Labs

Short research notes on newly disclosed vulnerabilities: the problem, the payload, and the fix.

• highCVE-2026-68586

  CVE-2026-68586: SiYuan Missing Publish-Access Filter on Backlink Content Endpoints

  SiYuan's publish mode correctly hides forbidden documents from backlink list results, but the matching content endpoints return those documents' full rendered HTML to any anonymous reader with no…

• high

  CVE-2026-68584: SiYuan Publish Password Authentication Bypass via Unprotected Content Endpoints

  SiYuan's publish-mode password protection can be completely bypassed by anonymous users who call several content endpoints that skip the password check entirely, exposing the full text of…

• highCVE-2026-63376

  CVE-2026-63376: toml Prototype Pollution via __proto__ Key-Path Desynchronization

  The toml npm package lets an attacker corrupt Object.prototype for the entire Node.js process by feeding toml.parse() a crafted TOML document that routes a table path through a scalar value and into…

• highCVE-2026-77465

  CVE-2026-77465: toml Uncontrolled Recursion (DoS)

  The toml npm package crashes any Node.js process that calls toml.parse() on a deeply nested array or inline table, because the Peggy-generated parser has no recursion depth limit, letting an attacker…

• highCVE-2026-56811

  CVE-2026-56811: Phoenix Unbounded Channel Join DoS

  A single WebSocket or LongPoll connection to any Phoenix app can spawn hundreds of thousands of BEAM processes by flooding the socket with phx_join messages, crashing the entire node for all users.

• highCVE-2026-69086

  CVE-2026-69086: SiYuan Attribute-View Path Traversal via Unvalidated avID

  Four read-only attribute-view API endpoints in SiYuan accept a caller-controlled identifier and use it to build a file path without checking that the resulting path stays inside the attribute-view…

• highCVE-2026-79921

  CVE-2026-79921: amqp091-go Broker-Controlled Memory Exhaustion via Oversized Frame

  A malicious AMQP broker can trick the amqp091-go Go client into allocating gigabytes of memory by sending a content-body frame whose declared size exceeds the frame_max limit agreed during connection…

• highCVE-2026-73222

  CVE-2026-73222: claude-code-templates Unauthenticated OS Command Injection (RCE) in Studio Server

  Running 'npx claude-code-templates --studio' starts an HTTP server with no authentication that passes user-controlled data directly into shell commands, letting anyone on the same network or a…

• highCVE-2026-82404

  CVE-2026-82404: @toon-format/toon Prototype Pollution via Untrusted Decode

  The TOON decoder writes attacker-supplied keys like __proto__ directly onto the JavaScript prototype chain, letting anyone who can send TOON input corrupt shared runtime state across every object in…

• highCVE-2026-73292

  CVE-2026-73292: Semaphore UI CSRF Password Takeover

  Semaphore UI lets an attacker silently reset any user's password, including an admin's, by tricking them into visiting a malicious page, because the password-change endpoint had no CSRF protection…

• highCVE-2026-73293

  CVE-2026-73293: Semaphore UI Manager-to-Owner Privilege Escalation via Custom Role Slug Collision

  A project manager in Semaphore UI can hijack owner-level permissions by creating a custom role whose slug matches the built-in manager role, because the role validator neither blocks reserved slug…

• criticalCVE-2026-62682

  CVE-2026-62682: Orval Remote Code Execution via Unescaped Server URL in Template Literal

  When Orval is told to pull the base URL from your OpenAPI spec, a malicious servers[].url value can break out of the generated JavaScript template literal and execute arbitrary code on any machine…