Publish Advisories

GHSA-3c3g-7hwg-9qmr
GHSA-95f6-rfpg-c3w8
GHSA-m2jr-x4gq-5rmj
GHSA-382c-vx95-w3p5
GHSA-7cmj-v6x8-frvv
GHSA-86vw-x4ww-x467
GHSA-8f95-v3jq-cj86
GHSA-9pmc-p236-855h
GHSA-c43v-4cr8-6mvp
GHSA-hm42-q32m-vj4f

Author: advisory-database[bot]

…-3c3g-7hwg-9qmr/GHSA-3c3g-7hwg-9qmr.json …-3c3g-7hwg-9qmr/GHSA-3c3g-7hwg-9qmr.jsonadvisories/unreviewed/2026/06/GHSA-3c3g-7hwg-9qmr/GHSA-3c3g-7hwg-9qmr.json renamed to advisories/github-reviewed/2026/06/GHSA-3c3g-7hwg-9qmr/GHSA-3c3g-7hwg-9qmr.json advisories/unreviewed/2026/06/GHSA-3c3g-7hwg-9qmr/GHSA-3c3g-7hwg-9qmr.json renamed to advisories/github-reviewed/2026/06/GHSA-3c3g-7hwg-9qmr/GHSA-3c3g-7hwg-9qmr.json

@@ -1,11 +1,12 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-3c3g-7hwg-9qmr",
-  "modified": "2026-06-02T03:31:26Z",
+  "modified": "2026-07-09T13:44:24Z",
   "published": "2026-06-02T03:31:26Z",
   "aliases": [
     "CVE-2026-10566"
   ],
+  "summary": " FoundationAgents MetaGPT: Deserialization through flawed argument mapping via Message.check_instruct_content()",
   "details": "A weakness has been identified in FoundationAgents MetaGPT up to 0.8.2. This affects the function Message.check_instruct_content of the file metagpt/schema.py. Executing a manipulation of the argument mapping can lead to deserialization. The attack is restricted to local execution. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.",
   "severity": [
     {
@@ -14,10 +15,30 @@
     },
     {
       "type": "CVSS_V4",
-      "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+      "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P"
+    }
+  ],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "PyPI",
+        "name": "metagpt"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "last_affected": "0.8.2"
+            }
+          ]
+        }
+      ]
     }
   ],
-  "affected": [],
   "references": [
     {
       "type": "ADVISORY",
@@ -28,7 +49,7 @@
       "url": "https://github.com/FoundationAgents/MetaGPT/issues/2038"
     },
     {
-      "type": "WEB",
+      "type": "PACKAGE",
       "url": "https://github.com/FoundationAgents/MetaGPT"
     },
     {
@@ -53,8 +74,8 @@
       "CWE-20"
     ],
     "severity": "LOW",
-    "github_reviewed": false,
-    "github_reviewed_at": null,
+    "github_reviewed": true,
+    "github_reviewed_at": "2026-07-09T13:44:24Z",
     "nvd_published_at": "2026-06-02T03:16:16Z"
   }
 }

…-95f6-rfpg-c3w8/GHSA-95f6-rfpg-c3w8.json …-95f6-rfpg-c3w8/GHSA-95f6-rfpg-c3w8.jsonadvisories/unreviewed/2026/06/GHSA-95f6-rfpg-c3w8/GHSA-95f6-rfpg-c3w8.json renamed to advisories/github-reviewed/2026/06/GHSA-95f6-rfpg-c3w8/GHSA-95f6-rfpg-c3w8.json advisories/unreviewed/2026/06/GHSA-95f6-rfpg-c3w8/GHSA-95f6-rfpg-c3w8.json renamed to advisories/github-reviewed/2026/06/GHSA-95f6-rfpg-c3w8/GHSA-95f6-rfpg-c3w8.json

@@ -1,11 +1,12 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-95f6-rfpg-c3w8",
-  "modified": "2026-06-02T00:31:57Z",
+  "modified": "2026-07-09T13:43:46Z",
   "published": "2026-06-02T00:31:57Z",
   "aliases": [
     "CVE-2026-10291"
   ],
+  "summary": "Claw Orchestrator has inefficient regular expression complexity via validateRegex()",
   "details": "A security vulnerability has been detected in Enderfga claw-orchestrator up to 3.7.0. The impacted element is the function validateRegex of the file claw-orchestrator/src/embedded-server.ts of the component Session Grep Endpoint. The manipulation of the argument body.pattern leads to inefficient regular expression complexity. The attack may be initiated remotely. Upgrading to version 3.7.1 is sufficient to resolve this issue. The identifier of the patch is 3f970a974c65a94555c25af9f2796f11315e4584. It is recommended to upgrade the affected component.",
   "severity": [
     {
@@ -14,10 +15,30 @@
     },
     {
       "type": "CVSS_V4",
-      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"
+    }
+  ],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "npm",
+        "name": "@enderfga/claw-orchestrator"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "3.7.1"
+            }
+          ]
+        }
+      ]
     }
   ],
-  "affected": [],
   "references": [
     {
       "type": "ADVISORY",
@@ -36,7 +57,7 @@
       "url": "https://github.com/Enderfga/claw-orchestrator/commit/3f970a974c65a94555c25af9f2796f11315e4584"
     },
     {
-      "type": "WEB",
+      "type": "PACKAGE",
       "url": "https://github.com/Enderfga/claw-orchestrator"
     },
     {
@@ -62,11 +83,12 @@
   ],
   "database_specific": {
     "cwe_ids": [
+      "CWE-1333",
       "CWE-400"
     ],
     "severity": "MODERATE",
-    "github_reviewed": false,
-    "github_reviewed_at": null,
+    "github_reviewed": true,
+    "github_reviewed_at": "2026-07-09T13:43:46Z",
     "nvd_published_at": "2026-06-01T22:16:24Z"
   }
 }

…-m2jr-x4gq-5rmj/GHSA-m2jr-x4gq-5rmj.json …-m2jr-x4gq-5rmj/GHSA-m2jr-x4gq-5rmj.jsonadvisories/unreviewed/2026/06/GHSA-m2jr-x4gq-5rmj/GHSA-m2jr-x4gq-5rmj.json renamed to advisories/github-reviewed/2026/06/GHSA-m2jr-x4gq-5rmj/GHSA-m2jr-x4gq-5rmj.json advisories/unreviewed/2026/06/GHSA-m2jr-x4gq-5rmj/GHSA-m2jr-x4gq-5rmj.json renamed to advisories/github-reviewed/2026/06/GHSA-m2jr-x4gq-5rmj/GHSA-m2jr-x4gq-5rmj.json

@@ -1,11 +1,12 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-m2jr-x4gq-5rmj",
-  "modified": "2026-06-02T00:31:58Z",
+  "modified": "2026-07-09T13:43:55Z",
   "published": "2026-06-02T00:31:58Z",
   "aliases": [
     "CVE-2026-10300"
   ],
+  "summary": "SGLang: Reachable Assertion via  lora_path  in LoRAManager enables remote Denial of Dervice",
   "details": "A security vulnerability has been detected in SGLang 0.5.10.post1. Impacted is an unknown function of the file python/sglang/srt/lora/lora_manager.py of the component Inference HTTP Endpoint. Such manipulation of the argument lora_path leads to reachable assertion. The attack can be launched remotely. A high complexity level is associated with this attack. The exploitability is considered difficult. The exploit has been disclosed publicly and may be used. The pull request to fix this issue awaits acceptance.",
   "severity": [
     {
@@ -14,10 +15,30 @@
     },
     {
       "type": "CVSS_V4",
-      "score": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+      "score": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P"
+    }
+  ],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "PyPI",
+        "name": "sglang"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "last_affected": "0.5.10.post1"
+            }
+          ]
+        }
+      ]
     }
   ],
-  "affected": [],
   "references": [
     {
       "type": "ADVISORY",
@@ -31,6 +52,10 @@
       "type": "WEB",
       "url": "https://github.com/sgl-project/sglang/pull/25078"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/sgl-project/sglang"
+    },
     {
       "type": "WEB",
       "url": "https://vuldb.com/cve/CVE-2026-10300"
@@ -53,8 +78,8 @@
       "CWE-617"
     ],
     "severity": "LOW",
-    "github_reviewed": false,
-    "github_reviewed_at": null,
+    "github_reviewed": true,
+    "github_reviewed_at": "2026-07-09T13:43:55Z",
     "nvd_published_at": "2026-06-01T23:16:19Z"
   }
 }

advisories/github-reviewed/2026/07/GHSA-382c-vx95-w3p5/GHSA-382c-vx95-w3p5.json

@@ -0,0 +1,59 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-382c-vx95-w3p5",
+  "modified": "2026-07-09T13:44:51Z",
+  "published": "2026-07-09T13:44:51Z",
+  "aliases": [],
+  "summary": "Gittensory: Missing contributor-scoped access control on profile endpoint and MCP tool leaks miner financial data",
+  "details": "### Summary\n \n`GET /v1/contributors/:login/profile` and the `gittensory_get_contributor_profile` MCP tool skip the contributor-scoped access check that every sibling endpoint enforces. Any authenticated session/API/MCP token holder can read any contributor's profile; for confirmed Gittensor miners that exposes `alphaPerDay`, `taoPerDay`, `usdPerDay` (and the `hotkey` on the REST path). Authenticated cross-contributor disclosure, CWE-284 / IDOR.\n \n### Details\n \nIn `src/api/routes.ts` the profile handler returns `buildContributorProfile(...)` with no `requireContributorAccess` call. Every sibling (`/decision-pack`, `/repos/:owner/:repo/decision`, etc.) gates and 403s on a cross-contributor request — the profile route is the only omission. `buildContributorProfile` (`src/signals/engine.ts`) embeds `hotkey` and the three `*PerDay` fields for any confirmed miner.\n \nThe MCP tool `getContributorProfile` (`src/mcp/server.ts`) also omits `requireContributorAccess`. Its `redactSensitiveForMcp` filter only strips keys matching `hotkey|coldkey|wallet|private_key|privateKey|mnemonic`, so the hotkey is dropped but `alphaPerDay`/`taoPerDay`/`usdPerDay` pass through.\n \nThe codebase treats these as secret everywhere else — `decision-pack.ts` destructures the hotkey out before serving, and three sanitizers scrub hotkey/wallet from AI/comment output — which is why this is an oversight, not by-design.\n \nExposure: REST → hotkey + 3 financial fields; MCP → 3 financial fields (hotkey redacted).\n \n### PoC\n \n1. Get any valid session/API/MCP token.\n2. Pick a target `login` that is a confirmed miner.\n3. `GET /v1/contributors/{target}/profile` → 200 with `gittensor.hotkey`, `alphaPerDay`, `taoPerDay`, `usdPerDay`.\n4. `GET /v1/contributors/{target}/decision-pack` (same token) → 403, proving the missing gate.\n5. MCP `gittensory_get_contributor_profile` with `{target}` → result includes the three `*PerDay` fields.\n### Impact\n \nAny token holder can enumerate other miners' daily TAO/alpha/USD revenue (plus hotkey via REST) without authorization. All miners with snapshot data are affected.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
+    }
+  ],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "npm",
+        "name": "@jsonbored/gittensory-mcp"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "last_affected": "0.1.0"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "type": "WEB",
+      "url": "https://github.com/JSONbored/gittensory/security/advisories/GHSA-382c-vx95-w3p5"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/JSONbored/gittensory/commit/811ef5fb9d748170011f8854d88c64627ad666a0"
+    },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/JSONbored/gittensory"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-284"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": true,
+    "github_reviewed_at": "2026-07-09T13:44:51Z",
+    "nvd_published_at": null
+  }
+}