Red Team & Offensive Security

Upgrade now

tumf/mcp-shell-server v1.1.3 Security relevant · 3h

RCE / SSRF

Reject sed/GNU find/AWK exec

Open

Review required

I4cTime/quantum_ring v0.13.1 Security relevant · 4h

RCE / SSRF

SSRF IPv6-mapped blocking

Open

Review required

GlobaLeaks v5.0.99 Security relevant · 21h

Auth RBAC

OTP cooldowns + usage alerts

Open

Config change

freema/openclaw-mcp 1.7.0 Security relevant · 1d

Auth RBAC

CORS disabled + task scoping

Open

Upgrade now

melandlabs/openloomi](https: v0.8.8 Security relevant · 2d

Auth

Missing authorization IDOR

Open

Upgrade now

goklab/guardvibe v3.31.0 Security relevant · 3d

Auth RCE / SSRF Dependencies

Auth.js + Next.js fixes

Open

Upgrade now

sysreptor 2026.58 Security relevant · 5d

Auth

Forgot password disablement

Open

Upgrade now

tumf/mcp-shell-server v1.1.2 Security relevant · 8d

RCE / SSRF

Git config override rejection

Open

Upgrade now

NGINX release-1.31.3 Security relevant · 11d

RCE / SSRF

Security fixes for CVEs

Open

Review required

authentik version/2026.2.6 Security relevant · 11d

Auth

Security patches + bug fixes

Open

Review required

isitsecure v0.1.1 Security relevant · 15d

Dependencies

CodeQL fix + Slack YAML repair

Open

Upgrade now

PrivateBin 2.0.5 Security relevant · 15d

Auth RCE / SSRF

XSS fix + copy hint

Open

Upgrade now

flytohub/flyto-core v2.26.8 Security relevant · 16d

RCE / SSRF Breaking upgrade

Five security fixes

Open

Review required

squid-protocol/gitgalaxy](https: v.2.3.1 Security relevant · 19d

Auth RCE / SSRF Dependencies

Security fixes + Golden Crucible

Open

Upgrade now

flytohub/flyto-core v2.26.6 Security relevant · 19d

RCE / SSRF

Security fixes

Open

Upgrade now

Zeek v8.0.9 Security relevant · 20d

RCE / SSRF Breaking upgrade

DoS fixes in analyzers

Open

Review required

PasswordPusher v2.9.2 Security relevant · 20d

Auth Dependencies

Security fix GHSA-59w3-h5v2-c4xw

Open

Upgrade now

openvpn v2.7.5 Security relevant · 24d

Auth RCE / SSRF Dependencies

Security fixes + Windows bugfixes + docs

Open

Review required

tumf/mcp-shell-server v1.1.1 Security relevant · 25d

RCE / SSRF

Security hardening of command arguments

Open

Config change

Latch v1.0.1 Security relevant · 26d

Auth

HMAC authentication

Open

Upgrade now

PasswordPusher v2.8.1 Security relevant · 26d

Auth

URL payload scheme restriction

Open

Review required

GlobaLeaks v5.0.96 Security relevant · 28d

Auth RBAC Breaking upgrade

DPoP + tenant isolation

Open

Upgrade now

goklab/guardvibe v3.29.0 Security relevant · 29d

RCE / SSRF Dependencies Breaking upgrade

CVE-2026-49252 + CVE-2026-55698

Open

Upgrade now

PasswordPusher v2.7.4 Security relevant · 1mo

Dependencies

Security hardening

Open

Upgrade now

goklab/guardvibe v3.28.0 Security · 1mo

Dependencies

i18next prototype pollution fixes

Open

Upgrade now

osquery 5.23.1 Security relevant · 1mo

Heap overflow + use‑after‑free fixes

Open