A collection of my CVE's and advisories
openclaw
https://github.com/advisories/GHSA-v2ww-5rh7-2h5v CVE-2026-53853 - Allowlists skip - CVSS v3 7.1
gogs
https://github.com/advisories/GHSA-89mr-xqfv-758m CVE-2026-52811 - RCE - CVSS v3 9.0 https://github.com/advisories/GHSA-6p9m-q3jp-47h4 CVE-2026-52812 - Cross-tenant disclosure - CVSS v3 7.1
gotenberg
https://github.com/advisories/GHSA-hwc4-gmrw-5222 CVE-2026-44829 - Path traversal to Arbitrary file write on a consumer - CVSS v3 8.8
siyuan
https://github.com/siyuan-note/siyuan/security/advisories/GHSA-2h64-c999-c9r6 - Stored XSS to Electron renderer RCE - CVSS v4 9.4 https://github.com/siyuan-note/siyuan/security/advisories/GHSA-25rp-h46x-2hjm CVE-2026-44588 - URL-encoded title bypasses into a XSS to Electron renderer RCE - CVSS v4 9.4
PraisonAI
https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-9mqq-jqxf-grvw CVE-2026-44336 - MCP path-traversal to RCE via Python injection - CVSS v4 9.4
electerm
https://github.com/electerm/electerm/security/advisories/GHSA-jgg9-rw32-44pj CVE-2026-45058 - Persistent local-pty code execution - CVSS v4 9.4 https://github.com/electerm/electerm/security/advisories/GHSA-mpm8-cx2p-626q CVE-2026-43944 - Arbitrary local code execution - CVSS v4 9.4 https://github.com/electerm/electerm/security/advisories/GHSA-7p5m-v798-f8vv CVE-2026-45353 - Local code execution without UI interaction - CVSS v4 9.3 https://github.com/electerm/electerm/security/advisories/GHSA-g29v-q6h7-76wh CVE-2026-45787 - Insecure sync encryption -CVSS v4 6.0
freescout
https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-hmqm-33wp-858j CVE-2026-40569 - Mass Assignment - CVSS v3 9.0 https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-w2f5-6wcv-677r CVE-2026-40568 - XSS - CVSS v3 8.5 https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-q8v4-v62h-5528 CVE-2026-40567 - HTML Injection - CVSS v3 5.8 https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-fg98-rgx6-8x4g CVE-2026-40566 - SSRF - CVSS v3 4.1
ChurchCRM
https://github.com/ChurchCRM/CRM/security/advisories/GHSA-66f7-4p96-mww9 CVE-2026-39340 - SQL Injection - CVSS v3 8.1 https://github.com/ChurchCRM/CRM/security/advisories/GHSA-pqp6-54p2-m66f CVE-2026-35534 - Stored XSS - CVSS v3 7.6