GHSA-qg2g-g9w3-m5h8Published
ToolHive: containerized MCP servers can reach host services via host.docker.internal, enabling lateral movement
osv · CVE-2026-58197 · GO-2026-6526
Go: github.com/stacklok/toolhive
Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Advisory catalog
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
Collected statements
698779 source statements · aliases may refer to the same vulnerabilityGHSA-gjw4-3v3v-rqxgPublished
Capsule: Tenant owner bypasses Capsule's forbidden namespace/service/node label and annotation enforcement
osv · CVE-2026-61672 · GO-2026-6520
Go: github.com/projectcapsule/capsule
GHSA-xwmw-prc4-v3crPublished
Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion
osv · CVE-2026-101062 · GO-2026-6530
Go: github.com/obot-platform/obot
GO-2026-6530Published
Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion in github.com/obot-platform/obot
osv · CVE-2026-101062 · GHSA-xwmw-prc4-v3cr
Go: github.com/obot-platform/obot
GHSA-vr5f-w35q-98jpPublished
Perses's unvalidated project parameter enables filesystem path traversal
osv · CVE-2026-63445 · GO-2026-6528
Go: github.com/perses/perses
GHSA-jgh3-fggc-mcpmPublished
Obot: Server-Side Request Forgery via remote MCP server URL
osv · CVE-2026-101064 · GO-2026-6522
Go: github.com/obot-platform/obot
GO-2026-6522Published
Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot
osv · CVE-2026-101064 · GHSA-jgh3-fggc-mcpm
Go: github.com/obot-platform/obot
GHSA-9gm5-9rfh-m6vxPublished
CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP
osv · CVE-2026-86003 · GO-2026-6506
Go: github.com/coredns/coredns
CVE-2026-100607Published
Flowise through 3.1.4 Authentication Bypass via Email-Only SSO
cve-program ·
Vendor product: Flowise
CVE-2026-97399Published
One-byte overread in strncasecmp on Power8
cve-program ·
Vendor product: glibc
CVE-2026-100603Published
ClawHub before 8c2de6c506 Skill Hiding via Coordinated Reports
cve-program ·
Vendor product: clawhub
CVE-2026-100711Published
froxlor before 2.3.12 Authentication Bypass via Session Persistence
cve-program ·
Vendor product: froxlor
CVE-2026-100314Published
mathurvishal CloudClassroom-PHP-Project updatedetailsfromstudent.php sql injection
cve-program ·
Vendor product: CloudClassroom-PHP-Project
CVE-2026-100311Published
mathurvishal CloudClassroom-PHP-Project Faculty Video Management managevideos2.php cross site scripting
cve-program ·
Vendor product: CloudClassroom-PHP-Project
CVE-2026-100599Published
OpenClaw 2026.5.1 before 2026.7.1 Remote Code Execution via googlemeet.chrome
cve-program ·
Vendor product: OpenClaw
GO-2026-6540Published
nginx ignition has Unauthenticated Admin Account Creation via Onboarding Race Condition in github.com/lucasdillmann/nginx-ignition
osv · CVE-2026-61628 · GHSA-pxcx-fv34-x9p5
Go: github.com/lucasdillmann/nginx-ignition
GO-2026-6539Published
nginx ignition has ParseAcceptLanguage `_` separator bypass that enables ~75x CPU amplification via Accept-Language header in i18nMiddleware in github.com/lucasdillmann/nginx-ignition
osv · CVE-2026-61629 · GHSA-jr34-h97m-9hpx
Go: github.com/lucasdillmann/nginx-ignition
GO-2026-6537Published
nginx ignition has TOTP Reuse During Validity Window in github.com/lucasdillmann/nginx-ignition
osv · CVE-2026-61630 · GHSA-hf33-q6cf-c66f
Go: github.com/lucasdillmann/nginx-ignition
GO-2026-6544Published
Grafana Loki datasource plugin's callResource handler contains a path traversal vulnerability. in github.com/grafana/grafana
osv · CVE-2026-42129 · GHSA-f74p-cwhp-x2wx
Go: github.com/grafana/grafana · Go: github.com/grafana/grafana · Go: github.com/grafana/grafana
GO-2026-6529Published
AnyCable: Telemetry Subsystem Contains Hardcoded Authentication Token and Transmits CLI Arguments Including Secrets in github.com/anycable/anycable-go
osv · CVE-2026-63406 · GHSA-w72w-9qmj-c9qm
Go: github.com/anycable/anycable-go
GO-2026-6543Published
Canonical ADSys Uses a Less Trusted Source in github.com/ubuntu/adsys
osv · CVE-2026-12249 · GHSA-crm4-q7v4-c2r2
Go: github.com/ubuntu/adsys
GO-2026-6519Published
Capsule: hostnameRegexHandler.OnUpdate validates stale (old) Tenant regex, allowing invalid AllowedHostnames regex to bypass webhook validation in github.com/projectcapsule/capsule
osv · CVE-2026-61795 · GHSA-f94q-w3w8-cj67
Go: github.com/projectcapsule/capsule
GO-2026-6528Published
Perses's unvalidated project parameter enables filesystem path traversal in github.com/perses/perses
osv · CVE-2026-63445 · GHSA-vr5f-w35q-98jp
Go: github.com/perses/perses
GO-2026-6527Published
zot: Bearer authentication maps DELETE to push scope, allowing unauthorized deletion in zotregistry.dev/zot
osv · CVE-2026-61833 · GHSA-qg67-7m6v-qg25
Go: zotregistry.dev/zot · Go: zotregistry.dev/zot/v2
GO-2026-6538Published
k8saudit shipped rules do not detect privileged/sensitive settings on init or ephemeral containers in github.com/falcosecurity/plugins/plugins/k8saudit
osv · GHSA-jhjp-4c2q-xmx4
Go: github.com/falcosecurity/plugins/plugins/k8saudit · Go: github.com/falcosecurity/plugins/plugins/k8saudit-aks · Go: github.com/falcosecurity/plugins/plugins/k8saudit-eks
GO-2026-6523Published
Convoy: Cross-Tenant Source IDOR Leaks Plaintext Message Broker Credentials in github.com/frain-dev/convoy
osv · CVE-2026-81505 · GHSA-p5vg-v7mj-f6q4
Go: github.com/frain-dev/convoy
GO-2026-6521Published
Capsule: Malformed ForbiddenAnnotations.Regex can bypass Tenant validation and trigger namespace admission panic in github.com/projectcapsule/capsule
osv · CVE-2026-61794 · GHSA-gxjc-74v5-3vx3
Go: github.com/projectcapsule/capsule
GO-2026-6488Published
OpenFGA: ListUsers returns a deliberately-excluded user when a `but not` exclusion under a type-bound wildcard is intersected (`and`) with another relation that also grants that user in github.com/openfga/openfga
osv · CVE-2026-61709 · GHSA-g3pg-frfm-pr2m
Go: github.com/openfga/openfga
GO-2026-6526Published
ToolHive: containerized MCP servers can reach host services via host.docker.internal, enabling lateral movement in github.com/stacklok/toolhive
osv · CVE-2026-58197 · GHSA-qg2g-g9w3-m5h8
Go: github.com/stacklok/toolhive
GO-2026-6507Published
CoreDNS: Unauthenticated memory exhaustion in custom transports in github.com/coredns/coredns
osv · CVE-2026-82399 · GHSA-mrg3-qvqr-jw29
Go: github.com/coredns/coredns
GO-2026-6514Published
Perses's missing authorization in datasource proxy allows cross-scope secret disclosure in github.com/perses/perses
osv · CVE-2026-63199 · GHSA-4227-9989-jrhx
Go: github.com/perses/perses
GO-2026-6515Published
Process Compose: Browser DNS rebinding lets websites control local process-compose MCP tools in github.com/f1bonacc1/process-compose
osv · CVE-2026-77339 · GHSA-5gm3-9crp-6g3v
Go: github.com/f1bonacc1/process-compose
GO-2026-6508Published
OpenTelemetry-Go: Log gRPC exporter ignores env TLS certs, bypassing mTLS/pinning in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc
osv · CVE-2026-81871 · GHSA-w34q-cm8f-9c5x
Go: go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc
GO-2026-6490Published
Centrifugo: Client-forgeable headers emulation lets any client spoof headers forwarded to proxy backends in github.com/centrifugal/centrifugo
osv · CVE-2026-71485 · GHSA-9468-v6mj-fppw
Go: github.com/centrifugal/centrifugo · Go: github.com/centrifugal/centrifugo/v3 · Go: github.com/centrifugal/centrifugo/v4
GO-2026-6484Published
Mattermost doesn't validate channel ownership of an existing subscription before applying edits in github.com/mattermost/mattermost-server
osv · CVE-2026-6062 · GHSA-mxq2-5jpg-7474
Go: github.com/mattermost/mattermost-server
GO-2026-6482Published
Mattermost doesn't invalidate cached authentication state for active WebSocket connections during global session revocation in github.com/mattermost/mattermost-server
osv · CVE-2026-9162 · GHSA-h998-hxxj-8q83
Go: github.com/mattermost/mattermost-server
GO-2026-6495Published
Skipper has OPA body-authz bypass: truncated_body mitigation fails open on chunked/HTTP-2 (incomplete fix GHSA-8qqm-fp2q-v734) in github.com/zalando/skipper
osv · CVE-2026-86043 · GHSA-5gpm-rgj3-9q76
Go: github.com/zalando/skipper
GO-2026-6506Published
CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP in github.com/coredns/coredns
osv · CVE-2026-86003 · GHSA-9gm5-9rfh-m6vx
Go: github.com/coredns/coredns
GO-2026-6487Published
emp3r0r has an unauthenticated HTTP Polling DoS in github.com/jm33-m0/emp3r0r/core
osv · CVE-2026-61554 · GHSA-4595-rvpx-4q34
Go: github.com/jm33-m0/emp3r0r/core
GO-2026-6516Published
AnyCable: Pusher REST API Does Not Verify Request Body MD5 Enabling Signed-Request Replay with Arbitrary Body in github.com/anycable/anycable-go
osv · CVE-2026-63405 · GHSA-5p54-whvp-x327
Go: github.com/anycable/anycable-go
GO-2026-6520Published
Capsule: Tenant owner bypasses Capsule's forbidden namespace/service/node label and annotation enforcement in github.com/projectcapsule/capsule
osv · CVE-2026-61672 · GHSA-gjw4-3v3v-rqxg
Go: github.com/projectcapsule/capsule
GO-2026-6517Published
kcp front-proxy does not strip inbound X-Remote-* identity headers, allowing any authenticated client to inject groups/warrants and impersonate system:masters in any workspace in github.com/kcp-dev/kcp
osv · CVE-2026-61682 · GHSA-c8w2-fgvx-vhv4
Go: github.com/kcp-dev/kcp
GO-2026-6480Published
Mattermost doesn't enforce administrator authorization on the {{setDefaultInstance}} call within the {{/gitlab connect}} command handler in github.com/mattermost/mattermost-server
osv · CVE-2026-5139 · GHSA-2g8v-grq3-hq2g
Go: github.com/mattermost/mattermost-server
GO-2026-6518Published
Perses's project query parameter authorization bypass exposes cross-project resources in github.com/perses/perses
osv · CVE-2026-63458 · GHSA-cjgj-2fwf-4c2w
Go: github.com/perses/perses
GO-2026-6483Published
Mattermost doesn't authenticate Atlassian Connect installed callbacks, allowing a remote unauthenticated attacker to inject a rogue sharedSecret in github.com/mattermost/mattermost-server
osv · CVE-2026-6673 · GHSA-jqgv-39mg-7c2r
Go: github.com/mattermost/mattermost-server
GO-2026-6485Published
Netmaker has a boolean‑based SQL Injection in github.com/gravitl/netmaker
osv · CVE-2026-32599 · GHSA-r8cr-4f9w-7r75
Go: github.com/gravitl/netmaker
GO-2026-6481Published
Mattermost doesn't enforce bot-specific permission checks on the user active status endpoint in github.com/mattermost/mattermost-server
osv · CVE-2026-8074 · GHSA-g5vr-6pgg-74qv
Go: github.com/mattermost/mattermost-server
CVE-2026-100715Published
Froxlor before 2.3.12 Arbitrary File Deletion via Symlink
cve-program ·
Vendor product: froxlor
CVE-2026-46376Published
FreePBX: Unauthenticated Use of Hard-Coded Credentials Vulnerability in FreePBX UCP Interface
cve-program ·
Vendor product: security-reporting
CVE-2026-100628Published
capgo.app before 12.128.12 Authentication Bypass via apikey
cve-program ·
Vendor product: capgo.app
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.