Vulnerability Database

CVE-2026-105684

github.com/penpot/penpot

Penpot: Share-link page-scope escape — comment RPCs leak comment content, author identity, and all page-ids for pages outside the share scope 3 days ago

Fix available
Severity - 4.3 (Medium)

GHSA-c9xm-49cp-xcr9

crates.io/rmcp

rmcp OAuth client fetches server-controlled resource_metadata URLs 6 days ago

Fix available
Severity - 6.3 (Medium)

GHSA-9g45-5xwm-f3wc

crates.io/rmcp

RMCP: Custom HTTP headers leak to cross-origin redirect targets 17 Sep

Fix available
Severity - 6.8 (Medium)

GHSA-9pj6-vhgr-3mwh

crates.io/rmcp

RMCP: Unauthenticated permanent session-table leak in rmcp Streamable HTTP server transport leads to remote denial-of-service 16 Sep

Fix available
Severity - 7.5 (High)

GHSA-33f5-2c5q-wgwj

crates.io/rmcp

RMCP: Missing Resource Field Validation in OAuth Protected Resource Metadata Discovery 16 Sep

Fix available
Severity - 8.2 (High)

CGA-vv6m-5j8x-rmcp

Chainguard/vitess-22-binaries

See record for full details 09 Sep

No fix available
Severity - 6.3 (Medium)

CGA-rmcp-w9h4-w32r

Chainguard/eco-java-gradle-4.1

See record for full details 07 Sep

No fix available
Severity - 9.8 (Critical)

CGA-8jvp-jpw5-rmcp

Chainguard/liberica-17

See record for full details 30 Aug

Fix available
Severity - 4.0 (Medium)

CGA-rmcp-rhw5-2vhp

Chainguard/stern
Wolfi/stern

See record for full details 14 Aug

Fix available

CGA-rmcp-6cmp-95j8

Chainguard/tempo-fips-3.0-query

See record for full details 22 Jul

Fix available
Severity - 8.8 (High)

CGA-v3rx-rmcp-f39c

Chainguard/vitess-22-binaries

See record for full details 09 Jul

No fix available

CGA-66j5-rfvg-rmcp

Chainguard/argo-cd-fips-3.4-compat

See record for full details 08 Jul

No fix available

MINI-4x98-rpjh-c7wq

MinimOS/chromium
MinimOS/chromium-docker-selenium-compat
MinimOS/chromium-lang

See record for full details 08 Jul

Fix available

CGA-q5r5-7qv3-v5g8

Chainguard/chromium
Wolfi/chromium

See record for full details 02 Jul

Fix available

CGA-hmhx-h5r8-m8cc

Chainguard/chromium-lang
Wolfi/chromium-lang

See record for full details 02 Jul

Fix available

CGA-3jmr-85gh-q66h

Chainguard/chromium-docker-selenium-compat
Wolfi/chromium-docker-selenium-compat

See record for full details 02 Jul

Fix available

Vulnerabilities