Labs

Short research notes on newly disclosed vulnerabilities: the problem, the payload, and the fix.

• high

  micronaut-http-client Infinite Redirect Loop Denial of Service

  The Micronaut HTTP client will follow HTTP redirects forever with no limit, so a malicious server can trap a client thread in an infinite loop and cause a denial of service.

• high

  phantom-audio: Arbitrary File Write and Decode-Bomb DoS via Unconfined MCP Tool Paths

  The Phantom audio MCP server let any AI agent write files to arbitrary locations on disk by passing an absolute output path, and had no cap on how large a decoded audio file could grow, making it…

• highCVE-2026-49476

  CVE-2026-49476: soupsieve Memory Exhaustion via Unbounded Selector List

  Passing a crafted CSS selector string with hundreds of thousands of comma-separated entries to soupsieve causes it to allocate hundreds of megabytes of memory, crashing or killing any Python web app…

• highCVE-2026-49477

  CVE-2026-49477: soupsieve Regular Expression Denial of Service (ReDoS)

  A broken regex in soupsieve's CSS selector parser hangs indefinitely on a 300-byte malformed attribute selector, letting any attacker block a server thread with a single HTTP request.

• highCVE-2026-50553

  CVE-2026-50553: Note Mark Path Traversal via Unsanitized Book/Note Slug in Migrate Export

  Any authenticated Note Mark user can store a directory-traversal string as a book or note slug, and when an admin runs the data-export command that slug is joined into a filesystem path without…

• highCVE-2026-49485

  CVE-2026-49485: org.hl7.fhir.dstu2 FHIRPathEngine ReDoS via Unprotected matches()

  A missed line in the DSTU2 FHIRPath engine means any unauthenticated user can lock a server CPU indefinitely by submitting a FHIR resource that contains a catastrophically backtracking regular…

• highCVE-2026-53727

  CVE-2026-53727: css_parser SSRF and Local File Disclosure via @import

  The Ruby css_parser gem fetches any URL found in a CSS @import rule with no host or scheme restrictions, letting an attacker read internal services or local files by injecting a single CSS rule into…

• high

  CVE-2026-56382: Craft CMS RCE via Yii2 Event Handler Injection in FieldsController

  An authenticated Craft CMS admin can execute arbitrary PHP code by injecting a Yii2 event handler into a POST parameter that the card-preview endpoint passes directly to the object factory without…

• highCVE-2026-49464

  CVE-2026-49464: NL Portal Taak IDOR Allows Takeover of Any User's Open Task

  Any logged-in user of NL Portal can complete or tamper with another user's open government task by sending the victim's task UUID to an unprotected GraphQL mutation, leaking and overwriting the…

• highCVE-2026-49471

  CVE-2026-49471: serena-agent Unauthenticated Flask Dashboard Enables DNS Rebinding to RCE

  Serena's built-in web dashboard runs on a fixed port with no authentication, letting any malicious webpage use DNS rebinding to write arbitrary instructions into the agent's memory store and trigger…

• highCVE-2026-49825

  CVE-2026-49825: lxml_html_clean javascript: XSS via xlink:href

  lxml_html_clean's HTML sanitizer silently passes javascript: URLs through to the browser when they appear in SVG or MathML anchor tags using the xlink:href attribute, letting attackers store…

• highCVE-2026-50197

  CVE-2026-50197: Skipper opaAuthorizeRequestWithBody OPA Policy Bypass via Chunked Encoding

  Skipper's OPA body-inspection filter silently skips reading the request body for chunked or HTTP/2 requests, letting attackers smuggle forbidden payloads past policy checks that should have blocked…