Mistune has XSS via unescaped figclass/figwidth in Figure directive
CVE-2026-44896
In `src/mistune/directives/image.py`, the `render_figure()` function concatenates `figclass` and `figwidth` options dire
2026-05-09 归档
今日共收录 1190 条安全情报，包含 490 个 CVE，393 篇安全通告，以及 21 篇研究论文。
← 返回归档列表view_component: System Test Entry Point Path Check Allows Sibling Directory Escape
CVE-2026-44837
### Summary The system test entrypoint canonicalizes a user-controlled file path with `File.realpath`, then checks whet
view_component: Preview Route Can Dispatch Inherited Helper Methods
CVE-2026-44836
### Summary The preview route derives an example name from the URL and calls it with `public_send`. The code does not v
Snipe-IT has an open redirect vulnerability
CVE-2026-44833
Open redirect vulnerability in Snipe-IT allows attackers to redirect users to malicious sites via unvalidated HTTP Refer
eml_parser has recursion DoS via nested message/rfc822 attachments
CVE-2026-44844
### Summary `EmlParser.get_raw_body_text()` recurses unconditionally for every nested `message/rfc822` attachment witho
LangChain vulnerable to unsafe deserialization of attacker-controlled objects through overly broad `load()` allowlists
CVE-2026-44843
LangChain contains older runtime code paths that deserialize run inputs, run outputs, or other application-controlled pa
Phpseclib needs guardrails on large binaryfield integers
CVE-2023-49316
### Impact Anyone loading untrusted ASN1 files (eg. X509 certificates, RSA PKCS8 private or public keys, etc) ### Patch
free5GC NRF: type-confusion panic in POST /oauth2/token structured-form parser via Reflect.Set on incompatible types
CVE-2026-44325
### Summary free5GC's NRF root SBI endpoint `POST /oauth2/token` contains a parser-level type-confusion bug family. The
free5GC's SMF UPI POST /upi/v1/upNodesLinks exits the SMF process on overlapping UE pools (unauthenticated, reachable Fatalf)
CVE-2026-44321
### Summary free5GC's SMF mounts the `UPI` management route group without inbound OAuth2 middleware (same root cause as
free5GC's NEF crashes via logger.Fatal on PFD notification delivery failure (attacker-controlled notifyUri)
CVE-2026-44319
### Summary free5GC's NEF terminates the entire process when a stored PFD-subscription `notifyUri` cannot be reached. In
Open WebUI Vulnerable to Arbitrary File Upload and Path Traversal
CVE-2026-44566
# **CONFIDENTIAL** # KL-CAN-2024-002 ## Vulnerability Details | # | Field | Value | |---|-------|-------| | 1 | **Dis
Open WebUI has Improper Authorization Control
CVE-2026-44567
# **CONFIDENTIAL** # Vulnerability Disclosure Analysis Documentation --- ## Vulnerability Details | # | Field | Valu
Open WebUI has stored XSS in Excel file preview
CVE-2026-44549
### Summary Excel file attachments are previewed in an unsafe way. A crafted XLSX file payload can be used to cause the
Snipe-IT has Privilege Escalation via API Permissions Assignment
CVE-2026-44832
### Impact An authenticated user with only `users.edit` permission can escalate their own privileges to `admin` by sendi
Snipe-IT has Stored XSS via Component Checkout Notes (v8.4.0)
CVE-2026-44831
### Impact Users with component view access could be impacted by an unescaped `notes` column. ### Patches This was pat
SmarterTools SmarterMail builds prior to 9560 contain a local file inclusion vulnerability in the...
CVE-2026-7807
SmarterTools SmarterMail builds prior to 9560 contain a local file inclusion vulnerability in the /api/v1/report/summary
Insufficient input validation of the feature file name in `feature::LOADFEATUREFILE` adminbin...
CVE-2026-29201
Insufficient input validation of the feature file name in `feature::LOADFEATUREFILE` adminbin call can cause arbitrary f
Insufficient input validation of the `plugin` parameter of the `create_user` plugin allows...
CVE-2026-29202
Insufficient input validation of the `plugin` parameter of the `create_user` plugin allows arbitrary Perl code execution
A chmod call in the cPanel Nova plugin's Cpanel::Nova::Connector follows symlinks, allowing...
CVE-2026-29203
A chmod call in the cPanel Nova plugin's Cpanel::Nova::Connector follows symlinks, allowing setting root permissions on
OpenTelemetry.Exporter.Instana bypasses TLS certificate validation when a proxy is configured
CVE-2026-44213
### Summary The `OpenTelemetry.Exporter.Instana` NuGet package does not validate HTTPS/TLS certificates are valid when