imageproc: Out-of-bounds read via NaN coordinates in bilinear/bicubic sampling
A bounds check was performed in floating points before a cast to the index passed to an unchecked access function. This
2026-05-07 归档
今日共收录 722 条安全情报，包含 0 个 CVE，380 篇安全通告，以及 58 篇研究论文。
← 返回归档列表imageproc has fragile bounds check when sampling from image
A read of pixels was coded as modifying coordinates to lie within the image bounds. It would calculate a coordinate by a
hickory-proto: NSEC3 closest-encloser proof validation enters unbounded loop on cross-zone responses
The NSEC3 closest-encloser proof validation in `hickory-proto`'s (0.25.0-alpha.3 ... 0.25.2) and `hickory-net`'s (0.26.0
Daptin's Session Management Vulnerability Leads to Insufficient Session Expiration After Password Change
### Summary A session invalidation vulnerability exists in daptin's authentication system where JSON Web Tokens (JWTs)
Diffusers: None.py has Trust Remote Code Bypass
## Background This vulnerability is found in the `DiffusionPipeline.from_pretrained` flow, which is used to load a pipe
rust-zserio has Unbounded Memory Allocation
### Impact When deserializing arrays, strings or bytes (blob) types zserio first reads the size of the variable, and th
OpenSearch has ineffective TLS certificate hostname verification
### Description A regression was introduced in OpenSearch 2.18.0 that caused the `plugins.security.ssl.transport.enforc
OpenSearch Security plugin: DLS not applied on documents linked by has_child or has_parent relation
### Description A flaw was identified in the OpenSearch Security plugin's document-level security (DLS) implementation.
OpenSearch vulnerable to improper authorization for Rollover Requests
### Description A flaw was identified in the OpenSearch Security plugin's handling of index rollover requests. When a r
OpenSearch has a bypass of REST Layer Authorization Using Malformed Paths
### Description A flaw was identified in the OpenSearch REST layer that could allow authorization checks to be bypassed
diesel-async may expose uninitialized padding bytes for MySQL temporal columns
### Summary diesel-async exposes uninitialized stack padding to safe code on every read of a MySQL `DATE`, `TIME`, `DAT
Lemmy resend-verification endpoint exposes registered email addresses to unauthenticated users
## Summary The unauthenticated resend-verification endpoint returns different responses for registered and unregistered
ldap3_proto has LDAP Filter stack exhaustion
### Impact LDAP queries are not validated for depth, which can cause the parser (both PEG and ASN) to exhaust the stack.
kanidmd_lib: Image upload validators run before authorization; PNG validator panics on malformed input
### Summary The `POST /v1/domain/_image` and `POST /v1/oauth2/{rs_name}/_image` handlers call `validate_image()` on the
Kanidm: Stored HTML injection in "passkey-enrolment" partial via displayname → htmx-driven authenticated request forgery
### Summary The kanidmd web UI renders the WebAuthn passkey-registration challenge as raw JSON inside an inline `` elem
@axonflow/openclaw fix introduces plugin cache and credential-file permission hardening
## Summary Two related permission defects in this AxonFlow plugin allowed registration credentials and cache state to b
axonflow-sdk-java: Webhook signing-key (HMAC-SHA256) not exposed by SDK type, preventing signature verification
## Summary The AxonFlow SDK's `WebhookSubscription` (or equivalent) type did not expose the HMAC-SHA256 signing key ret
axonflow-sdk-typescript: Webhook signing-key (HMAC-SHA256) not exposed by SDK type, preventing signature verification
## Summary The AxonFlow SDK's `WebhookSubscription` (or equivalent) type did not expose the HMAC-SHA256 signing key ret
axonflow-sdk-go: Webhook signing-key (HMAC-SHA256) not exposed by SDK type, preventing signature verification
## Summary The AxonFlow SDK's `WebhookSubscription` (or equivalent) type did not expose the HMAC-SHA256 signing key ret
axonflow-sdk-python: Webhook signing-key (HMAC-SHA256) not exposed by SDK type, preventing signature verification
## Summary The AxonFlow SDK's `WebhookSubscription` (or equivalent) type did not expose the HMAC-SHA256 signing key ret