vm2 has a Sandbox Escape via Promise Constructor Unhandled Rejection (Process Crash DoS)
CVE-2026-44001
### Summary A sandbox escape vulnerability in vm2 v3.10.5 allows any sandboxed code to crash the host Node.js process vi
2026-05-07 归档
今日共收录 722 条安全情报，包含 0 个 CVE，380 篇安全通告，以及 58 篇研究论文。
← 返回归档列表Bandit HTTP/2 Frame Size Limit Bypass via Late Buffer Check Enables Memory Exhaustion
CVE-2026-42788
### Summary Bandit's HTTP/2 parser checks frame size *after* it has already buffered the full body, instead of when it
Bandit trusts client-supplied URI scheme on plaintext connections
CVE-2026-39807
### Summary Bandit reflects the client-supplied URI scheme into `conn.scheme` without verifying the actual transport. Ov
Bandit's unbounded WebSocket inflate causes BEAM OOM with a single frame
CVE-2026-39804
### Summary When a Bandit-fronted server has explicitly enabled WebSocket permessage-deflate (`compress: true`), an una
gittuf's policy can be rolled back to prior valid versions
CVE-2026-44544
## Summary An attacker with push access to gittuf's Reference State Log (RSL) can roll back the current policy to any p
The Appointment Booking Calendar plugin for WordPress is vulnerable to Missing Authorization in...
CVE-2026-4807
The Appointment Booking Calendar plugin for WordPress is vulnerable to Missing Authorization in versions up to and inclu
Tor before 0.4.9.7 can attempt or accept BEGIN_DIR via conflux legs, aka TROVE-2026-008.
CVE-2026-44599
Tor before 0.4.9.7 can attempt or accept BEGIN_DIR via conflux legs, aka TROVE-2026-008.
Tor before 0.4.9.7 has an out-of-bounds read when an END, a TRUNCATE, or a TRUNCATED cell lacks a...
CVE-2026-44597
Tor before 0.4.9.7 has an out-of-bounds read when an END, a TRUNCATE, or a TRUNCATED cell lacks a reason in its payload,
Tor before 0.4.9.7 mishandles accounting of the conflux out-of-order queue during the clearing of...
CVE-2026-44600
Tor before 0.4.9.7 mishandles accounting of the conflux out-of-order queue during the clearing of a queue.
The Forminator Forms plugin for WordPress is vulnerable to Missing Authorization in versions up...
CVE-2026-6222
The Forminator Forms plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 1.51.1.
ZTE ZX297520V3 BootROM contains a vulnerability that allows arbitrary memory writes via USB....
CVE-2026-40003
ZTE ZX297520V3 BootROM contains a vulnerability that allows arbitrary memory writes via USB. Attackers can exploit the l
katalyst-koi: Session cookies can be replayed after user logout
CVE-2026-44511
### Impact Admin session cookies were not invalidated when an admin user logged out. An attacker with access to a valid
go-ipld-prime's DAG-CBOR and DAG-JSON decoders have unbounded recursion depth
CVE-2026-42328
The DAG-CBOR and DAG-JSON decoders recurse on each nested map or list without a depth limit. A payload containing deeply
CSS Parser: Improper Certificate Validation allows MITM injection of remote CSS content
CVE-2026-44312
### Summary The CSS Parser gem does not validate HTTPS connections, allowing a Man-in-the-Middle (MITM) attacker to inj
Free5GC AMF has Missing Concurrent NAS SMC Validation During NGAP Handover
CVE-2026-42082
### Summary The AMF in Free5GC v4.2.1 does not enforce the concurrent security procedure rules defined in 3GPP TS 33.50
Kiota abstractions RedirectHandler leaks Cookie/Proxy-Authorization headers on cross-host redirect
CVE-2026-44503
### Summary The RedirectHandler middleware in microsoft/kiota-java (com.microsoft.kiota:microsoft-kiota-http-okHttp v1.9
Gotenberg allows Chromium URL conversion routes to read arbitrary files under /tmp via file:// scheme
CVE-2026-42597
## Summary The `/forms/chromium/convert/url` and `/forms/chromium/screenshot/url` routes accept `url=file:///tmp/...` f
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-6278
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Goteberg has arbitrary PDF read via stampExpression and watermarkExpression in merge, split, and convert routes
CVE-2026-42593
## Summary Six conversion routes (`pdfengines/merge`, `pdfengines/split`, `libreoffice/convert`, `chromium/convert/url`
Gotenberg has a Server-Side Request Forgery (SSRF) Issue
CVE-2026-42591
### Summary The SSRF hardening shipped in v8.31.0 only covers outbound URLs that Gotenberg's Go code handles — Chromium