HIGH - zero redgem

Recent Advisories

Severity	ID	Title	Vendor	Product	Date	Type
HIGH 7	CVE-2026-54321	Daytona: Public sandbox previews remain accessible for up to one hour after being made private_CVE-2026-54321 Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. From 0.101.0 until 0.184.0, sandbox pre...	daytonaio	daytona >= 0.101.0, < 0.184.0	Jun 23, 2026	CVE
HIGH 8.4	CVE-2026-54320	Daytona: Cross-tenant organization takeover via invitation acceptance with an unverified email_CVE-2026-54320 Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. Prior to 0.184.0, organization invitati...	daytonaio	daytona < 0.184.0	Jun 23, 2026	CVE
HIGH 8.6	CVE-2026-53755	Crawl4AI: SSRF via proxy settings in the Docker server bypasses the crawl-URL SSRF check_CVE-2026-53755 Crawl4AI is an open-source LLM friendly web crawler & scraper. Prior to 0.8.9, the Docker API server applied its SSRF destination check to the craw...	unclecode	crawl4ai < 0.8.9	Jun 23, 2026	CVE
HIGH 7.5	CVE-2026-53754	Crawl4AI: SSRF filter bypass in Docker server via IPv6 transition forms (NAT64 / 6to4 / unspecified / v4-mapped)_CVE-2026-53754 Crawl4AI is an open-source LLM friendly web crawler & scraper. Prior to 0.8.8, the Docker API server's SSRF protection (validate_webhook_url / vali...	unclecode	crawl4ai < 0.8.8	Jun 23, 2026	CVE
HIGH 7.8	CVE-2026-54555	rtk: Permission-gate bypass in rtk rewrite auto-allow via unsplit shell separators_CVE-2026-54555 rtk filters and compresses command outputs before they reach your LLM context. Prior to 0.42.2, the permission splitter did not conservatively spli...	rtk-ai	rtk < 0.42.2	Jun 23, 2026	CVE
HIGH 7.3	CVE-2026-54328	Pi: Predictable temporary extension install paths allow local privilege escalation on shared Linux hosts_CVE-2026-54328 Pi is a minimal terminal coding harness. From 0.74.0 until 0.78.1, Pi versions with temporary npm or git extension package installs used predictabl...	earendil-works	pi >= 0.74.0, < 0.78.1	Jun 23, 2026	CVE
HIGH 7.8	CVE-2026-53622	Traefik: HTTP/3 mTLS bypass via exact SNI TLSOptions lookup for wildcard and mixed-case hosts_CVE-2026-53622 Traefik is an HTTP reverse proxy and load balancer. Prior to 3.7.3, there is a critical vulnerability in Traefik's HTTP/3 (QUIC) TLS configuration ...	traefik	traefik < 3.7.3	Jun 23, 2026	CVE
HIGH 7.8	CVE-2026-48491	Traefik: SNICheck ignores wildcard TLSOptions mappings, allowing domain-fronted mTLS bypass_CVE-2026-48491 Traefik is an HTTP reverse proxy and load balancer. From 3.7.0 until 3.7.3, there is a high severity vulnerability in Traefik's domain-fronting pro...	traefik	traefik >= 3.7.0, < 3.7.3	Jun 23, 2026	CVE
HIGH 7.8	CVE-2026-48020	Traefik StripPrefix Route-Level Auth Bypass via Path Normalization_CVE-2026-48020 Traefik is an HTTP reverse proxy and load balancer. Prior to 2.11.48, 3.6.19, and 3.7.3, there is a high severity vulnerability in Traefik's StripP...	traefik	traefik >= 3.7.0-ea.1, < 3.7.3	Jun 23, 2026	CVE
HIGH 8.4	CVE-2026-47387	NocoDB: Stored Cross-Site Scripting via Form View Redirect URL_CVE-2026-47387 NocoDB is software for building databases as spreadsheets. Prior to 2026.05.1, the shared form-view submit handler (packages/nc-gui/composables/use...	nocodb	nocodb < 2026.05.1	Jun 23, 2026	CVE