OS command injection in github.com/coder/coder/v2 (CVE-2026-44454). Confidential information can be exposed externally. Exploitable via ``dotfiles``. Mitigation: upgrade to `2.30.2` or later.
vulnerability in buildah (SUSE-SU-2026:2733-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.35.5-150500.3.62.1` or later.
cross-site scripting in mediawiki/maps (CVE-2026-52854). Confidential information can be exposed externally. Exploitable via ``overlays``. Mitigation: upgrade to `12.1.3` or later.
path traversal in langroid (CVE-2026-50180). Risk of unauthorized operations or information disclosure. Exploitable via ``SQLChatAgent``. Mitigation: upgrade to `0.64.0` or later.