https://vulnerability.circl.lu/sightings/feed 2026-08-18T16:37:27.851517+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/6923ebb2-9383-45ca-b244-f72a5d5df82c/export 2026-08-18T16:37:27.860251+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "6923ebb2-9383-45ca-b244-f72a5d5df82c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-rm3m-9mvw-68fh", "type": "seen", "source": "https://gist.github.com/CaptBoykin/fb932b14c932323583161460666e60da", "content": "# CVE's\n\n## Assigned CVE \n\n### SSTI \u2192 RCE via Mail Template Editor \n- https://github.com/tastyigniter/TastyIgniter/security/advisories/GHSA-743w-g9pf-8p94\n\n## Published - Pending CVE\n\n### Privilege escalation to root via unauthenticated/unauthorized plugin install task in Ajenti\n- https://github.com/ajenti/ajenti/security/advisories/GHSA-j8xf-5fw2-f99q\n\n### Authenticated argument injection in repo_url into git (any role)\n- https://github.com/jhd3197/ServerKit/security/advisories/GHSA-8vx6-432p-h62q\n\n### Git Deployments API Missing Authorization (Sensitive Log Exposure by Any Role)\n- https://github.com/jhd3197/ServerKit/security/advisories/GHSA-6w78-q5vm-rfmh\n\n### File Manager Exposes Panel Secrets (.env) to Low-Privileged Roles, Enabling Admin Session Forgery\n- https://github.com/jhd3197/ServerKit/security/advisories/GHSA-rm3m-9mvw-68fh\n\n## Triage \n\n### Stack-Name Path Traversal in Dockge Agent Socket Handlers\n- https://github.com/louislam/dockge/security/advisories/GHSA-qm8r-q3h4-c3vw\n\n### Symlink-Plant Chain: Arbitrary-Basename File Read\n- https://github.com/louislam/dockge/security/advisories/GHSA-jhg2-mvfw-xfpc\n\n### Server-Side Request Forgery via Agent Pairing\n- https://github.com/louislam/dockge/security/advisories/GHSA-m8mr-9hwf-7v3f\n\n### Malicious Agent: stack endpoint overwrite allows for root-privileged deploy via confused deputy\n- https://github.com/louislam/dockge/security/advisories/GHSA-mxcg-p696-rm94\n\n### Manager Trusts Agent-Supplied JSON Verbatim -> UI Data Spoofing + Open-Redirect / Reverse-Tabnabbing\n- https://github.com/louislam/dockge/security/advisories/GHSA-7jmf-5vcp-f672\n\n## Awaiting Action / Notification\n\n### Tiki Wiki CMS (Multple Vulnerabilities)\n\n### Caprover (Multiple Vulnerabilities)", "creation_timestamp": "2026-08-13T22:43:46.564821Z"} 2026-08-13T22:43:46.564821+00:00