Weekly briefing

SecurityProjectSend 2.0.0 through 2.7.1 Incorrect Authorization via File Version Linking

SecurityQi Addons For Elementor < 1.11.2 - Contributor+ Content Injection via Animated Text Widget

SecurityRclone 1.52.0 before 1.75.2 CSRF via pCloud OAuth Callback

SecurityRclone 1.64.0 before 1.75.2 serve webdav Authentication Bypass via OPTIONS Requests

SecurityRclone before 1.75.2 Path Traversal via serve webdav MKCOL

SecurityRclone before 1.75.2 Path Traversal via translateLink .rclonelink Suffix Trim

SecurityRclone before v1.75.2 B2 Credential Leak on Redirect via --b2-download-url

SecurityRclone v1.68.0 before v1.75.2 Authorization Bypass in serve s3 Multipart Uploads

SecuritySH3 Módulo de Gestão/Módulo de Arrecadação weak password hash

SecuritySiYuan 2.10.0 before 3.8.7 Stored XSS via KaTeX \href in Math Blocks2 source records

Newly collected advisory · 2 entries

• SiYuan 2.10.0 before 3.8.7 Stored XSS via KaTeX \href in Math Blocks

  Newly collected advisory

  CVE-2026-116169

  Assessment context

  Newly collected advisory; observed by ChangeIntel, not the original publication date.

• SiYuan 2.10.0 before 3.8.7 Stored XSS via KaTeX \href in Math Blocks

  Affected-version evidence changed

  CVE-2026-116169

  Assessment context

  Affected-version evidence changed; observed by ChangeIntel, not the original publication date.

SecuritySiYuan 2.9.0 before 3.8.7 XSS via check-auth to Parameter

SecuritySiYuan 3.5.4 before 3.8.7 Sensitive Path Bypass via Windows Extended-Length Prefix2 source records

Affected-version evidence changed · 2 entries

• SiYuan 3.5.4 before 3.8.7 Sensitive Path Bypass via Windows Extended-Length Prefix

  Affected-version evidence changed

  CVE-2026-116171

  Assessment context

  Affected-version evidence changed; observed by ChangeIntel, not the original publication date.

• SiYuan 3.5.4 before 3.8.7 Sensitive Path Bypass via Windows Extended-Length Prefix

  Newly collected advisory

  CVE-2026-116171

  Assessment context

  Newly collected advisory; observed by ChangeIntel, not the original publication date.

SecuritySiYuan 3.6.0 before 3.8.7 Cleartext Transmission via Unenforced networkServeTLS Setting

SecuritySiYuan before v3.8.7 Path Traversal Local File Read via MCP Asset Tool2 source records

Newly collected advisory · 2 entries

• SiYuan before v3.8.7 Path Traversal Local File Read via MCP Asset Tool

  Newly collected advisory

  CVE-2026-116168

  Assessment context

  Newly collected advisory; observed by ChangeIntel, not the original publication date.

• SiYuan before v3.8.7 Path Traversal Local File Read via MCP Asset Tool

  Affected-version evidence changed

  CVE-2026-116168

  Assessment context

  Affected-version evidence changed; observed by ChangeIntel, not the original publication date.

SecuritySiYuan before v3.8.7 SQL Injection via History Search op and query2 source records

Newly collected advisory · 2 entries

• SiYuan before v3.8.7 SQL Injection via History Search op and query

  Newly collected advisory

  CVE-2026-116170

  Assessment context

  Newly collected advisory; observed by ChangeIntel, not the original publication date.

• SiYuan before v3.8.7 SQL Injection via History Search op and query

  Affected-version evidence changed

  CVE-2026-116170

  Assessment context

  Affected-version evidence changed; observed by ChangeIntel, not the original publication date.

SecuritySnipe-IT before 8.5.0 SAML Assertion Replay via Race Condition

SecuritySnipe-IT before 8.6.3 Authentication Bypass via Google SSO Callback

SecuritySnipe-IT before 8.6.3 LDAP StartTLS Downgrade via connectToLdap()

SecuritySnipe-IT before 8.7.0 Missing Encryption via Api AssetsController store

SecuritySourceCodester Performance Indicator System adddealer.php sql injection

SecuritySourceCodester Performance Indicator System deleteproduct.php sql injection

SecuritySourceCodester Performance Indicator System edit_dealer.php sql injection

SecuritySourceCodester Performance Indicator System save_profile.php sql injection

SecurityStarman versions before 0.4019 for Perl allow CPU exhaustion via quadratic regex backtracking when parsing chunked request bodies