{"vulnerability": "cve-2026-5465", "sightings": [{"uuid": "9651c6b0-bb4c-4edc-bd2f-e7d92a003c6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5465", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mivcqtypg327", "content": "", "creation_timestamp": "2026-04-07T08:01:05.532293Z"}, {"uuid": "bd34a81f-c435-4e21-adbf-03c186f50470", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5465", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mivi5ssztu2s", "content": "", "creation_timestamp": "2026-04-07T09:37:20.153279Z"}, {"uuid": "fb8b43ed-4e8e-4b52-93f7-229f98d7de9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5465", "type": "seen", "source": "https://t.me/GithubRedTeam/79257", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-5465\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a kaleth4\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a None\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-07 13:59:48\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-04-07T14:00:04.000000Z"}, {"uuid": "3e7a28f4-812b-4bd1-8f1f-122642ec3189", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5465", "type": "published-proof-of-concept", "source": "Telegram/0sm8ATZ7rNPvlZx6vGLi3K-krzdNfmL8FWYus3NVMcNSJdo", "content": "", "creation_timestamp": "2026-04-07T15:00:16.000000Z"}, {"uuid": "e580ac7a-dab3-416e-95ae-7e1523eb4d6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5465", "type": "seen", "source": "Telegram/UjrnvOa2JLE3qzXsFYe7vk49vQcInvR-SenKatBboIQ7n94", "content": "", "creation_timestamp": "2026-04-07T09:15:25.000000Z"}, {"uuid": "ebdddcfc-74ba-4e35-b9a9-ac62a653fc9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54652", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq5nqwlaj32q", "content": "CVE-2026-54652 - Frigate viewer can read logs exposing admin and camera credentials\nCVE ID : CVE-2026-54652\n \n Published : July 8, 2026, 3:16 p.m. | 1\u00a0hour, 58\u00a0minutes ago\n \n Description : Frigate is an open source network video recorder. In version 0.17.1, the GET /api/logs/{...", "creation_timestamp": "2026-07-08T17:35:09.363684Z"}, {"uuid": "b4ba8120-bc88-45c6-9480-ff4cb68fbba0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54651", "type": "seen", "source": "https://gist.github.com/alon710/29f907693324d6187f6b141f2c73d47b", "content": "# CVE-2026-54651: CVE-2026-54651: Infinite Loop Vulnerability in pypdf Article Thread Parser\n\n> **CVSS Score:** 5.5\n> **Published:** 2026-07-09\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54651\n\n## Summary\nAn infinite loop vulnerability exists in the pure-Python PDF library pypdf prior to version 6.13.1. When parsing or merging a crafted PDF file containing a cyclic Article/Thread structure, the library fails to exit its traversal loop. This causes the executing thread to hang indefinitely, leading to 100% CPU utilization and a denial of service. The vulnerability is tracked under CVE-2026-54651 and GHSA-g9xf-7f8q-9mcj, with a CVSS base score of 5.5. This technical report provides a root cause analysis, code review, exploitation vectors, and mitigation paths.\n\n## TL;DR\nA denial-of-service vulnerability in pypdf (< 6.13.1) allows attackers to trigger 100% CPU starvation by uploading a PDF containing cyclic Article structure definitions. The parser fails to detect sub-loops within the Thread linked list, resulting in an infinite execution loop. Upgrading to version 6.13.1 implements a visited-set lookup that mitigates this risk.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-835 (Loop with Unreachable Exit Condition)\n- **Attack Vector**: Local / File Parsing (AV:L)\n- **CVSS Score**: 5.5 (Medium, CVSS v3.1) / 6.9 (Medium, CVSS v4.0)\n- **EPSS Score**: 0.00111 (Percentile: 1.58%)\n- **Impact**: Denial of Service via 100% CPU starvation\n- **Exploit Status**: PoC documented, non-weaponized\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- pypdf library installations prior to version 6.13.1\n- Web applications utilizing pypdf to merge, append, or modify untrusted PDF files\n- **pypdf**: < 6.13.1 (Fixed in: `6.13.1`)\n\n## Mitigation\n\n- Upgrade pypdf to version 6.13.1 or higher.\n- Configure process-level execution timeouts to automatically kill hung worker threads.\n- Add defensive error handling to catch LimitReachedError exceptions in the application code.\n- Implement CPU resource limits on parsing containers to isolate resource exhaustion.\n\n**Remediation Steps:**\n1. Audit the software bill of materials (SBOM) and requirement configuration files to identify vulnerable pypdf installations.\n2. Update dependencies in requirements.txt or poetry.lock to require pypdf >= 6.13.1.\n3. Implement a try-except structure enclosing PDF modification operations to trap the LimitReachedError.\n4. Deploy updated software containers and verify execution limits are enforced in the orchestration environment.\n\n## References\n\n- [GitHub Pull Request #3839](https://github.com/py-pdf/pypdf/pull/3839)\n- [pypdf 6.13.1 Release Changelog](https://github.com/py-pdf/pypdf/releases/tag/6.13.1)\n- [GitHub Security Advisory GHSA-g9xf-7f8q-9mcj](https://github.com/py-pdf/pypdf/security/advisories/GHSA-g9xf-7f8q-9mcj)\n- [Fix Commit 5efe472](https://github.com/py-pdf/pypdf/commit/5efe472b07e36d1ae22c9991d744d013cfb2f214)\n- [NVD CVE-2026-54651 Detail](https://nvd.nist.gov/vuln/detail/CVE-2026-54651)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54651) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-09T21:41:51.037198Z"}, {"uuid": "ef8b0d28-b330-4eae-8393-595eab4cb861", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54655", "type": "published-proof-of-concept", "source": "https://github.com/koxudaxi/datamodel-code-generator/security/advisories/GHSA-m34r-v34r-rf9q", "content": "", "creation_timestamp": "2026-07-28T22:35:24.952434Z"}, {"uuid": "fd7399e3-ccfe-4685-b159-9c957d934f47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54656", "type": "published-proof-of-concept", "source": "https://github.com/koxudaxi/datamodel-code-generator/security/advisories/GHSA-8m8r-38jm-f355", "content": "", "creation_timestamp": "2026-07-28T22:35:13.623528Z"}, {"uuid": "48c9ea06-3d60-46f6-9e3b-4c6dee21506b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54653", "type": "published-proof-of-concept", "source": "https://github.com/koxudaxi/datamodel-code-generator/security/advisories/GHSA-386q-5hp3-95m9", "content": "", "creation_timestamp": "2026-07-28T22:35:08.665417Z"}, {"uuid": "0cc9263d-e43a-4f20-ab77-a1f9bf078b7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54654", "type": "published-proof-of-concept", "source": "https://github.com/koxudaxi/datamodel-code-generator/security/advisories/GHSA-wjv6-jcfj-mf9r", "content": "", "creation_timestamp": "2026-07-28T22:35:44.363508Z"}, {"uuid": "72c49b99-197b-480c-a2fd-5ed5d49cf780", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54653", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrqlhcj5h62q", "content": "CVE-2026-54653 - `datamodel-code-generator` vulnerable to code injection in via attacker-controlled `default_factory` schema field\nCVE ID : CVE-2026-54653\n \n Published : July 28, 2026, 10:17 p.m. | 20\u00a0minutes ago\n \n Description : datamodel-code-generator generates Pydantic v2 ...", "creation_timestamp": "2026-07-28T23:39:45.494427Z"}, {"uuid": "f621859d-c35b-4117-9d3a-2d152ee92d99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54658", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrqmavaytp2e", "content": "CVE-2026-54658 - hypequery\nClickhouse users with outdated versions (before 2.0.2) are at risk if they pass user-controlled input as query parameters. This could allow attackers to execute arbitrary SQL\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#hypequery #npm #CVE #infosec", "creation_timestamp": "2026-07-28T23:54:04.112842Z"}, {"uuid": "b7d83227-df3a-4a06-873a-b40c8ec1ed83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54653", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mrqy5oivvq2w", "content": "datamodel-code-generator 0.17.0\uff5e0.60.2\u3067\u3001\u5165\u529b\u3055\u308c\u305f\u30c7\u30d5\u30a9\u30eb\u30c8\u5024\u304cPython\u30b3\u30fc\u30c9\u3068\u3057\u3066\u5b9f\u884c\u3055\u308c\u308b\u8106\u5f31\u6027\u3002\u751f\u6210\u3055\u308c\u305f\u30e2\u30c7\u30eb\u306e\u30a4\u30f3\u30dd\u30fc\u30c8\u6642\u306b\u30b3\u30fc\u30c9\u5b9f\u884c\u306e\u53ef\u80fd\u6027\u304c\u2026\nCVE-2026-54653 CVSS 8.8 | HIGH", "creation_timestamp": "2026-07-29T03:27:01.999960Z"}, {"uuid": "2b7f5726-45c5-4a97-a730-8f5c8ba65fa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54654", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mrqy7iat4v2y", "content": "datamodel-code-generator 0.14.1\u304b\u30890.60.2\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u3067\u306f\u3001\u30b3\u30e1\u30f3\u30c8\u5185\u306e\u6539\u884c\u7121\u52b9\u5316\u306b\u3088\u308a\u3001Python\u30b3\u30fc\u30c9\u304c\u751f\u6210\u30e2\u30c7\u30eb\u306b\u633f\u5165\u3055\u308c\u3001\u30a4\u30f3\u30dd\u30fc\u30c8\u6642\u306b\u5b9f\u884c\u3055\u308c\u308b\u8106\u5f31\u6027\u2026\nCVE-2026-54654 CVSS 7.8 | HIGH", "creation_timestamp": "2026-07-29T03:28:01.658200Z"}, {"uuid": "37d588ec-b9eb-475f-a841-23d2ad0eb5e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54659", "type": "seen", "source": "https://gist.github.com/alon710/3def853e2525c617d6890d62679fbc37", "content": "# CVE-2026-54659: CVE-2026-54659: Directory Traversal and File Existence Oracle in Pagy I18n module\n\n> **CVSS Score:** 6.9\n> **Published:** 2026-07-28\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54659\n\n## Summary\nPagy, an agile pagination gem for plain Ruby, contains a directory traversal vulnerability in its internationalization (I18n) module prior to version 43.5.6. An unauthenticated remote attacker can exploit this flaw by submitting path traversal sequences to the locale setter, allowing them to probe the server filesystem. The resulting behavior creates a highly reliable file existence and readability side-channel oracle for YAML files.\n\n## TL;DR\nA path traversal flaw in Pagy's I18n locale setter enables unauthenticated remote attackers to determine the existence and validity of YAML configuration files on the host filesystem via a side-channel oracle.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-22, CWE-200\n- **Attack Vector**: Network (Unauthenticated)\n- **CVSS v4.0 Score**: 6.9 (Medium)\n- **Exploit Status**: Proof of Concept / Patch Available\n- **Impact**: Local File Existence Reconnaissance & XSS\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- Pagy pagination Ruby gem\n- **pagy**: >= 43.0.0, < 43.5.6 (Fixed in: `43.5.6`)\n\n## Mitigation\n\n- Sanitize the language request parameters against a strict, predefined language whitelist.\n- Prevent users from directly modifying application-level variables used in filesystem paths.\n- Deploy WAF rules to detect path traversal sequences (e.g., ../) in application query parameters.\n\n**Remediation Steps:**\n1. Open the application Gemfile and locate the 'pagy' gem entry.\n2. Update the version definition to target at least version 43.5.6: `gem 'pagy', '>= 43.5.6'`\n3. Execute `bundle update pagy` in the terminal to fetch and apply the updated dependency.\n4. Review custom controllers to ensure request parameters mapped to `Pagy::I18n.locale` undergo explicit whitelisting check if possible.\n\n## References\n\n- [Fix Commit](https://github.com/ddnexus/pagy/commit/efcf09690e9fa7d7abdfb987b785a55f87e287df)\n- [Pull Request #908](https://github.com/ddnexus/pagy/pull/908)\n- [Release Notes](https://github.com/ddnexus/pagy/releases/tag/43.5.6)\n- [GitHub Security Advisory](https://github.com/ddnexus/pagy/security/advisories/GHSA-2xmw-f8j8-wfxc)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54659) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-29T00:31:42.718483Z"}, {"uuid": "3e1ce8da-1301-4c1b-ba98-973479f8deae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54659", "type": "published-proof-of-concept", "source": "https://github.com/ddnexus/pagy/security/advisories/GHSA-2xmw-f8j8-wfxc", "content": "", "creation_timestamp": "2026-07-29T00:35:03.227281Z"}, {"uuid": "2a18ba22-98e5-4f21-96df-42e5b2cf1ca4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54650", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrqtdm6wwg23", "content": "\ud83d\udfe0 CVE-2026-54650 - High (8.6)\n\nopenhole exposes localhost to the internet in one command. In 0.1.1 and earlier, openhole-server ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54650/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-29T02:00:52.181439Z"}, {"uuid": "aadebc2a-1fd4-4e59-aa54-012bdeeed816", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54658", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrqtdtaeoa2u", "content": "\ud83d\udd34 CVE-2026-54658 - Critical (9.8)\n\nHypequery is a TypeScript semantic layer for ClickHouse. Prior to 2.0.2, escapeValue() in package...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54658/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-29T02:00:59.872209Z"}, {"uuid": "9840f032-9c37-4aaf-8d5d-57398c9d6383", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54650", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrqvvxefvd2s", "content": "CVE-2026-54650 - openhole-server vulnerable to path traversal via URL-decoded request path\nCVE ID : CVE-2026-54650\n \n Published : July 28, 2026, 11:17 p.m. | 3\u00a0hours, 23\u00a0minutes ago\n \n Description : openhole exposes localhost to the internet in one command. In 0.1.1 and earlie...", "creation_timestamp": "2026-07-29T02:46:54.711712Z"}, {"uuid": "8d982bd1-1d72-436e-8440-ac929b1b8d8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54658", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrqw4vq6xv2s", "content": "CVE-2026-54658 - @hypequery/clickhouse has SQL Injection in parameter escaping that allows arbitrary SQL execution\nCVE ID : CVE-2026-54658\n \n Published : July 28, 2026, 11:17 p.m. | 3\u00a0hours, 23\u00a0minutes ago\n \n Description : Hypequery is a TypeScript semantic layer for ClickHous...", "creation_timestamp": "2026-07-29T02:50:47.600723Z"}, {"uuid": "32e7ef6b-aaf0-4d4b-8a8a-da97bbad560a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54658", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrqwtmubyr2o", "content": "CVE-2026-54658 - @hypequery/clickhouse has SQL Injection in parameter escaping that allows arbitrary SQL execution\nCVE ID : CVE-2026-54658\n \n Published : July 28, 2026, 11:17 p.m. | 3\u00a0hours, 21\u00a0minutes ago\n \n Description : Hypequery is a TypeScript semantic layer for ClickHous...", "creation_timestamp": "2026-07-29T03:03:30.193749Z"}, {"uuid": "99f6e6ea-5b5e-4fa4-9e58-50d06e1aa28d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54650", "type": "seen", "source": "https://gist.github.com/alon710/82214e78c8e50d09cf347aa9a1d86bfb", "content": "# CVE-2026-54650: CVE-2026-54650: Remote Path Traversal in openhole-server and openhole CLI Client\n\n> **CVSS Score:** 8.6\n> **Published:** 2026-07-28\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54650\n\n## Summary\nA critical path traversal vulnerability (CWE-22) in openhole-server version 0.1.1 and earlier allows remote, unauthenticated attackers to traverse directories and access restricted files or endpoints on local backend services exposed via the tunnel proxy. The issue stems from improper handling of decoded URL paths inside the proxy handler, which are then reconstructed and executed literally by the CLI client.\n\n## TL;DR\nA path traversal flaw in the openhole proxy server decodes percent-encoded dot-dot-slash segments and forwards them to the local agent, which executes raw, unauthorized file retrieval requests against local development services.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-22\n- **Attack Vector**: Network\n- **CVSS v3.1**: 8.6\n- **EPSS Score**: N/A\n- **Impact**: Confidentiality (High)\n- **Exploit Status**: Proof-of-Concept\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- openhole-server <= 0.1.1\n- openhole CLI client <= 0.1.1\n- **openhole**: <= 0.1.1 (Fixed in: `0.1.2`)\n\n## Mitigation\n\n- Upgrade openhole binaries and server components to version 0.1.2 or above\n- Restrict access to the public proxy using firewall rules, IP whitelisting, or authentication headers\n- Avoid running local development servers under privileged administrator accounts\n\n**Remediation Steps:**\n1. Run the default installation update script: curl -fsSL https://openhole.dev/install.sh | sh\n2. Alternatively, pull from source, checkout v0.1.2, and compile using: go build -o openhole cmd/openhole/main.go\n3. Restart any active tunnels to ensure updated path routing configurations are enforced\n\n## References\n\n- [openhole GitHub Repository](https://github.com/bablilayoub/openhole)\n- [openhole Security Patch Commit](https://github.com/bablilayoub/openhole/commit/a28c27adde2a7ed0c347b730c8707208c0f78ed3)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54650) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-29T03:32:05.314932Z"}, {"uuid": "20ae540c-330a-46d5-b34d-8a70c046a3fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54650", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrqylspu6q23", "content": "CVE-2026-54650 - openhole-server vulnerable to path traversal via URL-decoded request path\nCVE ID : CVE-2026-54650\n \n Published : July 28, 2026, 11:17 p.m. | 3\u00a0hours, 21\u00a0minutes ago\n \n Description : openhole exposes localhost to the internet in one command. In 0.1.1 and earlie...", "creation_timestamp": "2026-07-29T03:34:55.728872Z"}, {"uuid": "0ded817a-1231-4ca5-bab0-cf27a0284750", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54659", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrqyur5xl32i", "content": "CVE-2026-54659 - Pagy I18n locale option is not validated before being used in a file path\nCVE ID : CVE-2026-54659\n \n Published : July 28, 2026, 11:17 p.m. | 3\u00a0hours, 23\u00a0minutes ago\n \n Description : Pagy is agnostic pagination in plain Ruby. From 43.0.0 until 43.5.6, Pagy::I18...", "creation_timestamp": "2026-07-29T03:39:55.820389Z"}, {"uuid": "8df48e91-c11f-434a-a4e4-76fa0e76799c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54658", "type": "seen", "source": "https://gist.github.com/alon710/58765246c17b37995ac42b87551c99f8", "content": "# CVE-2026-54658: CVE-2026-54658: SQL Injection via Parameter Escaping Bypass in @hypequery/clickhouse\n\n> **CVSS Score:** 9.8\n> **Published:** 2026-07-28\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54658\n\n## Summary\nA critical SQL injection vulnerability was identified in @hypequery/clickhouse prior to version 2.0.2. The escapeValue utility function in packages/clickhouse/src/core/utils.ts fails to escape literal backslash characters before replacing single quotes. This allows remote, unauthenticated attackers to supply input parameters ending in a backslash, neutralizing the closing quote character inside ClickHouse databases and enabling arbitrary SQL execution.\n\n## TL;DR\nImproper escaping of trailing backslash characters in @hypequery/clickhouse parameter substitution allows attackers to escape string literal boundaries and inject arbitrary SQL commands into ClickHouse queries.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-89\n- **Attack Vector**: Network (AV:N)\n- **CVSS Severity**: 9.8 (Critical)\n- **Exploit Status**: PoC (Proof of Concept) available in repository tests\n- **CISA KEV Status**: Not listed\n- **Mitigated Version**: 2.0.2\n\n## Affected Systems\n\n- @hypequery/clickhouse\n- **@hypequery/clickhouse**: < 2.0.2 (Fixed in: `2.0.2`)\n\n## Mitigation\n\n- Upgrade the dependency `@hypequery/clickhouse` to version 2.0.2 or higher immediately.\n- Apply least-privilege principles to database connections, restricting write, modify, and drop permissions for application service roles.\n- Deploy Web Application Firewall (WAF) signatures to block incoming HTTP requests with parameter values containing unescaped trailing backslashes.\n\n**Remediation Steps:**\n1. Open the project package.json file and locate the dependency entry for @hypequery/clickhouse.\n2. Update the version number to at least 2.0.2.\n3. Run your package manager install command (e.g., npm install or yarn install) to pull down and link the patched library version.\n4. Verify the changes by checking package-lock.json or yarn.lock to confirm the installed package is 2.0.2.\n\n## References\n\n- [CVE Official Record](https://www.cve.org/CVERecord?id=CVE-2026-54658)\n- [GitHub Security Advisory GHSA-6wcc-39rp-hh9p](https://github.com/hypequery/hypequery/security/advisories/GHSA-6wcc-39rp-hh9p)\n- [Official Security Patch Commit](https://github.com/hypequery/hypequery/commit/4dfa9d77d70a08b970e722268b75ca7d13db0bdf)\n- [Release Changelog](https://github.com/hypequery/hypequery/blob/main/packages/clickhouse/CHANGELOG.md#202)\n- [Release Page](https://github.com/hypequery/hypequery/releases/tag/@hypequery/clickhouse@2.0.2)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54658) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-29T04:31:03.894417Z"}, {"uuid": "12c1db51-1426-41b5-a583-3c7a5a6a7b39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54654", "type": "seen", "source": "https://gist.github.com/alon710/22ff7de2f68c39286e130a0c2981900e", "content": "# CVE-2026-54654: CVE-2026-54654: Python Code Injection in datamodel-code-generator via Comment Line-Break Escape\n\n> **CVSS Score:** 7.8\n> **Published:** 2026-07-28\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54654\n\n## Summary\nA vulnerability in the datamodel-code-generator library allows for unauthenticated remote code execution when generating code from malicious or untrusted schema specifications. By embedding special physical line terminators, such as carriage returns, vertical tabs, or form feeds, within template values, an attacker can break out of inline Python comment boundaries. The generated output file subsequently contains un-commented python instructions that execute automatically during module import.\n\n## TL;DR\nA local code injection vulnerability exists in datamodel-code-generator versions prior to 0.60.2. Inadequate sanitization of line terminators in the comment metadata of schema templates allows attackers to inject arbitrary executable statements into generated Python code, which triggers code execution when the generated files are imported.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-94, CWE-1336\n- **Attack Vector**: Local (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n- **CVSS Severity Score**: 7.8 (High)\n- **Exploit Status**: Proof-of-Concept (PoC) available\n- **Primary Vulnerable Component**: Jinja2 template interpolation logic in koxudaxi/datamodel-code-generator\n- **Fix Version**: 0.60.2\n\n## Affected Systems\n\n- datamodel-code-generator versions starting from 0.14.1 up to (but not including) 0.60.2\n- **datamodel-code-generator**: >= 0.14.1, < 0.60.2 (Fixed in: `0.60.2`)\n\n## Mitigation\n\n- Upgrade datamodel-code-generator to version 0.60.2 or higher to ensure inputs are properly sanitized.\n- Implement pre-processing scripts that scrub or reject carriage returns, vertical tabs, and form feeds from JSON metadata input before compiling files.\n- Avoid importing unverified generated models directly in production deployments without initial syntactic sanity checks or static scanning.\n\n**Remediation Steps:**\n1. Inspect requirements.txt, poetry.lock, or Pipfile configurations to detect vulnerable versions of the generator (< 0.60.2).\n2. Execute the package manager update command: pip install --upgrade \"datamodel-code-generator>=0.60.2\".\n3. Review any internal workflows that utilize absolute paths for custom templates, as these bypass default comment sanitization features and must be audited manually.\n\n## References\n\n- [GHSA-wjv6-jcfj-mf9r: Python Code Injection in datamodel-code-generator](https://github.com/koxudaxi/datamodel-code-generator/security/advisories/GHSA-wjv6-jcfj-mf9r)\n- [Release 0.60.2: official patched update release details](https://github.com/koxudaxi/datamodel-code-generator/releases/tag/0.60.2)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54654) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-29T09:32:26.834258Z"}, {"uuid": "414979be-3910-42a3-b464-c1d03ce65d32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54653", "type": "seen", "source": "https://gist.github.com/alon710/18c642199d3d87ef43a0391f4cc215a6", "content": "# CVE-2026-54653: CVE-2026-54653: Remote Code Execution via Code Injection in datamodel-code-generator\n\n> **CVSS Score:** 8.8\n> **Published:** 2026-07-28\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54653\n\n## Summary\nA critical code injection vulnerability exists in datamodel-code-generator from version 0.17.0 up to 0.60.1. The vulnerability allows remote attackers who supply a malicious JSON schema to execute arbitrary Python code. This occurs when the schema specifies a payload inside the 'default_factory' field extra, which is rendered directly into generated code without sanitization. When downstream processes load or import the output code, the evaluation of the class definition immediately triggers the execution of the injected code.\n\n## TL;DR\nUnsanitized rendering of the 'default_factory' schema parameter allows unauthenticated remote attackers to inject arbitrary Python expressions, resulting in automatic code execution when downstream applications import the generated code.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-94\n- **Attack Vector**: Network (AV:N)\n- **CVSS Score**: 8.8\n- **Exploit Status**: Proof-of-Concept\n- **Impact**: Arbitrary Code Execution (RCE)\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- datamodel-code-generator\n- **datamodel-code-generator**: >= 0.17.0, < 0.60.2 (Fixed in: `0.60.2`)\n\n## Mitigation\n\n- Upgrade datamodel-code-generator to version 0.60.2 or later.\n- Implement automated validation on JSON schemas to reject unexpected patterns in the default_factory property.\n- Isolate the model compilation process in an unprivileged runtime container with restricted system access.\n\n**Remediation Steps:**\n1. Check current datamodel-code-generator dependency version.\n2. Run pip install --upgrade datamodel-code-generator>=0.60.2 to install the security patch.\n3. Audit pipeline configuration and restrict network access during automated module generation.\n4. Establish static analysis scanners to inspect generated python files for suspicious imports or function executions before production usage.\n\n## References\n\n- [GitHub Security Advisory (GHSA-386q-5hp3-95m9)](https://github.com/koxudaxi/datamodel-code-generator/security/advisories/GHSA-386q-5hp3-95m9)\n- [Vulnerability Patch Commit](https://github.com/koxudaxi/datamodel-code-generator/commit/17fc235e234cbcfaaadef8c74cb72c9687db0d1d)\n- [Official v0.60.2 Release Details](https://github.com/koxudaxi/datamodel-code-generator/releases/tag/0.60.2)\n- [CVE-2026-54653 Official Record](https://www.cve.org/CVERecord?id=CVE-2026-54653)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54653) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-29T11:31:22.607334Z"}, {"uuid": "f5e032bb-9b10-4de8-a541-574cf3a9cbc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54656", "type": "seen", "source": "https://gist.github.com/alon710/9d9829ba6ab40face903027898206e80", "content": "# CVE-2026-54656: CVE-2026-54656: Arbitrary Code Execution in datamodel-code-generator via Unescaped Validator Configurations\n\n> **CVSS Score:** 7.8\n> **Published:** 2026-07-28\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54656\n\n## Summary\nCVE-2026-54656 is a high-severity arbitrary code execution vulnerability in the koxudaxi/datamodel-code-generator Python package. When processing validator metadata from external configuration files passed via the --extra-template-data argument, the code generator performs unescaped string interpolation into Pydantic v2 @field_validator decorators. This allows local attackers to construct malicious configuration files that inject arbitrary Python statements into generated models, executing code upon downstream import. This vulnerability has been resolved in version 0.60.2.\n\n## TL;DR\nUnescaped string formatting in Pydantic v2 validator generation enables arbitrary code execution at module import time when processing malicious configurations.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-94\n- **Attack Vector**: Local\n- **CVSS v3.1**: 7.8 (High)\n- **Exploit Status**: poc\n- **Impact**: Arbitrary Code Execution\n- **Affected Range**: >= 0.52.1, < 0.60.2\n- **Patched Version**: 0.60.2\n\n## Affected Systems\n\n- datamodel-code-generator\n- **datamodel-code-generator**: >= 0.52.1, < 0.60.2 (Fixed in: `0.60.2`)\n\n## Mitigation\n\n- Upgrade to version 0.60.2 or higher\n- Implement schema validation for configuration files passed to --extra-template-data\n- Isolate compilation steps within sandboxed CI/CD environments\n\n**Remediation Steps:**\n1. Audit existing code generation pipelines for datamodel-code-generator dependencies between versions 0.52.1 and 0.60.1\n2. Upgrade the datamodel-code-generator package in lockfiles or requirements definitions to 0.60.2\n3. Block or filter user-supplied configuration configurations that contain special characters, single quotes, or semi-colons under validator fields\n\n## References\n\n- [NVD - CVE-2026-54656](https://nvd.nist.gov/vuln/detail/CVE-2026-54656)\n- [GitHub Security Advisory GHSA-8m8r-38jm-f355](https://github.com/koxudaxi/datamodel-code-generator/security/advisories/GHSA-8m8r-38jm-f355)\n- [datamodel-code-generator v0.60.2 Release Notes](https://github.com/koxudaxi/datamodel-code-generator/releases/tag/0.60.2)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54656) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-29T13:32:26.616949Z"}]}