Labs
Short research notes on newly disclosed vulnerabilities: the problem, the payload, and the fix.
- highCVE-2026-54574
CVE-2026-54574: proot-distro Symlink Escape via Malicious Tar Archive
Installing a crafted tar archive with proot-distro lets an attacker write files anywhere on the host Android filesystem before the container ever runs, because symlink targets inside the archive are…
- highCVE-2026-54727
CVE-2026-54727: proot-distro Container Isolation Bypass via Crafted Restore Archive
A crafted backup archive can trick proot-distro's restore command into copying files between separate containers, leaking secrets or injecting attacker-controlled files across container boundaries.
- highCVE-2026-11393
CVE-2026-11393: @aws/agentcore Code Injection via Triple-Quote Escape Bypass
A crafted collaborationInstruction value stored in a Bedrock Agent collaborator can break out of a Python triple-quoted string in code generated by the AgentCore CLI, letting an attacker run…
- criticalCVE-2026-54735
CVE-2026-54735: prebid-server Bidder Adapter Server-Side Request Forgery
Certain prebid-server bidder adapters let callers supply a hostname parameter that is dropped verbatim into outbound ad-exchange URLs, so an attacker can redirect the server to internal network…
- highCVE-2026-50559
CVE-2026-50559: quarkus-vertx-http Authentication Bypass via Encoded Path Characters
Quarkus path-based authorization policies can be completely bypassed by percent-encoding semicolons, slashes, or backslashes in request URLs, letting unauthenticated attackers reach protected…
- highCVE-2026-54079
CVE-2026-54079: veraPDF validation-model XML External Entity Injection via XFA Stream
Submitting a crafted PDF with a malicious XFA stream to veraPDF for PDF/UA-1 validation triggers an unsecured XML parser, letting an attacker read arbitrary server files or make server-side requests.
- highCVE-2026-54078
CVE-2026-54078: veraPDF validation-model XXE via Rich Text
Submitting a PDF with a crafted rich-text annotation field causes veraPDF to parse attacker-controlled XML with no XXE protections, letting a remote attacker read arbitrary server files or trigger…
- highCVE-2026-49755
CVE-2026-49755: Req Decompression Bomb via Auto-Decoded Response Bodies
Req's default HTTP client pipeline automatically decompressed zip, tar, and gzip response bodies in memory with no size limit, letting an attacker-controlled server crash the BEAM VM with a single…
- highCVE-2026-54661
CVE-2026-54661: swagger-typescript-api Axios HTTP Client Code Injection via servers[0].url
swagger-typescript-api pastes the OpenAPI spec's server URL directly into generated TypeScript without escaping it, letting an attacker who controls the spec run arbitrary code on any developer or…
- highCVE-2026-54664
CVE-2026-54664: swagger-typescript-api Code Injection via Unescaped Enum Values
A malicious OpenAPI spec can plant arbitrary JavaScript inside a generated TypeScript enum so the code runs automatically the moment a developer imports the generated client.
- highCVE-2026-54660
CVE-2026-54660: swagger-typescript-api Authorization Token Exfiltration via Cross-Origin $ref
When you pass --authorizationToken to swagger-typescript-api to fetch a private spec, the generator blindly forwards that bearer token to every URL it finds in $ref fields, including…
- highCVE-2026-54662
CVE-2026-54662: swagger-typescript-api Code Injection via Unescaped servers[0].url in Fetch Client Template
swagger-typescript-api pastes the OpenAPI server URL directly into a TypeScript class field initializer without escaping, so a malicious spec can inject arbitrary code that runs the moment the…