2026

• 15 Jun GHSA-r553-q33m-v7pf: Appsmith Git widget name path traversal
• 15 Jun CVE-2026-24791: public-only token bypass in Gitea self routes
• 11 Jun CVE-2026-53622: HTTP/3 mTLS bypass in Traefik router TLSOptions selection
• 11 Jun CVE-2026-49980: rclone rc --rc-serve inline remote backend instantiation
• 11 Jun CVE-2026-49284: ExpectedIssuer and InResponseTo binding bypass in SimpleSAMLphp
• 11 Jun CVE-2026-49283: HTTP-Artifact TLS validator confusion in SimpleSAMLphp SAML2
• 11 Jun CVE-2026-48774: MCP run_sql_readonly multi-statement bypass in ProxySQL
• 11 Jun CVE-2026-48773: pre-auth first-packet heap overflow in ProxySQL
• 11 Jun CVE-2026-48491: Domain-fronted mTLS bypass in Traefik SNICheck wildcard TLSOptions
• 11 Jun CVE-2026-46491: Path traversal in SimpleSAMLphp casserver FileSystemTicketStore