The full disclosure ledger. Container & cluster infrastructure, Apache foundation, cross-language OSS, and the WordPress plugin ecosystem. Sorted by blast radius — critical and high first within each group. Every entry references a coordinated disclosure with the upstream maintainers.
Each entry below has its own dedicated writeup with PoC analysis, mitigation guidance, and a quick-facts panel optimised for engineers triaging the bulletin.
CVE-2026-47393 — the PraisonAI API code generator ships Flask servers with authentication disabled by default; the documented quickstart exposes /chat and /agents unauthenticated. Analysis and disclosure by Kai Aizen.
CVE-2026-47398 — two unguarded exec_module call sites in agents_generator.py load attacker-controlled module paths from YAML, yielding code execution before any LLM interaction. Disclosure by Kai Aizen & Avraham Shemesh.
CVE-2026-46627 — the Twig sandbox restricts code and data access but not resource consumption; untrusted templates can exhaust CPU/memory for denial of service. Analysis and disclosure by Kai Aizen.
CVE-2026-3288 — configuration injection in Kubernetes ingress-nginx controller's rewrite-target annotation enables attacker-controlled directive rewriting. Analysis, PoC, and mitigation by Kai Aizen.
CVE-2026-30911 — missing authentication in Apache Airflow Core exposes a REST endpoint without auth, enabling unauthenticated reads. CVSS 8.1 High. Disclosure by Kai Aizen.
CVE-2026-32794 — the Apache Airflow Databricks provider disables TLS verification under a misconfigured option, exposing operator-to-Databricks traffic to MITM. CVSS 4.8 Medium. By Kai Aizen.
CVE-2026-43121 — non-atomic user_refs operations in io_uring zerocopy receive (zcrx) cause a race that escalates to double-free and out-of-bounds write. Mainline patch by Kai Aizen.
CVE-2026-44840 — DQL injection in Dgraph's checkUserPassword GraphQL query enables authentication bypass and arbitrary DQL execution. High severity. Disclosure by Kai Aizen.
Every CVE here was reported privately to the maintainer first. Public disclosure timed to the patch — not the maintainer's convenience, but the patch.
We don't maintain a parallel writeup database. The NVD record is canonical. We link to it, not around it.
These are reported because they need to be reported, not because someone is paying. Means the bar for what gets disclosed isn't economic.
Maintainers get credit in the patch and the writeup. We don't take credit for fixes we didn't write.