Skip to content
OpenAdvisories

Archive

21 June 2026

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Critical 9.6

    SiYuan - Remote Code Execution via Malicious Bazaar Package Metadata and README

    SiYuan before v3.6.1 fails to sanitize package metadata and README content in the Bazaar marketplace, allowing malicious package authors to inject arbitrary HTML and JavaScript. Attackers can achieve remote code execution on any user browsing the Bazaar by em…

  • Critical 9.8
    CVE-2026-56265 Scanner template

    Crawl4AI - Authentication Bypass via Hardcoded JWT Signing Key

    Crawl4AI before 0.8.7 contains an authentication bypass vulnerability due to a hardcoded default JWT signing key in the Docker API server. Attackers who know the default key can forge valid authentication tokens for any user, bypassing authentication and gain…