Security alerts worth acting on
Two short lists for anyone running an app with real users or money, often one built with AI tools: new serious flaws in the packages those apps use most, and flaws attackers are using right now. The page fills itself from two public sources, GitHub and CISA, and checks them about once an hour. I don't pick or edit the items, and each one links to its full write-up.
Last pulled from the sources Nov 9, 2026, 9:15 PM Pacific.
New flaws in the packages your app probably uses
High and critical advisories from GitHub's reviewed advisory database for Next.js, React, Supabase's libraries, Vite, Express, Stripe, Firebase, Prisma, Django, FastAPI, Laravel and the other packages listed at the bottom. When a package gets several advisories on one day, they're shown together.
What to do: if your app uses one of these packages in an affected version, update it to the fixed version or later, then rebuild and redeploy. Your lock file (package-lock.json, pnpm-lock.yaml, poetry.lock or composer.lock) shows the version you actually run.
Authlib RFC 7592 examples omit registration-access-token client binding
authlib>= 0.15, <= 1.9.0. Fixed in1.9.1.better-auth: OAuth state can be used as a Magic Link to sign in as another user
better-auth>= 1.4.0-beta.18, < 1.7.7. Fixed in1.7.7.2 more for better-auth the same day
- High better-auth: OAuth Proxy lets an attacker sign in as another user
better-auth>= 1.5.0-beta.12, < 1.7.7. Fixed in1.7.7. - High better-auth: Device login approval does not show the requesting client or permissions
better-auth>= 1.3.8-beta.3, < 1.7.0-rc.3. Fixed in1.7.0-rc.3.
- High better-auth: OAuth Proxy lets an attacker sign in as another user
Authlib: empty signatures validation in JWS JSON deserialization
authlib<= 1.8.0. Fixed in1.9.0.2 more for authlib the same day
- High Authlib accepts an empty HMAC key, allowing JWS/JWT signature forgery (HS256/HS384/HS512)
authlib< 1.9.1. Fixed in1.9.1. - High Authlib incomplete algorithm-confusion fix permits HMAC forgery with prefixed public keys
authlib>= 1.3.1, <= 1.8.0. Fixed in1.9.0.
- High Authlib accepts an empty HMAC key, allowing JWS/JWT signature forgery (HS256/HS384/HS512)
LiteLLM: internal_user_viewer arbitrary local file read via
vertex_ai_credentialslitellm< 1.95.0. Fixed in1.95.0.1 more for litellm the same day
- High LiteLLM: Privilege Escalation to Proxy Admin via Cross-Domain Reuse of the Salt Key
litellm>= 1.91.0, < 1.100.4. Fixed in1.100.4.litellm>= 1.101.0, < 1.101.3. Fixed in1.101.3.litellm>= 1.102.0, < 1.102.2. Fixed in1.102.2.litellm>= 1.103.0, < 1.103.1. Fixed in1.103.1.litellm>= 1.104.0rc1, < 1.104.0rc2. Fixed in1.104.0rc2.
- High LiteLLM: Privilege Escalation to Proxy Admin via Cross-Domain Reuse of the Salt Key
Symfony: ReDoS in HeaderUtils::split() Reachable Through the Cache-Control Request Header
symfony/http-foundation>= 6.0.1, < 6.4.46. Fixed in6.4.46.symfony/http-foundation>= 7.0.0, < 7.4.19. Fixed in7.4.19.symfony/http-foundation>= 8.0.0, < 8.1.7. Fixed in8.1.7.symfony/http-foundation>= 4.1.0, < 5.4.54. Fixed in5.4.54.Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution
pillow<= 12.3.0. Fixed in13.0.0.Laravel TokenGuard authentication bypass through non-string API credentials
laravel/framework>= 13.0.0, < 13.29.0. Fixed in13.29.0.laravel/framework< 12.68.0. Fixed in12.68.0.multer vulnerable to Denial of Service via a pending asynchronous fileFilter after request teardown
multer>= 2.0.0, < 2.5.0. Fixed in2.5.0.Next.js: Unauthenticated Remote Code Execution in
use cachefunctions returning typed arraysnext>= 16.0.0, <= 16.4.0. Fixed in16.4.1.2 more for next the same day
- Critical Next.js: Unauthenticated Remote Code Execution in Image Optimization API when SVG files are used
next>= 10.0.0, <= 15.5.27. Fixed in15.5.28.next>= 16.0.0, <= 16.4.0. Fixed in16.4.1. - High Next.js: Denial of Service in App Router using Server Actions
next>= 13.0.0, <= 15.5.27. Fixed in15.5.28.next>= 16.0.0, <= 16.4.0. Fixed in16.4.1.
- Critical Next.js: Unauthenticated Remote Code Execution in Image Optimization API when SVG files are used
DOMPurify SAFE_FOR_TEMPLATES bypass: split template expressions survive in attached shadow root content on DOM output modes
dompurify>= 3.4.4, <= 3.4.16. Fixed in3.4.17.1 more for dompurify the same day
- High DOMPurify IN_PLACE: hook that removes a parent or sibling leaves the detached subtree's event handlers armed (incomplete fix for GHSA-p98j-92pf-mc4p)
dompurify<= 3.4.16. Fixed in3.4.17.
- High DOMPurify IN_PLACE: hook that removes a parent or sibling leaves the detached subtree's event handlers armed (incomplete fix for GHSA-p98j-92pf-mc4p)
Sentry-Javascript: Middleware Bypass when using Tunnel route
@sentry/nextjs>= 9.36.0, < 9.47.2. Fixed in9.47.2.@sentry/nextjs>= 10.0.0-alpha.0, < 10.75.2. Fixed in10.75.2.@sentry/nextjs>= 11.0.0-alpha.0, < 11.0.0-rc.1. Fixed in11.0.0-rc.1.Pillow multi-frame loaders can reuse stale native image storage after mode transitions
pillow>= 11.0.0, < 13.0.0. Fixed in13.0.0.7 more for pillow the same day
- High Pillow: Bundled libopenjp2 2.5.4 in all wheels since 11.1.0 carries OSV-2025-219 heap-buffer-overflow write reachable from Image.open().load()
pillow>= 11.1.0, < 13.0.0. Fixed in13.0.0. - High Pillow: Heap buffer overflow writing JPEG comment after ICC profile fills buffer
pillow>= 9.4.0, < 13.0.0. Fixed in13.0.0. - High Pillow: Heap over-read in WMF/EMF rendering via 16-bit dimension truncation (Windows builds)
pillow< 13.0.0. Fixed in13.0.0. - High Pillow: PNG eXIf chunk makes EXIF parsing run in quadratic time
pillow>= 11.0.0, < 13.0.0. Fixed in13.0.0. - High Pillow: TarIO negative size field causes infinite CPU-spin loop
pillow< 13.0.0. Fixed in13.0.0. - High Pillow PDF append accepts malformed shared page-tree DAG causing resource exhaustion
pillow>= 5.1.0, < 13.0.0. Fixed in13.0.0. - High Pillow: Decompression bomb check bypass in SpiderImagePlugin.seek() leads to unbounded allocation DoS
pillow< 13.0.0. Fixed in13.0.0.
- High Pillow: Bundled libopenjp2 2.5.4 in all wheels since 11.1.0 carries OSV-2025-219 heap-buffer-overflow write reachable from Image.open().load()
Flaws attackers are using right now
The newest entries in the Known Exploited Vulnerabilities catalog from CISA, the US government's cyber defense agency, which lists flaws with evidence of real attacks. Most are in servers, network gear and office software rather than app code, so an app hosted on Vercel, Netlify or Supabase is rarely affected. Act on any that name software you run or host yourself.
GPUStack Improper Authentication Vulnerability
GPUStack contains an improper authentication vulnerability which could allow unauthenticated administrative access, including user and model changes, persistent administrator API-key creation, disclosure of worker and cloud-provider secrets, and code execution through POST /v2/inference-backends/from-yaml.
CVE-2026-102895 · GPUStack GPUStack
OpenBSD OpenSSH Unexpected Status Code or Return Value Vulnerability
OpenBSD OpenSSH on Linux contains an unexpected status code or return value vulnerability that could allow for authentication bypass.
CVE-2026-123158 · OpenBSD OpenSSH
SignalWire FreeSwitch Code Injection Vulnerability
SignalWire FreeSwitch contains a code injection vulnerability that permits configuration and credential disclosure, arbitrary call control, and command execution.
CVE-2026-116779 · SignalWire FreeSwitch
IBM Aspera Faspex Incorrect Authorization Vulnerability
IBM Aspera Faspex contains an incorrect authorization vulnerability that could allow an authenticated user to craft a specific message to bypass authorization, causing privilege escalations.
CVE-2026-123218 · IBM Aspera Faspex
SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability
SonicWall SonicOS SSLVPN contains a use of single-factor authentication vulnerability that may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls. Successful exploitation may also bypass SAML-enforced multi-factor authentication (MFA).
CVE-2026-19868 · SonicWall SonicOS SSLVPN
Apple Multiple Products Improper Authentication Vulnerability
Apple iOS, iPadOS, macOS, Safari, tvOS and watchOS 10.5 contain an improper authentication vulnerability which could allow an attacker with arbitrary read and write capability to bypass pointer authentication.
CVE-2024-27834 · Apple Multiple Products
WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability
WordPress WordPress Core contains a time-of-check time-of-use (TOCTOU) race condition vulnerability that could allow unauthenticated attackers to execute code on the server during the upgrade window. This is due to predictable, web-accessible staging paths used during full-package core upgrades.
CVE-2026-119977 · WordPress WordPress Core
Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability
Ivanti Connect Secure contains a generation of predictable numbers or identifiers vulnerability that allows a remote authenticated attacker to upload files with attacker-controlled content to a known location on disk. This vulnerability can be chained with CVE-2026-104935 and CVE-2026-111357.
CVE-2026-118527 · Ivanti Connect Secure
Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability
Ivanti Connect Secure contains a missing authentication for critical function vulnerability that could allow a local authenticated attacker to escalate their privileges. This vulnerability can be chained with CVE-2026-104935 and CVE-2026-118527.
CVE-2026-111357 · Ivanti Connect Secure
GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability
GitLab Community Edition and Enterprise Edition contain a integer overflow or wraparound vulnerability that could allow an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI/CD configuration, due to insufficient regular expression validation.
CVE-2026-97229 · GitLab Community Edition and Enterprise Edition
Packages I watch
JavaScript:
next · react · react-dom · react-server-dom-webpack · @supabase/supabase-js · @supabase/ssr · @supabase/auth-js · supabase · vite · express · axios · jsonwebtoken · stripe · firebase · firebase-admin · next-auth · @auth/core · @clerk/nextjs · @prisma/client · prisma · drizzle-orm · @sveltejs/kit · nuxt · astro · hono · multer · dompurify · @sentry/nextjs · better-auth
Python:
django · flask · fastapi · starlette · requests · urllib3 · jinja2 · pyjwt · sqlalchemy · gunicorn · uvicorn · pillow · langchain · langchain-core · streamlit · certifi · litellm · authlib
PHP:
laravel/framework · livewire/livewire · symfony/http-foundation · symfony/http-kernel · guzzlehttp/guzzle · firebase/php-jwt · stripe/stripe-php
Flaws in PHP itself, in a hosting platform or in the certificates sites use aren't package advisories, so they show up here only once CISA lists them.
An alert here doesn't mean your app is affected, and no alert doesn't mean it's safe: many launch problems sit in an app's own access rules and keys, not its packages. The security self-check covers those.
Not sure whether one of these touches your app?
The Launch Blocker Check is a private first look at your repo: I don't touch your live app or use a key I find without your written OK.
Launch Blocker Check, $149