48v9-p8g8-55vg/GHSA-48v9-p8g8-55vg.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-48v9-p8g8-55vg",
-  "modified": "2026-05-26T18:31:38Z",
+  "modified": "2026-06-22T18:34:00Z",
   "published": "2026-05-18T15:30:38Z",
   "aliases": [
     "CVE-2026-41947"
@@ -42,6 +42,10 @@
     {
       "type": "WEB",
       "url": "https://www.vulncheck.com/advisories/dify-authorization-bypass-via-trace-configuration-endpoints"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.zafran.io/resources/difytap-zafran-discovers-how-attackers-can-silently-wiretap-ai-data-across-tenants-on-a-platform-powering-1m-apps"
     }
   ],
   "database_specific": {

advisories/unreviewed/2026/05/GHSA-h666-98mq-949j/GHSA-h666-98mq-949j.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-h666-98mq-949j",
-  "modified": "2026-05-18T15:30:38Z",
+  "modified": "2026-06-22T18:34:00Z",
   "published": "2026-05-18T15:30:38Z",
   "aliases": [
     "CVE-2026-41948"
@@ -34,6 +34,10 @@
     {
       "type": "WEB",
       "url": "https://www.vulncheck.com/advisories/dify-path-traversal-via-plugin-daemon-internal-api-access"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.zafran.io/resources/difytap-zafran-discovers-how-attackers-can-silently-wiretap-ai-data-across-tenants-on-a-platform-powering-1m-apps"
     }
   ],
   "database_specific": {

advisories/unreviewed/2026/05/GHSA-jv3f-qwf9-wvq9/GHSA-jv3f-qwf9-wvq9.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-jv3f-qwf9-wvq9",
-  "modified": "2026-05-26T18:31:38Z",
+  "modified": "2026-06-22T18:34:00Z",
   "published": "2026-05-18T15:30:38Z",
   "aliases": [
     "CVE-2026-41949"
@@ -42,6 +42,10 @@
     {
       "type": "WEB",
       "url": "https://www.vulncheck.com/advisories/dify-authorization-bypass-via-file-preview-endpoint"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.zafran.io/resources/difytap-zafran-discovers-how-attackers-can-silently-wiretap-ai-data-across-tenants-on-a-platform-powering-1m-apps"
     }
   ],
   "database_specific": {

advisories/unreviewed/2026/05/GHSA-mpmf-3w4r-qfpf/GHSA-mpmf-3w4r-qfpf.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-mpmf-3w4r-qfpf",
-  "modified": "2026-06-22T15:30:42Z",
+  "modified": "2026-06-22T18:34:00Z",
   "published": "2026-05-28T09:31:20Z",
   "aliases": [
     "CVE-2026-9804"
@@ -23,6 +23,14 @@
       "type": "WEB",
       "url": "https://access.redhat.com/errata/RHSA-2026:27914"
     },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/errata/RHSA-2026:27983"
+    },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/errata/RHSA-2026:28002"
+    },
     {
       "type": "WEB",
       "url": "https://access.redhat.com/security/cve/CVE-2026-9804"

advisories/unreviewed/2026/05/GHSA-r2m5-9rwx-269r/GHSA-r2m5-9rwx-269r.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-r2m5-9rwx-269r",
-  "modified": "2026-05-05T21:31:33Z",
+  "modified": "2026-06-22T18:34:00Z",
   "published": "2026-05-05T21:31:32Z",
   "aliases": [
     "CVE-2026-41950"
@@ -34,6 +34,10 @@
     {
       "type": "WEB",
       "url": "https://www.vulncheck.com/advisories/dify-authorization-bypass-via-file-uuid"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.zafran.io/resources/difytap-zafran-discovers-how-attackers-can-silently-wiretap-ai-data-across-tenants-on-a-platform-powering-1m-apps"
     }
   ],
   "database_specific": {

advisories/unreviewed/2026/06/GHSA-3777-v3gr-3jr3/GHSA-3777-v3gr-3jr3.json

@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-3777-v3gr-3jr3",
+  "modified": "2026-06-22T18:34:17Z",
+  "published": "2026-06-22T18:34:17Z",
+  "aliases": [
+    "CVE-2026-11994"
+  ],
+  "details": "Akaunting 3.1.21 contains an authenticated stored Cross-Site Scripting vulnerability in the report management workflow. A user with permission to create or update reports can store arbitrary HTML/JavaScript in the description field of a report.",
+  "severity": [
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11994"
+    },
+    {
+      "type": "WEB",
+      "url": "https://fluidattacks.com/es/advisories/believer"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/akaunting/akaunting"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2026-06-22T18:16:31Z"
+  }
+}

advisories/unreviewed/2026/06/GHSA-3hfq-9fxf-h35p/GHSA-3hfq-9fxf-h35p.json

@@ -0,0 +1,44 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-3hfq-9fxf-h35p",
+  "modified": "2026-06-22T18:34:14Z",
+  "published": "2026-06-22T18:34:14Z",
+  "aliases": [
+    "CVE-2026-41046"
+  ],
+  "details": "A path traversal attack when using a \"configName\" parameter in qSnapper before version 1.3.3 allowed a local attacker to use malicious config files for snapper and so cause a denial of service or potentially escalate privileges to root.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41046"
+    },
+    {
+      "type": "WEB",
+      "url": "https://bugzilla.suse.com/show_bug.cgi?id=1261889"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/presire/qSnapper/releases/tag/v1.3.3"
+    },
+    {
+      "type": "WEB",
+      "url": "https://security.opensuse.org/2026/05/26/qsnapper-dbus-issues.html#issue-path-traversal"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-23"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2026-06-22T16:16:35Z"
+  }
+}

advisories/unreviewed/2026/06/GHSA-3w66-95m3-8jxg/GHSA-3w66-95m3-8jxg.json

@@ -0,0 +1,34 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-3w66-95m3-8jxg",
+  "modified": "2026-06-22T18:34:17Z",
+  "published": "2026-06-22T18:34:17Z",
+  "aliases": [
+    "CVE-2026-42127"
+  ],
+  "details": "The public dashboard query endpoint does not limit request body size before processing, allowing unauthenticated attackers to trigger excessive memory allocation by sending arbitrarily large JSON payloads. This can lead to denial of service through memory exhaustion. No valid dashboard access token or authentication is required to exploit this vulnerability.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42127"
+    },
+    {
+      "type": "WEB",
+      "url": "https://grafana.com/security/security-advisories/cve-2026-42127"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2026-06-22T18:16:37Z"
+  }
+}

advisories/unreviewed/2026/06/GHSA-4pf4-j777-cgmf/GHSA-4pf4-j777-cgmf.json

@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-4pf4-j777-cgmf",
+  "modified": "2026-06-22T18:34:16Z",
+  "published": "2026-06-22T18:34:16Z",
+  "aliases": [
+    "CVE-2026-7664"
+  ],
+  "details": "IBM Langflow OSS 1.0.0 through 1.8.4 could allow unauthenticated attackers to access protected MCP project resources and execute MCP operations due to improper authorization enforcement in the Streamable MCP transport endpoint.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-7664"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.ibm.com/support/pages/node/7277243"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-287"
+    ],
+    "severity": "CRITICAL",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2026-06-22T16:16:41Z"
+  }
+}

advisories/unreviewed/2026/06/GHSA-4pm6-4pwh-f3gg/GHSA-4pm6-4pwh-f3gg.json

@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-4pm6-4pwh-f3gg",
+  "modified": "2026-06-22T18:34:16Z",
+  "published": "2026-06-22T18:34:16Z",
+  "aliases": [
+    "CVE-2026-7253"
+  ],
+  "details": "IBM Watson Speech Services Cartridge is vulnerable to Server-Side Request Forgery (SSRF) in Sterling File Gateway, due to a flaw which may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks [GHSA-rr7j-v2q5-chgv] [CVE-2026-7253]. IBM Sterling File Gateway is used in our speech runtimes. This vulnerabilitiy has been addressed. Please read the details for remediation below.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-7253"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.ibm.com/support/pages/node/7276994"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-918"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2026-06-22T16:16:41Z"
+  }
+}