Package advisories with no CVE yet

Security advisories reviewed by GitHub that do not have a CVE id (yet). Once a CVE is assigned the entry moves to our CVE pages. Each link opens the original advisory.

npm (7)

• GHSA-h4fr-cmh5-qr62 Low 2026-10-23: Fallow: A `.*` glob segment let an analyzed repository make Fallow test paths in the parent of the project root
  fallow < 3.34.0 · fixed in 3.34.0
  @fallow-cli/fallow-node < 3.34.0 · fixed in 3.34.0
• GHSA-f2hq-32vh-53cc High 2026-10-23: postal-mime: Quadratic CPU consumption when decoding a header of many joinable RFC 2047 base64 encoded words
  postal-mime >= 3.0.0, < 4.0.8 · fixed in 4.0.8
• GHSA-8c8m-p3m8-cjg8 Medium 2026-10-23: Nodemailer: A nested comment ends early in addressparser, releasing the rest of the comment as a recipient
  nodemailer >= 3.0.0, < 10.1.4 · fixed in 10.1.4
• GHSA-m943-m63m-w62w Medium 2026-10-23: Nodemailer: A ";" inside a quoted string or comment ends an address group early in addressparser, turning display text into a recipient
  nodemailer >= 3.0.0, < 10.1.4 · fixed in 10.1.4
• GHSA-85x2-q946-cp5h Medium 2026-10-23: Nodemailer: A ">" inside a quoted local part ends an angle-addr early in addressparser, delivering to a domain the header does not name
  nodemailer >= 3.0.0, < 10.1.4 · fixed in 10.1.4
• GHSA-2rqm-h6hv-g79v Medium 2026-10-23: odf-kit has HTML injection leading to XSS in odsToHtml() via unescaped style attribute values
  odf-kit >= 0.9.8, < 0.14.2 · fixed in 0.14.2
• GHSA-673q-mjm6-r5xr Critical 2026-10-22: Next.js: Unauthenticated Remote Code Execution in `use cache` functions returning typed arrays
  next >= 16.0.0, <= 16.4.0 · fixed in 16.4.1

go (7)

• GHSA-h53f-rm2w-w7rg Medium 2026-10-23: Echo: X-Real-IP extractor trusts the header value instead of the sending peer
  github.com/labstack/echo/v5 >= 5.0.0, < 5.4.1 · fixed in 5.4.1
• GHSA-9969-6676-49h5 High 2026-10-23: Echo: WebSocket proxy can retain connections and handlers after client disconnect
  github.com/labstack/echo/v4 >= 4.15.0, < 4.16.1 · fixed in 4.16.1
  github.com/labstack/echo/v5 >= 5.0.0, < 5.4.1 · fixed in 5.4.1
• GHSA-h7wr-284f-5qvc High 2026-10-23: Echo: Decompress permits unbounded gzip expansion in v4
  github.com/labstack/echo/v4 >= 4.0.0, < 4.16.1 · fixed in 4.16.1
• GHSA-cxf3-9h37-7rr8 Critical 2026-10-23: Echo: Rejected WebSocket upgrades can bypass Echo route-level access controls
  github.com/labstack/echo/v4 >= 4.0.0, < 4.16.1 · fixed in 4.16.1
  github.com/labstack/echo/v5 >= 5.0.0, < 5.4.1 · fixed in 5.4.1
• GHSA-x9ff-22gv-65f4 Medium 2026-10-23: Echo: BodyDump can discard BodyLimit overflow errors for unknown-length requests
  github.com/labstack/echo/v5 >= 5.0.0, < 5.4.1 · fixed in 5.4.1
• GHSA-f48p-c9v4-h7xv High 2026-10-23: Echo: BodyDump captures request and response bodies without size limits in v4
  github.com/labstack/echo/v4 >= 4.0.0, < 4.16.1 · fixed in 4.16.1
• GHSA-xp3q-r38w-vgqm Medium 2026-10-23: SiYuan: The publish filter for local storage returns the administrator's entire storage map with only three keys sanitized
  github.com/siyuan-note/siyuan/kernel < 0.0.0-20260729005258-4daee87d4152 · fixed in 0.0.0-20260729005258-4daee87d4152

pip (5)

• GHSA-xmj3-9gf7-h52w Low 2026-10-23: setuptools: Windows path escape via namespace_packages.txt during legacy wheel installation Description
  setuptools >= 38.2.2, < 84.1.0 · fixed in 84.1.0
• GHSA-7xgj-8392-5q4r Medium 2026-10-23: FastMCP: Post-transform component authorization is skipped on direct calls
  fastmcp >= 3.0.0, < 3.4.10 · fixed in 3.4.10
  fastmcp >= 4.0.0, < 4.1.2 · fixed in 4.1.2
• GHSA-vqqp-x5qm-5qp4 Medium 2026-10-23: FastMCP MCP client wrappers construct M2M OAuth providers without issuer binding — client secret redirectable to attacker-advertised authorization server
  fastmcp >= 4.0.0a1, < 4.1.2 · fixed in 4.1.2
  fastmcp-slim >= 4.0.0a1, < 4.1.2 · fixed in 4.1.2
• GHSA-8cqv-vvq2-6p8c High 2026-10-22: Duplicate Advisory: Mistune: Path Traversal and XSS in Include directive
  mistune < 3.3.0 · no fix yet
• GHSA-78g4-xqwv-q3g8 High 2026-10-22: Pillow: Bundled libopenjp2 2.5.4 in all wheels since 11.1.0 carries OSV-2025-219 heap-buffer-overflow write reachable from Image.open().load()
  pillow >= 11.1.0, < 13.0.0 · fixed in 13.0.0

rust (1)

• GHSA-q54r-jf2p-rfr2 High 2026-10-23: gitoxide gix: untrusted .git/config disables filesystem .git-protection path checks via unfiltered protect_options()
  gix >= 0.88.0, <= 0.89.0 · fixed in 0.90.0

composer (1)

• GHSA-mhf7-xp6r-6qrc Medium 2026-10-23: Livewire: Authorization bypass in #[Authorize] via reordered parameter keys and #[Json] execution order
  livewire/livewire >= 4.3.0, < 4.4.8 · fixed in 4.4.8