0.2

Adjusted Signal

0.2

Raw Pattern Score

100%

Time Factor

2026-10-31

Last Push

2.5K

Stars

—

Language

19.2M

Lines of Code

398.2K

Files

2.2K

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 1.0/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 2045 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.1/100 · LOW

Are imports declared and package/API names verified? 78 finding(s).

Agent Over-Engineering Ratio 0.1/100 · LOW

Are wrappers, guards, and repeated structures necessary? 295 finding(s).

PR Review Velocity Impact 1.5/100 · LOW

Which changes need focused human review? 2236 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 38HIGH 58MEDIUM 1385LOW 755

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 2236 distinct pattern matches across 16 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

AI Slop Vocabulary929 hits · 1924 pts

Severity	File	Line	Snippet	Context
MEDIUM	…d/2022/05/GHSA-hcxw-prp6-q3jq/GHSA-hcxw-prp6-q3jq.json	40	"url": "https://www.fireeye.com/blog/threat-research/2021/04/suspected-apt-actors-leverage-bypass-techniques-pulse	CODE
MEDIUM	…d/2022/05/GHSA-7j4g-23pf-vp65/GHSA-7j4g-23pf-vp65.json	9	"details": "In Exponent CMS before 2.4.1 Patch #6, certain admin users can elevate their privileges.",	CODE
MEDIUM	…d/2022/05/GHSA-5g75-j346-c9xj/GHSA-5g75-j346-c9xj.json	9	"details": "An issue was discovered in Xen through 4.12.x allowing x86 HVM/PVH guest OS users to cause a denial of ser	CODE
MEDIUM	…d/2022/05/GHSA-7xhx-mx9v-4rpc/GHSA-7xhx-mx9v-4rpc.json	9	"details": "This vulnerability allows local attackers to disclose sensitive information on vulnerable installations of	CODE
MEDIUM	…d/2022/05/GHSA-vv87-5f3g-cfw2/GHSA-vv87-5f3g-cfw2.json	9	"details": "An issue was discovered in Electronic Arts Origin before 10.5.39. Due to improper sanitization of the orig	CODE
MEDIUM	…d/2022/05/GHSA-6486-j487-828h/GHSA-6486-j487-828h.json	9	"details": "Buffer overflow in Dell BIOS on Dell Latitude D###, E####, XT2, and Z600 devices, and Dell Precision M####	CODE
LOW	…d/2025/03/GHSA-p4mq-5hwr-hc6r/GHSA-p4mq-5hwr-hc6r.json	9	"details": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/code-patching: Fix KASAN hi	CODE
MEDIUM	…d/2025/03/GHSA-8r49-fwcv-vhr4/GHSA-8r49-fwcv-vhr4.json	9	"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nxsk: Fix race at socket teardown\n\	CODE
LOW	…d/2025/04/GHSA-4297-r96p-57pp/GHSA-4297-r96p-57pp.json	9	"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/gup: reject FOLL_SPLIT_PMD with	CODE
LOW	…d/2025/05/GHSA-mw9j-m44f-pxpp/GHSA-mw9j-m44f-pxpp.json	9	"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: fix tree mod log mishandling	CODE
LOW	…d/2025/09/GHSA-frfp-g383-4xwm/GHSA-frfp-g383-4xwm.json	9	"details": "In the Linux kernel, the following vulnerability has been resolved:\n\ncifs: fix oops during encryption\n\	CODE
MEDIUM	…d/2025/09/GHSA-g3fh-rgmp-4frg/GHSA-g3fh-rgmp-4frg.json	9	"details": "In a hardened Docker environment, with Enhanced Container Isolation ( ECI https://docs.docker.com/enterpri	CODE
MEDIUM	…d/2025/09/GHSA-fv7f-vxxp-c378/GHSA-fv7f-vxxp-c378.json	9	"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm: move page table sync declaratio	CODE
MEDIUM	…d/2025/09/GHSA-fv7f-vxxp-c378/GHSA-fv7f-vxxp-c378.json	9	"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm: move page table sync declaratio	CODE
MEDIUM	…d/2025/09/GHSA-54rc-p2rv-38v3/GHSA-54rc-p2rv-38v3.json	9	"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nata: ahci: Match EM_MAX_SLOTS with	CODE
MEDIUM	…d/2025/06/GHSA-wwc6-hv89-4c8g/GHSA-wwc6-hv89-4c8g.json	9	"details": "The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the run_cmd argument)	CODE
MEDIUM	…d/2025/06/GHSA-x9cq-hh4v-vrww/GHSA-x9cq-hh4v-vrww.json	9	"details": "The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the sync_time argumen	CODE
MEDIUM	…d/2025/06/GHSA-77mj-4rpp-qvxc/GHSA-77mj-4rpp-qvxc.json	9	"details": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: arm64/poly1305 - fix a read	CODE
MEDIUM	…d/2025/06/GHSA-rf7g-v8g6-48q6/GHSA-rf7g-v8g6-48q6.json	9	"details": "The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the get_file_from_qtn	CODE
MEDIUM	…d/2025/06/GHSA-3qvj-q9mh-gv5x/GHSA-3qvj-q9mh-gv5x.json	9	"details": "The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the put_file_to_qtn a	CODE
MEDIUM	…d/2025/06/GHSA-f5vv-5ch7-632x/GHSA-f5vv-5ch7-632x.json	9	"details": "The Quantenna Wi-Fi chips ship with an unauthenticated telnet interface by default. This is an instance of	CODE
LOW	…d/2025/06/GHSA-w75m-wgp8-wc83/GHSA-w75m-wgp8-wc83.json	9	"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Don't use tnum_range on array	CODE
MEDIUM	…d/2025/06/GHSA-84ch-w4f5-gxjw/GHSA-84ch-w4f5-gxjw.json	9	"details": "The Quantenna Wi-Fi chipset ships with a local control script, transmit_file, that is vulnerable to comman	CODE
MEDIUM	…d/2025/06/GHSA-cgwq-jph9-cvc2/GHSA-cgwq-jph9-cvc2.json	9	"details": "The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the get_syslog_from_q	CODE
MEDIUM	…d/2025/06/GHSA-rmr3-f2f2-5gjh/GHSA-rmr3-f2f2-5gjh.json	9	"details": "The Quantenna Wi-Fi chipset ships with a local control script, set_tx_pow, that is vulnerable to command i	CODE
LOW	…d/2024/03/GHSA-pxxv-p7c4-h643/GHSA-pxxv-p7c4-h643.json	9	"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nUBSAN: array-index-out-of-bounds in	CODE
LOW	…d/2024/03/GHSA-mh64-ppph-hcxx/GHSA-mh64-ppph-hcxx.json	9	"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: do not BUG_ON in link_to_fix	CODE
LOW	…d/2024/05/GHSA-675j-298r-vv37/GHSA-675j-298r-vv37.json	9	"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: wilc1000: fix RCU usage in co	CODE
MEDIUM	…d/2024/05/GHSA-cjw7-m4qf-xc59/GHSA-cjw7-m4qf-xc59.json	9	"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/fpu: Prevent state corruption i	CODE
LOW	…d/2024/02/GHSA-xgg4-mwfh-3vj5/GHSA-xgg4-mwfh-3vj5.json	9	"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnbd: Fix NULL pointer in flush_work	CODE
LOW	…d/2024/02/GHSA-p2qc-mv5g-9gcr/GHSA-p2qc-mv5g-9gcr.json	9	"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nirqchip/gic-v3: Do not enable irqs	CODE
MEDIUM	…d/2024/10/GHSA-hrh9-752p-34vj/GHSA-hrh9-752p-34vj.json	9	"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: Use dedicated mutex to protect	CODE
MEDIUM	…d/2024/07/GHSA-fjfg-6xrv-2gqg/GHSA-fjfg-6xrv-2gqg.json	9	"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ntb_netdev: Move ntb_netdev_rx	CODE
LOW	…d/2024/08/GHSA-hq36-r5x9-pmq2/GHSA-hq36-r5x9-pmq2.json	9	"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: do not start relocation unti	CODE
LOW	…d/2024/12/GHSA-cpf2-vjq3-4h5q/GHSA-cpf2-vjq3-4h5q.json	9	"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring: check for overflows in io	CODE
MEDIUM	…d/2023/10/GHSA-4473-7649-rj9x/GHSA-4473-7649-rj9x.json	9	"details": "In dotCMS, versions mentioned, a flaw in the NormalizationFilter does not strip double slashes (//) from U	CODE
MEDIUM	…d/2023/10/GHSA-4473-7649-rj9x/GHSA-4473-7649-rj9x.json	9	"details": "In dotCMS, versions mentioned, a flaw in the NormalizationFilter does not strip double slashes (//) from U	CODE
MEDIUM	…d/2026/05/GHSA-97qv-cc94-mr6w/GHSA-97qv-cc94-mr6w.json	9	"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nceph: add a bunch of missing ceph_p	CODE
MEDIUM	…d/2026/10/GHSA-6m62-fm79-mhx9/GHSA-6m62-fm79-mhx9.json	9	"details": "In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, and Splunk Secure Gateway version	CODE
MEDIUM	…d/2026/07/GHSA-rp7p-3v5m-f8gg/GHSA-rp7p-3v5m-f8gg.json	9	"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nexfat: fix potential use-after-free	CODE
MEDIUM	…d/2026/09/GHSA-7pm4-4mcq-p2r3/GHSA-7pm4-4mcq-p2r3.json	9	"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nfutex/pi: Plug private futex exec()	CODE
MEDIUM	…d/2026/09/GHSA-rw53-r2p7-qgmf/GHSA-rw53-r2p7-qgmf.json	9	"details": "A DHCP server, or anyone on the LAN who answers a DISCOVER first, can make the client read about a\n\n\n\n	CODE
LOW	…d/2026/09/GHSA-vp7r-5mv7-7v8c/GHSA-vp7r-5mv7-7v8c.json	9	"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: make sure EXTENT_BUFFER_READ	CODE
MEDIUM	…d/2026/09/GHSA-rqpp-92mg-pcvc/GHSA-rqpp-92mg-pcvc.json	9	"details": "Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Apache	CODE
MEDIUM	…d/2026/08/GHSA-mpg4-cv8q-2gfg/GHSA-mpg4-cv8q-2gfg.json	9	"details": "In the Linux kernel, the following vulnerability has been resolved:\n\naudit: fix recursive locking deadlo	CODE
LOW	…d/2026/06/GHSA-r4jc-xrhv-v4rj/GHSA-r4jc-xrhv-v4rj.json	9	"details": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/pgtable-frag: Fix bad page	CODE
MEDIUM	…d/2026/06/GHSA-r3r8-3hxx-x882/GHSA-r3r8-3hxx-x882.json	9	"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: only release the dirty pages	CODE
MEDIUM	…d/2026/06/GHSA-w8vj-qcv3-4w36/GHSA-w8vj-qcv3-4w36.json	9	"details": "OpenBullet2 through version 0.3.2 contains an authenticated remote code execution vulnerability that allow	CODE
MEDIUM	…d/2021/12/GHSA-vvrp-5qgw-cc82/GHSA-vvrp-5qgw-cc82.json	9	"details": "An issue was discovered in UiPath Assistant 21.4.4. User-controlled data supplied to the --process-start a	CODE
MEDIUM	…d/2022/03/GHSA-ghm8-mmx7-xvg2/GHSA-ghm8-mmx7-xvg2.json	64	"url": "https://lists.apache.org/thread.html/r37dab61fc7f7088d4311e7f995ef4117d58d86a675f0256caa6991eb%40%3Cusers.	CODE
MEDIUM	…d/2022/03/GHSA-32gv-6cf3-wcmq/GHSA-32gv-6cf3-wcmq.json	8	"details": "### Impact\nTwisted web servers that utilize the optional HTTP/2 support suffer from the following flow-co	CODE
MEDIUM	…d/2022/04/GHSA-fx5p-f64h-93xc/GHSA-fx5p-f64h-93xc.json	8	"details": "### Impact\n\nAllows admin API access to the IPFS node.\n\n### Who ?\n\nThis affects people running the [	CODE
MEDIUM	…d/2022/04/GHSA-4hj2-r2pm-3hc6/GHSA-4hj2-r2pm-3hc6.json	10	"details": "### Impact\n\nA bug was found in CRI-O where containers were incorrectly started with non-empty inheritabl	CODE
MEDIUM⚡	…d/2022/05/GHSA-c438-8cvq-pxxx/GHSA-c438-8cvq-pxxx.json	40	"url": "https://github.com/apache/tapestry-5/commit/5ad5257fdfacbad2c7c480fdf2afa15d9a37e6b0"	CODE
MEDIUM⚡	…d/2022/05/GHSA-c438-8cvq-pxxx/GHSA-c438-8cvq-pxxx.json	44	"url": "https://github.com/apache/tapestry-5"	CODE
MEDIUM⚡	…d/2022/05/GHSA-c438-8cvq-pxxx/GHSA-c438-8cvq-pxxx.json	52	"url": "https://lists.apache.org/thread.html/84e99dedad2ecb4676de93c3ab73a8a10882951ab6984f514707f3d9@%3Cusers.tap	CODE
MEDIUM⚡	…d/2022/05/GHSA-c438-8cvq-pxxx/GHSA-c438-8cvq-pxxx.json	56	"url": "https://lists.apache.org/thread.html/bac8d6f9e1b4059b319d9cba6f33219a99b81623476ec896138f851c@%3Cusers.tap	CODE
MEDIUM⚡	…d/2022/05/GHSA-c438-8cvq-pxxx/GHSA-c438-8cvq-pxxx.json	60	"url": "https://lists.apache.org/thread.html/r7d9c54beb1dc97dcccc58d9b5d31f0f7166f9a25ad1beba5f8091e0c@%3Ccommits.	CODE
MEDIUM⚡	…d/2022/05/GHSA-c438-8cvq-pxxx/GHSA-c438-8cvq-pxxx.json	64	"url": "https://lists.apache.org/thread.html/r87523dd07886223aa086edc25fe9b8ddb9c1090f7db25b068dc30843@%3Ccommits.	CODE
MEDIUM⚡	…d/2022/05/GHSA-c438-8cvq-pxxx/GHSA-c438-8cvq-pxxx.json	68	"url": "https://tapestry.apache.org/release-notes-536.html"	CODE
869 more matches not shown…

Modern AI Meta-Vocabulary199 hits · 445 pts

Severity	File	Line	Snippet	Context
MEDIUM	…d/2022/05/GHSA-hf8c-7p7w-mch5/GHSA-hf8c-7p7w-mch5.json	28	"url": "https://blog.talosintelligence.com/uat-10147-chinese-speaking-adversary-integrates-agentic-ai-into-post-co	CODE
MEDIUM	…d/2022/05/GHSA-f52h-j689-x786/GHSA-f52h-j689-x786.json	28	"url": "https://blog.talosintelligence.com/uat-10147-chinese-speaking-adversary-integrates-agentic-ai-into-post-co	CODE
MEDIUM	…d/2022/06/GHSA-fccx-p5v4-w497/GHSA-fccx-p5v4-w497.json	24	"url": "https://github.com/yetingli/SaveResults/blob/main/js/scaffold-helper.js"	CODE
MEDIUM	…d/2023/07/GHSA-6vvg-j24w-vf35/GHSA-6vvg-j24w-vf35.json	24	"url": "https://www.bd.com/en-us/about-bd/cybersecurity/bulletin/bd-alaris-system-with-guardrails-suite-mx"	CODE
MEDIUM	…d/2023/07/GHSA-r689-4h95-mgx3/GHSA-r689-4h95-mgx3.json	24	"url": "https://www.bd.com/en-us/about-bd/cybersecurity/bulletin/bd-alaris-system-with-guardrails-suite-mx"	CODE
MEDIUM	…d/2023/07/GHSA-fwqg-xxwv-675c/GHSA-fwqg-xxwv-675c.json	24	"url": "https://www.bd.com/en-us/about-bd/cybersecurity/bulletin/bd-alaris-system-with-guardrails-suite-mx"	CODE
MEDIUM	…d/2023/07/GHSA-f93h-f4mq-gcfj/GHSA-f93h-f4mq-gcfj.json	24	"url": "https://www.bd.com/en-us/about-bd/cybersecurity/bulletin/bd-alaris-system-with-guardrails-suite-mx"	CODE
MEDIUM	…d/2023/07/GHSA-3gf7-pfqc-82v4/GHSA-3gf7-pfqc-82v4.json	24	"url": "https://www.bd.com/en-us/about-bd/cybersecurity/bulletin/bd-alaris-system-with-guardrails-suite-mx"	CODE
MEDIUM	…d/2023/07/GHSA-f4m8-c8f7-hw6q/GHSA-f4m8-c8f7-hw6q.json	24	"url": "https://www.bd.com/en-us/about-bd/cybersecurity/bulletin/bd-alaris-system-with-guardrails-suite-mx"	CODE
MEDIUM	…d/2023/07/GHSA-89rw-4j9m-hp2w/GHSA-89rw-4j9m-hp2w.json	24	"url": "https://www.bd.com/en-us/about-bd/cybersecurity/bulletin/bd-alaris-system-with-guardrails-suite-mx"	CODE
MEDIUM	…d/2026/04/GHSA-7f25-vhj7-mxrc/GHSA-7f25-vhj7-mxrc.json	36	"url": "https://www.vulncheck.com/advisories/openclaw-agentic-consent-bypass-via-config-patch"	CODE
MEDIUM	…d/2026/10/GHSA-7g89-3w9x-xw88/GHSA-7g89-3w9x-xw88.json	28	"url": "https://blog.ostorlab.co/gophish-0121-manual-review-agentic-deep-scan.html"	CODE
MEDIUM	…d/2026/10/GHSA-37wv-8fg5-p97x/GHSA-37wv-8fg5-p97x.json	32	"url": "https://github.com/cheshire-cat-ai/core/blob/c22731e7009ac89835b1d7b1cabc5989d998ec3e/src/cat/scaffold/plu	CODE
MEDIUM	…d/2026/10/GHSA-5724-58m3-c7r6/GHSA-5724-58m3-c7r6.json	28	"url": "https://blog.ostorlab.co/gophish-0121-manual-review-agentic-deep-scan.html"	CODE
MEDIUM	…d/2026/10/GHSA-hxwc-4ggw-27w5/GHSA-hxwc-4ggw-27w5.json	28	"url": "https://blog.ostorlab.co/gophish-0121-manual-review-agentic-deep-scan.html"	CODE
MEDIUM⚡	…d/2026/10/GHSA-g3vp-47q6-cfx3/GHSA-g3vp-47q6-cfx3.json	32	"url": "https://github.com/samugit83/redamon/blob/e1dfdff671b7e76d3a002eeba37b01d92cb949e1/agentic/api.py#L1688"	CODE
MEDIUM⚡	…d/2026/10/GHSA-g3vp-47q6-cfx3/GHSA-g3vp-47q6-cfx3.json	36	"url": "https://github.com/samugit83/redamon/blob/e1dfdff671b7e76d3a002eeba37b01d92cb949e1/agentic/orchestrator_he	CODE
MEDIUM⚡	…d/2026/10/GHSA-g3vp-47q6-cfx3/GHSA-g3vp-47q6-cfx3.json	40	"url": "https://github.com/samugit83/redamon/blob/e1dfdff671b7e76d3a002eeba37b01d92cb949e1/agentic/orchestrator_he	CODE
MEDIUM	…d/2026/10/GHSA-5h35-6pm3-mw32/GHSA-5h35-6pm3-mw32.json	28	"url": "https://blog.ostorlab.co/gophish-0121-manual-review-agentic-deep-scan.html"	CODE
MEDIUM	…d/2026/10/GHSA-2424-98jr-qcjq/GHSA-2424-98jr-qcjq.json	28	"url": "https://blog.ostorlab.co/gophish-0121-manual-review-agentic-deep-scan.html"	CODE
MEDIUM	…d/2022/04/GHSA-qjmq-8hjr-qcv6/GHSA-qjmq-8hjr-qcv6.json	10	"details": "### Impact\nSQL Injection vulnerability in entities for applications generated with the option \"reactive	CODE
MEDIUM	…d/2022/06/GHSA-p9p4-97g9-wcrh/GHSA-p9p4-97g9-wcrh.json	10	"details": "### Impact\n\nPlay Framework, when run in dev mode, shows verbose errors for easy debugging, including an	CODE
MEDIUM⚡	…d/2025/03/GHSA-5pq3-h73f-66hr/GHSA-5pq3-h73f-66hr.json	8	"details": "### Summary\n\nThe [AWS Cloud Development Kit (CDK)](https://aws.amazon.com/cdk/) is an open-source framew	CODE
MEDIUM	…d/2025/02/GHSA-c2p2-hgjg-9r3f/GHSA-c2p2-hgjg-9r3f.json	8	"details": "### Impact\n_What kind of vulnerability is it? Who is impacted?_\n\nRemote code execution is possible in w	CODE
MEDIUM	…d/2025/09/GHSA-9q5r-wfvf-rr7f/GHSA-9q5r-wfvf-rr7f.json	10	"details": "### Summary\nProvided grammar, would fit in a context window of most of the models, but takes minutes to p	CODE
MEDIUM	…d/2025/09/GHSA-65hm-pwj5-73pw/GHSA-65hm-pwj5-73pw.json	10	"details": "The MCP Server provided by ExecuteAutomation at https://github.com/executeautomation/mcp-database-server p	CODE
MEDIUM	…d/2025/09/GHSA-9ggr-2464-2j32/GHSA-9ggr-2464-2j32.json	10	"details": "## Summary\nAuthlib’s JWS verification accepts tokens that declare unknown critical header parameters (`cr	CODE
MEDIUM	…d/2025/01/GHSA-mm6v-68qp-f9fw/GHSA-mm6v-68qp-f9fw.json	10	"details": "### Impact\n\nRemote code execution may be possible in web-accessible installations of Homarus in certain	CODE
MEDIUM	…d/2024/10/GHSA-mq92-jr35-ffpc/GHSA-mq92-jr35-ffpc.json	11	"details": "### Withdrawn Advisory\nThis advisory has been withdrawn because it does not describe a valid vulnerabilit	CODE
MEDIUM⚡	…d/2024/07/GHSA-f8hx-f4xw-c646/GHSA-f8hx-f4xw-c646.json	49	"url": "https://github.com/guardrails-ai/guardrails/pull/922"	CODE
MEDIUM⚡	…d/2024/07/GHSA-f8hx-f4xw-c646/GHSA-f8hx-f4xw-c646.json	53	"url": "https://github.com/guardrails-ai/guardrails/commit/f3d806afee31e2e3f97af682d16c3c1bc0d3c380"	CODE
MEDIUM⚡	…d/2024/07/GHSA-f8hx-f4xw-c646/GHSA-f8hx-f4xw-c646.json	57	"url": "https://github.com/guardrails-ai/guardrails"	CODE
MEDIUM⚡	…d/2024/07/GHSA-f8hx-f4xw-c646/GHSA-f8hx-f4xw-c646.json	61	"url": "https://research.jfrog.com/vulnerabilities/guardrails-rail-xxe-jfsa-2024-001035519"	CODE
MEDIUM⚡	…d/2024/09/GHSA-w392-75q8-vr67/GHSA-w392-75q8-vr67.json	49	"url": "https://github.com/guardrails-ai/guardrails/commit/ab12701e8c3ef41273ff9b3912f2e4e28ae8306f"	CODE
MEDIUM⚡	…d/2024/09/GHSA-w392-75q8-vr67/GHSA-w392-75q8-vr67.json	53	"url": "https://github.com/guardrails-ai/guardrails"	CODE
MEDIUM⚡	…d/2024/09/GHSA-w392-75q8-vr67/GHSA-w392-75q8-vr67.json	57	"url": "https://hiddenlayer.com/sai-security-advisory/2024-09-guardrails"	CODE
MEDIUM	…d/2026/03/GHSA-pxrr-hq57-q35p/GHSA-pxrr-hq57-q35p.json	10	"details": "### Summary\nDynaconf is vulnerable to Server-Side Template Injection (SSTI) due to unsafe template evalua	CODE
MEDIUM	…d/2026/03/GHSA-q6qf-4p5j-r25g/GHSA-q6qf-4p5j-r25g.json	10	"details": "### Summary\nIn OpenClaw, the sandboxed `image` tool did not honor `tools.fs.workspaceOnly=true` for mount	CODE
MEDIUM	…d/2026/03/GHSA-65h8-27jh-q8wv/GHSA-65h8-27jh-q8wv.json	10	"details": "## Summary\nNostr inbound DM handling could perform crypto and dispatch work before sender and pairing pol	CODE
MEDIUM	…d/2026/03/GHSA-ccg8-46r6-9qgj/GHSA-ccg8-46r6-9qgj.json	10	"details": "### Summary\nA wrapper-depth parsing mismatch in `system.run` allowed nested transparent dispatch wrappers	CODE
MEDIUM	…d/2026/03/GHSA-x742-88jj-7hv9/GHSA-x742-88jj-7hv9.json	9	"details": "## Duplicate Advisory\n\nThis advisory has been withdrawn because it is a duplicate of GHSA-48wf-g7cp-gr3m	CODE
MEDIUM	…d/2026/03/GHSA-hwqm-qvj9-4jr2/GHSA-hwqm-qvj9-4jr2.json	8	"details": "## Summary\n\nThe AES-CBC decryption path in `DecryptBytes()` panics on crafted ciphertext whose plaintext	CODE
MEDIUM	…d/2026/03/GHSA-jjp7-g2jw-wh3j/GHSA-jjp7-g2jw-wh3j.json	10	"details": "### Summary\n\nAny authenticated user can overwrite any file's content by ID through the `POST /api/v1/ret	CODE
MEDIUM	…d/2026/03/GHSA-jq4x-98m3-ggq6/GHSA-jq4x-98m3-ggq6.json	8	"details": "ZDI-CAN-29312: OpenClaw Canvas Path Traversal Information Disclosure Vulnerability\n\n-- ABSTRACT --------	CODE
MEDIUM	…d/2026/03/GHSA-wvvq-wgcr-9q48/GHSA-wvvq-wgcr-9q48.json	10	"details": "## Summary\n\nThere is a potential vulnerability in Traefik's TLS SNI pre-sniffing logic related to fragme	CODE
MEDIUM	…d/2026/03/GHSA-48wf-g7cp-gr3m/GHSA-48wf-g7cp-gr3m.json	10	"details": "### Summary\nIn `allowlist` mode, `system.run` guardrails could be bypassed through `env -S`, causing poli	CODE
MEDIUM	…d/2026/03/GHSA-7r34-79r5-rcc9/GHSA-7r34-79r5-rcc9.json	10	"details": "### Summary\nAn unauthenticated attacker who can reach the mcp-atlassian HTTP endpoint can force the serve	CODE
MEDIUM	…d/2026/03/GHSA-77hf-7fqf-f227/GHSA-77hf-7fqf-f227.json	8	"details": "### Summary\nThe `tar.bz2` installer path in `src/agents/skills-install-download.ts` used shell tar prefli	CODE
MEDIUM	…d/2026/03/GHSA-p8mm-644p-phmh/GHSA-p8mm-644p-phmh.json	10	"details": "### Summary\nPinchTab `v0.8.4` contains a Windows-only command injection issue in the orphaned Chrome clea	CODE
MEDIUM	…d/2026/03/GHSA-943q-mwmv-hhvh/GHSA-943q-mwmv-hhvh.json	8	"details": "## Summary\n\nOpenClaw Gateway exposes an authenticated HTTP endpoint (`POST /tools/invoke`) intended for	CODE
MEDIUM	…d/2026/03/GHSA-943q-mwmv-hhvh/GHSA-943q-mwmv-hhvh.json	8	"details": "## Summary\n\nOpenClaw Gateway exposes an authenticated HTTP endpoint (`POST /tools/invoke`) intended for	CODE
MEDIUM	…d/2026/03/GHSA-x4vp-4235-65hg/GHSA-x4vp-4235-65hg.json	10	"details": "## Impact\n\nOpenClaw webhook handlers for BlueBubbles and Google Chat accepted and parsed request bodies	CODE
MEDIUM	…d/2026/03/GHSA-v8hw-mh8c-jxfc/GHSA-v8hw-mh8c-jxfc.json	10	"details": "## Description\n\n### 1. Summary\n\nThe Agentic Assistant feature in Langflow executes LLM-generated Pytho	CODE
MEDIUM	…d/2026/03/GHSA-v8hw-mh8c-jxfc/GHSA-v8hw-mh8c-jxfc.json	10	"details": "## Description\n\n### 1. Summary\n\nThe Agentic Assistant feature in Langflow executes LLM-generated Pytho	CODE
MEDIUM⚡	…d/2026/03/GHSA-v8hw-mh8c-jxfc/GHSA-v8hw-mh8c-jxfc.json	88	"url": "https://github.com/langflow-ai/langflow/blob/f7f4d1e70ba5eecd18162ec96f3571c2cfbcd1fc/src/backend/base/lan	CODE
MEDIUM⚡	…d/2026/03/GHSA-v8hw-mh8c-jxfc/GHSA-v8hw-mh8c-jxfc.json	92	"url": "https://github.com/langflow-ai/langflow/blob/f7f4d1e70ba5eecd18162ec96f3571c2cfbcd1fc/src/backend/base/lan	CODE
MEDIUM⚡	…d/2026/03/GHSA-v8hw-mh8c-jxfc/GHSA-v8hw-mh8c-jxfc.json	96	"url": "https://github.com/langflow-ai/langflow/blob/f7f4d1e70ba5eecd18162ec96f3571c2cfbcd1fc/src/backend/base/lan	CODE
MEDIUM⚡	…d/2026/03/GHSA-v8hw-mh8c-jxfc/GHSA-v8hw-mh8c-jxfc.json	100	"url": "https://github.com/langflow-ai/langflow/blob/f7f4d1e70ba5eecd18162ec96f3571c2cfbcd1fc/src/backend/base/lan	CODE
MEDIUM⚡	…d/2026/03/GHSA-v8hw-mh8c-jxfc/GHSA-v8hw-mh8c-jxfc.json	104	"url": "https://github.com/langflow-ai/langflow/blob/f7f4d1e70ba5eecd18162ec96f3571c2cfbcd1fc/src/backend/base/lan	CODE
MEDIUM⚡	…d/2026/03/GHSA-v8hw-mh8c-jxfc/GHSA-v8hw-mh8c-jxfc.json	108	"url": "https://github.com/langflow-ai/langflow/blob/f7f4d1e70ba5eecd18162ec96f3571c2cfbcd1fc/src/backend/base/lan	CODE
139 more matches not shown…

Hallucination Indicators38 hits · 385 pts

Severity	File	Line	Snippet	Context
CRITICAL	…d/2022/05/GHSA-gw39-q5qm-cq3g/GHSA-gw39-q5qm-cq3g.json	9	"details": "Cisco IOS XE 03.02.00.XO.15.0(2)XO on Catalyst 4500E series switches, when a Supervisor Engine 7L-E card i	CODE
CRITICAL	…d/2022/09/GHSA-4cm4-j9qp-hc8j/GHSA-4cm4-j9qp-hc8j.json	9	"details": "An SQL injection vulnerability in Advantech iView 5.7.04.6469. The specific flaw exists within the Configu	CODE
CRITICAL	…d/2022/08/GHSA-qp3h-7m84-76rf/GHSA-qp3h-7m84-76rf.json	9	"details": "The com.keysight.tentacle.config.ResourceManager.smsRestoreDatabaseZip() method is used to restore the HSQ	CODE
CRITICAL	…d/2022/08/GHSA-4f3p-5vq4-2r5c/GHSA-4f3p-5vq4-2r5c.json	9	"details": "A path traversal vulnerability exists in the com.keysight.tentacle.licensing.LicenseManager.addLicenseFile	CODE
CRITICAL	…d/2024/03/GHSA-82qq-qr66-5pc5/GHSA-82qq-qr66-5pc5.json	9	"details": "An authentication bypass vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in the edge-	CODE
CRITICAL	…d/2024/01/GHSA-36mq-j57w-rh2g/GHSA-36mq-j57w-rh2g.json	9	"details": "An arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action.ArcpUploadAction.doActio	CODE
CRITICAL	…d/2024/01/GHSA-hq74-5cxf-phqw/GHSA-hq74-5cxf-phqw.json	9	"details": "YonBIP v3_23.05 was discovered to contain a SQL injection vulnerability via the com.yonyou.hrcloud.attend.	CODE
CRITICAL	…d/2024/01/GHSA-4g25-v4mv-2xm5/GHSA-4g25-v4mv-2xm5.json	9	"details": "An arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action.ArcpUploadAction.doActio	CODE
CRITICAL	…d/2023/11/GHSA-4xpq-wqf9-p6mv/GHSA-4xpq-wqf9-p6mv.json	9	"details": "Arcserve UDP prior to 9.2 contains a path traversal vulnerability in com.ca.arcflash.ui.server.servlet.Fil	CODE
CRITICAL	…d/2023/07/GHSA-hcvh-c3gp-88hv/GHSA-hcvh-c3gp-88hv.json	9	"details": "An authenticated SQL injection vulnerability exists in Advantech iView versions prior to v5.7.4 build 6752	CODE
CRITICAL	…d/2026/10/GHSA-x42w-4gqh-qrvm/GHSA-x42w-4gqh-qrvm.json	9	"details": "In Bouncy Castle for Java before 1.86, the opt-in key-size validation on CMS key-transport recipients, org	CODE
CRITICAL	…d/2026/08/GHSA-jm2p-2r65-7m5c/GHSA-jm2p-2r65-7m5c.json	9	"details": "An issue in Halo 2.25.4 allows a remote attacker to execute arbitrary code via the run.halo.app.migration.	CODE
CRITICAL	…d/2022/12/GHSA-mjmj-j48q-9wg2/GHSA-mjmj-j48q-9wg2.json	10	"details": "### Summary\nSnakeYaml's `Constructor` class, which inherits from `SafeConstructor`, allows\nany type be d	CODE
CRITICAL	…d/2025/03/GHSA-93qr-h8pr-4593/GHSA-93qr-h8pr-4593.json	10	"details": "### Summary\nA denial-of-service (DoS) vulnerability in OpenDJ has been discovered that causes the server	CODE
CRITICAL	…d/2025/02/GHSA-w3pj-wh35-fq8w/GHSA-w3pj-wh35-fq8w.json	10	"details": "### Summary\nRemote Code Execution (RCE) is possible if an application uses certain GeoTools functionality	CODE
CRITICAL	…d/2025/09/GHSA-3p8m-j85q-pgmj/GHSA-3p8m-j85q-pgmj.json	10	"details": "### Summary\n\nWith specially crafted input, `BrotliDecoder` and some other decompressing decoders will al	CODE
CRITICAL	…d/2024/03/GHSA-2m7x-c7px-hp58/GHSA-2m7x-c7px-hp58.json	10	"details": "### Summary\nDue to the unrestricted access to twig extension class from grav context, an attacker can red	CODE
CRITICAL	…d/2024/07/GHSA-x7q2-wr7g-xqmf/GHSA-x7q2-wr7g-xqmf.json	10	"details": "An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14. The `django.contrib.auth.backend	CODE
CRITICAL	…d/2026/03/GHSA-w4gp-fjgq-3q4g/GHSA-w4gp-fjgq-3q4g.json	10	"details": "### Summary\n`happy-dom` may attach cookies from the current page origin (`window.location`) instead of th	CODE
CRITICAL	…d/2026/02/GHSA-2mcm-79hx-8fxw/GHSA-2mcm-79hx-8fxw.json	10	"details": "An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28.\n\nThe `django.cont	CODE
CRITICAL	…d/2026/10/GHSA-jj3q-cwqj-842r/GHSA-jj3q-cwqj-842r.json	10	"details": "## Summary\n\nWhen decoding a fax-compressed strip TIFF (Compression=3 / Group 3 1D, or Compression=2 / Mo	CODE
CRITICAL	…d/2026/10/GHSA-7822-rcf6-97fx/GHSA-7822-rcf6-97fx.json	10	"details": "### Summary\n\nA single AMQP message with malformed UTF-8 in a shortstr property (for example `correlation	CODE
CRITICAL	…d/2026/10/GHSA-cqgh-8p3p-mx4m/GHSA-cqgh-8p3p-mx4m.json	10	"details": "## Summary\n\n`com.rabbitmq.tools.json.JSONReader.read()` never returns when its input ends inside a quote	CODE
CRITICAL	…d/2026/10/GHSA-jjfr-hcj7-qf5w/GHSA-jjfr-hcj7-qf5w.json	10	"details": "### Summary\n\nThe TIFF CCITT Group 4 (T6) encoder writes beyond its logical compressed-data buffer when e	CODE
CRITICAL	…d/2026/10/GHSA-v76p-62qx-wwq2/GHSA-v76p-62qx-wwq2.json	10	"details": "## Summary\n\nWhen decoding a tiled TIFF with fax compression (T4/T6/MH), `DecodeTilesChunky` allocates ea	CODE
CRITICAL	…d/2026/07/GHSA-93wv-jw9v-4972/GHSA-93wv-jw9v-4972.json	10	"details": "### Summary\n\nA remote, unauthenticated peer can leak one direct `ByteBuf` per HTTP/2 `DATA` frame in\nap	CODE
CRITICAL	…d/2026/07/GHSA-w7x5-g22v-xqhr/GHSA-w7x5-g22v-xqhr.json	10	"details": "### Description (as reported)\n\n#### Summary\n\nIn Jetty 12.1.8, org.eclipse.jetty.util.URIUtil.canonical	CODE
CRITICAL	…d/2026/07/GHSA-qpm9-h556-mwxm/GHSA-qpm9-h556-mwxm.json	10	"details": "## Impact\n\nIn versions up to and including 3.0.0, two parts of the GraphQL API returned data without che	CODE
CRITICAL	…d/2026/07/GHSA-6h3c-r723-7fx3/GHSA-6h3c-r723-7fx3.json	10	"details": "## Impact\n\nIn versions from 1.5.0 up to and including 3.0.0, any authenticated portal user could complet	CODE
CRITICAL	…d/2026/09/GHSA-98q5-5qh2-7w75/GHSA-98q5-5qh2-7w75.json	10	"details": "# Vulnerability\n\n`SearchFirstActiveDirectoryRealm.findUserDn()` substitutes the user-supplied username f	CODE
CRITICAL	…d/2026/09/GHSA-r6gq-whwq-mvg9/GHSA-r6gq-whwq-mvg9.json	10	"details": "### Summary\n`nltk.corpus.reader.api.CorpusReader.open()` can be used to read files outside the intended c	CODE
CRITICAL	…d/2026/08/GHSA-4899-mpch-38p3/GHSA-4899-mpch-38p3.json	10	"details": "# BinaryHttpParser: Unauthenticated CPU-exhaustion DoS via infinite loop in field-section decoding\n\n- **	CODE
CRITICAL	…d/2026/08/GHSA-f63g-88cj-hjf9/GHSA-f63g-88cj-hjf9.json	10	"details": "### Summary\n\nIzPack's `UnpackerBase.unpack()` resolves pack-file target paths without any\ncanonical-pat	CODE
CRITICAL⚡	…d/2026/08/GHSA-jw39-3688-r4rx/GHSA-jw39-3688-r4rx.json	10	"details": "### Impact\n\nA Server-Side Template Injection (SSTI) vulnerability exists in multiple locations of trestl	CODE
CRITICAL	…d/2026/01/GHSA-6vfr-p2hx-6v32/GHSA-6vfr-p2hx-6v32.json	10	"details": "When org.apache.linkis.metadata.util.HiveUtils.decode() fails to perform Base64 decoding, it records the c	CODE
CRITICAL	…d/2026/06/GHSA-2f55-g35j-5jmf/GHSA-2f55-g35j-5jmf.json	10	"details": "### Summary\n\n`org.hl7.fhir.utilities.XsltUtilities` exposes two parallel families of XSLT\ntransform hel	CODE
CRITICAL	…d/2021/03/GHSA-5mg8-w23w-74h3/GHSA-5mg8-w23w-74h3.json	10	"details": "A temp directory creation vulnerability exists in Guava prior to version 32.0.0 allowing an attacker with	CODE
CRITICAL	…d/2021/08/GHSA-jwf9-w5xm-f437/GHSA-jwf9-w5xm-f437.json	10	"details": "### Impact\nTFLite's [`GatherNd` implementation](https://github.com/tensorflow/tensorflow/blob/149562d49fa	CODE

Slop Phrases166 hits · 287 pts

Severity	File	Line	Snippet	Context
MEDIUM	…d/2022/05/GHSA-qp94-gr87-4wq3/GHSA-qp94-gr87-4wq3.json	9	"details": " DISPUTED scripts/wwwacct in cPanel 11.18.6 STABLE and earlier and 11.23.1 CURRENT and earlier allow	CODE
LOW	…d/2025/04/GHSA-qj48-g5ch-7g59/GHSA-qj48-g5ch-7g59.json	9	"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: fix to avoid panic once fallo	CODE
MEDIUM	…d/2025/10/GHSA-xc8j-5rr8-8q9r/GHSA-xc8j-5rr8-8q9r.json	9	"details": "The Zombify plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.7	CODE
LOW	…d/2024/04/GHSA-6r45-w96c-v9jx/GHSA-6r45-w96c-v9jx.json	9	"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: wilc1000: prevent use-after-f	CODE
LOW	…d/2024/05/GHSA-8cxw-6695-4jq3/GHSA-8cxw-6695-4jq3.json	9	"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/ipoib: Fix warning caused by d	CODE
MEDIUM	…d/2024/02/GHSA-p88p-j9px-cq4j/GHSA-p88p-j9px-cq4j.json	9	"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nclass: fix use-after-free in class_	CODE
LOW	…d/2024/06/GHSA-h3h3-jq7c-xgpc/GHSA-h3h3-jq7c-xgpc.json	9	"details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrivers/virt/acrn: fix PFNMAP PTE c	CODE
MEDIUM	…d/2022/04/GHSA-fx5p-f64h-93xc/GHSA-fx5p-f64h-93xc.json	8	"details": "### Impact\n\nAllows admin API access to the IPFS node.\n\n### Who ?\n\nThis affects people running the [	CODE
MEDIUM	…d/2022/04/GHSA-pf38-v6qj-j23h/GHSA-pf38-v6qj-j23h.json	10	"details": "### Impact\nThe CSRF tokens were not renewed after login and logout.\nAn attacker could impersonate the vi	CODE
MEDIUM	…d/2022/04/GHSA-4g29-fccr-p59w/GHSA-4g29-fccr-p59w.json	10	"details": "### Impact\nNot-stored XSS in storefront.\nRequest parameter were directly assigned to the template, so th	CODE
MEDIUM	…d/2022/04/GHSA-3qrq-r688-vvh4/GHSA-3qrq-r688-vvh4.json	10	"details": "### Impact\nMultiple tokens for password reset could be requested. All tokens could be used to change the	CODE
MEDIUM	…d/2022/04/GHSA-cqcc-mm6x-vmvw/GHSA-cqcc-mm6x-vmvw.json	10	"details": "In PrivateBin < v1.4.0 a cross-site scripting (XSS) vulnerability was found. The vulnerability is present	CODE
MEDIUM	…d/2022/05/GHSA-q2mx-j4x2-2h74/GHSA-q2mx-j4x2-2h74.json	10	"details": "### Impact\n\nWe found that this vulnerability is present when the developer is implementing an OAuth 1 pr	CODE
MEDIUM	…d/2022/05/GHSA-xh97-72ww-2w58/GHSA-xh97-72ww-2w58.json	9	"details": "### Duplicate Advisory\nThis advisory has been withdrawn because it is a duplicate of GHSA-hw42-3568-wj87.	CODE
MEDIUM	…d/2022/02/GHSA-rmr5-cpv2-vgjf/GHSA-rmr5-cpv2-vgjf.json	10	"details": "### Impact\nThe vulnerability may allow a remote attacker to allocate 100% CPU time on the target system d	CODE
MEDIUM	…d/2022/02/GHSA-f7qw-5fgj-247x/GHSA-f7qw-5fgj-247x.json	8	"details": "### Impact\nPlone is vulnerable to reflected cross site scripting and open redirect when an attacker can g	CODE
MEDIUM	…d/2022/02/GHSA-fmvm-x8mv-47mj/GHSA-fmvm-x8mv-47mj.json	10	"details": "Next.js is a React framework. Starting with version 10.0.0 and prior to version 12.1.0, Next.js is vulnera	CODE
LOW	…d/2022/02/GHSA-99cg-575x-774p/GHSA-99cg-575x-774p.json	10	"details": "### Impact\n\nAn improper input validation vulnerability in go-attestation before 0.4.0 allows local users	CODE
LOW	…d/2022/11/GHSA-8r69-3cvp-wxc3/GHSA-8r69-3cvp-wxc3.json	8	"details": "### Impact\nIn Apollo Server 3 and 4, the `cache-control` HTTP response header may not reflect the cache p	CODE
MEDIUM	…d/2022/10/GHSA-jjmg-x456-w976/GHSA-jjmg-x456-w976.json	8	"details": "### Impact\n_What kind of vulnerability is it? Who is impacted?_\n\nThe default cookie name (and documenta	CODE
LOW	…d/2022/10/GHSA-f9qj-7gh3-mhj4/GHSA-f9qj-7gh3-mhj4.json	10	"details": "### Impact\n_What kind of vulnerability is it? Who is impacted?_ \nAll users of the `run-terraform` reusa	CODE
MEDIUM	…d/2022/07/GHSA-h6gj-6jjq-h8g9/GHSA-h6gj-6jjq-h8g9.json	10	"details": "### Impact\nInitializing a checkboxradio widget on an input enclosed within a label makes that parent labe	CODE
MEDIUM	…d/2022/07/GHSA-pgjx-7f9g-9463/GHSA-pgjx-7f9g-9463.json	10	"details": "### Impact\n\nAn attacker can pass a compromised input to the e-mail [signin endpoint](https://next-auth.j	CODE
LOW	…d/2022/07/GHSA-pgjx-7f9g-9463/GHSA-pgjx-7f9g-9463.json	10	"details": "### Impact\n\nAn attacker can pass a compromised input to the e-mail [signin endpoint](https://next-auth.j	CODE
MEDIUM	…d/2022/07/GHSA-5834-xv5q-cgfw/GHSA-5834-xv5q-cgfw.json	10	"details": "### Impact\nPersistent XSS in customer module\n\n### Patches\n\nWe recommend updating to the current versi	CODE
MEDIUM	…d/2022/09/GHSA-qc43-pgwq-3q2q/GHSA-qc43-pgwq-3q2q.json	10	"details": "### Impact\nIf backend admin controllers are called with a certain notation, the ACL could be bypassed. Us	CODE
MEDIUM	…d/2022/09/GHSA-6vfq-jmxg-g58r/GHSA-6vfq-jmxg-g58r.json	10	"details": "### Impact\nThe request for the customer detail view in the backend administration contained sensitive dat	CODE
MEDIUM	…d/2022/08/GHSA-7r3h-m5j6-3q42/GHSA-7r3h-m5j6-3q42.json	10	"details": "## Impact\n\nThe `core.exportVariable` function uses a well known delimiter that attackers can use to brea	CODE
MEDIUM	…d/2022/08/GHSA-xv97-c62v-4587/GHSA-xv97-c62v-4587.json	10	"details": "### Impact\n`next-auth` users who are using the `EmailProvider` either in versions before `4.10.3` or `3.2	CODE
MEDIUM	…d/2022/08/GHSA-p6mm-27gq-9v3p/GHSA-p6mm-27gq-9v3p.json	10	"details": "### Impact\nAn information disclosure vulnerability in `next-auth` before `v4.10.2` and `v3.29.9` allows a	CODE
MEDIUM	…d/2022/01/GHSA-p523-jrph-qjc6/GHSA-p523-jrph-qjc6.json	10	"details": "### Impact\n\nAutomatically invalidate sessions upon password change\n\n### Patches\n\nWe recommend updati	CODE
MEDIUM	…d/2022/01/GHSA-g4c2-ghfg-g5rh/GHSA-g4c2-ghfg-g5rh.json	10	"details": "### Impact\nPlone is vulnerable to reflected cross site scripting and open redirect when an attacker can g	CODE
MEDIUM	…d/2022/01/GHSA-c53v-qmrx-93hg/GHSA-c53v-qmrx-93hg.json	10	"details": "### Impact\n\nArbitrary redirect while using certain URLs \n\n### Patches\n\nWe recommend updating to the	CODE
LOW	…d/2022/01/GHSA-ch22-x2v3-v6vq/GHSA-ch22-x2v3-v6vq.json	10	"details": "Between September 26, 2021 and October 8, 2021, [Radically Open Security](https://www.radicallyopensecurit	CODE
MEDIUM	…d/2022/01/GHSA-h79x-98r2-g6qc/GHSA-h79x-98r2-g6qc.json	8	"details": "# Impact\nMinecraft Bedrock authentication and its protocol encryption are inseparably linked. One is not	CODE
MEDIUM	…d/2022/01/GHSA-8w54-22w9-3g8f/GHSA-8w54-22w9-3g8f.json	8	"details": "### Impact\nPlone is vulnerable to reflected cross site scripting and open redirect when an attacker can g	CODE
MEDIUM	…d/2022/01/GHSA-h3fg-h5v3-vf8m/GHSA-h3fg-h5v3-vf8m.json	10	"details": "### Impact\nCSRF vulnerability that allows a malicious site to add an item to the user's cart without thei	CODE
LOW	…d/2022/01/GHSA-h3fg-h5v3-vf8m/GHSA-h3fg-h5v3-vf8m.json	10	"details": "### Impact\nCSRF vulnerability that allows a malicious site to add an item to the user's cart without thei	CODE
MEDIUM	…d/2022/01/GHSA-3qpm-h9ch-px3c/GHSA-3qpm-h9ch-px3c.json	8	"details": "### Summary\nThe version used of Log4j, the library used for logging by PowerNukkit, is subject to a remot	CODE
MEDIUM	…d/2022/06/GHSA-g5fm-jp9v-2432/GHSA-g5fm-jp9v-2432.json	10	"details": "### Impact\n\nAn attacker can send a request to an app using NextAuth.js with an invalid `callbackUrl` que	CODE
LOW	…d/2022/06/GHSA-jhqp-vf4w-rpwq/GHSA-jhqp-vf4w-rpwq.json	10	"details": "### Impact\n\nAll versions of Argo CD starting with v0.7.0 are vulnerable to an uncontrolled memory consum	CODE
MEDIUM	…d/2022/06/GHSA-q754-vwc4-p6qj/GHSA-q754-vwc4-p6qj.json	10	"details": "### Impact\nAuthenticated Stored XSS in Administration\n\n### Patches\nWe recommend updating to version 5.	CODE
MEDIUM	…d/2022/06/GHSA-9w9f-6mg8-jp7w/GHSA-9w9f-6mg8-jp7w.json	10	"details": "### Impact\n_What kind of vulnerability is it? Who is impacted?_\n\nBleve includes HTTP utilities under bl	CODE
MEDIUM	…d/2022/12/GHSA-j563-grx4-pjpv/GHSA-j563-grx4-pjpv.json	10	"details": "### Impact\nThe vulnerability may allow a remote attacker to terminate the application with a stack overfl	CODE
MEDIUM	…d/2025/03/GHSA-wq9g-9vfc-cfq9/GHSA-wq9g-9vfc-cfq9.json	10	"details": "### Summary\n\nWhen validating a request with a multipart/form-data schema, if the OpenAPI schema allows i	CODE
LOW	…d/2025/03/GHSA-3x5x-fw77-g54c/GHSA-3x5x-fw77-g54c.json	8	"details": "### Impact\nDgl implements rpc server (start_server() in rpc_server.py) for supporting the RPC communicati	CODE
MEDIUM	…d/2025/04/GHSA-g9jj-75mx-wjcx/GHSA-g9jj-75mx-wjcx.json	10	"details": "### Impact\n\nIt is possible for a user with SCRIPT right to escape from the HQL execution context and per	CODE
MEDIUM	…d/2025/04/GHSA-7vpp-9cxj-q8gv/GHSA-7vpp-9cxj-q8gv.json	10	"details": "A Path Traversal \"Zip Slip\" vulnerability has been identified in mholt/archiver in Go. This vulnerabilit	CODE
MEDIUM	…d/2025/04/GHSA-wg47-6jq2-q2hh/GHSA-wg47-6jq2-q2hh.json	10	"details": "### Impact\nThis is a high priority vulnerability and users must upgrade ASAP.\n\nThe signature component	CODE
MEDIUM⚡	…d/2025/05/GHSA-fw82-87p8-v6hp/GHSA-fw82-87p8-v6hp.json	10	"details": "### TL;DR\n\nThis vulnerability affects all Kirby sites that use the `snippet()` helper or `$kirby->snippe	CODE
MEDIUM	…d/2025/02/GHSA-7pq5-qcp6-mcww/GHSA-7pq5-qcp6-mcww.json	10	"details": "### Impact\nUsing a specially crafted file, a user could potentially upload a file containing code that wh	CODE
LOW	…d/2025/02/GHSA-pq2g-wx69-c263/GHSA-pq2g-wx69-c263.json	10	"details": "A security issue was found in Netplex Json-smart 2.5.0 through 2.5.1. When loading a specially crafted JSO	CODE
MEDIUM	…d/2025/02/GHSA-g9wf-5777-gq43/GHSA-g9wf-5777-gq43.json	10	"details": "# Summary\n\nDjango-Unicorn is vulnerable to python class pollution vulnerability, a new type of vulnerabi	CODE
MEDIUM	…d/2025/11/GHSA-hcpf-qv9m-vfgp/GHSA-hcpf-qv9m-vfgp.json	10	"details": "### Summary\nThe esm.sh CDN service contains a Template Literal Injection vulnerability (CWE-94) in its CS	CODE
LOW	…d/2025/10/GHSA-867c-p784-5q6g/GHSA-867c-p784-5q6g.json	10	"details": "We’ve identified an HTML injection/XSS vulnerability in PrivateBin service that allows the injection of ar	CODE
LOW	…d/2025/07/GHSA-qr93-8wwf-22g4/GHSA-qr93-8wwf-22g4.json	10	"details": "### Summary\nThis vulnerability allows a user to push to the remote repository while bypassing policies an	CODE
MEDIUM	…d/2025/09/GHSA-jj4j-x5ww-cwh9/GHSA-jj4j-x5ww-cwh9.json	10	"details": "### Summary\nCertain bulk action calls with a `before_transaction` hook and no `after_transaction` hook, w	CODE
LOW	…d/2025/09/GHSA-v3vj-5868-2ch2/GHSA-v3vj-5868-2ch2.json	10	"details": "### Impact\n\nA vulnerability has been identified within Rancher Manager whereby the SAML authentication f	CODE
LOW	…d/2025/09/GHSA-49mj-x8jp-qvfc/GHSA-49mj-x8jp-qvfc.json	10	"details": "### Impact\n\nOctoPrint versions up until and including 1.11.2 contain a vulnerability that allows an **au	CODE
LOW	…d/2025/09/GHSA-gxw4-4fc5-9gr5/GHSA-gxw4-4fc5-9gr5.json	10	"details": "### Summary\n\nA command injection vulnerability exists in the `figma-developer-mcp` MCP Server. The vulne	CODE
106 more matches not shown…

Decorative Section Separators112 hits · 274 pts

Severity	File	Line	Snippet	Context
MEDIUM	…d/2025/09/GHSA-fjf6-f8jx-fjgp/GHSA-fjf6-f8jx-fjgp.json	9	"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet, hsr: reject HSR frame if skb c	CODE
MEDIUM	…d/2025/04/GHSA-fhg8-qxh5-7q3w/GHSA-fhg8-qxh5-7q3w.json	10	"details": "## Advisory\n\nThe management of JetStream assets happens with messages in the `$JS.` subject namespace in	CODE
MEDIUM	…d/2025/04/GHSA-fhg8-qxh5-7q3w/GHSA-fhg8-qxh5-7q3w.json	10	"details": "## Advisory\n\nThe management of JetStream assets happens with messages in the `$JS.` subject namespace in	CODE
MEDIUM⚡	…d/2025/12/GHSA-rchf-xwx2-hm93/GHSA-rchf-xwx2-hm93.json	10	"details": "Hi Fedify team! 👋\n\nThank you for your work on Fedify—it's a fantastic library for building federated app	CODE
MEDIUM⚡	…d/2025/12/GHSA-rchf-xwx2-hm93/GHSA-rchf-xwx2-hm93.json	10	"details": "Hi Fedify team! 👋\n\nThank you for your work on Fedify—it's a fantastic library for building federated app	CODE
MEDIUM⚡	…d/2026/03/GHSA-m344-f55w-2m6j/GHSA-m344-f55w-2m6j.json	10	"details": "## 1. Executive Summary\n\nA critical library-level vulnerability was identified in the Authlib Python	CODE
MEDIUM⚡	…d/2026/03/GHSA-m344-f55w-2m6j/GHSA-m344-f55w-2m6j.json	10	"details": "## 1. Executive Summary\n\nA critical library-level vulnerability was identified in the Authlib Python	CODE
MEDIUM	…d/2026/03/GHSA-6fmw-82m7-jq6p/GHSA-6fmw-82m7-jq6p.json	10	"details": "### Summary\n- The changedetection.io application allows users to specify XPath expressions as content fil	CODE
MEDIUM	…d/2026/03/GHSA-6fmw-82m7-jq6p/GHSA-6fmw-82m7-jq6p.json	10	"details": "### Summary\n- The changedetection.io application allows users to specify XPath expressions as content fil	CODE
MEDIUM	…d/2026/03/GHSA-v9xm-ffx2-7h35/GHSA-v9xm-ffx2-7h35.json	10	"details": "# MFA/TOTP Bypass via Incorrect MongoDB Query in Bearer Token Middleware\n\n## Summary\n\nThe bearer token	CODE
MEDIUM	…d/2026/03/GHSA-v9xm-ffx2-7h35/GHSA-v9xm-ffx2-7h35.json	10	"details": "# MFA/TOTP Bypass via Incorrect MongoDB Query in Bearer Token Middleware\n\n## Summary\n\nThe bearer token	CODE
MEDIUM	…d/2026/03/GHSA-h75p-j8xm-m278/GHSA-h75p-j8xm-m278.json	10	"details": "## Executive Summary\n\nA Denial of Service vulnerability exists in CoreDNS's loop detection plugin that a	CODE
MEDIUM	…d/2026/03/GHSA-h75p-j8xm-m278/GHSA-h75p-j8xm-m278.json	10	"details": "## Executive Summary\n\nA Denial of Service vulnerability exists in CoreDNS's loop detection plugin that a	CODE
MEDIUM⚡	…d/2026/03/GHSA-7432-952r-cw78/GHSA-7432-952r-cw78.json	10	"details": "## 1. Executive Summary\n\nA cryptographic padding oracle vulnerability was identified in the Authlib Pyth	CODE
MEDIUM⚡	…d/2026/03/GHSA-7432-952r-cw78/GHSA-7432-952r-cw78.json	10	"details": "## 1. Executive Summary\n\nA cryptographic padding oracle vulnerability was identified in the Authlib Pyth	CODE
MEDIUM⚡	…d/2026/03/GHSA-r275-fr43-pm7q/GHSA-r275-fr43-pm7q.json	10	"details": "### Summary\n\nThe `blockUnsafeOperationsPlugin` in `simple-git` fails to block git protocol\noverride arg	CODE
MEDIUM⚡	…d/2026/03/GHSA-r275-fr43-pm7q/GHSA-r275-fr43-pm7q.json	10	"details": "### Summary\n\nThe `blockUnsafeOperationsPlugin` in `simple-git` fails to block git protocol\noverride arg	CODE
MEDIUM	…d/2026/03/GHSA-5hf2-vhj6-gj9m/GHSA-5hf2-vhj6-gj9m.json	10	"details": "## Summary\n\nNginx-UI contains an Insecure Direct Object Reference (IDOR) vulnerability that allows any a	CODE
MEDIUM	…d/2026/03/GHSA-5hf2-vhj6-gj9m/GHSA-5hf2-vhj6-gj9m.json	10	"details": "## Summary\n\nNginx-UI contains an Insecure Direct Object Reference (IDOR) vulnerability that allows any a	CODE
MEDIUM⚡	…d/2026/03/GHSA-33mp-8p67-xj7c/GHSA-33mp-8p67-xj7c.json	10	"details": "## Summary\n\nA typo in Froxlor's input validation code (`==` instead of `=`) completely disables email fo	CODE
MEDIUM⚡	…d/2026/03/GHSA-33mp-8p67-xj7c/GHSA-33mp-8p67-xj7c.json	10	"details": "## Summary\n\nA typo in Froxlor's input validation code (`==` instead of `=`) completely disables email fo	CODE
MEDIUM	…d/2026/04/GHSA-rg3h-x3jw-7jm5/GHSA-rg3h-x3jw-7jm5.json	10	"details": "The fix for [CVE-2026-40315](https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-x783-xp3g	CODE
MEDIUM	…d/2026/04/GHSA-rg3h-x3jw-7jm5/GHSA-rg3h-x3jw-7jm5.json	10	"details": "The fix for [CVE-2026-40315](https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-x783-xp3g	CODE
MEDIUM	…d/2026/04/GHSA-6w67-hwm5-92mq/GHSA-6w67-hwm5-92mq.json	10	"details": "## Summary\n\nA Server-Side Request Forgery (SSRF) vulnerability exists in LMDeploy's vision-language modu	CODE
MEDIUM	…d/2026/04/GHSA-6w67-hwm5-92mq/GHSA-6w67-hwm5-92mq.json	10	"details": "## Summary\n\nA Server-Side Request Forgery (SSRF) vulnerability exists in LMDeploy's vision-language modu	CODE
MEDIUM⚡	…d/2026/04/GHSA-2fr7-cc4f-wh98/GHSA-2fr7-cc4f-wh98.json	10	"details": "## Description\n\nThe Aggiornamenti (Updates) module in OpenSTAManager <= 2.10.1 contains a database confl	CODE
MEDIUM⚡	…d/2026/04/GHSA-2fr7-cc4f-wh98/GHSA-2fr7-cc4f-wh98.json	10	"details": "## Description\n\nThe Aggiornamenti (Updates) module in OpenSTAManager <= 2.10.1 contains a database confl	CODE
MEDIUM⚡	…d/2026/04/GHSA-7mqr-33rv-p3mp/GHSA-7mqr-33rv-p3mp.json	10	"details": "### Summary\nThe OpenRemote IoT platform's rules engine contains two interrelated critical expression inje	CODE
MEDIUM⚡	…d/2026/04/GHSA-7mqr-33rv-p3mp/GHSA-7mqr-33rv-p3mp.json	10	"details": "### Summary\nThe OpenRemote IoT platform's rules engine contains two interrelated critical expression inje	CODE
MEDIUM⚡	…d/2026/05/GHSA-pmwg-cvhr-8vh7/GHSA-pmwg-cvhr-8vh7.json	10	"details": "1. Executive Summary\nThis report documents an incomplete security patch for the previously disclo	CODE
MEDIUM⚡	…d/2026/05/GHSA-pmwg-cvhr-8vh7/GHSA-pmwg-cvhr-8vh7.json	10	"details": "1. Executive Summary\nThis report documents an incomplete security patch for the previously disclo	CODE
MEDIUM⚡	…d/2026/05/GHSA-f396-4rp4-7v2j/GHSA-f396-4rp4-7v2j.json	10	"details": "#### Summary\n\nBoxlite is a sandbox service that allows users to create lightweight virtual machines (Box	CODE
MEDIUM⚡	…d/2026/05/GHSA-f396-4rp4-7v2j/GHSA-f396-4rp4-7v2j.json	10	"details": "#### Summary\n\nBoxlite is a sandbox service that allows users to create lightweight virtual machines (Box	CODE
MEDIUM⚡	…d/2026/05/GHSA-6447-269v-g68m/GHSA-6447-269v-g68m.json	8	"details": "Note: the fixed version of the validator client has been deployed for some time.\n\n### Impact\n\nPote	CODE
MEDIUM⚡	…d/2026/05/GHSA-6447-269v-g68m/GHSA-6447-269v-g68m.json	8	"details": "Note: the fixed version of the validator client has been deployed for some time.\n\n### Impact\n\nPote	CODE
MEDIUM	…d/2026/05/GHSA-9qpr-vc49-hqg2/GHSA-9qpr-vc49-hqg2.json	10	"details": "### Summary\nA gym trainer can escalate their session to any higher-privileged account (gym manager, gener	CODE
MEDIUM	…d/2026/05/GHSA-9qpr-vc49-hqg2/GHSA-9qpr-vc49-hqg2.json	10	"details": "### Summary\nA gym trainer can escalate their session to any higher-privileged account (gym manager, gener	CODE
MEDIUM	…d/2026/02/GHSA-wj8p-jj64-h7ff/GHSA-wj8p-jj64-h7ff.json	10	"details": "# Arbitrary WASM Code Execution via AnnotationOverrideFlight Injection in Yoke ATC\n\nThis vulnerability e	CODE
MEDIUM	…d/2026/02/GHSA-wj8p-jj64-h7ff/GHSA-wj8p-jj64-h7ff.json	10	"details": "# Arbitrary WASM Code Execution via AnnotationOverrideFlight Injection in Yoke ATC\n\nThis vulnerability e	CODE
MEDIUM	…d/2026/02/GHSA-xxh2-68g9-8jqr/GHSA-xxh2-68g9-8jqr.json	10	"details": "# Report of SQL Injection Vulnerability in Ormar ORM\n\n## A SQL Injection attack can be achieved by passi	CODE
MEDIUM	…d/2026/02/GHSA-xxh2-68g9-8jqr/GHSA-xxh2-68g9-8jqr.json	10	"details": "# Report of SQL Injection Vulnerability in Ormar ORM\n\n## A SQL Injection attack can be achieved by passi	CODE
MEDIUM⚡	…d/2026/10/GHSA-w9x9-j56r-h98r/GHSA-w9x9-j56r-h98r.json	8	"details": "## Unauthenticated Danswer API Confused Deputy Proxy in @eeacms/volto-chatbot\n\n### Summary\n\n`@eeacms/v	CODE
MEDIUM⚡	…d/2026/10/GHSA-w9x9-j56r-h98r/GHSA-w9x9-j56r-h98r.json	8	"details": "## Unauthenticated Danswer API Confused Deputy Proxy in @eeacms/volto-chatbot\n\n### Summary\n\n`@eeacms/v	CODE
MEDIUM	…d/2026/10/GHSA-cr65-55v9-xhvv/GHSA-cr65-55v9-xhvv.json	10	"details": "### Summary\n\n`dio_http2_adapter` follows HTTP `Location` redirects without stripping sensitive request h	CODE
MEDIUM	…d/2026/10/GHSA-cr65-55v9-xhvv/GHSA-cr65-55v9-xhvv.json	10	"details": "### Summary\n\n`dio_http2_adapter` follows HTTP `Location` redirects without stripping sensitive request h	CODE
MEDIUM⚡	…d/2026/10/GHSA-4mfg-r38w-w8fg/GHSA-4mfg-r38w-w8fg.json	8	"details": "## URL sanitizer allows localhost/IPv6 loopback SSRF bypass via explicit port or bracketed IPv6\n\n### Sum	CODE
MEDIUM⚡	…d/2026/10/GHSA-4mfg-r38w-w8fg/GHSA-4mfg-r38w-w8fg.json	8	"details": "## URL sanitizer allows localhost/IPv6 loopback SSRF bypass via explicit port or bracketed IPv6\n\n### Sum	CODE
MEDIUM	…d/2026/07/GHSA-3735-5339-xfwx/GHSA-3735-5339-xfwx.json	10	"details": "### Summary\nPoweradmin v4.3.2 uses the attacker-controlled `HTTP_HOST` request header as the\n authorita	CODE
MEDIUM	…d/2026/07/GHSA-3735-5339-xfwx/GHSA-3735-5339-xfwx.json	10	"details": "### Summary\nPoweradmin v4.3.2 uses the attacker-controlled `HTTP_HOST` request header as the\n authorita	CODE
MEDIUM	…d/2026/07/GHSA-x9vc-9ffq-p3gj/GHSA-x9vc-9ffq-p3gj.json	10	"details": "## Unauthenticated Use of Server-Side NetLicensing API Key in HTTP Mode\n\n### Summary\n\nWhen `netlicensi	CODE
MEDIUM	…d/2026/07/GHSA-x9vc-9ffq-p3gj/GHSA-x9vc-9ffq-p3gj.json	10	"details": "## Unauthenticated Use of Server-Side NetLicensing API Key in HTTP Mode\n\n### Summary\n\nWhen `netlicensi	CODE
MEDIUM	…d/2026/07/GHSA-9hc2-hjx8-q6pv/GHSA-9hc2-hjx8-q6pv.json	8	"details": "## Description\n\nTidGi Desktop through 0.13.0 contains a critical remote code execution vulnerability exp	CODE
MEDIUM	…d/2026/07/GHSA-9hc2-hjx8-q6pv/GHSA-9hc2-hjx8-q6pv.json	8	"details": "## Description\n\nTidGi Desktop through 0.13.0 contains a critical remote code execution vulnerability exp	CODE
MEDIUM	…d/2026/07/GHSA-4xjf-493q-98p3/GHSA-4xjf-493q-98p3.json	10	"details": "Gitea's SSH key ingestion endpoint accepts keys in RFC 4716 (SSH2) format and normalises them before stora	CODE
MEDIUM	…d/2026/07/GHSA-4xjf-493q-98p3/GHSA-4xjf-493q-98p3.json	10	"details": "Gitea's SSH key ingestion endpoint accepts keys in RFC 4716 (SSH2) format and normalises them before stora	CODE
MEDIUM	…d/2026/07/GHSA-qw5r-ppcg-f8rj/GHSA-qw5r-ppcg-f8rj.json	10	"details": "## Unbounded Pod Log Read via Attacker-Controlled `limitBytes`/`tailLines` Causes Memory Exhaustion\n\n###	CODE
MEDIUM	…d/2026/07/GHSA-qw5r-ppcg-f8rj/GHSA-qw5r-ppcg-f8rj.json	10	"details": "## Unbounded Pod Log Read via Attacker-Controlled `limitBytes`/`tailLines` Causes Memory Exhaustion\n\n###	CODE
MEDIUM⚡	…d/2026/07/GHSA-45gf-fjxp-cjpq/GHSA-45gf-fjxp-cjpq.json	10	"details": "## Server-Side Request Forgery (SSRF) in `upload_ad_image` via Unrestricted `image_url` Fetch\n\n### Summa	CODE
MEDIUM⚡	…d/2026/07/GHSA-45gf-fjxp-cjpq/GHSA-45gf-fjxp-cjpq.json	10	"details": "## Server-Side Request Forgery (SSRF) in `upload_ad_image` via Unrestricted `image_url` Fetch\n\n### Summa	CODE
MEDIUM⚡	…d/2026/07/GHSA-2c7f-fxww-6w6c/GHSA-2c7f-fxww-6w6c.json	10	"details": "## Arbitrary File Write via MCP `caption-download` Tool\n\n### Summary\n\nThe `caption-download` MCP tool	CODE
52 more matches not shown…

Structural Annotation Overuse216 hits · 241 pts

Severity	File	Line	Snippet	Context
LOW⚡	…d/2025/03/GHSA-h42x-xx2q-6v6g/GHSA-h42x-xx2q-6v6g.json	8	"details": "## Summary\nAn unauthorized attacker can leverage the whitelisted route `/api/v1/attachments` to upload ar	CODE
LOW⚡	…d/2025/04/GHSA-93mv-x874-956g/GHSA-93mv-x874-956g.json	10	"details": "### Summary\n\nPicklescan does not detect malicious pickles that exfiltrate sensitive information via DNS	CODE
LOW	…d/2025/07/GHSA-fm6c-f59h-7mmg/GHSA-fm6c-f59h-7mmg.json	10	"details": "## Description\n\nA Remote Code Execution (RCE) vulnerability exists in the [modelscope/ms-swift](https://	CODE
LOW	…d/2025/07/GHSA-4v6w-xpmh-gfgp/GHSA-4v6w-xpmh-gfgp.json	10	"details": "## Summary\n\nAn inconsistency in `MethodNode` can be exploited to access unexpected object fields through	CODE
LOW⚡	…d/2025/09/GHSA-23hg-53q6-hqfg/GHSA-23hg-53q6-hqfg.json	10	"details": "Reporter: Lumina Mescuwa \nProduct: ImageMagick 7 (MagickCore) \nComponent: `MagickCore/blob	CODE
LOW	…d/2025/12/GHSA-43p4-m455-4f4j/GHSA-43p4-m455-4f4j.json	10	"details": "> Note that this vulnerability is only present when using `experimental_caller` / `experimental_nextAppDir	CODE
LOW	…d/2025/12/GHSA-g239-q96q-x4qm/GHSA-g239-q96q-x4qm.json	10	"details": "## Summary\n\nThe `/__vite_rsc_findSourceMapURL` endpoint in `@vitejs/plugin-rsc` allows **unauthenticated	CODE
LOW⚡	…d/2025/12/GHSA-9pf3-7rrr-x5jh/GHSA-9pf3-7rrr-x5jh.json	10	"details": "## Summary\n\nAn insecure deserialization vulnerability exists in lmdeploy where `torch.load()` is called	CODE
LOW	…d/2025/12/GHSA-8wvc-869r-xfqf/GHSA-8wvc-869r-xfqf.json	10	"details": "## Summary\n\nA Stored XSS vulnerability has been discovered in Open-WebUI's Notes PDF download functi	CODE
LOW	…d/2025/12/GHSA-h956-rh7x-ppgj/GHSA-h956-rh7x-ppgj.json	10	"details": "## Vulnerability Overview\n\n### Description\n\nRustFS implements gRPC authentication using a hardcoded st	CODE
LOW	…d/2025/12/GHSA-9c54-gxh7-ppjc/GHSA-9c54-gxh7-ppjc.json	10	"details": "## Summary\n\nThe download service (`download_service.py`) makes HTTP requests using raw `requests.get()`	CODE
LOW	…d/2026/03/GHSA-77jp-mgcw-rfmr/GHSA-77jp-mgcw-rfmr.json	10	"details": "Severity: High\nCWE: CWE-862 (Missing Authorization)\n\n### Summary\n\nThe `plugin/YPTWallet/view/	CODE
LOW⚡	…d/2026/03/GHSA-25g8-2mcf-fcx9/GHSA-25g8-2mcf-fcx9.json	10	"details": "### Summary\nA Zip Slip vulnerability in the backup restore functionality allows arbitrary file overwrite	CODE
LOW	…d/2026/03/GHSA-9ffx-f77r-756w/GHSA-9ffx-f77r-756w.json	10	"details": "### Impact\n`CurrencySwitchController::switchAction()`, `ImpersonateUserController::impersonateAction()` a	CODE
LOW	…d/2026/03/GHSA-8w32-6mrw-q5wv/GHSA-8w32-6mrw-q5wv.json	10	"details": "## Summary\n\nA critical Remote Code Execution (RCE) vulnerability exists in the application's database qu	CODE
LOW⚡	…d/2026/03/GHSA-vwmf-pq79-vjvx/GHSA-vwmf-pq79-vjvx.json	10	"details": "## Summary\n\nThe `POST /api/v1/build_public_tmp/{flow_id}/flow` endpoint allows building public flows wit	CODE
LOW	…d/2026/03/GHSA-p5g2-jm85-8g35/GHSA-p5g2-jm85-8g35.json	10	"details": "### Summary\n\nThe telemetry aggregation API accepts user-controlled `aggregationType`, `aggregateColumnNa	CODE
LOW	…d/2026/03/GHSA-4wmm-6qxj-fpj4/GHSA-4wmm-6qxj-fpj4.json	10	"details": "## Summary\n\nThe `listFiles.json.php` endpoint accepts a `path` POST parameter and passes it directly to	CODE
LOW	…d/2026/03/GHSA-7fv4-fmmc-86g2/GHSA-7fv4-fmmc-86g2.json	10	"details": "# Shell Command Injection in User Git Config Endpoint\n\n\| Field \| Value \|\n\|-------\|-------\|\n\| **Severit	CODE
LOW	…d/2026/03/GHSA-6q6h-j7hj-3r64/GHSA-6q6h-j7hj-3r64.json	10	"details": "### Summary\n\nA code injection vulnerability in `ECMAScriptModuleCompiler` allows an attacker to achieve	CODE
LOW	…d/2026/03/GHSA-2pv8-4c52-mf8j/GHSA-2pv8-4c52-mf8j.json	8	"details": "## Summary\n\nTwo independently-exploitable authorization flaws in Vikunja can be chained to allow an unau	CODE
LOW⚡	…d/2026/03/GHSA-vx5f-957p-qpvm/GHSA-vx5f-957p-qpvm.json	10	"details": "## Summary\n\nIn Central Browser mode, Glances stores both the Zeroconf-advertised server name and the dis	CODE
LOW	…d/2026/03/GHSA-3298-56p6-rpw2/GHSA-3298-56p6-rpw2.json	10	"details": "> Fixed in OpenClaw 2026.3.24, the current shipping release.\n\n### Advisory Details\nTitle: Incomplet	CODE
LOW	…d/2026/03/GHSA-3x67-4c2c-w45m/GHSA-3x67-4c2c-w45m.json	10	"details": "## Summary\n\nThe MyList configuration feature in Admidio allows authenticated users to define custom list	CODE
LOW	…d/2026/03/GHSA-q6jj-r49p-94fh/GHSA-q6jj-r49p-94fh.json	10	"details": "## Summary\n\nThe `get_api_video_file` and `get_api_video` API endpoints in AVideo return full video playb	CODE
LOW	…d/2026/03/GHSA-mq4r-h2gh-qv7x/GHSA-mq4r-h2gh-qv7x.json	10	"details": "## Summary\n\n**A Mass Assignment vulnerability in the `/api/v1/leads` endpoint allows any unauthenticated	CODE
LOW	…d/2026/03/GHSA-h54m-c522-h6qr/GHSA-h54m-c522-h6qr.json	10	"details": "## Summary\n\nThe `transferBalance()` method in `plugin/YPTWallet/YPTWallet.php` contains a Time-of-Check-	CODE
LOW	…d/2026/03/GHSA-2qvq-rjwj-gvw9/GHSA-2qvq-rjwj-gvw9.json	10	"details": "## Summary\n\n`resolvePartial()` in the Handlebars runtime resolves partial names via a plain property loo	CODE
LOW	…d/2026/03/GHSA-r297-p3v4-wp8m/GHSA-r297-p3v4-wp8m.json	10	"details": "## Summary\n\nIn Central Browser mode, the `/api/4/serverslist` endpoint returns raw server objects from `	CODE
LOW	…d/2026/03/GHSA-pmj8-r2j7-xg6c/GHSA-pmj8-r2j7-xg6c.json	10	"details": "## Summary\n\nThe `sanitizeFFmpegCommand()` function in `plugin/API/standAlone/functions.php` is designed	CODE
LOW	…d/2026/03/GHSA-j8g8-j7fc-43v6/GHSA-j8g8-j7fc-43v6.json	10	"details": "### Vulnerability Description\n\n---\n\nVulnerability Overview\n \n- The `/api/v1/attachments/:cha	CODE
LOW⚡	…d/2026/03/GHSA-4663-4mpg-879v/GHSA-4663-4mpg-879v.json	10	"details": "# Stored XSS to RCE via Unsanitized Bazaar README Rendering\n\n## Summary\n\nSiYuan's Bazaar (community ma	CODE
LOW	…d/2026/03/GHSA-gv8f-wpm2-m5wr/GHSA-gv8f-wpm2-m5wr.json	10	"details": "# Security Advisory: Insecure Default JWT Secret + WebSocket Auth Bypass Enables Unauthenticated RCE via S	CODE
LOW⚡	…d/2026/03/GHSA-v467-g7g7-hhfh/GHSA-v467-g7g7-hhfh.json	10	"details": "## Summary\n\nThe Scheduler plugin's `run()` function in `plugin/Scheduler/Scheduler.php` calls `url_get_c	CODE
LOW⚡	…d/2026/03/GHSA-x3pr-vrhq-vq43/GHSA-x3pr-vrhq-vq43.json	10	"details": "## Summary\n\nAVideo's `_session_start()` function accepts arbitrary session IDs via the `PHPSESSID` GET p	CODE
LOW	…d/2026/03/GHSA-vv7q-7jx5-f767/GHSA-vv7q-7jx5-f767.json	10	"details": "## Technical Description\n\nThe `OpenAPIProvider` in FastMCP exposes internal APIs to MCP clients by parsi	CODE
LOW	…d/2026/03/GHSA-x8jc-jvqm-pm3f/GHSA-x8jc-jvqm-pm3f.json	10	"details": "## Summary\n\nThe `signupHandler` in File Browser applies default user permissions via `d.settings.Default	CODE
LOW	…d/2026/03/GHSA-rc55-58f4-687g/GHSA-rc55-58f4-687g.json	10	"details": "This vulnerability allows an authenticated attacker to read any file on the server's local file system tha	CODE
LOW	…d/2026/03/GHSA-h7cj-j2vv-qw8r/GHSA-h7cj-j2vv-qw8r.json	10	"details": "### Summary\n\n`wisp.serve_static` is vulnerable to arbitrary file read via percent-encoded path traversal	CODE
LOW	…d/2026/03/GHSA-g3hj-mf85-679g/GHSA-g3hj-mf85-679g.json	10	"details": "## Summary\n\nThe `plugin/Live/uploadPoster.php` endpoint allows any authenticated user to overwrite the p	CODE
LOW	…d/2026/03/GHSA-687q-32c6-8x68/GHSA-687q-32c6-8x68.json	10	"details": "## Summary\n\nMultiple vulnerabilities in AVideo's CloneSite plugin chain together to allow a completely u	CODE
LOW	…d/2026/03/GHSA-83xq-8jxj-4rxm/GHSA-83xq-8jxj-4rxm.json	10	"details": "## Summary\n\nThe `objects/import.json.php` endpoint accepts a user-controlled `fileURI` POST parameter wi	CODE
LOW⚡	…d/2026/03/GHSA-m4q3-457p-hh2x/GHSA-m4q3-457p-hh2x.json	10	"details": "## 1. Vulnerability Summary\n\nThe `dagRunId` request field accepted by the inline DAG execution endpoints	CODE
LOW	…d/2026/03/GHSA-wvwj-cvrp-7pv5/GHSA-wvwj-cvrp-7pv5.json	10	"details": "## Description\n\n### Summary\n\nA JWK Header Injection vulnerability in `authlib`'s JWS implementation al	CODE
LOW	…d/2026/03/GHSA-mvpm-v6q4-m2pf/GHSA-mvpm-v6q4-m2pf.json	10	"details": "# Stored XSS to RCE via Unsanitized Bazaar Package Metadata\n\n## Summary\n\nSiYuan's Bazaar (community ma	CODE
LOW	…d/2026/03/GHSA-68p4-j234-43mv/GHSA-68p4-j234-43mv.json	10	"details": "### Summary\n\nA malicious website can achieve Remote Code Execution (RCE) on any desktop running SiYuan b	CODE
LOW	…d/2026/03/GHSA-p3gr-g84w-g8hh/GHSA-p3gr-g84w-g8hh.json	10	"details": "## Summary\n\nThe `isSSRFSafeURL()` function in AVideo can be bypassed using IPv4-mapped IPv6 addresses (`	CODE
LOW⚡	…d/2026/03/GHSA-33mp-8p67-xj7c/GHSA-33mp-8p67-xj7c.json	10	"details": "## Summary\n\nA typo in Froxlor's input validation code (`==` instead of `=`) completely disables email fo	CODE
LOW	…d/2026/03/GHSA-2mg4-pfgx-64cf/GHSA-2mg4-pfgx-64cf.json	10	"details": "## Summary\n\nThe `verifyTokenSocket()` function in `plugin/YPTSocket/functions.php` has its token timeout	CODE
LOW	…d/2026/03/GHSA-4j3x-hhg2-fm2x/GHSA-4j3x-hhg2-fm2x.json	10	"details": "### Summary\n`POST /api/template/renderSprig` lacks `model.CheckAdminRole`, allowing any authenticated use	CODE
LOW	…d/2026/03/GHSA-2rm7-j397-3fqg/GHSA-2rm7-j397-3fqg.json	10	"details": "## Summary\n\nThe `plugin/PlayLists/View/Playlists_schedules/add.json.php` endpoint allows any authenticat	CODE
LOW⚡	…d/2026/04/GHSA-m2cx-gpqf-qf74/GHSA-m2cx-gpqf-qf74.json	10	"details": "## Summary\n\nThe HTTP resolver's `FetchHttpResource` function calls `io.ReadAll(resp.Body)` with no respo	CODE
LOW	…d/2026/04/GHSA-v9w4-gm2x-6rvf/GHSA-v9w4-gm2x-6rvf.json	10	"details": "When an admin revokes a user's Share and Download permissions, existing share links created by that user r	CODE
LOW	…d/2026/04/GHSA-wr32-99hh-6f35/GHSA-wr32-99hh-6f35.json	10	"details": "### Summary\n\nAn authenticated user can perform Server-Side Request Forgery (SSRF) by creating a cluster	CODE
LOW	…d/2026/04/GHSA-ccq9-r5cw-5hwq/GHSA-ccq9-r5cw-5hwq.json	10	"details": "## Summary\n\nThe `allowOrigin($allowAll=true)` function in `objects/functions.php` reflects any arbitrary	CODE
LOW	…d/2026/04/GHSA-mrxx-39g5-ph77/GHSA-mrxx-39g5-ph77.json	10	"details": "## 1. Executive Summary\n\nA vulnerability has been found in Dgraph that gives an unauthenticated attacker	CODE
LOW	…d/2026/04/GHSA-q5r4-47m9-5mc7/GHSA-q5r4-47m9-5mc7.json	10	"details": "## Summary\n\nThe `/media-stream` WebSocket endpoint in PraisonAI's call module accepts connections from a	CODE
LOW⚡	…d/2026/04/GHSA-5hr4-253g-cpx2/GHSA-5hr4-253g-cpx2.json	10	"details": "## Summary\n\nweb3.py implements CCIP Read / `OffchainLookup` (EIP-3668) by performing HTTP requests to UR	CODE
LOW	…d/2026/04/GHSA-hg73-4w7g-q96w/GHSA-hg73-4w7g-q96w.json	10	"details": "## Description\n\nA scope modification vulnerability exists in `@nyariv/sandboxjs` version 0.8.35 and belo	CODE
LOW⚡	…d/2026/04/GHSA-mvf2-f6gm-w987/GHSA-mvf2-f6gm-w987.json	10	"details": "### Summary\n The fix for GHSA-c2ff-88x2-x9pg (CVE-2023-48223) is incomplete. The publicKeyPemMatcher rege	CODE
156 more matches not shown…

Verbosity Indicators213 hits · 237 pts

Severity	File	Line	Snippet	Context
LOW	…d/2024/11/GHSA-5ggj-xwvc-9x57/GHSA-5ggj-xwvc-9x57.json	9	"details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/mediatek: Fix potential NULL de	CODE
LOW	…d/2026/02/GHSA-g782-c42f-q4q3/GHSA-g782-c42f-q4q3.json	9	"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvmet-tcp: fixup hang in nvmet_tcp_	CODE
LOW	…d/2026/08/GHSA-2vh7-793m-f7hf/GHSA-2vh7-793m-f7hf.json	9	"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: skip global block reserve ac	CODE
LOW⚡	…d/2025/03/GHSA-h42x-xx2q-6v6g/GHSA-h42x-xx2q-6v6g.json	8	"details": "## Summary\nAn unauthorized attacker can leverage the whitelisted route `/api/v1/attachments` to upload ar	CODE
LOW⚡	…d/2025/04/GHSA-93mv-x874-956g/GHSA-93mv-x874-956g.json	10	"details": "### Summary\n\nPicklescan does not detect malicious pickles that exfiltrate sensitive information via DNS	CODE
LOW	…d/2025/07/GHSA-fm6c-f59h-7mmg/GHSA-fm6c-f59h-7mmg.json	10	"details": "## Description\n\nA Remote Code Execution (RCE) vulnerability exists in the [modelscope/ms-swift](https://	CODE
LOW	…d/2025/07/GHSA-4v6w-xpmh-gfgp/GHSA-4v6w-xpmh-gfgp.json	10	"details": "## Summary\n\nAn inconsistency in `MethodNode` can be exploited to access unexpected object fields through	CODE
LOW⚡	…d/2025/09/GHSA-23hg-53q6-hqfg/GHSA-23hg-53q6-hqfg.json	10	"details": "Reporter: Lumina Mescuwa \nProduct: ImageMagick 7 (MagickCore) \nComponent: `MagickCore/blob	CODE
LOW	…d/2025/12/GHSA-43p4-m455-4f4j/GHSA-43p4-m455-4f4j.json	10	"details": "> Note that this vulnerability is only present when using `experimental_caller` / `experimental_nextAppDir	CODE
LOW	…d/2025/12/GHSA-g239-q96q-x4qm/GHSA-g239-q96q-x4qm.json	10	"details": "## Summary\n\nThe `/__vite_rsc_findSourceMapURL` endpoint in `@vitejs/plugin-rsc` allows **unauthenticated	CODE
LOW⚡	…d/2025/12/GHSA-9pf3-7rrr-x5jh/GHSA-9pf3-7rrr-x5jh.json	10	"details": "## Summary\n\nAn insecure deserialization vulnerability exists in lmdeploy where `torch.load()` is called	CODE
LOW	…d/2025/12/GHSA-8wvc-869r-xfqf/GHSA-8wvc-869r-xfqf.json	10	"details": "## Summary\n\nA Stored XSS vulnerability has been discovered in Open-WebUI's Notes PDF download functi	CODE
LOW	…d/2025/12/GHSA-h956-rh7x-ppgj/GHSA-h956-rh7x-ppgj.json	10	"details": "## Vulnerability Overview\n\n### Description\n\nRustFS implements gRPC authentication using a hardcoded st	CODE
LOW	…d/2025/12/GHSA-9c54-gxh7-ppjc/GHSA-9c54-gxh7-ppjc.json	10	"details": "## Summary\n\nThe download service (`download_service.py`) makes HTTP requests using raw `requests.get()`	CODE
LOW	…d/2024/08/GHSA-wh2w-39f4-rpv2/GHSA-wh2w-39f4-rpv2.json	10	"details": "# Name\nUpdating a DID with a nym transaction will be written to the ledger if neither ROLE or VERKEY are	CODE
LOW	…d/2026/03/GHSA-77jp-mgcw-rfmr/GHSA-77jp-mgcw-rfmr.json	10	"details": "Severity: High\nCWE: CWE-862 (Missing Authorization)\n\n### Summary\n\nThe `plugin/YPTWallet/view/	CODE
LOW⚡	…d/2026/03/GHSA-25g8-2mcf-fcx9/GHSA-25g8-2mcf-fcx9.json	10	"details": "### Summary\nA Zip Slip vulnerability in the backup restore functionality allows arbitrary file overwrite	CODE
LOW	…d/2026/03/GHSA-8w32-6mrw-q5wv/GHSA-8w32-6mrw-q5wv.json	10	"details": "## Summary\n\nA critical Remote Code Execution (RCE) vulnerability exists in the application's database qu	CODE
LOW⚡	…d/2026/03/GHSA-vwmf-pq79-vjvx/GHSA-vwmf-pq79-vjvx.json	10	"details": "## Summary\n\nThe `POST /api/v1/build_public_tmp/{flow_id}/flow` endpoint allows building public flows wit	CODE
LOW	…d/2026/03/GHSA-p5g2-jm85-8g35/GHSA-p5g2-jm85-8g35.json	10	"details": "### Summary\n\nThe telemetry aggregation API accepts user-controlled `aggregationType`, `aggregateColumnNa	CODE
LOW	…d/2026/03/GHSA-4wmm-6qxj-fpj4/GHSA-4wmm-6qxj-fpj4.json	10	"details": "## Summary\n\nThe `listFiles.json.php` endpoint accepts a `path` POST parameter and passes it directly to	CODE
LOW	…d/2026/03/GHSA-7fv4-fmmc-86g2/GHSA-7fv4-fmmc-86g2.json	10	"details": "# Shell Command Injection in User Git Config Endpoint\n\n\| Field \| Value \|\n\|-------\|-------\|\n\| **Severit	CODE
LOW	…d/2026/03/GHSA-6q6h-j7hj-3r64/GHSA-6q6h-j7hj-3r64.json	10	"details": "### Summary\n\nA code injection vulnerability in `ECMAScriptModuleCompiler` allows an attacker to achieve	CODE
LOW	…d/2026/03/GHSA-2pv8-4c52-mf8j/GHSA-2pv8-4c52-mf8j.json	8	"details": "## Summary\n\nTwo independently-exploitable authorization flaws in Vikunja can be chained to allow an unau	CODE
LOW⚡	…d/2026/03/GHSA-vx5f-957p-qpvm/GHSA-vx5f-957p-qpvm.json	10	"details": "## Summary\n\nIn Central Browser mode, Glances stores both the Zeroconf-advertised server name and the dis	CODE
LOW	…d/2026/03/GHSA-3298-56p6-rpw2/GHSA-3298-56p6-rpw2.json	10	"details": "> Fixed in OpenClaw 2026.3.24, the current shipping release.\n\n### Advisory Details\nTitle: Incomplet	CODE
LOW	…d/2026/03/GHSA-3x67-4c2c-w45m/GHSA-3x67-4c2c-w45m.json	10	"details": "## Summary\n\nThe MyList configuration feature in Admidio allows authenticated users to define custom list	CODE
LOW	…d/2026/03/GHSA-q6jj-r49p-94fh/GHSA-q6jj-r49p-94fh.json	10	"details": "## Summary\n\nThe `get_api_video_file` and `get_api_video` API endpoints in AVideo return full video playb	CODE
LOW	…d/2026/03/GHSA-mq4r-h2gh-qv7x/GHSA-mq4r-h2gh-qv7x.json	10	"details": "## Summary\n\n**A Mass Assignment vulnerability in the `/api/v1/leads` endpoint allows any unauthenticated	CODE
LOW	…d/2026/03/GHSA-h54m-c522-h6qr/GHSA-h54m-c522-h6qr.json	10	"details": "## Summary\n\nThe `transferBalance()` method in `plugin/YPTWallet/YPTWallet.php` contains a Time-of-Check-	CODE
LOW	…d/2026/03/GHSA-2qvq-rjwj-gvw9/GHSA-2qvq-rjwj-gvw9.json	10	"details": "## Summary\n\n`resolvePartial()` in the Handlebars runtime resolves partial names via a plain property loo	CODE
LOW	…d/2026/03/GHSA-r297-p3v4-wp8m/GHSA-r297-p3v4-wp8m.json	10	"details": "## Summary\n\nIn Central Browser mode, the `/api/4/serverslist` endpoint returns raw server objects from `	CODE
LOW	…d/2026/03/GHSA-pmj8-r2j7-xg6c/GHSA-pmj8-r2j7-xg6c.json	10	"details": "## Summary\n\nThe `sanitizeFFmpegCommand()` function in `plugin/API/standAlone/functions.php` is designed	CODE
LOW	…d/2026/03/GHSA-j8g8-j7fc-43v6/GHSA-j8g8-j7fc-43v6.json	10	"details": "### Vulnerability Description\n\n---\n\nVulnerability Overview\n \n- The `/api/v1/attachments/:cha	CODE
LOW⚡	…d/2026/03/GHSA-4663-4mpg-879v/GHSA-4663-4mpg-879v.json	10	"details": "# Stored XSS to RCE via Unsanitized Bazaar README Rendering\n\n## Summary\n\nSiYuan's Bazaar (community ma	CODE
LOW	…d/2026/03/GHSA-gv8f-wpm2-m5wr/GHSA-gv8f-wpm2-m5wr.json	10	"details": "# Security Advisory: Insecure Default JWT Secret + WebSocket Auth Bypass Enables Unauthenticated RCE via S	CODE
LOW⚡	…d/2026/03/GHSA-v467-g7g7-hhfh/GHSA-v467-g7g7-hhfh.json	10	"details": "## Summary\n\nThe Scheduler plugin's `run()` function in `plugin/Scheduler/Scheduler.php` calls `url_get_c	CODE
LOW⚡	…d/2026/03/GHSA-x3pr-vrhq-vq43/GHSA-x3pr-vrhq-vq43.json	10	"details": "## Summary\n\nAVideo's `_session_start()` function accepts arbitrary session IDs via the `PHPSESSID` GET p	CODE
LOW	…d/2026/03/GHSA-vv7q-7jx5-f767/GHSA-vv7q-7jx5-f767.json	10	"details": "## Technical Description\n\nThe `OpenAPIProvider` in FastMCP exposes internal APIs to MCP clients by parsi	CODE
LOW	…d/2026/03/GHSA-x8jc-jvqm-pm3f/GHSA-x8jc-jvqm-pm3f.json	10	"details": "## Summary\n\nThe `signupHandler` in File Browser applies default user permissions via `d.settings.Default	CODE
LOW	…d/2026/03/GHSA-rc55-58f4-687g/GHSA-rc55-58f4-687g.json	10	"details": "This vulnerability allows an authenticated attacker to read any file on the server's local file system tha	CODE
LOW	…d/2026/03/GHSA-h7cj-j2vv-qw8r/GHSA-h7cj-j2vv-qw8r.json	10	"details": "### Summary\n\n`wisp.serve_static` is vulnerable to arbitrary file read via percent-encoded path traversal	CODE
LOW	…d/2026/03/GHSA-g3hj-mf85-679g/GHSA-g3hj-mf85-679g.json	10	"details": "## Summary\n\nThe `plugin/Live/uploadPoster.php` endpoint allows any authenticated user to overwrite the p	CODE
LOW	…d/2026/03/GHSA-687q-32c6-8x68/GHSA-687q-32c6-8x68.json	10	"details": "## Summary\n\nMultiple vulnerabilities in AVideo's CloneSite plugin chain together to allow a completely u	CODE
LOW	…d/2026/03/GHSA-83xq-8jxj-4rxm/GHSA-83xq-8jxj-4rxm.json	10	"details": "## Summary\n\nThe `objects/import.json.php` endpoint accepts a user-controlled `fileURI` POST parameter wi	CODE
LOW⚡	…d/2026/03/GHSA-m4q3-457p-hh2x/GHSA-m4q3-457p-hh2x.json	10	"details": "## 1. Vulnerability Summary\n\nThe `dagRunId` request field accepted by the inline DAG execution endpoints	CODE
LOW	…d/2026/03/GHSA-wvwj-cvrp-7pv5/GHSA-wvwj-cvrp-7pv5.json	10	"details": "## Description\n\n### Summary\n\nA JWK Header Injection vulnerability in `authlib`'s JWS implementation al	CODE
LOW	…d/2026/03/GHSA-mvpm-v6q4-m2pf/GHSA-mvpm-v6q4-m2pf.json	10	"details": "# Stored XSS to RCE via Unsanitized Bazaar Package Metadata\n\n## Summary\n\nSiYuan's Bazaar (community ma	CODE
LOW	…d/2026/03/GHSA-68p4-j234-43mv/GHSA-68p4-j234-43mv.json	10	"details": "### Summary\n\nA malicious website can achieve Remote Code Execution (RCE) on any desktop running SiYuan b	CODE
LOW	…d/2026/03/GHSA-p3gr-g84w-g8hh/GHSA-p3gr-g84w-g8hh.json	10	"details": "## Summary\n\nThe `isSSRFSafeURL()` function in AVideo can be bypassed using IPv4-mapped IPv6 addresses (`	CODE
LOW⚡	…d/2026/03/GHSA-33mp-8p67-xj7c/GHSA-33mp-8p67-xj7c.json	10	"details": "## Summary\n\nA typo in Froxlor's input validation code (`==` instead of `=`) completely disables email fo	CODE
LOW	…d/2026/03/GHSA-2mg4-pfgx-64cf/GHSA-2mg4-pfgx-64cf.json	10	"details": "## Summary\n\nThe `verifyTokenSocket()` function in `plugin/YPTSocket/functions.php` has its token timeout	CODE
LOW	…d/2026/03/GHSA-4j3x-hhg2-fm2x/GHSA-4j3x-hhg2-fm2x.json	10	"details": "### Summary\n`POST /api/template/renderSprig` lacks `model.CheckAdminRole`, allowing any authenticated use	CODE
LOW	…d/2026/03/GHSA-2rm7-j397-3fqg/GHSA-2rm7-j397-3fqg.json	10	"details": "## Summary\n\nThe `plugin/PlayLists/View/Playlists_schedules/add.json.php` endpoint allows any authenticat	CODE
LOW⚡	…d/2026/04/GHSA-m2cx-gpqf-qf74/GHSA-m2cx-gpqf-qf74.json	10	"details": "## Summary\n\nThe HTTP resolver's `FetchHttpResource` function calls `io.ReadAll(resp.Body)` with no respo	CODE
LOW	…d/2026/04/GHSA-v9w4-gm2x-6rvf/GHSA-v9w4-gm2x-6rvf.json	10	"details": "When an admin revokes a user's Share and Download permissions, existing share links created by that user r	CODE
LOW	…d/2026/04/GHSA-wr32-99hh-6f35/GHSA-wr32-99hh-6f35.json	10	"details": "### Summary\n\nAn authenticated user can perform Server-Side Request Forgery (SSRF) by creating a cluster	CODE
LOW	…d/2026/04/GHSA-ccq9-r5cw-5hwq/GHSA-ccq9-r5cw-5hwq.json	10	"details": "## Summary\n\nThe `allowOrigin($allowAll=true)` function in `objects/functions.php` reflects any arbitrary	CODE
LOW	…d/2026/04/GHSA-mrxx-39g5-ph77/GHSA-mrxx-39g5-ph77.json	10	"details": "## 1. Executive Summary\n\nA vulnerability has been found in Dgraph that gives an unauthenticated attacker	CODE
LOW	…d/2026/04/GHSA-q5r4-47m9-5mc7/GHSA-q5r4-47m9-5mc7.json	10	"details": "## Summary\n\nThe `/media-stream` WebSocket endpoint in PraisonAI's call module accepts connections from a	CODE
153 more matches not shown…

Hyper-Verbose Identifiers182 hits · 194 pts

Severity	File	Line	Snippet	Context
LOW	…d/2022/05/GHSA-6wx6-w4jp-vgm2/GHSA-6wx6-w4jp-vgm2.json	9	"details": "There is a reachable assertion abort in the function TIFFWriteDirectoryTagSubifd() in LibTIFF 4.0.8, relat	CODE
LOW	…d/2025/05/GHSA-gj42-cfph-mjj4/GHSA-gj42-cfph-mjj4.json	9	"details": "An issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version	CODE
LOW	…d/2026/08/GHSA-2mh5-cmr8-pwvp/GHSA-2mh5-cmr8-pwvp.json	9	"details": "open62541 1.5.5 contains an out-of-bounds read in the client-side function responseReadNamespacesArray() i	CODE
LOW	…d/2022/03/GHSA-mcg6-h362-cmq5/GHSA-mcg6-h362-cmq5.json	10	"details": "### Impact\n\nIf PAM is correctly configured and a user account is set to expired, the expired user-accoun	CODE
LOW	…d/2022/03/GHSA-7563-75j9-6h5p/GHSA-7563-75j9-6h5p.json	10	"details": "### Impact\nAny other user can view the data if the browser tab remains open after logging out. Once someo	CODE
LOW	…d/2022/05/GHSA-qfwq-chf4-jvwg/GHSA-qfwq-chf4-jvwg.json	10	"details": "The karo gem through 2.5.2 for Ruby allows Remote command injection via the host field.\n\nA flaw in `db.r	CODE
LOW	…d/2022/05/GHSA-75c9-jrh4-79mc/GHSA-75c9-jrh4-79mc.json	10	"details": "### Impact\nTensorFlow's `saved_model_cli` tool is vulnerable to a code injection:\n\n```\nsaved_model_cli	CODE
LOW	…d/2025/03/GHSA-hxg4-65p5-9w37/GHSA-hxg4-65p5-9w37.json	10	"details": "A discovered vulnerability allows users to modify their shopping cart after completing the PayPal Checkout	CODE
LOW	…d/2025/03/GHSA-pqq3-q84h-pj6x/GHSA-pqq3-q84h-pj6x.json	10	"details": "A vulnerability allows users to manipulate the final payment amount processed by PayPal. If a user modifie	CODE
LOW	…d/2025/04/GHSA-7v4r-c989-xh26/GHSA-7v4r-c989-xh26.json	10	"details": "### Summary\nThere was an insecure deserialization in BentoML's runner server. By setting specific headers	CODE
LOW	…d/2025/05/GHSA-8jhr-wpcm-hh4h/GHSA-8jhr-wpcm-hh4h.json	10	"details": "### Summary\nThe vulnerability allows an attacker to inject a malicious script into the context of a web p	CODE
LOW	…d/2025/11/GHSA-g2j9-g8r5-rg82/GHSA-g2j9-g8r5-rg82.json	10	"details": "## Summary\n\nAn unauthenticated Local File Inclusion exists in the template-switching feature: if `templa	CODE
LOW	…d/2025/11/GHSA-cm35-v4vp-5xvx/GHSA-cm35-v4vp-5xvx.json	10	"details": "### Summary\nOpen WebUI v0.6.33 and below contains a code injection vulnerability in the Direct Connection	CODE
LOW⚡	…d/2025/11/GHSA-frfh-8v73-gjg4/GHSA-frfh-8v73-gjg4.json	10	"details": "### Summary\nThe `ExceededSizeError` exception messages are embedded with non-decoded JWT token parts and	CODE
LOW	…d/2025/11/GHSA-q279-jhrf-cc6v/GHSA-q279-jhrf-cc6v.json	10	"details": "# Summary\n\nDevelopers working with Ray as a development tool can be exploited via a critical RCE vulnera	CODE
LOW	…d/2025/11/GHSA-r9x7-7ggj-fx9f/GHSA-r9x7-7ggj-fx9f.json	10	"details": "## Summary\n\nDragging a file whose filename contains HTML is reflected verbatim into the page via the dra	CODE
LOW	…d/2025/09/GHSA-6vm5-6jv9-rjpj/GHSA-6vm5-6jv9-rjpj.json	10	"details": "### Summary\nIn ```model_dict = torch.load(full_path, map_location=torch.device(device), weights_only=True	CODE
LOW	…d/2025/12/GHSA-wphj-fx3q-84ch/GHSA-wphj-fx3q-84ch.json	10	"details": "## Summary\n\nThe `fsSize()` function in `systeminformation` is vulnerable to **OS Command Injection (CWE-	CODE
LOW⚡	…d/2025/12/GHSA-9pf3-7rrr-x5jh/GHSA-9pf3-7rrr-x5jh.json	10	"details": "## Summary\n\nAn insecure deserialization vulnerability exists in lmdeploy where `torch.load()` is called	CODE
LOW	…d/2025/12/GHSA-rwc2-f344-q6w6/GHSA-rwc2-f344-q6w6.json	10	"details": "### Summary\n\nA command injection vulnerability exists in the Serverless Framework's built-in MCP server	CODE
LOW⚡	…d/2025/12/GHSA-rchf-xwx2-hm93/GHSA-rchf-xwx2-hm93.json	10	"details": "Hi Fedify team! 👋\n\nThank you for your work on Fedify—it's a fantastic library for building federated app	CODE
LOW	…d/2025/12/GHSA-c623-f998-8hhv/GHSA-c623-f998-8hhv.json	10	"details": "### Description\n\nA nil pointer dereference vulnerability was discovered in the SIPGO library's `NewRespo	CODE
LOW	…d/2025/12/GHSA-4c65-9gqf-4w8h/GHSA-4c65-9gqf-4w8h.json	10	"details": "### Summary\n\nA command injection vulnerability is present in the function tool `run_ssh_command_with_cre	CODE
LOW	…d/2025/12/GHSA-6h2f-wjhf-4wjx/GHSA-6h2f-wjhf-4wjx.json	10	"details": "## Summary\n\nThe `download_media` method in Pyrofork does not sanitize filenames received from Telegram m	CODE
LOW	…d/2024/03/GHSA-x7mf-wrh9-r76c/GHSA-x7mf-wrh9-r76c.json	10	"details": "### Impact\n\nOctoPrint versions up until and including 1.9.3 contain a vulnerability that allows maliciou	CODE
LOW	…d/2024/05/GHSA-v2f9-rv6w-vw8r/GHSA-v2f9-rv6w-vw8r.json	10	"details": "### Impact\n\nThere is a possibility to execute javascript code in the Admin panel. In order to perform an	CODE
LOW	…d/2024/05/GHSA-w4h6-9wrp-v5jq/GHSA-w4h6-9wrp-v5jq.json	10	"details": "**Important: Exploiting this vulnerability requires the attacker to have access to your Frigate instance,	CODE
LOW	…d/2024/02/GHSA-x4hh-frx8-98r5/GHSA-x4hh-frx8-98r5.json	10	"details": "## Impacted Resources\n\nbref/src/Event/Http/Psr7Bridge.php:94-125\n\n## Description\n\nWhen Bref is used	CODE
LOW	…d/2024/02/GHSA-82vx-mm6r-gg8w/GHSA-82vx-mm6r-gg8w.json	10	"details": "## Impacted Resources\n\nbref/src/Event/Http/Psr7Bridge.php:130-168\n\n## Description\n\nWhen Bref is used	CODE
LOW	…d/2024/07/GHSA-fx6j-9pp6-ph36/GHSA-fx6j-9pp6-ph36.json	10	"details": "### Summary\n\nNavigating to `/admin/index/statistics` with a logged in Pimcore user (not an XmlHttpRe	CODE
LOW	…d/2024/09/GHSA-62c8-mh53-4cqv/GHSA-62c8-mh53-4cqv.json	10	"details": "### Impact\n\nThere is a vulnerability in Traefik that allows the client to remove the X-Forwarded headers	CODE
LOW	…d/2023/04/GHSA-5286-f2rf-35c2/GHSA-5286-f2rf-35c2.json	10	"details": "### Impact\n\nA stored cross-site scripting (XSS) vulnerability exists on ModelAdmin views within the Wagt	CODE
LOW	…d/2023/11/GHSA-c35q-ffpf-5qpm/GHSA-c35q-ffpf-5qpm.json	10	"details": "### Summary\n\nAn issue in AsyncSSH v2.14.0 and earlier allows attackers to control the remote end of an S	CODE
LOW	…d/2023/10/GHSA-xm7x-f3w2-4hjm/GHSA-xm7x-f3w2-4hjm.json	8	"details": "### Summary\n\nPresto JDBC is vulnerable to Server-Side Request Forgery (SSRF) when connecting a remote Pr	CODE
LOW	…d/2023/10/GHSA-fjhg-96cp-6fcw/GHSA-fjhg-96cp-6fcw.json	10	"details": "# Description\n\nThe laters version of Kimai is found to be vulnerable to a critical Server-Side Template	CODE
LOW	…d/2023/10/GHSA-86q5-qcjc-7pv4/GHSA-86q5-qcjc-7pv4.json	8	"details": "### Summary\n\nPresto JDBC is vulnerable to Server-Side Request Forgery (SSRF) when connecting a remote Pr	CODE
LOW	…d/2023/08/GHSA-2ggp-cmvm-f62f/GHSA-2ggp-cmvm-f62f.json	10	"details": "## Command Injection in docker fetch process\n\n### Summary\nA possible command injection in the docker fe	CODE
LOW	…d/2026/03/GHSA-26gm-93rw-cchf/GHSA-26gm-93rw-cchf.json	10	"details": "### Summary\nAn access control check is missing when deleting a file from a knowledge base. The only check	CODE
LOW	…d/2026/03/GHSA-ph84-r98x-2j22/GHSA-ph84-r98x-2j22.json	10	"details": "## Summary\n\nThe create_user, assign_member, and assign_user action modes in modules/registration.php app	CODE
LOW	…d/2026/03/GHSA-7mp4-25j8-hp5q/GHSA-7mp4-25j8-hp5q.json	10	"details": "### Impact\nA Time-of-Check To Time-of-Use (TOCTOU) race condition was discovered in the promotion usage l	CODE
LOW	…d/2026/03/GHSA-8wf4-c4x3-h952/GHSA-8wf4-c4x3-h952.json	10	"details": "## Summary\n\nThe `downloadVideoFromDownloadURL()` function in `objects/aVideoEncoder.json.php` saves remo	CODE
LOW	…d/2026/03/GHSA-7wc2-qxgw-g8gg/GHSA-7wc2-qxgw-g8gg.json	10	"details": "### Summary\nAfter upgrading the library from 1.5.2 to 1.6.0 (and the latest 1.6.5) it was noticed that pr	CODE
LOW	…d/2026/03/GHSA-qvc2-mg72-jjhx/GHSA-qvc2-mg72-jjhx.json	8	"details": "## Summary\n\nSanitized DOM trees can be unsafe to serialize when a custom policy allows raw-text elements	CODE
LOW⚡	…d/2026/03/GHSA-vx5f-957p-qpvm/GHSA-vx5f-957p-qpvm.json	10	"details": "## Summary\n\nIn Central Browser mode, Glances stores both the Zeroconf-advertised server name and the dis	CODE
LOW	…d/2026/03/GHSA-jjgj-cpp9-cvpv/GHSA-jjgj-cpp9-cvpv.json	8	"details": "## Summary\n\nA malicious or compromised MCP (Model Context Protocol) tool server can exfiltrate arbitrary	CODE
LOW	…d/2026/03/GHSA-jfjg-vc52-wqvf/GHSA-jfjg-vc52-wqvf.json	10	"details": "## Summary\n\nThe `docker.system_packages` field in `bentofile.yaml` accepts arbitrary strings that are in	CODE
LOW⚡	…d/2026/03/GHSA-x3pr-vrhq-vq43/GHSA-x3pr-vrhq-vq43.json	10	"details": "## Summary\n\nAVideo's `_session_start()` function accepts arbitrary session IDs via the `PHPSESSID` GET p	CODE
LOW⚡	…d/2026/03/GHSA-7432-952r-cw78/GHSA-7432-952r-cw78.json	10	"details": "## 1. Executive Summary\n\nA cryptographic padding oracle vulnerability was identified in the Authlib Pyth	CODE
LOW	…d/2026/03/GHSA-vvjh-f6p9-5vcf/GHSA-vvjh-f6p9-5vcf.json	8	"details": "ZDI-CAN-29311: OpenClaw Canvas Authentication Bypass Vulnerability\n\n-- ABSTRACT ------------------------	CODE
LOW	…d/2026/03/GHSA-3x2w-63fp-3qvw/GHSA-3x2w-63fp-3qvw.json	10	"details": "### Summary\nThe `Enforcer` is vulnerable to a path traversal attack where an attacker can use dot-dot (`.	CODE
LOW⚡	…d/2026/04/GHSA-m2cx-gpqf-qf74/GHSA-m2cx-gpqf-qf74.json	10	"details": "## Summary\n\nThe HTTP resolver's `FetchHttpResource` function calls `io.ReadAll(resp.Body)` with no respo	CODE
LOW	…d/2026/04/GHSA-g87c-r2jp-293w/GHSA-g87c-r2jp-293w.json	10	"details": "## Summary\n\n`@tinacms/cli` recently added lexical path-traversal checks to the dev media routes, but the	CODE
LOW⚡	…d/2026/04/GHSA-v38x-c887-992f/GHSA-v38x-c887-992f.json	10	"details": "ZDI-CAN-29412: FlowiseAI Flowise Airtable_Agent Code Injection Remote Code Execution Vulnerability\n\nTren	CODE
LOW⚡	…d/2026/04/GHSA-mvf2-f6gm-w987/GHSA-mvf2-f6gm-w987.json	10	"details": "### Summary\n The fix for GHSA-c2ff-88x2-x9pg (CVE-2023-48223) is incomplete. The publicKeyPemMatcher rege	CODE
LOW	…d/2026/04/GHSA-4xqg-gf5c-ghwq/GHSA-4xqg-gf5c-ghwq.json	10	"details": "## Summary\n\nThe `port_forward` tool in `mcp-server-kubernetes` constructs a kubectl command as a string	CODE
LOW	…d/2026/04/GHSA-p433-9wv8-28xj/GHSA-p433-9wv8-28xj.json	10	"details": "Summary\n- Issue: Symlink traversal in external data loading allows reading files outside the model direct	CODE
LOW	…d/2026/04/GHSA-pf3h-qjgv-vcpr/GHSA-pf3h-qjgv-vcpr.json	10	"details": "### Summary\n\nA Server Side Request Forgery (SSRF) vulnerability in `download_bytes_from_url` allows any	CODE
LOW⚡	…d/2026/04/GHSA-m9h6-8pqm-xrhf/GHSA-m9h6-8pqm-xrhf.json	10	"details": "## Summary\n\nThe `add` mode in `modules/documents-files.php` accepts a `name` parameter validated only as	CODE
LOW	…d/2026/04/GHSA-69v7-xpr6-6gjm/GHSA-69v7-xpr6-6gjm.json	10	"details": "### Summary\nThe `attribute_filter` in the Lupa library is intended to restrict access to sensitive Python	CODE
LOW	…d/2026/04/GHSA-mp82-fmj6-f22v/GHSA-mp82-fmj6-f22v.json	10	"details": "## Summary\n\nThe `set_session_cookie_secure` `before_request` handler in `src/pyload/webui/app/__init__.p	CODE
122 more matches not shown…

Self-Referential Comments66 hits · 148 pts

Severity	File	Line	Snippet	Context
MEDIUM⚡	…d/2024/03/GHSA-4qp4-9mwx-276r/GHSA-4qp4-9mwx-276r.json	9	"details": "I have activated the CORS because I had a development ui that uses another port number then I forgot to re	CODE
MEDIUM	…d/2026/05/GHSA-v9r8-chwp-vmrm/GHSA-v9r8-chwp-vmrm.json	9	"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: fix transaction abort when s	CODE
MEDIUM	…d/2025/03/GHSA-769v-p64c-89pr/GHSA-769v-p64c-89pr.json	10	"details": "### CVE-2025-1889\n\n### Summary\n\nPicklescan fails to detect hidden pickle files embedded in PyTorch mod	CODE
MEDIUM⚡	…d/2025/04/GHSA-93mv-x874-956g/GHSA-93mv-x874-956g.json	10	"details": "### Summary\n\nPicklescan does not detect malicious pickles that exfiltrate sensitive information via DNS	CODE
MEDIUM	…d/2025/11/GHSA-wf5f-4jwr-ppcp/GHSA-wf5f-4jwr-ppcp.json	10	"details": "### Summary\n\npdfminer.six will execute arbitrary code from a malicious pickle file if provided with a ma	CODE
MEDIUM	…d/2025/11/GHSA-2r4r-5x78-mvqf/GHSA-2r4r-5x78-mvqf.json	10	"details": "### Summary\n_Short summary of the problem. Make the impact and severity as clear as possible.\n\nIt is po	CODE
MEDIUM	…d/2025/09/GHSA-mjqp-26hc-grxg/GHSA-mjqp-26hc-grxg.json	10	"details": "### Summary\nPicklescan's ability to scan ZIP archives for malicious pickle files is compromised when the	CODE
MEDIUM	…d/2025/12/GHSA-hjqc-jx6g-rwp9/GHSA-hjqc-jx6g-rwp9.json	10	"details": "## Summary\n\nKeras's `keras.utils.get_file()` function is vulnerable to directory traversal attacks despi	CODE
MEDIUM⚡	…d/2025/12/GHSA-9pf3-7rrr-x5jh/GHSA-9pf3-7rrr-x5jh.json	10	"details": "## Summary\n\nAn insecure deserialization vulnerability exists in lmdeploy where `torch.load()` is called	CODE
MEDIUM	…d/2024/05/GHSA-8c8q-2xw3-j869/GHSA-8c8q-2xw3-j869.json	10	"details": "### Summary\n\nThe next ruby code is vulnerable to denial of service due to the fact that the user control	CODE
MEDIUM	…d/2024/11/GHSA-hrxh-9w67-g4cv/GHSA-hrxh-9w67-g4cv.json	10	"details": "### tl;dr:\n\nunprivileged user creates a symlink to /etc/sudoers, /etc/shadow or similar and waits fo	CODE
MEDIUM	…d/2024/06/GHSA-wrvh-rcmr-9qfc/GHSA-wrvh-rcmr-9qfc.json	10	"details": "### Summary\n\nBy combining two vulnerabilities (an `Open Redirect` and `session token sent as URL query p	CODE
MEDIUM	…d/2024/12/GHSA-5pf6-cq2v-23ww/GHSA-5pf6-cq2v-23ww.json	8	"details": "### Summary\nA Denial of Service (DoS) vulnerability in the authentication middleware allows any client to	CODE
MEDIUM	…d/2023/04/GHSA-h2pm-378c-pcxx/GHSA-h2pm-378c-pcxx.json	10	"details": "### Impact\n\nThe gatsby-plugin-sharp plugin prior to versions 5.8.1 and 4.25.1 contains a path traversal	CODE
MEDIUM	…d/2023/10/GHSA-fjhg-96cp-6fcw/GHSA-fjhg-96cp-6fcw.json	10	"details": "# Description\n\nThe laters version of Kimai is found to be vulnerable to a critical Server-Side Template	CODE
MEDIUM	…d/2023/06/GHSA-c6f8-8r25-c4gc/GHSA-c6f8-8r25-c4gc.json	10	"details": "### Impact\n\nThe Gatsby framework prior to versions 4.25.7 and 5.9.1 contain a Local File Inclusion vulne	CODE
MEDIUM	…d/2026/03/GHSA-8wf4-c4x3-h952/GHSA-8wf4-c4x3-h952.json	10	"details": "## Summary\n\nThe `downloadVideoFromDownloadURL()` function in `objects/aVideoEncoder.json.php` saves remo	CODE
MEDIUM⚡	…d/2026/03/GHSA-vwmf-pq79-vjvx/GHSA-vwmf-pq79-vjvx.json	10	"details": "## Summary\n\nThe `POST /api/v1/build_public_tmp/{flow_id}/flow` endpoint allows building public flows wit	CODE
MEDIUM	…d/2026/03/GHSA-3r9x-f23j-gc73/GHSA-3r9x-f23j-gc73.json	10	"details": "### Summary\nA path traversal vulnerability via symlink allows to read arbitrary files outside model or us	CODE
MEDIUM	…d/2026/03/GHSA-w8fp-g9rh-34jh/GHSA-w8fp-g9rh-34jh.json	10	"details": "### Summary\nThe `Enforcer` incorrectly validates scope paths by using a simple prefix match (`startswith`	CODE
MEDIUM⚡	…d/2026/03/GHSA-vx5f-957p-qpvm/GHSA-vx5f-957p-qpvm.json	10	"details": "## Summary\n\nIn Central Browser mode, Glances stores both the Zeroconf-advertised server name and the dis	CODE
MEDIUM	…d/2026/03/GHSA-wvh5-6vjm-23qh/GHSA-wvh5-6vjm-23qh.json	10	"details": "### Summary\n\nThe Markdown viewer component renders Mermaid diagrams with `securityLevel: \"loose\"` and	CODE
MEDIUM	…d/2026/03/GHSA-79pf-vx4x-7jmm/GHSA-79pf-vx4x-7jmm.json	10	"details": "### Summary\n\nA broken access control vulnerability in the TUS protocol DELETE endpoint allows authentica	CODE
MEDIUM	…d/2026/03/GHSA-7c2g-p23p-4jg3/GHSA-7c2g-p23p-4jg3.json	10	"details": "## Summary\n\nThe `GET /api/v1/projects/:project/webhooks` endpoint returns webhook BasicAuth credentials	CODE
MEDIUM	…d/2026/04/GHSA-q96j-3fmm-7fv4/GHSA-q96j-3fmm-7fv4.json	10	"details": "## Summary\n\nLXD instance backup import validates project restrictions against `backup/index.yaml` embedd	CODE
MEDIUM	…d/2026/04/GHSA-g9cw-qwhf-24jp/GHSA-g9cw-qwhf-24jp.json	10	"details": "### Summary\nAn improper path validation vulnerability in the UDR service allows any unauthenticated attac	CODE
MEDIUM	…d/2026/04/GHSA-fm2x-c5qw-4h6f/GHSA-fm2x-c5qw-4h6f.json	10	"details": "## Summary\n\nThe `isVMLowLevelOptionForbidden` function in `lxd/project/limits/permissions.go` is missing	CODE
MEDIUM	…d/2026/04/GHSA-2wfh-rcwf-wh23/GHSA-2wfh-rcwf-wh23.json	10	"details": "## Summary\n\nThe plugin file upload endpoint (`POST /api/plugin/upload`) passes the user-supplied filenam	CODE
MEDIUM	…d/2026/04/GHSA-x5r2-r74c-3w28/GHSA-x5r2-r74c-3w28.json	10	"details": "### Summary\nAn improper path validation vulnerability in the UDR service allows any unauthenticated attac	CODE
MEDIUM⚡	…d/2026/04/GHSA-3wqj-33cg-xc48/GHSA-3wqj-33cg-xc48.json	10	"details": "## Summary\n\nA path traversal vulnerability in the rembg HTTP server allows unauthenticated remote at	CODE
MEDIUM	…d/2026/04/GHSA-q56x-g2fj-4rj6/GHSA-q56x-g2fj-4rj6.json	10	"details": "### Summary\n\nThe `save_external_data` method seems to include multiple issues introducing a local TOCTOU	CODE
MEDIUM⚡	…d/2026/04/GHSA-f2h6-7xfr-xm8w/GHSA-f2h6-7xfr-xm8w.json	10	"details": "## Summary\n\nThe `_safe_extractall()` function in PraisonAI's recipe registry validates archive members a	CODE
MEDIUM	…d/2026/04/GHSA-76hw-p97h-883f/GHSA-76hw-p97h-883f.json	10	"details": "### Summary\nThe gdown library (tested on v5.2.1) is vulnerable to a Path Traversal attack within its extr	CODE
MEDIUM	…d/2026/05/GHSA-7v3r-m9c8-r855/GHSA-7v3r-m9c8-r855.json	10	"details": "Summary\n\nThe ExifTool metadata write blocklist in Gotenberg v8 can be bypassed using ExifTool's grou	CODE
MEDIUM	…d/2026/05/GHSA-mgx6-5cf9-rr43/GHSA-mgx6-5cf9-rr43.json	10	"details": "### Summary\nKeras’s model loader (KerasFileEditor) unsafely loads user-supplied .keras model files contai	CODE
MEDIUM	…d/2026/05/GHSA-qjv7-627w-8qjv/GHSA-qjv7-627w-8qjv.json	10	"details": "## Summary\n\nDescription\n\nA Cross-Site Scripting (CWE-79) vulnerability in Go Fiber allows a remote	CODE
MEDIUM	…d/2026/05/GHSA-jmxc-hhwx-gvv3/GHSA-jmxc-hhwx-gvv3.json	8	"details": "NOTE: Only affects development version.\n\n## Summary\n\n`read_multi_community()` does not enforce the	CODE
MEDIUM⚡	…d/2026/05/GHSA-mw8f-w6p8-xrf4/GHSA-mw8f-w6p8-xrf4.json	8	"details": "## Summary\n\nGHSA-mhc8-p3jx-84mm (CVE-2026-43948) reported that wger's `reset_user_password` and `gym_per	CODE
MEDIUM	…d/2026/02/GHSA-7ppg-37fh-vcr6/GHSA-7ppg-37fh-vcr6.json	10	"details": "## Summary\n\nMilvus exposes TCP port 9091 by default with two critical authentication bypass vulnerabilit	CODE
MEDIUM	…d/2026/02/GHSA-3cx6-j9j4-54mp/GHSA-3cx6-j9j4-54mp.json	10	"details": "### Impact\nPrivate data exports can lead to data leaks in cases where the UUID generation causes collisio	CODE
MEDIUM⚡	…d/2026/02/GHSA-3c45-4pj5-ch7m/GHSA-3c45-4pj5-ch7m.json	10	"details": "## Summary\n\nChangedetection.io is vulnerable to Server-Side Request Forgery (SSRF) because the URL valid	CODE
MEDIUM	…d/2026/02/GHSA-w22q-m2fm-x9f4/GHSA-w22q-m2fm-x9f4.json	10	"details": "### Summary\n\nThe WebAuthn prepare endpoint (`/api/webauthn/prepare`) creates new active user accounts wi	CODE
MEDIUM⚡	…d/2026/02/GHSA-j273-m5qq-6825/GHSA-j273-m5qq-6825.json	10	"details": "### Summary\n\nA backslash path traversal vulnerability in `LocalFolderExtractor` allows an attacker to wr	CODE
MEDIUM	…d/2026/10/GHSA-v3x9-6gg8-c2c9/GHSA-v3x9-6gg8-c2c9.json	10	"details": "### Summary\n\nA vulnerability exists in the authentication/session lifecycle of `wger` where **bearer-sty	CODE
MEDIUM	…d/2026/10/GHSA-c44f-37qr-gw3f/GHSA-c44f-37qr-gw3f.json	10	"details": "### Summary\n`SkillTools.run_skill_script()` accepts a `script_path` parameter and executes it via `subpro	CODE
MEDIUM	…d/2026/07/GHSA-r35r-fpx2-jgr4/GHSA-r35r-fpx2-jgr4.json	10	"details": "### Summary\nThe SQLite databases are created at predictable (static) paths in `/tmp`. Any user can theref	CODE
MEDIUM	…d/2026/07/GHSA-4qcj-m5wp-jmf4/GHSA-4qcj-m5wp-jmf4.json	10	"details": "## Summary\n\nThe `GET /api/global/groups` endpoint on the worker service has no role-based authorization	CODE
MEDIUM⚡	…d/2026/07/GHSA-2wm4-vwp6-v7xc/GHSA-2wm4-vwp6-v7xc.json	10	"details": "### Summary\n\nGitea has robust SSRF protection via `hostmatcher.NewDialContext()` for webhook and migrati	CODE
MEDIUM	…d/2026/07/GHSA-3v79-m2cg-89ww/GHSA-3v79-m2cg-89ww.json	10	"details": "## Summary\n\nNuclio's Java runtime generates a `build.gradle` file during function builds using Go's `tex	CODE
MEDIUM	…d/2026/09/GHSA-5wp5-5229-5g6q/GHSA-5wp5-5229-5g6q.json	10	"details": "NLTK's package downloader in nltk/downloader.py does not verify file integrity after download and before e	CODE
MEDIUM⚡	…d/2026/09/GHSA-jmg2-rcxh-w8q3/GHSA-jmg2-rcxh-w8q3.json	10	"details": "### Summary\n\nThe default Rsdoctor report HTTP server started by `@rsdoctor/rspack-plugin` binds to all n	CODE
MEDIUM⚡	…d/2026/09/GHSA-928x-9mpw-8h56/GHSA-928x-9mpw-8h56.json	10	"details": "## Summary\n`ZipArchiver::extract()` lacks limits on uncompressed size, file count, and nesting depth, cre	CODE
MEDIUM	…d/2026/09/GHSA-4x45-gxvp-6283/GHSA-4x45-gxvp-6283.json	10	"details": "## CI Branch Name OS Command Injection in @argos-ci/core\n\n### Summary\n\n`@argos-ci/core@6.2.0` passes a	CODE
MEDIUM⚡	…d/2026/08/GHSA-jw39-3688-r4rx/GHSA-jw39-3688-r4rx.json	10	"details": "### Impact\n\nA Server-Side Template Injection (SSTI) vulnerability exists in multiple locations of trestl	CODE
MEDIUM	…d/2026/08/GHSA-74hp-mggr-hv58/GHSA-74hp-mggr-hv58.json	10	"details": "### Summary\n\n`mcp-shell`'s \"secure mode\" is designed to restrict command execution to an allowlist of	CODE
MEDIUM	…d/2026/08/GHSA-gg93-x632-9ccv/GHSA-gg93-x632-9ccv.json	10	"details": "### Summary\n\nA user with only a single self-owned project can permanently destroy the Kanban bucket assi	CODE
MEDIUM	…d/2026/01/GHSA-6h7w-v2xr-mqvw/GHSA-6h7w-v2xr-mqvw.json	10	"details": "### Vulnerable Code\n\nFile: `packages/Ibkul/Installer/src/Routes/Ib.php`\n\n```\n<?php\n\nuse Illumin	CODE
MEDIUM	…d/2026/01/GHSA-8p9x-46gm-qfx2/GHSA-8p9x-46gm-qfx2.json	10	"details": "### Summary\n\nA critical authorization boundary bypass in namespaced Kyverno Policy [apiCall](https://kyv	CODE
MEDIUM	…d/2026/01/GHSA-7grm-h62g-5m97/GHSA-7grm-h62g-5m97.json	10	"details": "### Summary\nXSS risk exists in NiceGUI when developers pass attacker-controlled strings into `ui.navigate	CODE
MEDIUM⚡	…d/2026/01/GHSA-h5qv-qjv4-pc5m/GHSA-h5qv-qjv4-pc5m.json	10	"details": "### Summary\nThe compressed data parser uses `zlib.decompress()` without a maximum output size. A small, h	CODE
6 more matches not shown…

Synthetic Comment Markers27 hits · 148 pts

Severity	File	Line	Snippet	Context
HIGH	…d/2022/02/GHSA-fp26-fc43-5569/GHSA-fp26-fc43-5569.json	9	"details": "In code generated by aidl_const_expressions.cpp, there is a possible out of bounds read due to uninitializ	CODE
HIGH	…d/2026/09/GHSA-g54v-9g2q-gvrg/GHSA-g54v-9g2q-gvrg.json	9	"details": "Mounting an attacker-controlled NAND flash image (`lx_nand_flash_open()`) triggers an unbounded out-of-bou	CODE
HIGH	…d/2026/03/GHSA-vffc-f7r7-rx2w/GHSA-vffc-f7r7-rx2w.json	10	"details": "### Summary\nA command injection vulnerability exists in OpenClaw’s Linux systemd unit generation path.\nW	CODE
HIGH⚡	…d/2026/03/GHSA-g39v-qrj6-jxrh/GHSA-g39v-qrj6-jxrh.json	10	"details": "## Summary\n\nThe AI plugin's `save.json.php` endpoint loads AI response objects using an attacker-control	CODE
HIGH⚡	…d/2026/03/GHSA-g39v-qrj6-jxrh/GHSA-g39v-qrj6-jxrh.json	10	"details": "## Summary\n\nThe AI plugin's `save.json.php` endpoint loads AI response objects using an attacker-control	CODE
HIGH⚡	…d/2026/03/GHSA-g39v-qrj6-jxrh/GHSA-g39v-qrj6-jxrh.json	10	"details": "## Summary\n\nThe AI plugin's `save.json.php` endpoint loads AI response objects using an attacker-control	CODE
HIGH	…d/2026/04/GHSA-rp7v-4384-hfrp/GHSA-rp7v-4384-hfrp.json	8	"details": "### Summary\nIn the auto-remediation pipeline, `object_to_execution.go` was deserializing the AI-generated	CODE
HIGH⚡	…d/2026/05/GHSA-gmvf-9v4p-v8jc/GHSA-gmvf-9v4p-v8jc.json	10	"details": "### Summary\n\nA critical authentication-bypass vulnerability in `fast-jwt`'s async key-resolver flow allo	CODE
HIGH⚡	…d/2026/05/GHSA-gmvf-9v4p-v8jc/GHSA-gmvf-9v4p-v8jc.json	10	"details": "### Summary\n\nA critical authentication-bypass vulnerability in `fast-jwt`'s async key-resolver flow allo	CODE
HIGH	…d/2026/05/GHSA-qpgq-5g92-j5q8/GHSA-qpgq-5g92-j5q8.json	10	"details": "## Summary\n`Mage_ProductAlert_AddController::stockAction()` reads the uenc query parameter and passes it	CODE
HIGH	…d/2026/05/GHSA-qpgq-5g92-j5q8/GHSA-qpgq-5g92-j5q8.json	10	"details": "## Summary\n`Mage_ProductAlert_AddController::stockAction()` reads the uenc query parameter and passes it	CODE
HIGH	…d/2026/05/GHSA-2cwr-gcf9-pvxr/GHSA-2cwr-gcf9-pvxr.json	10	"details": "Affected Version: OpenMage LTS ≤ 20.16.0 (confirmed on `20.16.0`)\n\nAffected File: `https://github.com/Op	CODE
HIGH	…d/2026/05/GHSA-2cwr-gcf9-pvxr/GHSA-2cwr-gcf9-pvxr.json	10	"details": "Affected Version: OpenMage LTS ≤ 20.16.0 (confirmed on `20.16.0`)\n\nAffected File: `https://github.com/Op	CODE
HIGH	…d/2026/02/GHSA-6whj-7qmg-86qj/GHSA-6whj-7qmg-86qj.json	10	"details": "### Summary\nAn IDOR in the Notion OAuth callback allows an attacker to hijack any user's Notion integrati	CODE
HIGH	…d/2026/10/GHSA-26mh-57q7-jfvr/GHSA-26mh-57q7-jfvr.json	10	"details": "### Summary\nJobWorkflowExecutor._exec_inline_python() is designed to safely execute inline Python express	CODE
HIGH	…d/2026/10/GHSA-fx3j-rwgx-fr94/GHSA-fx3j-rwgx-fr94.json	8	"details": "### Summary\n`Repo._clone()`'s handling of `separate_git_dir` never disables `Git.polish_url()`'s environm	CODE
HIGH	…d/2026/07/GHSA-649p-mmhf-85c7/GHSA-649p-mmhf-85c7.json	10	"details": "## Vulnerability Header\n\n\| Field \| Value	CODE
HIGH	…d/2026/07/GHSA-649p-mmhf-85c7/GHSA-649p-mmhf-85c7.json	10	"details": "## Vulnerability Header\n\n\| Field \| Value	CODE
HIGH	…d/2026/07/GHSA-rh79-75qm-gwjr/GHSA-rh79-75qm-gwjr.json	10	"details": "## Vulnerability Header\n\n\| Field \| Value	CODE
HIGH	…d/2026/07/GHSA-rh79-75qm-gwjr/GHSA-rh79-75qm-gwjr.json	10	"details": "## Vulnerability Header\n\n\| Field \| Value	CODE
HIGH	…d/2026/07/GHSA-xvc3-826v-xf47/GHSA-xvc3-826v-xf47.json	10	"details": "### Summary\nThe `authentication` rate limiter used for the login and two-factor checkpoint endpoints appl	CODE
HIGH	…d/2026/07/GHSA-xvc3-826v-xf47/GHSA-xvc3-826v-xf47.json	10	"details": "### Summary\nThe `authentication` rate limiter used for the login and two-factor checkpoint endpoints appl	CODE
HIGH	…d/2026/01/GHSA-4gpc-rhpj-9443/GHSA-4gpc-rhpj-9443.json	10	"details": "### Summary\nA stored Cross-Site Scripting (XSS) vulnerability in the Mermaid artifact renderer allows att	CODE
HIGH	…d/2026/06/GHSA-vjv9-7m7j-h833/GHSA-vjv9-7m7j-h833.json	10	"details": "## Summary\n\nThe published npm package `praisonai` exports `SandboxExecutor`, `CommandValidator`, and `sa	CODE
HIGH	…d/2021/03/GHSA-hpv8-9rq5-hq7w/GHSA-hpv8-9rq5-hq7w.json	10	"details": "### Impact\n\nThis vulnerability impacts generated code. If this code was generated as a one-off occas	CODE
HIGH	…d/2021/05/GHSA-cqxr-xf2w-943w/GHSA-cqxr-xf2w-943w.json	10	"details": "### Impact\n\nThis vulnerability impacts generated code. If this code was generated as a one-off occas	CODE
HIGH	…d/2021/05/GHSA-cqxr-xf2w-943w/GHSA-cqxr-xf2w-943w.json	10	"details": "### Impact\n\nThis vulnerability impacts generated code. If this code was generated as a one-off occas	CODE

AI Response Leakage18 hits · 102 pts

Severity	File	Line	Snippet	Context
HIGH	…d/2025/02/GHSA-268v-p5rc-rhmv/GHSA-268v-p5rc-rhmv.json	9	"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: avoid race between device unre	CODE
HIGH⚡	…d/2024/03/GHSA-4qp4-9mwx-276r/GHSA-4qp4-9mwx-276r.json	9	"details": "I have activated the CORS because I had a development ui that uses another port number then I forgot to re	CODE
HIGH⚡	…d/2024/03/GHSA-4qp4-9mwx-276r/GHSA-4qp4-9mwx-276r.json	9	"details": "I have activated the CORS because I had a development ui that uses another port number then I forgot to re	CODE
HIGH	…d/2022/10/GHSA-vh7g-p26c-j2cw/GHSA-vh7g-p26c-j2cw.json	10	"details": "### Impact\nDex instances with public clients (and by extension, clients accepting tokens issued by those	CODE
HIGH⚡	…d/2025/03/GHSA-h42x-xx2q-6v6g/GHSA-h42x-xx2q-6v6g.json	8	"details": "## Summary\nAn unauthorized attacker can leverage the whitelisted route `/api/v1/attachments` to upload ar	CODE
HIGH	…d/2025/07/GHSA-m7f4-hrc6-fwg3/GHSA-m7f4-hrc6-fwg3.json	10	"details": "## Summary\nAn inconsistency in `OperatorFuncNode` can be exploited to hide the execution of untrusted `op	CODE
HIGH	…d/2025/07/GHSA-8xq3-w9fx-74rv/GHSA-8xq3-w9fx-74rv.json	10	"details": "### Description\nThe lookup function takes a user address for checking accounts as a feature, however, as	CODE
HIGH⚡	…d/2025/09/GHSA-p46v-f2x8-qp98/GHSA-p46v-f2x8-qp98.json	10	"details": "# Summary\npREST provides a simple way for users to expose access their database via a REST-full API. The	CODE
HIGH⚡	…d/2025/09/GHSA-p46v-f2x8-qp98/GHSA-p46v-f2x8-qp98.json	10	"details": "# Summary\npREST provides a simple way for users to expose access their database via a REST-full API. The	CODE
HIGH	…d/2024/02/GHSA-gp3w-2v2m-p686/GHSA-gp3w-2v2m-p686.json	10	"details": "## Summary\n\nWhen calls to external contracts are made, we write the input buffer starting at byte 28, an	CODE
HIGH	…d/2024/10/GHSA-w7hq-f2pj-c53g/GHSA-w7hq-f2pj-c53g.json	10	"details": "### Summary\nThe folder `/.pyload/scripts` has scripts which are run when certain actions are completed, f	CODE
HIGH	…d/2024/10/GHSA-w7hq-f2pj-c53g/GHSA-w7hq-f2pj-c53g.json	10	"details": "### Summary\nThe folder `/.pyload/scripts` has scripts which are run when certain actions are completed, f	CODE
HIGH	…d/2024/01/GHSA-2q8v-3gqq-4f8p/GHSA-2q8v-3gqq-4f8p.json	10	"details": " ### Summary\n`concat` built-in can write over the bounds of the memory buffer that was allocated for it a	CODE
HIGH	…d/2023/01/GHSA-pc99-qmg4-rcff/GHSA-pc99-qmg4-rcff.json	10	"details": "### Impact\nThe artifact server that stores artifacts from Github Action runs does not sanitize path input	CODE
HIGH	…d/2026/04/GHSA-qh43-xrjm-4ggp/GHSA-qh43-xrjm-4ggp.json	10	"details": "### Summary\nA Mass Assignment / Broken Object Property Level Authorization (BOPA) vulnerability in the Us	CODE
HIGH	…d/2026/05/GHSA-8gw4-p4wq-4hcv/GHSA-8gw4-p4wq-4hcv.json	10	"details": "### Summary\nA partial implementation of our `restricted.images.servers` project restriction allows users	CODE
HIGH	…d/2026/08/GHSA-q79r-r9xg-r863/GHSA-q79r-r9xg-r863.json	10	"details": "### Impact\n\nA vulnerability was found in Graylog's API endpoint for retrieving system catalog entity tit	CODE
HIGH	…d/2020/12/GHSA-47qg-q58v-7vrp/GHSA-47qg-q58v-7vrp.json	8	"details": "### Impact\nAny install that has `UNEDITABLE_SCHEMAS` and/or `UNEDITABLE_TABLE_DESCRIPTION_MATCH_RULES` se	CODE

Magic Placeholder Names13 hits · 65 pts

Severity	File	Line	Snippet	Context
HIGH	…d/2025/10/GHSA-527m-2xhr-j27g/GHSA-527m-2xhr-j27g.json	10	"details": "## Summary ##\n\nA Server-Side Request Forgery (SSRF) vulnerability in the chat API allows any authenticat	CODE
HIGH	…d/2023/08/GHSA-j5g3-5c8r-7qfx/GHSA-j5g3-5c8r-7qfx.json	8	"details": "## Impact\n### What kind of vulnerability is it?\nApollo Server can log sensitive information (Studio API	CODE
HIGH	…d/2023/08/GHSA-j5g3-5c8r-7qfx/GHSA-j5g3-5c8r-7qfx.json	8	"details": "## Impact\n### What kind of vulnerability is it?\nApollo Server can log sensitive information (Studio API	CODE
HIGH	…d/2026/04/GHSA-5gfj-64gh-mgmw/GHSA-5gfj-64gh-mgmw.json	10	"details": "### Summary\nThe safe_join() function in the essential_abilities extension fails to validate that resolved	CODE
HIGH	…d/2026/04/GHSA-9wc7-mj3f-74xv/GHSA-9wc7-mj3f-74xv.json	10	"details": "### Summary\nThe CSVAgent allows providing a custom Pandas CSV read code. Due to lack of sanitization, an	CODE
HIGH	…d/2026/05/GHSA-7rx4-c5vx-g8w3/GHSA-7rx4-c5vx-g8w3.json	8	"details": "## Summary\n\nThe `metascraper-logo-favicon` plugin makes HTTP requests to URLs extracted from attacker-co	CODE
HIGH	…d/2026/02/GHSA-vrhw-v2hw-jffx/GHSA-vrhw-v2hw-jffx.json	10	"details": "### Summary\nA Path Traversal vulnerability in SignalK Server's `applicationData` API allows authenticated	CODE
HIGH	…d/2026/10/GHSA-w584-2h2r-2hvf/GHSA-w584-2h2r-2hvf.json	10	"details": "###Summary:\nA critical Authenticated Remote Code Execution (RCE) vulnerability exists in the validate_cod	CODE
HIGH	…d/2026/10/GHSA-vq8p-m3wm-gv5f/GHSA-vq8p-m3wm-gv5f.json	10	"details": "## Description:\nThe API `rpc` function in `api_blueprint.py` handles `multipart/form-data` uploads by rea	CODE
HIGH	…d/2026/07/GHSA-c2f9-4mc8-j656/GHSA-c2f9-4mc8-j656.json	10	"details": "## Description:\nThe `EventManager` module in `pyload` manages a list of `Client` instances for subscribin	CODE
HIGH	…d/2026/07/GHSA-c2f9-4mc8-j656/GHSA-c2f9-4mc8-j656.json	10	"details": "## Description:\nThe `EventManager` module in `pyload` manages a list of `Client` instances for subscribin	CODE
HIGH	…d/2026/09/GHSA-gvf2-2rh5-mpgf/GHSA-gvf2-2rh5-mpgf.json	10	"details": "## Summary\nA user who can save a telemetry screen (permission `system_set`) can embed JavaScript in a	CODE
HIGH	…d/2026/01/GHSA-vh2x-fw87-4fxq/GHSA-vh2x-fw87-4fxq.json	10	"details": "### Summary\nDPanel has an arbitrary file deletion vulnerability in the `/api/common/attach/delete` interf	CODE

Redundant / Tautological Comments28 hits · 30 pts

Severity	File	Line	Snippet	Context
LOW	…d/2025/05/GHSA-x39x-9qw5-ghrf/GHSA-x39x-9qw5-ghrf.json	10	"details": "### Summary \nDuring a manual source code review, [ARIMLABS.AI](https://arimlabs.ai) researchers iden	CODE
LOW	…d/2025/02/GHSA-rgv9-w7jp-m23g/GHSA-rgv9-w7jp-m23g.json	10	"details": "## Description\nA path traversal vulnerability in Label Studio SDK versions prior to 1.0.10 allows unautho	CODE
LOW	…d/2025/10/GHSA-9pp9-cfwx-54rm/GHSA-9pp9-cfwx-54rm.json	10	"details": "## Summary\n\nCVE-2025-57803 claims to be patched in ImageMagick 7.1.2-2, but **the fix is incomplete and	CODE
LOW	…d/2025/09/GHSA-f7qq-56ww-84cr/GHSA-f7qq-56ww-84cr.json	10	"details": "### Summary\nThe vulnerability allows malicious actors to bypass PickleScan's unsafe globals check, leadin	CODE
LOW⚡	…d/2025/08/GHSA-cxm3-wv7p-598c/GHSA-cxm3-wv7p-598c.json	11	"details": "## Summary\n\nMalicious versions of the [`nx` package](https://www.npmjs.com/package/nx), as well as some	CODE
LOW	…d/2025/08/GHSA-fcpm-6mxq-m5vv/GHSA-fcpm-6mxq-m5vv.json	10	"details": "### Summary\nA namespace label injection vulnerability in Capsule v0.10.3 allows authenticated tenant user	CODE
LOW	…d/2025/12/GHSA-r77h-rpp9-w2xm/GHSA-r77h-rpp9-w2xm.json	10	"details": "### Summary\nXSS vulnerability in OAuth callback server allows JavaScript injection through unsanitized er	CODE
LOW	…d/2024/04/GHSA-67rv-qpw2-6qrr/GHSA-67rv-qpw2-6qrr.json	10	"details": "### Summary\nThe *DELETE /api/snapshots/{key}* endpoint allows any Grafana user to delete snapshots if	CODE
LOW	…d/2024/10/GHSA-4fvx-h823-38v3/GHSA-4fvx-h823-38v3.json	10	"details": "### Summary\nThe use of a weak cryptographic algorithm and a hard-coded salt to hash the password reset ke	CODE
LOW	…d/2024/09/GHSA-2h46-8gf5-fmxv/GHSA-2h46-8gf5-fmxv.json	10	"details": "A timing-based username enumeration vulnerability has been identified in Fides Webserver authentication. T	CODE
LOW	…d/2023/09/GHSA-h7cm-mrvq-wcfr/GHSA-h7cm-mrvq-wcfr.json	10	"details": "### Summary\n_Short summary of the problem. Make the impact and severity as clear as possible. For example	CODE
LOW⚡	…d/2026/03/GHSA-25g8-2mcf-fcx9/GHSA-25g8-2mcf-fcx9.json	10	"details": "### Summary\nA Zip Slip vulnerability in the backup restore functionality allows arbitrary file overwrite	CODE
LOW	…d/2026/03/GHSA-vm69-h85x-8p85/GHSA-vm69-h85x-8p85.json	10	"details": "## Summary\n\nThe `IsSensitivePath()` function in `kernel/util/path.go` uses a denylist approach that was	CODE
LOW	…d/2026/04/GHSA-c3h3-89qf-jqm5/GHSA-c3h3-89qf-jqm5.json	10	"details": "### Summary\n\nA restricted TLS certificate user can escalate to cluster admin by changing their certifica	CODE
LOW	…d/2026/04/GHSA-q56x-g2fj-4rj6/GHSA-q56x-g2fj-4rj6.json	10	"details": "### Summary\n\nThe `save_external_data` method seems to include multiple issues introducing a local TOCTOU	CODE
LOW	…d/2026/05/GHSA-8w7q-q5jp-jvgx/GHSA-8w7q-q5jp-jvgx.json	10	"details": "### Summary\nIn the open-webui project, a parsing difference between the urlparse and requests libraries l	CODE
LOW⚡	…d/2026/05/GHSA-5c46-x3qw-q7j7/GHSA-5c46-x3qw-q7j7.json	10	"details": "### Summary\nA command injection vulnerability exists in `@wdio/browserstack-service` that allows remote c	CODE
LOW	…d/2026/02/GHSA-m2cq-xjgm-f668/GHSA-m2cq-xjgm-f668.json	10	"details": "### Summary\n\nMissing authentication middleware in the ActualBudget server component allows any unauthent	CODE
LOW	…d/2026/02/GHSA-p864-fqgv-92q4/GHSA-p864-fqgv-92q4.json	10	"details": "### Summary\n\nCritical Time-Based Blind SQL Injection vulnerability in the article pricing module of Open	CODE
LOW	…d/2026/02/GHSA-qx9p-w3vj-q24q/GHSA-qx9p-w3vj-q24q.json	10	"details": "## Vulnerability Details\n\n### Location\n- File: `modules/stampe/actions.php`\n- Line: 26\n- **Vu	CODE
LOW	…d/2026/10/GHSA-65qm-jvmh-6pqg/GHSA-65qm-jvmh-6pqg.json	10	"details": "```\n============================================================================\nGIF seek keeps rejected	CODE
LOW	…d/2026/07/GHSA-9xq3-3fqg-4vg7/GHSA-9xq3-3fqg-4vg7.json	10	"details": "Repository: `termux/proot-distro` \nComponent: `proot_distro/commands/install.py` → `_extract_pla	CODE
LOW	…d/2026/07/GHSA-qrh4-p6v4-mrfg/GHSA-qrh4-p6v4-mrfg.json	10	"details": "### Summary:\n\nWhen Hoverfly is running in Diff mode, the `AddDiff()` function writes to the shared `resp	CODE
LOW	…d/2026/07/GHSA-wwqq-x6w4-frm2/GHSA-wwqq-x6w4-frm2.json	10	"details": "### Summary\nAn unbounded `io.ReadAll(ctx.Req.Body)` call in the NPM package tag API endpoint allows any a	CODE
LOW	…d/2026/09/GHSA-f26r-j276-ggg4/GHSA-f26r-j276-ggg4.json	10	"details": "## Summary\n\nThe upload attachment tools in both Confluence and Jira accept arbitrary file paths without	CODE
LOW	…d/2026/08/GHSA-59xm-4m8c-g3xj/GHSA-59xm-4m8c-g3xj.json	10	"details": "## Path Traversal via Unsanitized Identifier in Plugin Install/Uninstall\n\n### Summary\nThe app-store plu	CODE
LOW⚡	…d/2026/01/GHSA-58pv-8j8x-9vj2/GHSA-58pv-8j8x-9vj2.json	10	"details": "### Summary\nThere is a Zip Slip path traversal vulnerability in the jaraco.context package affecting setu	CODE
LOW	…d/2026/06/GHSA-69qj-pvh9-c5wg/GHSA-69qj-pvh9-c5wg.json	8	"details": "### Summary\nyt-dlp's `--exec` option is vulnerable to arbitrary command injection when handling untrusted	CODE

Fake / Example Data27 hits · 29 pts

Severity	File	Line	Snippet	Context
LOW	…d/2024/04/GHSA-fc56-xpwv-3gp9/GHSA-fc56-xpwv-3gp9.json	9	"details": "The Gutenberg Blocks by Kadence Blocks – Page Builder Features plugin for WordPress is vulnerable to Store	CODE
LOW	…d/2026/03/GHSA-2vv2-mqg3-3j3p/GHSA-2vv2-mqg3-3j3p.json	9	"details": "The BWL Advanced FAQ Manager Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via th	CODE
LOW	…d/2026/02/GHSA-pq9c-2qch-jgmw/GHSA-pq9c-2qch-jgmw.json	9	"details": "Deserialization of Untrusted Data vulnerability in ThemeREX Lorem Ipsum \| Books & Media Store lorem-ipsum-	CODE
LOW⚡	…d/2026/03/GHSA-33mp-8p67-xj7c/GHSA-33mp-8p67-xj7c.json	10	"details": "## Summary\n\nA typo in Froxlor's input validation code (`==` instead of `=`) completely disables email fo	CODE
LOW	…d/2026/04/GHSA-w6v6-49gh-mc9w/GHSA-w6v6-49gh-mc9w.json	8	"details": "## Summary\n\nThe Faiss and SimpleStore (LlamaIndex) vector store implementations accept a `basePath` para	CODE
LOW⚡	…d/2026/05/GHSA-xchc-cqwg-g76q/GHSA-xchc-cqwg-g76q.json	10	"details": "### Summary\nThe Sync Service's ConfigMap-backed provider (`server/sync/sync_cm.go`) performs **zero autho	CODE
LOW	…d/2026/02/GHSA-8wpv-6x3f-3rm5/GHSA-8wpv-6x3f-3rm5.json	10	"details": "### Summary\nA stored Cross-site Scripting (XSS) vulnerability was identified in the Identity Name of the	CODE
LOW	…d/2026/02/GHSA-h79m-5jjm-jm4q/GHSA-h79m-5jjm-jm4q.json	10	"details": "### Summary\nA reflected Cross-site Scripting vulnerability was located in the rendering of the ExceptionM	CODE
LOW	…d/2026/02/GHSA-h9fp-p2p9-873q/GHSA-h9fp-p2p9-873q.json	10	"details": "### Summary\nA stored Cross-site Scripting (XSS) vulnerability was identified in the RSE metadata of the W	CODE
LOW	…d/2026/02/GHSA-rwj9-7j48-9f7q/GHSA-rwj9-7j48-9f7q.json	10	"details": "### Summary\nA stored Cross-site Scripting (XSS) vulnerability was identified in the Custom Rules function	CODE
LOW	…d/2026/02/GHSA-fq4f-4738-rqxm/GHSA-fq4f-4738-rqxm.json	10	"details": "### Summary\nA stored Cross-site Scripting (XSS) vulnerability was identified in the Custom RSE Attribute	CODE
LOW	…d/2026/10/GHSA-5ghw-9mgr-jvx2/GHSA-5ghw-9mgr-jvx2.json	10	"details": "### Impact\nThe input-type cell renderers copy every entry of the renderer's `attributes` option onto the	CODE
LOW	…d/2026/10/GHSA-g73g-hqqh-jr95/GHSA-g73g-hqqh-jr95.json	8	"details": "## Summary\n\nNodemailer's address parser has three published, patched fixes for RFC 5322 comment `( ... )	CODE
LOW⚡	…d/2026/07/GHSA-45gf-fjxp-cjpq/GHSA-45gf-fjxp-cjpq.json	10	"details": "## Server-Side Request Forgery (SSRF) in `upload_ad_image` via Unrestricted `image_url` Fetch\n\n### Summa	CODE
LOW	…d/2026/07/GHSA-gvwx-54wh-qm9j/GHSA-gvwx-54wh-qm9j.json	10	"details": "## Summary\n\n`node-tar` strips trailing `NUL` bytes from long-name (`L`) and long-linkpath (`K`) GNU exte	CODE
LOW	…d/2026/07/GHSA-p7w7-4929-vpj5/GHSA-p7w7-4929-vpj5.json	8	"details": "### Summary\n\n`@dynatrace-oss/dynatrace-mcp-server` v1.8.5 exposes an HTTP transport mode (`--http` flag)	CODE
LOW	…d/2026/09/GHSA-hgcf-4mq8-5266/GHSA-hgcf-4mq8-5266.json	10	"details": "## Environment\n\n- Project: `sooperset/mcp-atlassian`\n- Affected function: `validate_url_for_ssrf()`\n-	CODE
LOW	…d/2026/09/GHSA-2jx3-ff3v-j7jj/GHSA-2jx3-ff3v-j7jj.json	8	"details": "> [!NOTE]\n> This finding was identified during an agentic unsafe Rust code review performed by Gemini AI,	CODE
LOW	…d/2026/09/GHSA-2jx3-ff3v-j7jj/GHSA-2jx3-ff3v-j7jj.json	8	"details": "> [!NOTE]\n> This finding was identified during an agentic unsafe Rust code review performed by Gemini AI,	CODE
LOW	…d/2026/09/GHSA-w6f5-v2h6-g786/GHSA-w6f5-v2h6-g786.json	10	"details": "### Summary\n\nAn improper CRLF neutralization flaw in Predis' pipeline handling on\naggregate connections	CODE
LOW⚡	…d/2026/01/GHSA-6jxm-fv7w-rw5j/GHSA-6jxm-fv7w-rw5j.json	10	"details": "### Server-Side Request Forgery (SSRF) via HTML Check CSS Download\n\nThe HTML Check feature (`/api/v1/mes	CODE
LOW	…d/2026/06/GHSA-hxpf-9xvq-wph8/GHSA-hxpf-9xvq-wph8.json	10	"details": "### Summary\n\nThe `netlicensing_get_product` MCP tool in `netlicensing-mcp` interpolates a caller-control	CODE
LOW	…d/2026/06/GHSA-x6fg-52vr-hj4w/GHSA-x6fg-52vr-hj4w.json	10	"details": "### Summary\nAn authenticated non-admin user who owns any server can create or update a NAT profile whose	CODE
LOW	…d/2026/06/GHSA-cwj8-7gp2-ggcw/GHSA-cwj8-7gp2-ggcw.json	10	"details": "# praisonai-platform: default JWT signing secret `dev-secret-change-me`\n\nResearcher: Kai Aizen — Sna	CODE
LOW	…d/2026/06/GHSA-hmw2-7cc7-3qxx/GHSA-hmw2-7cc7-3qxx.json	10	"details": "## Summary\n\n`form-data` builds `multipart/form-data` request bodies. Through v4.0.5, the `field` name pa	CODE
LOW	…d/2026/06/GHSA-c969-5x3p-vq3v/GHSA-c969-5x3p-vq3v.json	10	"details": "## Summary\n\nThe email search tool in `src/praisonai-agents/praisonaiagents/tools/email_tools.py` constru	CODE
LOW	…d/2021/06/GHSA-9gwx-9cwp-5c2m/GHSA-9gwx-9cwp-5c2m.json	10	"details": "### Impact\n\nOpencast is vulnerable to the [Billion laughs attack](https://en.wikipedia.org/wiki/Billion_	CODE

Excessive Try-Catch Wrapping1 hit · 2 pts

Severity	File	Line	Snippet	Context
MEDIUM	…d/2026/09/GHSA-6m44-fpc8-c3rq/GHSA-6m44-fpc8-c3rq.json	10	"details": "## Summary\nMistune v3.3.2 is vulnerable to a Denial of Service (DoS) attack via uncontrolled recursion in	CODE

Over-Commented Block1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	…workflows/delete_staging_and_head_branches_writer.yaml	321	# having to fail.	COMMENT

github/advisory-database

Open-Source Code Quality, Security and Technical Debt Review