OpenBao: Transit secrets engine crashes on key creation with `derived: true` for asymmetric key types
CVE-2026-55776
On OpenBao 2.5.4 and 2.5.2(and likely earlier versions also), an authenticated caller with write access to `transit/keys
2026-06-20 归档
今日共收录 996 条安全情报，包含 203 个 CVE，413 篇安全通告，以及 100 篇研究论文。
← 返回归档列表OpenBao's System Backend allows Unauthorized Management of the containing Namespace
CVE-2026-55775
### Summary A user that is granted namespace management (`/sys/namespaces`) capabilities within a non-root namespace ("
OpenBao: Cross-namespace lease revocation/renewal via canonical sys/leases/{revoke,renew} — incomplete fix of CVE-2026-45808
CVE-2026-55774
### Summary OpenBao users with access to the `sys/leases/revoke/:lease_id` endpoint in any namespace can revoke leases
OpenBao: LDAPi ldaputil (wrong escape func)
CVE-2026-55770
## 1. Description ### Component `sdk/helper/ldaputil/client.go` — the shared LDAP utility library used by both the LDA
StarCitizenWiki Extension Embed Video: Stored XSS via malformed src url with $wgEmbedVideoRequireConsent enabled
CVE-2026-55692
### Summary With $wgEmbedVideoRequireConsent enabled (the default), the urls for videos are stored in a json-ified data
Url redirection to untrusted site ('open redirect') in Microsoft 365 Copilot's Business Chat...
CVE-2026-47645
Url redirection to untrusted site ('open redirect') in Microsoft 365 Copilot's Business Chat allows an unauthorized atta
urllib3 version 2.6.3 is vulnerable to a decompression bomb bypass in its streaming API (...
CVE-2026-9375
urllib3 version 2.6.3 is vulnerable to a decompression bomb bypass in its streaming API (`preload_content=False`) when u
Improper neutralization of special elements used in a command ('command injection') in Microsoft...
CVE-2026-42895
Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unaut
Initialization of a resource with an insecure default in GitHub Copilot and Visual Studio Code...
CVE-2026-50519
Initialization of a resource with an insecure default in GitHub Copilot and Visual Studio Code allows an unauthorized at
Joomla com_booking component 2.4.9 contains an information disclosure vulnerability that allows...
CVE-2023-54357
Joomla com_booking component 2.4.9 contains an information disclosure vulnerability that allows unauthenticated attacker
A flaw was found in the AWX GitHub webhook integration. When processing GitHub pull_request...
CVE-2026-12726
A flaw was found in the AWX GitHub webhook integration. When processing GitHub pull_request webhooks, the controller sto
A TraceQL query in Grafana Tempo with a large exemplars hint value can cause the Tempo instance...
CVE-2026-27878
A TraceQL query in Grafana Tempo with a large exemplars hint value can cause the Tempo instance to allocate an excessive
The WP Go Maps – Most Popular Map Plugin plugin for WordPress is vulnerable to authorization...
CVE-2026-12238
The WP Go Maps – Most Popular Map Plugin plugin for WordPress is vulnerable to authorization bypass in all versions up t
Langflow: Unauthenticated DoS through multipart form boundary file upload
CVE-2026-55446
### Summary An attacker can send a `/api/v1/files/upload/` request without any authentication token/cookies and abuse a
py7zr: O(n^2) algorithmic complexity DoS in PackInfo._read()
CVE-2026-55206
### Summary PackInfo._read() uses an O(n^2) cumulative sum pattern where numstreams is read directly from the archive
py7zr: Decompression bomb (zip bomb) denial of service via unchecked extraction size
CVE-2026-55195
py7zr's `Worker.decompress()` extracts archive entries without tracking total decompressed size. A crafted `.7z` file ca
Mailpit: Incomplete SSRF protection in Link Check API via IPv6 transition mechanisms
CVE-2026-55187
## Summary The remediation shipped in mailpit v1.29.2 for [GHSA-mpf7-p9x7-96r3](https://github.com/axllent/mailpit/secu
go.qbee.io/transport: Symlink-chain path traversal in tar extraction (one level outside destination)
CVE-2026-55828
### Impact The go.qbee.io/transport library is affected by a symlink-chain path traversal vulnerability in its extractT
TinaCMS: Cross-origin postMessage handlers and rich-text URL-sanitization bypass enable stored XSS and session takeover
CVE-2026-55660
TinaCMS registers window message listeners — the useTina overlay handler, the OAuth authentication popup handler, and th
Craft Commerce: Coupon Code Brute-Force via Rate Limit Bypass
CVE-2026-55795
### Summary The CartController defines a RateLimiter behavior that is only activated when the 'number' POST/GET paramet