Labs

Short research notes on newly disclosed vulnerabilities: the problem, the payload, and the fix.

• highCVE-2026-48815

  CVE-2026-48815: sigstore certificateOIDs Verification Constraint Silently Dropped

  The sigstore npm package accepts a certificateOIDs option to restrict which signing certificates are trusted, but silently discards those constraints before verification, so any certificate that…

• high

  SurrealDB HTTP RPC Session Race Condition Allows Privilege Escalation

  A race condition in SurrealDB's HTTP /rpc endpoint lets an unauthenticated attacker inherit an active authenticated user's session and execute queries with their privileges, including potential root…

• highCVE-2022-43467

  CVE-2022-43467: Open Babel PQS Parser Out-of-Bounds Write

  A crafted PQS chemistry file can overflow a fixed-size stack buffer in Open Babel's parser, enabling arbitrary code execution in any application that opens untrusted chemical files.

• highCVE-2026-49981

  CVE-2026-49981: Twig Sandbox Filter/Tag/Function Allow-list Bypass via Cached Template

  Twig's sandbox allow-list for filters, tags, and functions can be silently skipped when a template is loaded before sandboxing is active, letting untrusted templates call anything they want…

• high

  pay: Paddle Billing Webhook Signature Timing Oracle (CWE-208)

  The pay gem compared Paddle Billing webhook signatures with Ruby's non-constant-time == operator, letting an attacker recover the real HMAC byte-by-byte from response-time differences and forge…

• highCVE-2026-49987

  CVE-2026-49987: repomix Argument Injection via --remote-branch (RCE)

  A crafted branch name passed to repomix's --remote-branch flag is forwarded to git subprocesses without sanitization, letting an attacker inject git options like --upload-pack and execute arbitrary…

• highCVE-2022-43607

  CVE-2022-43607: Open Babel MOL2 Parser Stack Buffer Overflow

  A crafted MOL2 file with an oversized attribute or value string causes Open Babel to write past a fixed 32-byte stack buffer during parsing, potentially leading to arbitrary code execution.

• highCVE-2022-44451

  CVE-2022-44451: Open Babel MSI Parser Uninitialized Pointer Dereference

  Open Babel's MSI chemistry file parser uses an atom pointer before it is ever assigned, letting an attacker trigger arbitrary code execution by feeding it a crafted MSI file.

• highCVE-2022-46289

  CVE-2022-46289: Open Babel ORCA nAtoms Heap Buffer Overflow

  A crafted ORCA chemistry file can trick Open Babel into allocating a tiny heap buffer and then writing atom coordinates past its end, potentially giving an attacker arbitrary code execution.

• highCVE-2026-49986

  CVE-2026-49986: neuro-cortex-memory Untrusted Project Bootstrap Code Execution

  The Cortex MCP server treats any project directory open in Claude Code as a trusted source of executable code, letting an attacker drop a Python script into a crafted repository and have it run…

• highCVE-2022-46290

  CVE-2022-46290: Open Babel ORCA Parser Heap Buffer Overflow

  A crafted ORCA chemistry file can trick Open Babel into writing past the end of a heap buffer, potentially allowing an attacker to execute arbitrary code on any system that parses untrusted files…

• highCVE-2022-46291

  CVE-2022-46291: Open Babel Gaussian Parser Stack Buffer Overflow via translationVectors

  A crafted Gaussian output file can write past the end of a 3-element stack array in Open Babel's chemistry file parser, potentially giving an attacker arbitrary code execution.