Skip to content

Commit 38987a3

Browse files
advisory-database[bot]advisory-database[bot]
committed
Publish Advisories
GHSA-26pp-8wgv-hjvm GHSA-46r5-x6jq-v8g6 GHSA-69w3-r845-3855 GHSA-8ffj-4hx4-9pgf GHSA-92pp-h63x-v22m GHSA-pr46-2v3c-5356 GHSA-r5rp-j6wh-rvv4 GHSA-rfgh-63mg-8pwm GHSA-wmmm-f939-6g9c GHSA-xf4j-xp2r-rqqx GHSA-xmrv-pmrh-hhx2 GHSA-xpcf-pg52-r92g
1 parent 08a483c commit 38987a3

12 files changed

Lines changed: 903 additions & 9 deletions

File tree

‎advisories/github-reviewed/2026/04/GHSA-26pp-8wgv-hjvm/GHSA-26pp-8wgv-hjvm.json‎

Lines changed: 63 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,63 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-26pp-8wgv-hjvm",
4+
"modified": "2026-04-08T00:17:02Z",
5+
"published": "2026-04-08T00:17:02Z",
6+
"aliases": [],
7+
"summary": "Hono missing validation of cookie name on write path in setCookie()",
8+
"details": "## Summary\n\nCookie names are not validated on the write path when using `setCookie()`, `serialize()`, or `serializeSigned()` to generate Set-Cookie headers.\n\nWhile certain cookie attributes such as domain and path are validated, the cookie name itself may contain invalid characters.\n\nThis results in inconsistent handling of cookie names between parsing (read path) and serialization (write path).\n\n## Details\n\nWhen applications use `setCookie()`, `serialize()`, or `serializeSigned()` with a user-controlled cookie name, invalid values (e.g., containing control characters such as `\\r` or `\\n`) can be used to construct malformed `Set-Cookie` header values.\n\nFor example:\n\n```\nSet-Cookie: legit\nX-Injected: evil=value\n```\n\nHowever, in modern runtimes such as Node.js and Cloudflare Workers, such invalid header values are rejected and result in a runtime error before the response is sent.\n\nAs a result, the reported header injection / response splitting behavior could not be reproduced in these environments.\n\n## Impact\n\nApplications that pass untrusted input as the cookie name to `setCookie()`, `serialize()`, or `serializeSigned()` may encounter runtime errors due to invalid header values.\n\nIn tested environments, malformed `Set-Cookie` headers are rejected before being sent, and the reported header injection behavior could not be reproduced.\n\nThis issue primarily affects correctness and robustness rather than introducing a confirmed exploitable vulnerability.",
9+
"severity": [
10+
{
11+
"type": "CVSS_V3",
12+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
13+
}
14+
],
15+
"affected": [
16+
{
17+
"package": {
18+
"ecosystem": "npm",
19+
"name": "hono"
20+
},
21+
"ranges": [
22+
{
23+
"type": "ECOSYSTEM",
24+
"events": [
25+
{
26+
"introduced": "0"
27+
},
28+
{
29+
"fixed": "4.12.12"
30+
}
31+
]
32+
}
33+
]
34+
}
35+
],
36+
"references": [
37+
{
38+
"type": "WEB",
39+
"url": "https://github.com/honojs/hono/security/advisories/GHSA-26pp-8wgv-hjvm"
40+
},
41+
{
42+
"type": "WEB",
43+
"url": "https://github.com/honojs/hono/commit/a586cd72e3f6122792e631ecf1817e5cabb803ec"
44+
},
45+
{
46+
"type": "PACKAGE",
47+
"url": "https://github.com/honojs/hono"
48+
},
49+
{
50+
"type": "WEB",
51+
"url": "https://github.com/honojs/hono/releases/tag/v4.12.12"
52+
}
53+
],
54+
"database_specific": {
55+
"cwe_ids": [
56+
"CWE-113"
57+
],
58+
"severity": "MODERATE",
59+
"github_reviewed": true,
60+
"github_reviewed_at": "2026-04-08T00:17:02Z",
61+
"nvd_published_at": null
62+
}
63+
}

advisories/unreviewed/2026/04/GHSA-46r5-x6jq-v8g6/GHSA-46r5-x6jq-v8g6.json renamed to advisories/github-reviewed/2026/04/GHSA-46r5-x6jq-v8g6/GHSA-46r5-x6jq-v8g6.json

Lines changed: 34 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1,19 +1,40 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-46r5-x6jq-v8g6",
4-
"modified": "2026-04-07T15:30:50Z",
4+
"modified": "2026-04-08T00:18:40Z",
55
"published": "2026-04-07T15:30:50Z",
66
"aliases": [
77
"CVE-2026-33866"
88
],
9+
"summary": "MLflow is vulnerable to an authorization bypass affecting the AJAX endpoint",
910
"details": "MLflow is vulnerable to an authorization bypass affecting the AJAX endpoint used to download saved model artifacts. Due to missing access‑control validation, a user without permissions to a given experiment can directly query this endpoint and retrieve model artifacts they are not authorized to access.\n\n \nThis issue affects MLflow version through 3.10.1",
1011
"severity": [
1112
{
1213
"type": "CVSS_V4",
13-
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
14+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"
15+
}
16+
],
17+
"affected": [
18+
{
19+
"package": {
20+
"ecosystem": "PyPI",
21+
"name": "mlflow"
22+
},
23+
"ranges": [
24+
{
25+
"type": "ECOSYSTEM",
26+
"events": [
27+
{
28+
"introduced": "0"
29+
},
30+
{
31+
"last_affected": "3.10.1"
32+
}
33+
]
34+
}
35+
]
1436
}
1537
],
16-
"affected": [],
1738
"references": [
1839
{
1940
"type": "ADVISORY",
@@ -23,18 +44,26 @@
2344
"type": "WEB",
2445
"url": "https://github.com/mlflow/mlflow/pull/21708"
2546
},
47+
{
48+
"type": "WEB",
49+
"url": "https://github.com/mlflow/mlflow/commit/005b959cacda05d1423356cfcbd9ebeda8ff96a7"
50+
},
2651
{
2752
"type": "WEB",
2853
"url": "https://cert.pl/en/posts/2026/04/CVE-2026-33865"
54+
},
55+
{
56+
"type": "PACKAGE",
57+
"url": "https://github.com/mlflow/mlflow"
2958
}
3059
],
3160
"database_specific": {
3261
"cwe_ids": [
3362
"CWE-862"
3463
],
3564
"severity": "MODERATE",
36-
"github_reviewed": false,
37-
"github_reviewed_at": null,
65+
"github_reviewed": true,
66+
"github_reviewed_at": "2026-04-08T00:18:40Z",
3867
"nvd_published_at": "2026-04-07T13:16:47Z"
3968
}
4069
}

advisories/unreviewed/2026/04/GHSA-69w3-r845-3855/GHSA-69w3-r845-3855.json renamed to advisories/github-reviewed/2026/04/GHSA-69w3-r845-3855/GHSA-69w3-r845-3855.json

Lines changed: 33 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,19 +1,40 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-69w3-r845-3855",
4-
"modified": "2026-04-07T06:30:28Z",
4+
"modified": "2026-04-08T00:17:56Z",
55
"published": "2026-04-07T06:30:28Z",
66
"aliases": [
77
"CVE-2026-1839"
88
],
9+
"summary": "HuggingFace Transformers allows for arbitrary code execution in the `Trainer` class",
910
"details": "A vulnerability in the HuggingFace Transformers library, specifically in the `Trainer` class, allows for arbitrary code execution. The `_load_rng_state()` method in `src/transformers/trainer.py` at line 3059 calls `torch.load()` without the `weights_only=True` parameter. This issue affects all versions of the library supporting `torch>=2.2` when used with PyTorch versions below 2.6, as the `safe_globals()` context manager provides no protection in these versions. An attacker can exploit this vulnerability by supplying a malicious checkpoint file, such as `rng_state.pth`, which can execute arbitrary code when loaded. The issue is resolved in version v5.0.0rc3.",
1011
"severity": [
1112
{
1213
"type": "CVSS_V3",
1314
"score": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:H"
1415
}
1516
],
16-
"affected": [],
17+
"affected": [
18+
{
19+
"package": {
20+
"ecosystem": "PyPI",
21+
"name": "transformers"
22+
},
23+
"ranges": [
24+
{
25+
"type": "ECOSYSTEM",
26+
"events": [
27+
{
28+
"introduced": "0"
29+
},
30+
{
31+
"fixed": "5.0.0rc3"
32+
}
33+
]
34+
}
35+
]
36+
}
37+
],
1738
"references": [
1839
{
1940
"type": "ADVISORY",
@@ -23,6 +44,14 @@
2344
"type": "WEB",
2445
"url": "https://github.com/huggingface/transformers/commit/03c8082ba4594c9b8d6fe190ca9bed0e5f8ca396"
2546
},
47+
{
48+
"type": "PACKAGE",
49+
"url": "https://github.com/huggingface/transformers"
50+
},
51+
{
52+
"type": "WEB",
53+
"url": "https://github.com/huggingface/transformers/releases/tag/v5.0.0rc3"
54+
},
2655
{
2756
"type": "WEB",
2857
"url": "https://huntr.com/bounties/3c77bb97-e493-493d-9a88-c57f5c536485"
@@ -33,8 +62,8 @@
3362
"CWE-502"
3463
],
3564
"severity": "MODERATE",
36-
"github_reviewed": false,
37-
"github_reviewed_at": null,
65+
"github_reviewed": true,
66+
"github_reviewed_at": "2026-04-08T00:17:56Z",
3867
"nvd_published_at": "2026-04-07T06:16:41Z"
3968
}
4069
}

‎advisories/github-reviewed/2026/04/GHSA-8ffj-4hx4-9pgf/GHSA-8ffj-4hx4-9pgf.json‎

Lines changed: 64 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,64 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-8ffj-4hx4-9pgf",
4+
"modified": "2026-04-08T00:17:50Z",
5+
"published": "2026-04-08T00:17:50Z",
6+
"aliases": [
7+
"CVE-2026-39413"
8+
],
9+
"summary": "lightrag-hku: JWT Algorithm Confusion Vulnerability ",
10+
"details": "## Summary\nThe LightRAG API is vulnerable to a JWT algorithm confusion attack where an attacker can forge tokens by specifying 'alg': 'none' in the JWT header. Since the `jwt.decode()` call does not explicitly deny the 'none' algorithm, a crafted token without a signature will be accepted as valid, leading to unauthorized access.\n\n## Details\nIn `lightrag/api/auth.py` at line 128, the `validate_token` method calls:\n\n```python\npayload = jwt.decode(token, self.secret, algorithms=[self.algorithm])\n```\n\nThis allows any algorithm listed in the token's header to be processed, including 'none'. The code does not explicitly specify that 'none' is not allowed, making it possible for an attacker to bypass authentication.\n\n## PoC\nAn attacker can generate a JWT with the following structure:\n\n```json\n{\n \"header\": {\n \"alg\": \"none\",\n \"typ\": \"JWT\"\n },\n \"payload\": {\n \"sub\": \"admin\",\n \"exp\": 1700000000,\n \"role\": \"admin\"\n }\n}\n```\n\nThen send a request like:\n\n```bash\ncurl -H \"Authorization: Bearer eyJhbGciOiJub25lIiwidHlwIjoiSldUIn0.eyJzdWIiOiJhZG1pbiIsImV4cCI6MTcwMDAwMDAwMCwicm9sZSI6ImFkbWluIn0.\" http://localhost:8000/api/protected-endpoint\n```\n\n## Impact\nAn attacker can impersonate any user, including administrators, by forging a JWT with 'alg': 'none', gaining full access to protected resources without needing valid credentials.\n\n## Recommended Fix\nExplicitly specify allowed algorithms and exclude 'none'. Modify the `validate_token` method to:\n\n```python\nallowed_algorithms = [self.algorithm] if self.algorithm != 'none' else ['HS256', 'HS384', 'HS512']\npayload = jwt.decode(token, self.secret, algorithms=allowed_algorithms)\n```\n\nOr better yet, hardcode the expected algorithm(s):\n\n```python\npayload = jwt.decode(token, self.secret, algorithms=['HS256'])\n```",
11+
"severity": [
12+
{
13+
"type": "CVSS_V3",
14+
"score": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N"
15+
}
16+
],
17+
"affected": [
18+
{
19+
"package": {
20+
"ecosystem": "PyPI",
21+
"name": "lightrag-hku"
22+
},
23+
"ranges": [
24+
{
25+
"type": "ECOSYSTEM",
26+
"events": [
27+
{
28+
"introduced": "0"
29+
},
30+
{
31+
"fixed": "1.4.14"
32+
}
33+
]
34+
}
35+
],
36+
"database_specific": {
37+
"last_known_affected_version_range": "<= 1.4.13"
38+
}
39+
}
40+
],
41+
"references": [
42+
{
43+
"type": "WEB",
44+
"url": "https://github.com/HKUDS/LightRAG/security/advisories/GHSA-8ffj-4hx4-9pgf"
45+
},
46+
{
47+
"type": "WEB",
48+
"url": "https://github.com/HKUDS/LightRAG/commit/728f2e54509d93e0a44f929c7f83f2c88d6d291b"
49+
},
50+
{
51+
"type": "PACKAGE",
52+
"url": "https://github.com/HKUDS/LightRAG"
53+
}
54+
],
55+
"database_specific": {
56+
"cwe_ids": [
57+
"CWE-347"
58+
],
59+
"severity": "MODERATE",
60+
"github_reviewed": true,
61+
"github_reviewed_at": "2026-04-08T00:17:50Z",
62+
"nvd_published_at": null
63+
}
64+
}

‎advisories/github-reviewed/2026/04/GHSA-92pp-h63x-v22m/GHSA-92pp-h63x-v22m.json‎

Lines changed: 65 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,65 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-92pp-h63x-v22m",
4+
"modified": "2026-04-08T00:16:39Z",
5+
"published": "2026-04-08T00:16:39Z",
6+
"aliases": [
7+
"CVE-2026-39406"
8+
],
9+
"summary": "@hono/node-server: Middleware bypass via repeated slashes in serveStatic",
10+
"details": "## Summary\n\nA path handling inconsistency in `serveStatic` allows protected static files to be accessed by using repeated slashes (`//`) in the request path.\n\nWhen route-based middleware (e.g., `/admin/*`) is used for authorization, the router may not match paths containing repeated slashes, while `serveStatic` resolves them as normalized paths. This can lead to a middleware bypass.\n\n## Details\n\nThe routing layer and `serveStatic` handle repeated slashes differently.\n\nFor example:\n\n- `/admin/secret.txt` => matches `/admin/*`\n- `//admin/secret.txt` => may not match `/admin/*`\n\nThis inconsistency allows a request such as:\n\n```\nGET //admin/secret.txt\n```\n\nto bypass middleware registered on `/admin/*` and access protected files.\n\n## Impact\n\nAn attacker can access static files that are intended to be protected by route-based middleware by using repeated slashes in the request path.\n\nThis can lead to unauthorized access to sensitive files under the static root.\n\nThis issue affects applications that rely on `serveStatic` together with route-based middleware for access control.",
11+
"severity": [
12+
{
13+
"type": "CVSS_V3",
14+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
15+
}
16+
],
17+
"affected": [
18+
{
19+
"package": {
20+
"ecosystem": "npm",
21+
"name": "@hono/node-server"
22+
},
23+
"ranges": [
24+
{
25+
"type": "ECOSYSTEM",
26+
"events": [
27+
{
28+
"introduced": "0"
29+
},
30+
{
31+
"fixed": "1.19.13"
32+
}
33+
]
34+
}
35+
]
36+
}
37+
],
38+
"references": [
39+
{
40+
"type": "WEB",
41+
"url": "https://github.com/honojs/node-server/security/advisories/GHSA-92pp-h63x-v22m"
42+
},
43+
{
44+
"type": "WEB",
45+
"url": "https://github.com/honojs/node-server/commit/025c30f55d589ddbe6048b151d77e904f67a8cc2"
46+
},
47+
{
48+
"type": "PACKAGE",
49+
"url": "https://github.com/honojs/node-server"
50+
},
51+
{
52+
"type": "WEB",
53+
"url": "https://github.com/honojs/node-server/releases/tag/v1.19.13"
54+
}
55+
],
56+
"database_specific": {
57+
"cwe_ids": [
58+
"CWE-22"
59+
],
60+
"severity": "MODERATE",
61+
"github_reviewed": true,
62+
"github_reviewed_at": "2026-04-08T00:16:39Z",
63+
"nvd_published_at": null
64+
}
65+
}

0 commit comments

Comments
 (0)