Medium, CVSS 5.3
MantisBT: Authorization Bypass in Bugnote Editing via Issue Update API
Packagist mantisbt/mantisbt · Upgrade to 2.28.2 or later · <= 2.28.1 · CVE-2026-42070 · GHSA-pq86-j2c2-47f6
Know what to patch next.
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
At a glance
- New
- 972 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 1,080 in the 30 days before.
- Critical
- 67 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.
Activity · last 26 weeks
Actionable
6551–6575 of 30,985 matching · newest first
- Medium, CVSS 5.3
MantisBT is Vulnerable to Reflected XSS in Rendering Dynamic Custom Textarea Field
Packagist mantisbt/mantisbt · Upgrade to 2.28.2 or later · >= 1.0.0, < 2.28.2 · CVE-2026-41897 · GHSA-j7v9-f46r-2rp4
- Medium, CVSS 5.3
Mermaid: Improper sanitization of configuration leads to CSS injection
npm mermaid · Upgrade to 11.15.0 or 10.9.6 by release line · >= 11.0.0-alpha.1, <= 11.14.0; <= 10.9.5 · CVE-2026-41159 · GHSA-87f9-hvmw-gh4p · amended
- Medium, CVSS 5.3
Mermaid Gantt Charts are vulnerable to an Infinite Loop DoS
npm mermaid · Upgrade to 11.15.0 or 10.9.6 by release line · >= 11.0.0-alpha.1, <= 11.14.0; <= 10.9.5 · CVE-2026-41150 · GHSA-6m6c-36f7-fhxh · amended
- Medium, CVSS 5.3
Mermaid: Improper sanitization of
classDefin state diagrams leads to HTML injectionnpm mermaid · Upgrade to 11.15.0 or 10.9.6 by release line · >= 11.0.0-alpha.1, <= 11.14.0; <= 10.9.5 · CVE-2026-41149 · GHSA-ghcm-xqfw-q4vr · amended
- Medium, CVSS 5.3
Mermaid: Improper sanitization of
classDefsin diagrams leads to CSS injectionnpm mermaid · Upgrade to 11.15.0 or 10.9.6 by release line · >= 11.0.0-alpha.1, <= 11.14.0; <= 10.9.5 · CVE-2026-41148 · GHSA-xcj9-5m2h-648r · amended
- High, CVSS 7.5
MantisBT is Vulnerable to Stored XSS in Saved-Filter Owner Column
Packagist mantisbt/mantisbt · Upgrade to 2.28.2 or later · >= 2.1.0, <= 2.28.1 · CVE-2026-40607 · GHSA-f633-865q-2mhh
- Medium, CVSS 6.9
MantisBT has Potential Referer-Based Reflected HTML Injection / XSS in Tag Update Page
Packagist mantisbt/mantisbt · Upgrade to 2.28.2 or later · <= 2.28.1 · CVE-2026-40598 · GHSA-6jh4-47v2-4g37
- High, CVSS 7.6
MantisBT has a Content Security Policy bypass via attachments
Packagist mantisbt/mantisbt · Upgrade to 2.28.2 or later · <= 2.28.1 · CVE-2026-40597 · GHSA-9c3j-xm6v-j7j3
- High, CVSS 7.2
MantisBT is Vulnerable to XSS leading to account takeover via updating a user's font family preference
Packagist mantisbt/mantisbt · Upgrade to 2.28.2 or later · >= 2.11.0, <= 2.28.1 · CVE-2026-40596 · GHSA-j3v9-553h-x28j
- Medium, CVSS 5.4
MantisBT is Vulnerable to Stored XSS in Custom Field Textarea Values
Packagist mantisbt/mantisbt · Upgrade to 2.28.2 or later · <= 2.28.1 · CVE-2026-39960 · GHSA-qj6w-v29q-4rgx
- High, CVSS 7.4
Yii 2: Local file inclusion via view parameter name collision
Packagist yiisoft/yii2 · Upgrade to 2.0.55 or later · < 2.0.55 · CVE-2026-39850 · GHSA-5vpg-rj7q-qpw2
- Medium, CVSS 5.3
MantisBT: Bugnote Revision Page Leaks Private Issue Metadata After Issue Access Is Revoked
Packagist mantisbt/mantisbt · Upgrade to 2.28.2 or later · <= 2.28.1 · CVE-2026-34970 · GHSA-crmx-4p49-46m2
- Medium, CVSS 4.3
MantisBT has an Authorization Bypass that Allows Uploading Attachments to Private Issues via REST API
Packagist mantisbt/mantisbt · Upgrade to 2.28.2 or later · <= 2.28.1 · CVE-2026-34754 · GHSA-h4x5-gvx6-3rwc
- Medium, CVSS 5.3
MantisBT has an authorization bypass that allows reading attachments after losing access to a private issue
Packagist mantisbt/mantisbt · Upgrade to 2.28.2 or later · <= 2.28.1 · CVE-2026-34744 · GHSA-rmp5-5jj7-gmvf
- Medium, CVSS 5.3
MantisBT has an authorization bypass in private issue monitoring
Packagist mantisbt/mantisbt · Upgrade to 2.28.2 or later · >= 2.26.1, <= 2.28.1 · CVE-2026-34579 · GHSA-ggw7-9675-6v4v
- High, CVSS 8.6
MantisBT is Vulnerable to Stored HTML Injection/XSS in Clone Issue Form
Packagist mantisbt/mantisbt · Upgrade to 2.28.2 or later · <= 2.28.1 · CVE-2026-34463 · GHSA-fvjf-68wh-rwp2
- Medium, CVSS 5.1
MantisBT Vulnerable to Privilege Escalation from Manager to Administrator
Packagist mantisbt/mantisbt · Upgrade to 2.28.2 or later · <= 2.28.1 · CVE-2026-34390 · GHSA-frf7-jhp9-jxm6
- High, CVSS 7.1
MLflow Has a Server-Side Request Forgery (SSRF) Vulnerability
PyPI mlflow · Upgrade to 3.9.0 or later · < 3.9.0 · CVE-2026-2393 · GHSA-65h7-c7c4-mghx · amended
- Critical, CVSS 9.4
pgAdmin 4 server mode has an authorization vulnerability affecting Server Groups, Servers, Shared Servers, Background Processes, and Debugger modules
PyPI pgadmin4 · Upgrade to 9.15 or later · < 9.15 · CVE-2026-7813 · GHSA-h2x2-q2mc-24gw · amended
- Medium, CVSS 6.9
pgAdmin 4: Improper restriction of excessive authentication attempts
PyPI pgadmin4 · Upgrade to 9.15 or later · < 9.15 · CVE-2026-7820 · GHSA-hv9p-2pqf-r5w3 · amended
- High, CVSS 7.3
pgAdmin 4 has deserialization of untrusted data in its FileBackedSessionManager
PyPI pgadmin4 · Upgrade to 9.15 or later · < 9.15 · CVE-2026-7818 · GHSA-4rhg-h8f2-v4jm · amended
- Medium, CVSS 4.8
pgAdmin 4: Stored cross-site scripting (XSS) vulnerability in Browser Tree and Explain Visualizer modules
PyPI pgadmin4 · Upgrade to 9.15 or later · < 9.15 · CVE-2026-7814 · GHSA-6p2c-69cv-3fxq · amended
- High, CVSS 8.7
SQL injection vulnerability in pgAdmin 4 Maintenance Tool
PyPI pgadmin4 · Upgrade to 9.15 or later · < 9.15 · CVE-2026-7815 · GHSA-hp84-p2gq-6fvr · amended
- High, CVSS 7.1
pgAdmin 4 contains local file inclusion (LFI) and server-side request forgery (SSRF) vulnerabilities
PyPI pgadmin4 · Upgrade to 9.15 or later · < 9.15 · CVE-2026-7817 · GHSA-p58c-q354-6c4f · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
News
Security reports that are not matched to your stack.
CISA security events · all vendors
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
Advisory watch · no fix evidence
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.