Skip to content

Commit 3e7da1b

Browse files
advisory-database[bot]advisory-database[bot]
committed
Publish Advisories
GHSA-2xw4-xhqf-2x5p GHSA-529g-c6f2-964g GHSA-vgj5-9p6r-986x
1 parent d78096b commit 3e7da1b

3 files changed

Lines changed: 176 additions & 0 deletions

File tree

‎advisories/unreviewed/2026/02/GHSA-2xw4-xhqf-2x5p/GHSA-2xw4-xhqf-2x5p.json‎

Lines changed: 60 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,60 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-2xw4-xhqf-2x5p",
4+
"modified": "2026-02-07T18:30:27Z",
5+
"published": "2026-02-07T18:30:27Z",
6+
"aliases": [
7+
"CVE-2026-2106"
8+
],
9+
"details": "A vulnerability has been found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. The impacted element is the function addNotice/updateNotice/deleteNotice/batchDeleteNotice of the file dataset\\repos\\warehouse\\src\\main\\java\\com\\yeqifu\\sys\\controller\\NoticeController.java of the component Notice Management. The manipulation leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-2106"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/yeqifu/warehouse/issues/58"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://github.com/yeqifu/warehouse/issues/58#issue-3846664260"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://github.com/yeqifu/warehouse"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://vuldb.com/?ctiid.344682"
41+
},
42+
{
43+
"type": "WEB",
44+
"url": "https://vuldb.com/?id.344682"
45+
},
46+
{
47+
"type": "WEB",
48+
"url": "https://vuldb.com/?submit.745516"
49+
}
50+
],
51+
"database_specific": {
52+
"cwe_ids": [
53+
"CWE-266"
54+
],
55+
"severity": "MODERATE",
56+
"github_reviewed": false,
57+
"github_reviewed_at": null,
58+
"nvd_published_at": "2026-02-07T18:15:47Z"
59+
}
60+
}

‎advisories/unreviewed/2026/02/GHSA-529g-c6f2-964g/GHSA-529g-c6f2-964g.json‎

Lines changed: 56 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,56 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-529g-c6f2-964g",
4+
"modified": "2026-02-07T18:30:27Z",
5+
"published": "2026-02-07T18:30:27Z",
6+
"aliases": [
7+
"CVE-2026-2090"
8+
],
9+
"details": "A vulnerability was determined in SourceCodester Online Class Record System 1.0. This issue affects some unknown processing of the file /admin/message/search.php. Executing a manipulation of the argument term can lead to sql injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-2090"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/xiaoccm07/cve/issues/3"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://vuldb.com/?ctiid.344657"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://vuldb.com/?id.344657"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://vuldb.com/?submit.746551"
41+
},
42+
{
43+
"type": "WEB",
44+
"url": "https://www.sourcecodester.com"
45+
}
46+
],
47+
"database_specific": {
48+
"cwe_ids": [
49+
"CWE-74"
50+
],
51+
"severity": "MODERATE",
52+
"github_reviewed": false,
53+
"github_reviewed_at": null,
54+
"nvd_published_at": "2026-02-07T16:15:47Z"
55+
}
56+
}

‎advisories/unreviewed/2026/02/GHSA-vgj5-9p6r-986x/GHSA-vgj5-9p6r-986x.json‎

Lines changed: 60 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,60 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-vgj5-9p6r-986x",
4+
"modified": "2026-02-07T18:30:27Z",
5+
"published": "2026-02-07T18:30:27Z",
6+
"aliases": [
7+
"CVE-2026-2105"
8+
],
9+
"details": "A flaw has been found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. The affected element is the function addDept/updateDept/deleteDept of the file dataset\\repos\\warehouse\\src\\main\\java\\com\\yeqifu\\sys\\controller\\DeptController.java of the component Department Management. Executing a manipulation can lead to improper authorization. It is possible to launch the attack remotely. The exploit has been published and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The project was informed of the problem early through an issue report but has not responded yet.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-2105"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/yeqifu/warehouse/issues/57"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://github.com/yeqifu/warehouse/issues/57#issue-3846662068"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://github.com/yeqifu/warehouse"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://vuldb.com/?ctiid.344681"
41+
},
42+
{
43+
"type": "WEB",
44+
"url": "https://vuldb.com/?id.344681"
45+
},
46+
{
47+
"type": "WEB",
48+
"url": "https://vuldb.com/?submit.745515"
49+
}
50+
],
51+
"database_specific": {
52+
"cwe_ids": [
53+
"CWE-266"
54+
],
55+
"severity": "MODERATE",
56+
"github_reviewed": false,
57+
"github_reviewed_at": null,
58+
"nvd_published_at": "2026-02-07T17:15:47Z"
59+
}
60+
}

0 commit comments

Comments
 (0)