From Efficiency to Leakage -- Privacy Backdoor in Federated Language Model Fine-Tuning
本文揭示了一种针对联邦学习（FL）中参数高效微调（PEFT）的隐私后门攻击方法，名为NeuroImprint。在联邦学习场景下，多个客户端协作微调语言模型，但全模型微调计算成本过高，因此PEFT（如Adapters）成为主流实践。本文假设恶
2026-06-21 归档
今日共收录 748 条安全情报，包含 44 个 CVE，388 篇安全通告，以及 64 篇研究论文。
← 返回归档列表GNSS Spoofing Threat for V2X communications
该论文聚焦于全球导航卫星系统（GNSS）在车联网（V2X）通信中的脆弱性，特别是针对GNSS的欺骗攻击（spoofing）。V2X依赖GNSS提供的定位、导航和授时（PNT）服务来生成协作感知消息（CAM），确保网络可靠性和车辆安全。然而，
A-COMPASS: Formal Foundations for Anonymity Analysis in Microdata
该论文针对微数据发布中的隐私保护问题，提出了一种形式化验证框架A-COMPASS。现有数据隐私模型（如k-匿名、l-多样性）虽然广泛应用，但其形式化验证领域尚未得到充分探索。作者在已有的COMPASS语言基础上进行改进，使之能够直接操作“每
A security vulnerability has been detected in BerriAI litellm up to 1.82.2. Affected by this vulnerability is the function _execute_with_mcp_client of the file litellm/proxy/_ex...
CVE-2026-12774
CVE-2026-12774 是 BerriAI litellm 至 1.82.2 版本中的一个服务器端请求伪造（SSRF）漏洞。漏洞位于 litellm/proxy/_experimental/mcp_server/rest_endpoi
vLLM versions >= 0.10.2 and < 0.13.0 are missing sparse tensor validation in multimodal embeddings processing. Because PyTorch disables sparse tensor invariant checks by default...
CVE-2026-56340
vLLM 版本 >= 0.10.2 且 < 0.13.0 在多模态嵌入处理中缺少对稀疏张量的验证。由于 PyTorch 默认禁用稀疏张量不变性检查，攻击者可以在启用了 prompt-embeds 功能的情况下，提交精心构造的嵌入请求，其中包
vLLM versions >= 0.6.3 and < 0.9.0 contain multiple regular expression denial of service (ReDoS) vulnerabilities. Several regex patterns — in vllm/lora/utils.py, the phi4mini to...
CVE-2025-71379
vLLM 版本 0.6.3 至 0.9.0（不含）存在多个正则表达式拒绝服务（ReDoS）漏洞。漏洞点位于 vllm/lora/utils.py 中的正则模式、phi4mini 工具解析器以及兼容 OpenAI 的服务聊天端点。这些正则表达
Capgo before 12.128.2 contains an open redirect vulnerability in the confirm-signup endpoint that allows attackers to redirect users to arbitrary external websites. The confirma...
CVE-2026-56332
Capgo 存在开放重定向漏洞，影响版本 12.128.2 之前。该漏洞位于 confirm-signup 端点，因为 confirmation_url 参数未经过有效验证，攻击者可构造恶意链接，将用户重定向到任意外部网站。这种漏洞常被用于
Capgo before 12.128.2 contains an open redirect vulnerability in stripe_portal and stripe_checkout endpoints that accept unvalidated callbackUrl, successUrl, and cancelUrl param...
CVE-2026-56330
Capgo 版本低于 12.128.2 存在开放重定向漏洞，影响 stripe_portal 和 stripe_checkout 端点。这些端点接受未经验证的 callbackUrl、successUrl 和 cancelUrl 参数，允许
Nuxt before 4.4.7 (and the 3.x branch before 3.21.7) contains a cross-site scripting vulnerability in the NoScript component that writes slot content to innerHTML without escapi...
CVE-2026-56317
CVE-2026-56317 是一个影响 Nuxt 前端框架的跨站脚本（XSS）漏洞。该漏洞存在于 Nuxt 4.4.7 之前版本（包括 4.x 分支）以及 3.21.7 之前版本（3.x 分支）的 NoScript 组件中。NoScrip
Structured lattices and their applications to security
该论文是一篇关于结构化格及其在安全领域应用的综述。欧几里得格是几何数论中的重要对象，具有丰富的数学结构，例如通过数域扩张构造。特别地，圆滑格（well-rounded lattices）与几何中的最密球堆积问题、θ函数最小化以及著名的Min
picklescan before 1.0.1 contains an unsafe pickle deserialization vulnerability allowing unauthenticated attackers to create arbitrary zero-byte files via logging.FileHandler cl...
CVE-2026-56304
picklescan before 1.0.1 contains an unsafe pickle deserialization vulnerability allowing unauthenticated attackers to cr
Capgo before 12.128.2 contains an authorization bypass vulnerability in webhook management endpoints that allows non-expiring API keys to bypass the require_apikey_expiration or...
CVE-2026-56295
Capgo before 12.128.2 contains an authorization bypass vulnerability in webhook management endpoints that allows non-exp
capacitor-native-biometric before 12.128.2 contains an authentication bypass vulnerability where the onAuthenticationSucceeded() method fails to validate CryptoObject parameters...
CVE-2026-56294
capacitor-native-biometric before 12.128.2 contains an authentication bypass vulnerability where the onAuthenticationSuc
Capgo before 12.128.2 contains an information disclosure vulnerability in the unauthenticated /replication endpoint that exposes internal PostgreSQL replication telemetry includ...
CVE-2026-56282
Capgo before 12.128.2 contains an information disclosure vulnerability in the unauthenticated /replication endpoint that
Flowise before 3.1.2 contains a mass assignment vulnerability in the PUT /api/v1/user endpoint that allows authenticated users to directly modify the credential field without va...
CVE-2026-56276
Flowise before 3.1.2 contains a mass assignment vulnerability in the PUT /api/v1/user endpoint that allows authenticated
Flowise before 3.0.13 contains an information exposure vulnerability in the POST /api/v1/account/forgot-password endpoint that returns full user objects including PII to unauthe...
CVE-2026-56267
Flowise before 3.0.13 contains an information exposure vulnerability in the POST /api/v1/account/forgot-password endpoin
Cap-go capgo before 12.128.2 contains an authorization bypass in several Supabase PostgREST RPC functions (get_app_metrics, get_global_metrics, get_total_metrics) that are grant...
CVE-2026-56235
Cap-go capgo before 12.128.2 contains an authorization bypass in several Supabase PostgREST RPC functions (get_app_metri
Capgo before 12.128.2 fails to enforce a maximum value on the minimum password length field in its password policy configuration. An authenticated organization administrator can...
CVE-2026-56228
Capgo before 12.128.2 fails to enforce a maximum value on the minimum password length field in its password policy confi
Capgo before 12.128.2 contains a server-side request forgery vulnerability in webhook URL validation that allows loopback and internal addresses. Organization admins can configu...
CVE-2026-56227
Capgo before 12.128.2 contains a server-side request forgery vulnerability in webhook URL validation that allows loopbac
Capgo before 12.128.2 fails to strip EXIF metadata including GPS geolocation data from uploaded images, allowing information disclosure. Attackers can download uploaded images a...
CVE-2026-56218
Capgo before 12.128.2 fails to strip EXIF metadata including GPS geolocation data from uploaded images, allowing informa