Aegra has cross-user run injection in /threads/{thread_id}/runs (IDOR)

CVE-2026-44504

## Impact Aegra deployments running 0.9.0 through 0.9.6 with multiple authenticated users on a shared instance are vuln

历史摘要 · 未重新核验 · GitHub Advisory

Rancher Extensions have arbitrary file access via path traversal

CVE-2026-25705

### Impact A vulnerability has been identified in [Rancher's Extensions](https://ranchermanager.docs.rancher.com/integr

历史摘要 · 未重新核验 · GitHub Advisory

Gotenberg vulnerable to unauthenticated SSRF via default deny-list bypass in downloadFrom and webhook

CVE-2026-42596

### Summary The default deny-lists used by Gotenberg's `downloadFrom` feature and `webhook` feature are bypassable. Beca

历史摘要 · 未重新核验 · GitHub Advisory

Samsung Print Service Plugin for Android is potentially vulnerable to information disclosure when...

CVE-2026-3291

Samsung Print Service Plugin for Android is potentially vulnerable to information disclosure when using an outdated vers

历史摘要 · 未重新核验 · GitHub Advisory

Gotenberg's DNS rebinding bypasses SSRF validation on Chromium URL conversion routes

CVE-2026-42592

## Summary `FilterOutboundURL` resolves the hostname, checks the resolved IPs against the private-address deny-list, an

历史摘要 · 未重新核验 · GitHub Advisory

Compromise of PyTorch Lightning PyPi Package Versions

CVE-2026-44484

# Security Advisory: Compromise of PyTorch Lightning PyPI Package Versions **Published:** 2026-04-30 **Last Updated:*

历史摘要 · 未重新核验 · GitHub Advisory

Netty: HttpContentDecompressor maxAllocation bypass when Content-Encoding set to br/zstd/snappy leads to decompression bomb DoS

CVE-2026-42587

## Summary `HttpContentDecompressor` accepts a `maxAllocation` parameter to limit decompression buffer size and prevent

历史摘要 · 未重新核验 · GitHub Advisory

Netty vulnerable to HTTP Request Smuggling due to malformed Transfer-Encoding

CVE-2026-42585

### Summary Netty incorrectly parses malformed Transfer-Encoding, enabling request smuggling attacks. ### Details Netty

历史摘要 · 未重新核验 · GitHub Advisory

Netty Lz4FrameDecoder is vulnerable to resource exhaustion

CVE-2026-42583

### Summary Lz4FrameDecoder allocates a ByteBuf of size `decompressedLength` (up to 32 MB per block) before LZ4 runs. A

历史摘要 · 未重新核验 · GitHub Advisory

Spring Cloud AWS missing SNS message signature verification allows spoofing of HTTP/HTTPS endpoint notifications

CVE-2026-44308

### Impact Applications using Spring Cloud AWS SNS HTTP/HTTPS endpoint support (@NotificationMessageMapping, @Notif

历史摘要 · 未重新核验 · GitHub Advisory

Playwright Capture permits access to local files and internal network resources during page capture

CVE-2026-44439

Playwright Capture did not sufficiently restrict navigations and resource requests initiated by rendered pages. An attac

历史摘要 · 未重新核验 · GitHub Advisory

Firewall for AI

Firewall for AI

历史摘要 · 未重新核验 · Akamai Security Research

Poster: YFuzz: Data-Driven Fuzzing.

该论文在ArXiv上以海报形式发表，提出了一种名为YFuzz的数据驱动模糊测试方法。研究指出，传统的代码覆盖率引导的灰盒模糊测试存在关键局限性：即使覆盖了相关代码，也可能遗漏bug，因为触发bug通常需要满足特定条件，而代码覆盖率仅关注代码

历史摘要 · 未重新核验 · ACM CCS

You Snooze, You Lose: Automatic Safety Alignment Restoration through Neural Weight Translation

随着开源大语言模型（LLM）的普及，通过公开分发低秩适应（LoRA）模块来定制模型能力已成为常见做法。然而，集成第三方 LoRA 模块会导致基础模型的安全对齐被灾难性遗忘，即模型失去了原有的安全护栏。传统方法通过安全数据微调来恢复对齐，但这

历史摘要 · 未重新核验 · arXiv cs.CR

Misrouter: Exploiting Routing Mechanisms for Input-Only Attacks on Mixture-of-Experts LLMs

本文研究针对混合专家（MoE）架构大语言模型的输入仅攻击。MoE通过稀疏路由机制扩展模型规模，但路由过程可能成为新的攻击面。以往攻击需修改模型参数，仅适用于本地部署；而现实中的LLM服务通过远程API提供，攻击者仅能操控输入。作者提出Mis

历史摘要 · 未重新核验 · arXiv cs.CR

hickory-proto vulnerable to CPU exhaustion during message encoding due to O(n²) name compression

During message encoding, `hickory-proto`'s `BinEncoder` stores pointers to labels that are candidates for name compressi

历史摘要 · 未重新核验 · GitHub Advisory

Amazon ECS Container Agent (Windows) is vulnerable to Information Disclosure

### Summary [Amazon Elastic Container Service (Amazon ECS)](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/

历史摘要 · 未重新核验 · GitHub Advisory

scim_proton and kanidm_proto have an authenticated process abort via SCIM filter stack exhaustion

### Summary A single unauthenticated `GET` to any `/scim/v1/...` endpoint with a `?filter=` query string of a few thous

历史摘要 · 未重新核验 · GitHub Advisory

Kanidm has non-constant-time comparison of OAuth2 client_secret

### Summary The kanidmd OAuth2 token-exchange (`/oauth2/token`) and token-introspection (`/oauth2/token/introspect`) en

历史摘要 · 未重新核验 · GitHub Advisory

CrowdStrike Named a Leader in Frost & Sullivan 2026 Radar for Cloud-Native Application Protection Platforms

CrowdStrike Named a Leader in Frost & Sullivan 2026 Radar for Cloud-Native Application Protection Platforms

历史摘要 · 未重新核验 · CrowdStrike