mcp-contextforge-gateway =1.0.2.

In CPython 3.13 and earlier, tarfile data/tar extraction filters mishandle crafted archives with a hard link to a symbolic link. Extraction can change mode/mtime of a file outside the destination directory or expose that file’s contents inside the extracted tree. Upgrade to 3.14.0b1 or later.

pgweb through 0.17.0 leaves POST /api/connect unguarded even when connect-backend authorization is configured. A network attacker with low privileges can submit arbitrary DB connection strings plus a custom session identifier to bypass resource-to-database mapping, enabling unauthorized access to databases and internal services. Upgrade from `

pig (pkg:github/pig-mesh/pig) before 4.1.0 allows unverified password changes via /register/password because current-password verification results are discarded. Remote unauthenticated attackers can submit a target username with any “current password” to overwrite credentials (including admin) and gain full administrative control. Upgrade to 4.1.0+ (fix commit ce958668).

Oracle released a Critical Security Patch Update containing 673 new security patches across multiple product families, covering vulnerabilities in Oracle code and bundled third-party components. Oracle reports ongoing exploitation attempts against customers who failed to apply earlier fixes. Review prior CPU/CSPU advisories, verify affected products in the Patch Availability Document, and apply cspusep2026 patches without delay on actively-supported versions.

SSRF/token exfiltration in @zereight/mcp-gitlab when ENABLE_DYNAMIC_API_URL=true: attacker sets X-GitLab-API-URL to an arbitrary host, and the server uses it as the base for outbound GitLab API calls, attaching the victim Private-Token to each fetch. Affected `>=0.0.1,