@grpc/grpc-js: A malformed request can cause a server crash
CVE-2026-48068
### Impact An invalid incoming HTTP/2 stream initiation can cause a server process to crash. This affects all servers cr
2026-06-12 归档
今日共收录 1106 条安全情报，包含 305 个 CVE，402 篇安全通告，以及 120 篇研究论文。
← 返回归档列表@grpc/grpc-js: An incoming malformed compressed message can cause a client or server crash
CVE-2026-48069
### Impact An invalid incoming compressed message can cause a client or server process to crash. This affects all client
joi has an uncaught RangeError on deeply nested input through recursive `link()` schemas
CVE-2026-48038
### Impact Denial of service via untrapped exception in services validating user-supplied JSON / object input with recur
OpenZeppelin Contracts Wizard has Code Injection in Generated Hardhat and Foundry Tests via Unsanitized opts.name / opts.uri
CVE-2026-48054
## Summary The OpenZeppelin Contracts Wizard generated Hardhat (`test/test.ts`) and Foundry (`test/.t.sol`) example tes
Netty's Lack of Lifecycle Cleanup Leads to Pooled ByteBuf Leak in RedisArrayAggregator
CVE-2026-48006
### Impact The RedisArrayAggregator handler permanently leaks pooled direct-memory buffers when a Redis pipeline connect
PDM: Project-Controlled `.pdm-plugins` Content Executes Before CLI Parsing
CVE-2026-47781
## Summary PDM automatically loads project-local plugin paths from `.pdm-plugins` during `Core` initialization. Because
free5GC UDR has improper `ueId` validation in EE subscription handlers that allows arbitrary identifier persistence
CVE-2026-47780
### Summary The free5GC UDR accepts arbitrary non-3GPP ueId values in the EE subscription creation and query flows becau
guzzlehttp/guzzle-services' XML Request Serialization Vulnerable to XML Injection via CDATA Terminator
CVE-2026-53723
### Impact `guzzlehttp/guzzle-services` does not safely serialize scalar XML element values containing the CDATA termin
关于Microsoft ExchangeServer存在多个...
关于Microsoft ExchangeServer存在多个...
关于家用路由器DNS被恶意篡改导致异常跳转风险的提示
关于家用路由器DNS被恶意篡改导致异常跳转风险的提示
Splunk, Palo Alto Networks Patch Severe Vulnerabilities
The security defects could allow attackers to create or modify arbitrary files and access and modify protected resources
Paper专业的技术文章，安全经验的积累。Paper 栏目专注于安全技术文章的收录。我们推崇黑客精神，技术分享和热衷解决问题及超越极限，Seebug Paper 期待您的分享。
Paper专业的技术文章，安全经验的积累。Paper 栏目专注于安全技术文章的收录。我们推崇黑客精神，技术分享和热衷解决问题及超越极限，Seebug Paper 期待您的分享。
Cookie settings
Cookie settings
Mozilla Monitor
Mozilla Monitor
The Mozilla Manifesto
The Mozilla Manifesto
Mozilla Foundation
Mozilla Foundation
Accessibility Policy
Accessibility Policy
Create an Account
Create an Account
Instructions for subscribing to email notifications
Instructions for subscribing to email notifications
Product Security Home
Product Security Home