deardaniel/secdata-raw huggingface dataset:
GitHub Security Advisory: GHSA-h29g-q5c2-9h4f
Package: parse-server (NPM)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-204: Observable Response Discrepancy
Vulnerable versions: < 8.6.51
Patched in: 8.6.51

Summary: Parse Server email verification resend page leaks user existence

Details:
### Impact

The Pages route and legacy PublicAPI route for resending email verification links return distinguishable responses depending on whether the provided username exists and has an unverified email. This allows an unauthenticated attacker to enumerate valid usernames by observing different redirect targets. The existing `emailVerifySuccessOnInvalidEmail` configuration option, which is enabled by default and protects the API route against this, did not apply to these routes.

### Patches

The email verification resend routes now respect the `emailVerifySuccessOnInvalidEmail` option. When set to `true` (the default), both routes redirect to the success page regardless of the outcome, preventing user enumeration.

### Workarounds

There is no known workaround to prevent the information disclosure other than upgrading.
GitHub Security Advisory: GHSA-h29g-q5c2-9h4f
Package: parse-server (NPM)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-204: Observable Response Discrepancy
Vulnerable versions: >= 9.0.0, < 9.6.0-alpha.40
Patched in: 9.6.0-alpha.40

Summary: Parse Server email verification resend page leaks user existence

Details:
### Impact

The Pages route and legacy PublicAPI route for resending email verification links return distinguishable responses depending on whether the provided username exists and has an unverified email. This allows an unauthenticated attacker to enumerate valid usernames by observing different redirect targets. The existing `emailVerifySuccessOnInvalidEmail` configuration option, which is enabled by default and protects the API route against this, did not apply to these routes.

### Patches

The email verification resend routes now respect the `emailVerifySuccessOnInvalidEmail` option. When set to `true` (the default), both routes redirect to the success page regardless of the outcome, preventing user enumeration.

### Workarounds

There is no known workaround to prevent the information disclosure other than upgrading.
GitHub Security Advisory: GHSA-mr9r-mww3-v6gv
Package: @dicebear/initials (NPM)
Severity: MODERATE (CVSS 4.7)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: >= 9.0.0, <= 9.4.0
Patched in: 9.4.1

Summary: SVG Injection via Unsanitized Options in @dicebear/core and @dicebear/initials

Details:
## Summary

SVG attribute values derived from user-supplied options (`backgroundColor`, `fontFamily`, `textColor`) were not XML-escaped before interpolation into SVG output. This could allow Cross-Site Scripting (XSS) when applications pass untrusted input to `createAvatar()` and serve the resulting SVG inline or with `Content-Type: image/svg+xml`.

## Affected packages

- **`@dicebear/core`** — `backgroundColor` option values interpolated into SVG attributes without escaping (affects `solid` and `gradientLinear` background types)
- **`@dicebear/initials`** — `fontFamily` and `textColor` option values interpolated into SVG attributes without escaping

## Fix

All affected SVG attribute values are now properly escaped using XML entity encoding. Users should upgrade to the listed patched versions.

## Mitigating factors

- Applications that validate input against the library's JSON Schema before passing it to `createAvatar()` are not affected
- The DiceBear CLI validates input via AJV and was not vulnerable
- Exploitation requires that an application passes untrusted, unvalidated external input directly as option values
GitHub Security Advisory: GHSA-mr9r-mww3-v6gv
Package: @dicebear/initials (NPM)
Severity: MODERATE (CVSS 4.7)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: >= 8.0.0, <= 8.0.2
Patched in: 8.0.3

Summary: SVG Injection via Unsanitized Options in @dicebear/core and @dicebear/initials

Details:
## Summary

SVG attribute values derived from user-supplied options (`backgroundColor`, `fontFamily`, `textColor`) were not XML-escaped before interpolation into SVG output. This could allow Cross-Site Scripting (XSS) when applications pass untrusted input to `createAvatar()` and serve the resulting SVG inline or with `Content-Type: image/svg+xml`.

## Affected packages

- **`@dicebear/core`** — `backgroundColor` option values interpolated into SVG attributes without escaping (affects `solid` and `gradientLinear` background types)
- **`@dicebear/initials`** — `fontFamily` and `textColor` option values interpolated into SVG attributes without escaping

## Fix

All affected SVG attribute values are now properly escaped using XML entity encoding. Users should upgrade to the listed patched versions.

## Mitigating factors

- Applications that validate input against the library's JSON Schema before passing it to `createAvatar()` are not affected
- The DiceBear CLI validates input via AJV and was not vulnerable
- Exploitation requires that an application passes untrusted, unvalidated external input directly as option values
GitHub Security Advisory: GHSA-mr9r-mww3-v6gv
Package: @dicebear/initials (NPM)
Severity: MODERATE (CVSS 4.7)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: >= 7.0.0, <= 7.1.3
Patched in: 7.1.4

Summary: SVG Injection via Unsanitized Options in @dicebear/core and @dicebear/initials

Details:
## Summary

SVG attribute values derived from user-supplied options (`backgroundColor`, `fontFamily`, `textColor`) were not XML-escaped before interpolation into SVG output. This could allow Cross-Site Scripting (XSS) when applications pass untrusted input to `createAvatar()` and serve the resulting SVG inline or with `Content-Type: image/svg+xml`.

## Affected packages

- **`@dicebear/core`** — `backgroundColor` option values interpolated into SVG attributes without escaping (affects `solid` and `gradientLinear` background types)
- **`@dicebear/initials`** — `fontFamily` and `textColor` option values interpolated into SVG attributes without escaping

## Fix

All affected SVG attribute values are now properly escaped using XML entity encoding. Users should upgrade to the listed patched versions.

## Mitigating factors

- Applications that validate input against the library's JSON Schema before passing it to `createAvatar()` are not affected
- The DiceBear CLI validates input via AJV and was not vulnerable
- Exploitation requires that an application passes untrusted, unvalidated external input directly as option values
GitHub Security Advisory: GHSA-mr9r-mww3-v6gv
Package: @dicebear/initials (NPM)
Severity: MODERATE (CVSS 4.7)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: >= 6.0.0, <= 6.1.3
Patched in: 6.1.4

Summary: SVG Injection via Unsanitized Options in @dicebear/core and @dicebear/initials

Details:
## Summary

SVG attribute values derived from user-supplied options (`backgroundColor`, `fontFamily`, `textColor`) were not XML-escaped before interpolation into SVG output. This could allow Cross-Site Scripting (XSS) when applications pass untrusted input to `createAvatar()` and serve the resulting SVG inline or with `Content-Type: image/svg+xml`.

## Affected packages

- **`@dicebear/core`** — `backgroundColor` option values interpolated into SVG attributes without escaping (affects `solid` and `gradientLinear` background types)
- **`@dicebear/initials`** — `fontFamily` and `textColor` option values interpolated into SVG attributes without escaping

## Fix

All affected SVG attribute values are now properly escaped using XML entity encoding. Users should upgrade to the listed patched versions.

## Mitigating factors

- Applications that validate input against the library's JSON Schema before passing it to `createAvatar()` are not affected
- The DiceBear CLI validates input via AJV and was not vulnerable
- Exploitation requires that an application passes untrusted, unvalidated external input directly as option values
GitHub Security Advisory: GHSA-mr9r-mww3-v6gv
Package: @dicebear/initials (NPM)
Severity: MODERATE (CVSS 4.7)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: >= 5.0.0, <= 5.4.3
Patched in: 5.4.4

Summary: SVG Injection via Unsanitized Options in @dicebear/core and @dicebear/initials

Details:
## Summary

SVG attribute values derived from user-supplied options (`backgroundColor`, `fontFamily`, `textColor`) were not XML-escaped before interpolation into SVG output. This could allow Cross-Site Scripting (XSS) when applications pass untrusted input to `createAvatar()` and serve the resulting SVG inline or with `Content-Type: image/svg+xml`.

## Affected packages

- **`@dicebear/core`** — `backgroundColor` option values interpolated into SVG attributes without escaping (affects `solid` and `gradientLinear` background types)
- **`@dicebear/initials`** — `fontFamily` and `textColor` option values interpolated into SVG attributes without escaping

## Fix

All affected SVG attribute values are now properly escaped using XML entity encoding. Users should upgrade to the listed patched versions.

## Mitigating factors

- Applications that validate input against the library's JSON Schema before passing it to `createAvatar()` are not affected
- The DiceBear CLI validates input via AJV and was not vulnerable
- Exploitation requires that an application passes untrusted, unvalidated external input directly as option values
GitHub Security Advisory: GHSA-mr9r-mww3-v6gv
Package: @dicebear/core (NPM)
Severity: MODERATE (CVSS 4.7)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: >= 9.0.0, <= 9.4.0
Patched in: 9.4.1

Summary: SVG Injection via Unsanitized Options in @dicebear/core and @dicebear/initials

Details:
## Summary

SVG attribute values derived from user-supplied options (`backgroundColor`, `fontFamily`, `textColor`) were not XML-escaped before interpolation into SVG output. This could allow Cross-Site Scripting (XSS) when applications pass untrusted input to `createAvatar()` and serve the resulting SVG inline or with `Content-Type: image/svg+xml`.

## Affected packages

- **`@dicebear/core`** — `backgroundColor` option values interpolated into SVG attributes without escaping (affects `solid` and `gradientLinear` background types)
- **`@dicebear/initials`** — `fontFamily` and `textColor` option values interpolated into SVG attributes without escaping

## Fix

All affected SVG attribute values are now properly escaped using XML entity encoding. Users should upgrade to the listed patched versions.

## Mitigating factors

- Applications that validate input against the library's JSON Schema before passing it to `createAvatar()` are not affected
- The DiceBear CLI validates input via AJV and was not vulnerable
- Exploitation requires that an application passes untrusted, unvalidated external input directly as option values
GitHub Security Advisory: GHSA-mr9r-mww3-v6gv
Package: @dicebear/core (NPM)
Severity: MODERATE (CVSS 4.7)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: >= 8.0.0, <= 8.0.2
Patched in: 8.0.3

Summary: SVG Injection via Unsanitized Options in @dicebear/core and @dicebear/initials

Details:
## Summary

SVG attribute values derived from user-supplied options (`backgroundColor`, `fontFamily`, `textColor`) were not XML-escaped before interpolation into SVG output. This could allow Cross-Site Scripting (XSS) when applications pass untrusted input to `createAvatar()` and serve the resulting SVG inline or with `Content-Type: image/svg+xml`.

## Affected packages

- **`@dicebear/core`** — `backgroundColor` option values interpolated into SVG attributes without escaping (affects `solid` and `gradientLinear` background types)
- **`@dicebear/initials`** — `fontFamily` and `textColor` option values interpolated into SVG attributes without escaping

## Fix

All affected SVG attribute values are now properly escaped using XML entity encoding. Users should upgrade to the listed patched versions.

## Mitigating factors

- Applications that validate input against the library's JSON Schema before passing it to `createAvatar()` are not affected
- The DiceBear CLI validates input via AJV and was not vulnerable
- Exploitation requires that an application passes untrusted, unvalidated external input directly as option values
GitHub Security Advisory: GHSA-mr9r-mww3-v6gv
Package: @dicebear/core (NPM)
Severity: MODERATE (CVSS 4.7)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: >= 7.0.0, <= 7.1.3
Patched in: 7.1.4

Summary: SVG Injection via Unsanitized Options in @dicebear/core and @dicebear/initials

Details:
## Summary

SVG attribute values derived from user-supplied options (`backgroundColor`, `fontFamily`, `textColor`) were not XML-escaped before interpolation into SVG output. This could allow Cross-Site Scripting (XSS) when applications pass untrusted input to `createAvatar()` and serve the resulting SVG inline or with `Content-Type: image/svg+xml`.

## Affected packages

- **`@dicebear/core`** — `backgroundColor` option values interpolated into SVG attributes without escaping (affects `solid` and `gradientLinear` background types)
- **`@dicebear/initials`** — `fontFamily` and `textColor` option values interpolated into SVG attributes without escaping

## Fix

All affected SVG attribute values are now properly escaped using XML entity encoding. Users should upgrade to the listed patched versions.

## Mitigating factors

- Applications that validate input against the library's JSON Schema before passing it to `createAvatar()` are not affected
- The DiceBear CLI validates input via AJV and was not vulnerable
- Exploitation requires that an application passes untrusted, unvalidated external input directly as option values
GitHub Security Advisory: GHSA-mr9r-mww3-v6gv
Package: @dicebear/core (NPM)
Severity: MODERATE (CVSS 4.7)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: >= 6.0.0, <= 6.1.3
Patched in: 6.1.4

Summary: SVG Injection via Unsanitized Options in @dicebear/core and @dicebear/initials

Details:
## Summary

SVG attribute values derived from user-supplied options (`backgroundColor`, `fontFamily`, `textColor`) were not XML-escaped before interpolation into SVG output. This could allow Cross-Site Scripting (XSS) when applications pass untrusted input to `createAvatar()` and serve the resulting SVG inline or with `Content-Type: image/svg+xml`.

## Affected packages

- **`@dicebear/core`** — `backgroundColor` option values interpolated into SVG attributes without escaping (affects `solid` and `gradientLinear` background types)
- **`@dicebear/initials`** — `fontFamily` and `textColor` option values interpolated into SVG attributes without escaping

## Fix

All affected SVG attribute values are now properly escaped using XML entity encoding. Users should upgrade to the listed patched versions.

## Mitigating factors

- Applications that validate input against the library's JSON Schema before passing it to `createAvatar()` are not affected
- The DiceBear CLI validates input via AJV and was not vulnerable
- Exploitation requires that an application passes untrusted, unvalidated external input directly as option values
GitHub Security Advisory: GHSA-mr9r-mww3-v6gv
Package: @dicebear/core (NPM)
Severity: MODERATE (CVSS 4.7)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: >= 5.0.0, <= 5.4.3
Patched in: 5.4.4

Summary: SVG Injection via Unsanitized Options in @dicebear/core and @dicebear/initials

Details:
## Summary

SVG attribute values derived from user-supplied options (`backgroundColor`, `fontFamily`, `textColor`) were not XML-escaped before interpolation into SVG output. This could allow Cross-Site Scripting (XSS) when applications pass untrusted input to `createAvatar()` and serve the resulting SVG inline or with `Content-Type: image/svg+xml`.

## Affected packages

- **`@dicebear/core`** — `backgroundColor` option values interpolated into SVG attributes without escaping (affects `solid` and `gradientLinear` background types)
- **`@dicebear/initials`** — `fontFamily` and `textColor` option values interpolated into SVG attributes without escaping

## Fix

All affected SVG attribute values are now properly escaped using XML entity encoding. Users should upgrade to the listed patched versions.

## Mitigating factors

- Applications that validate input against the library's JSON Schema before passing it to `createAvatar()` are not affected
- The DiceBear CLI validates input via AJV and was not vulnerable
- Exploitation requires that an application passes untrusted, unvalidated external input directly as option values
GitHub Security Advisory: GHSA-rf6f-7fwh-wjgh
Package: flatted (NPM)
Severity: HIGH (CVSS 0.0)
CWE: CWE-1321: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
Vulnerable versions: <= 3.4.1
Patched in: 3.4.2

Summary: Prototype Pollution via parse() in NodeJS flatted

Details:
---
  **Summary**

  The parse() function in flatted can use attacker-controlled string values from the parsed JSON as direct array index
  keys, without validating that they are numeric. Since the internal input buffer is a JavaScript Array, accessing it
  with the key "\_\_proto\_\_" returns Array.prototype via the inherited getter. This object is then treated as a legitimate
   parsed value and assigned as a property of the output object, effectively leaking a live reference to Array.prototype
   to the consumer. Any code that subsequently writes to that property will pollute the global prototype.

  ---
  **Root Cause**

  File: esm/index.js:29 (identical in cjs/index.js)
```
  const resolver = (input, lazy, parsed, $) => output => {
    for (let ke = keys(output), {length} = ke, y = 0; y < length; y++) {
      const k = ke[y];
      const value = output[k];    
      if (value instanceof Primitive) {
        const tmp = input[value];      // Bug is here
```

No validation that value is a safe numeric index input is built as a plain Array. JavaScript's property lookup on arrays traverses the prototype chain for non-numeric  keys. The key "\_\_proto\_\_" resolves to Array.prototype, which:

  - has type "object" → passes the typeof tmp === object guard at line 30
  - is not in the parsed Set yet → passes the !parsed.has(tmp) guard.
  - The reference to Array.prototype is then enqueued in lazy and later unconditionally assigned to the output object.
  ---
  **Replication Steps**
```
  const Flatted = require('flatted'); 
  const parsed = Flatted.parse('[{"x":"__proto__"}]');
  parsed.x.polluted = 'pwned';
  console.log([].polluted);  // Returns true
``` 
 ---
  **Impact**
 An attacker can supply a crafted flatted string to parse() that causes the returned object to hold a live reference to Array.prototype, enabling any downstream code that writes to that property to pollute the global prototype chain, potentially causing denial of service or code execution.

  **Recommended solution**
 Validate that the index string represents an integer within the bounds of input before accessing it:

  // Before (vulnerable)
  const tmp = input[value];

  // After (safe)
  const idx = +value;  // coerce boxed String → number
  const tmp = (Number.isInteger(idx) && idx >= 0 && idx < input.length)
    ? input[idx]
    : undefined;
GitHub Security Advisory: GHSA-5rp4-cwgh-gvwq
Package: openclaw (NPM)
Severity: MODERATE (CVSS 6.3)
CWE: CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Vulnerable versions: < 2026.3.12
Patched in: 2026.3.12

Summary: Duplicate Advisory: OpenClaw: WebSocket shared-auth connections could self-declare elevated scopes

Details:
### Duplicate Advisory
This advisory has been withdrawn because it is a duplicate of GHSA-7fcc-cw49-xm78. This link is maintained to preserve external references.

### Original Description
OpenClaw versions prior to 2026.2.19 contain a command injection vulnerability in the Lobster extension tool execution that uses Windows shell fallback with shell: true after spawn failures. Attackers can inject shell metacharacters in command arguments to execute arbitrary commands when subprocess launch fails with EINVAL or ENOENT errors.
GitHub Security Advisory: GHSA-2cwr-f5hx-gg3w
Package: openclaw (NPM)
Severity: MODERATE (CVSS 6.1)
CWE: CWE-59: Improper Link Resolution Before File Access ('Link Following')
Vulnerable versions: <= 2026.3.1
Patched in: unpatched

Summary: Duplicate Advisory: OpenClaw: stageSandboxMedia destination symlink traversal can overwrite files outside sandbox workspace

Details:
## Duplicate Advisory

This advisory has been withdrawn because it is a duplicate of GHSA-cfvj-7rx7-fc7c. This link is maintained to preserve external references.

## Original Description
OpenClaw versions prior to 2026.3.2 contain a vulnerability in the stageSandboxMedia function in which it fails to validate destination symlinks during media staging, allowing writes to follow symlinks outside the sandbox workspace. Attackers can exploit this by placing symlinks in the media/inbound directory to overwrite arbitrary files on the host system outside sandbox boundaries.
GitHub Security Advisory: GHSA-g87j-gm7p-6vw2
Package: openclaw (NPM)
Severity: MODERATE (CVSS 6.7)
CWE: CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
Vulnerable versions: = 2026.3.1
Patched in: unpatched

Summary: Duplicate Advisory: OpenClaw's Node system.run approval hardening wrapper semantic drift can execute unintended local scripts

Details:
## Duplicate Advisory

This advisory has been withdrawn because it is a duplicate of GHSA-h3rm-6x7g-882f. This link is maintained to preserve external references.

## Original Description
OpenClaw 2026.3.1 contains an approval integrity vulnerability in system.run node-host execution where argv rewriting changes command semantics. Attackers can place malicious local scripts in the working directory to execute unintended code despite operator approval of different command text.
GitHub Security Advisory: GHSA-pfv5-rpcw-x34x
Package: openclaw (NPM)
Severity: HIGH (CVSS 6.4)
CWE: CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Vulnerable versions: < 2026.2.22
Patched in: unpatched

Summary: Duplicate Advisory: OpenClaw's allow-always wrapper persistence could bypass future approvals and enable command execution

Details:
## Duplicate Advisory

This advisory has been withdrawn because it is a duplicate of GHSA-6j27-pc5c-m8w8. This link is maintained to preserve external references.

## Original Description
OpenClaw versions prior to 2026.2.22 contain an authorization bypass vulnerability in allow-always wrapper persistence that allows attackers to bypass approval checks by persisting wrapper-level allowlist entries instead of validating inner executable intent. Remote attackers can approve benign wrapped system.run commands and subsequently execute different payloads without approval, enabling remote code execution on gateway and node-host execution flows.