openvpn-auth-oauth2 is a plugin/management interface client for OpenVPN server to handle an OIDC based single sign-on (SSO) auth flows. From version 1.26.3 to before version 1.2...

CVE-2026-41070

openvpn-auth-oauth2 is a plugin/management interface client for OpenVPN server to handle an OIDC based single sign-on (S

历史摘要 · 未重新核验 · NVD

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.81.16 to before version 1.83.7, a database query used during proxy API key c...

CVE-2026-42208

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.81.16 to before ver

历史摘要 · 未重新核验 · NVD

gitsign verify accepts signatures over go-git-normalized bytes, enabling trust confusion on malformed commits

CVE-2026-44309

## Summary `gitsign verify` and `gitsign verify-tag` re-encode commit/tag objects through go-git's `EncodeWithoutSignat

历史摘要 · 未重新核验 · GitHub Advisory

Wagtail has improper permission handling when copying pages

CVE-2026-44200

### Impact A CMS user with limited access to pages could copy a page they don't have access to to an area of the site t

历史摘要 · 未重新核验 · GitHub Advisory

Wagtail has improper restriction handling on Documents and Images API

CVE-2026-44201

### Impact The Documents and Images [API](https://docs.wagtail.org/en/stable/advanced_topics/api/index.html) incorrectl

历史摘要 · 未重新核验 · GitHub Advisory

Wagtail has improper permission handling when deleting form submissions

CVE-2026-44199

### Impact A CMS user with limited access to form pages could delete submissions to form pages they don't have access t

历史摘要 · 未重新核验 · GitHub Advisory

Wagtail has improper permission handling when viewing page history

CVE-2026-44198

### Impact A CMS user without the ability to edit a page could still access the history report for the page, potentiall

历史摘要 · 未重新核验 · GitHub Advisory

Wagtail has improper permission handling when comparing revisions

CVE-2026-44197

### Impact A CMS user without the ability to edit a page could access revisions of the page through the revision compar

历史摘要 · 未重新核验 · GitHub Advisory

Open WebUI has Unauthorized File and Knowledge Base Content Access via RAG Vector Search

CVE-2026-44560

# Unauthorized File and Knowledge Base Content Access via RAG Vector Search ## Affected Component RAG source resolutio

历史摘要 · 未重新核验 · GitHub Advisory

Open WebUI: Deactivated Channel Members Retain Full Access to Group/DM Channels

CVE-2026-44561

# Deactivated Channel Members Retain Full Access to Group/DM Channels ## Affected Component Channel membership authori

历史摘要 · 未重新核验 · GitHub Advisory

Open WebUI's Ollama Model Access Control Bypass via /api/generate, /api/embed, /api/embeddings, and /api/show

CVE-2026-44563

# Ollama Model Access Control Bypass via /api/generate, /api/embed, /api/embeddings, and /api/show ## Affected Componen

历史摘要 · 未重新核验 · GitHub Advisory

Open WebUI's Model Import Overwrites Any Model Without Ownership Check

CVE-2026-44562

# Model Import Overwrites Any Model Without Ownership Check ## Affected Component Model import endpoint: - `backend/op

历史摘要 · 未重新核验 · GitHub Advisory

Open WebUI vulnerable to Global Knowledge Base Enumeration via knowledge-bases Meta-Collection

CVE-2026-44557

# Global Knowledge Base Enumeration via knowledge-bases Meta-Collection ## Affected Component Retrieval collection acc

历史摘要 · 未重新核验 · GitHub Advisory

Open WebUI has Knowledge Base Destruction and RAG Poisoning via Unauthorized Collection Overwrite

CVE-2026-44554

# Knowledge Base Destruction and RAG Poisoning via Unauthorized Collection Overwrite ## Affected Component Retrieval w

历史摘要 · 未重新核验 · GitHub Advisory

Open WebUI's Channel Access Grants Bypass filter_allowed_access_grants

CVE-2026-44558

# Channel Access Grants Bypass filter_allowed_access_grants ## Affected Component Channel creation and update endpoint

历史摘要 · 未重新核验 · GitHub Advisory

Open WebUI's responses passthrough endpoint lacks access control authorization

CVE-2026-44556

## Summary The /responses endpoint in the OpenAI router accepts any authenticated user and forwards requests directly t

历史摘要 · 未重新核验 · GitHub Advisory

Open WebUI's Base Model Routing Bypasses Access Control via Model Chaining

CVE-2026-44555

# Base Model Routing Bypasses Access Control via Model Chaining ## Affected Component Model chaining via `base_model_i

历史摘要 · 未重新核验 · GitHub Advisory

Open WebUI's Mass Assignment via Pydantic extra='allow' Allows Creating Folders in Other Users' Accounts

CVE-2026-44550

# Mass Assignment via Pydantic extra='allow' Allows Creating Folders in Other Users' Accounts ## Affected Component Fo

历史摘要 · 未重新核验 · GitHub Advisory

DiveFuzz: Enhancing CPU Fuzzing via Diverse Instruction Construction.

本文针对当前CPU模糊测试中测试用例多样性不足的问题展开研究。作者分析现有主流CPU Fuzzer（如DifuzzRTL、Cascade等）后发现，其写入回数据（write-back data）存在高度重复且操作码分布不均，导致对CPU架构

历史摘要 · 未重新核验 · ACM CCS

Firefox browsers

Firefox browsers

历史摘要 · 未重新核验 · Mozilla Security Advisories