Blue Team & Defensive Security

Upgrade now

tumf/mcp-shell-server v1.1.3 Security relevant · 2h

RCE / SSRF

Reject sed/GNU find/AWK exec

Open

Config change

dozzle v10.6.12 Security relevant · 13h

Auth RBAC

Auth requirement + command palette + password fix

Open

Review required

GlobaLeaks v5.0.99 Security relevant · 20h

Auth RBAC

OTP cooldowns + usage alerts

Open

Config change

freema/openclaw-mcp 1.7.0 Security relevant · 22h

Auth RBAC

CORS disabled + task scoping

Open

Upgrade now

melandlabs/openloomi](https: v0.8.8 Security relevant · 2d

Auth

Missing authorization IDOR

Open

Upgrade now

loki v3.7.4 Security relevant · 2d

Dependencies

Security patches + deps bump

Open

Upgrade now

goklab/guardvibe v3.31.0 Security relevant · 3d

Auth RCE / SSRF Dependencies

Auth.js + Next.js fixes

Open

Upgrade now

MarcelRoozekrans/roslyn-codelens-mcp v2.13.0 Security relevant · 4d

Dependencies

brace-expansion DoS fix

Open

Upgrade now

tumf/mcp-shell-server v1.1.2 Security relevant · 8d

RCE / SSRF

Git config override rejection

Open

Upgrade now

NGINX release-1.31.3 Security relevant · 11d

RCE / SSRF

Security fixes for CVEs

Open

Review required

authentik version/2026.2.6 Security relevant · 11d

Auth

Security patches + bug fixes

Open

Review required

isitsecure v0.1.1 Security relevant · 15d

Dependencies

CodeQL fix + Slack YAML repair

Open

Upgrade now

PrivateBin 2.0.5 Security relevant · 15d

Auth RCE / SSRF

XSS fix + copy hint

Open

Upgrade now

flytohub/flyto-core v2.26.8 Security relevant · 16d

RCE / SSRF Breaking upgrade

Five security fixes

Open

Review required

squid-protocol/gitgalaxy](https: v.2.3.1 Security relevant · 19d

Auth RCE / SSRF Dependencies

Security fixes + Golden Crucible

Open

Upgrade now

flytohub/flyto-core v2.26.6 Security relevant · 19d

RCE / SSRF

Security fixes

Open

Upgrade now

Zeek v8.0.9 Security relevant · 20d

RCE / SSRF Breaking upgrade

DoS fixes in analyzers

Open

Review required

PasswordPusher v2.9.2 Security relevant · 20d

Auth Dependencies

Security fix GHSA-59w3-h5v2-c4xw

Open

Review required

Cloudlog 2.8.15 Security relevant · 21d

Auth RCE / SSRF

Database query hardening

Open

Upgrade now

tirreno v0.10.0 Security relevant · 24d

Auth

Session fixation fix

Open

Upgrade now

openvpn v2.7.5 Security relevant · 24d

Auth RCE / SSRF Dependencies

Security fixes + Windows bugfixes + docs

Open

Review required

tumf/mcp-shell-server v1.1.1 Security relevant · 25d

RCE / SSRF

Security hardening of command arguments

Open

Upgrade now

Logsonic v1.4.1 Security relevant · 25d

Dependencies

Dependency security fix

Open

Config change

Latch v1.0.1 Security relevant · 26d

Auth

HMAC authentication

Open

Upgrade now

PasswordPusher v2.8.1 Security relevant · 26d

Auth

URL payload scheme restriction

Open