A weakness has been identified in BerriAI litellm up to 1.59.8. Affected is the function...
CVE-2026-12773
A weakness has been identified in BerriAI litellm up to 1.59.8. Affected is the function UserAPIKeyAuth of the file lite
2026-06-22 归档
今日共收录 737 条安全情报，包含 75 个 CVE，376 篇安全通告，以及 39 篇研究论文。
← 返回归档列表A flaw has been found in Montodel House-Rental-Management up to...
CVE-2026-12776
A flaw has been found in Montodel House-Rental-Management up to 90010017b81265eb1ef3810268909f7719a33863. This affects a
A security flaw has been discovered in BerriAI litellm up to 1.82.2. This impacts the function...
CVE-2026-12772
A security flaw has been discovered in BerriAI litellm up to 1.82.2. This impacts the function authenticate_user of the
A vulnerability was determined in BerriAI litellm up to 1.63.1. The impacted element is an...
CVE-2026-12770
A vulnerability was determined in BerriAI litellm up to 1.63.1. The impacted element is an unknown function of the file
GNU Savannah Administration Savane through 3.17 uses untrusted data as part of authorization.
CVE-2026-56355
GNU Savannah Administration Savane through 3.17 uses untrusted data as part of authorization.
AVideo TopMenu plugin through version 26.0 contains a stored cross-site scripting vulnerability...
CVE-2026-56347
AVideo TopMenu plugin through version 26.0 contains a stored cross-site scripting vulnerability in menu item rendering d
AVideo through version 25.0 contains an authentication bypass vulnerability in the decryptMessage...
CVE-2026-56346
AVideo through version 25.0 contains an authentication bypass vulnerability in the decryptMessage.json.php endpoint that
vLLM versions >= 0.6.3 and < 0.9.0 contain multiple regular expression denial of service (ReDoS)...
CVE-2025-71379
vLLM versions >= 0.6.3 and < 0.9.0 contain multiple regular expression denial of service (ReDoS) vulnerabilities. Severa
AVideo through version 26.0 contains multiple unauthenticated list.json.php endpoints in payment...
CVE-2026-56341
AVideo through version 26.0 contains multiple unauthenticated list.json.php endpoints in payment plugins lacking authori
vLLM versions >= 0.10.2 and < 0.13.0 are missing sparse tensor validation in multimodal...
CVE-2026-56340
vLLM versions >= 0.10.2 and < 0.13.0 are missing sparse tensor validation in multimodal embeddings processing. Because P
Nuxt before 4.4.7 (and the 3.x branch before 3.21.7) contains a cross-site scripting...
CVE-2026-56317
Nuxt before 4.4.7 (and the 3.x branch before 3.21.7) contains a cross-site scripting vulnerability in the NoScript compo
Capgo before 12.128.2 contains an information disclosure vulnerability in the GET /statistics/app...
CVE-2026-56319
Capgo before 12.128.2 contains an information disclosure vulnerability in the GET /statistics/app/:app_id endpoint that
Flowise before 3.1.2 contains a mass assignment vulnerability in the PUT /api/v1/user endpoint...
CVE-2026-56276
Flowise before 3.1.2 contains a mass assignment vulnerability in the PUT /api/v1/user endpoint that allows authenticated
Capgo before 12.128.2 uses ILIKE pattern matching instead of exact matching for app_id lookup in...
CVE-2026-56325
Capgo before 12.128.2 uses ILIKE pattern matching instead of exact matching for app_id lookup in the preview subdomain r
picklescan before 1.0.1 contains an unsafe pickle deserialization vulnerability allowing...
CVE-2026-56304
picklescan before 1.0.1 contains an unsafe pickle deserialization vulnerability allowing unauthenticated attackers to cr
Capgo before 12.128.2 contains an open redirect vulnerability in stripe_portal and...
CVE-2026-56330
Capgo before 12.128.2 contains an open redirect vulnerability in stripe_portal and stripe_checkout endpoints that accept
Capgo before 12.128.2 contains an authorization bypass vulnerability in webhook management...
CVE-2026-56295
Capgo before 12.128.2 contains an authorization bypass vulnerability in webhook management endpoints that allows non-exp
Capgo before 12.128.2 contains an open redirect vulnerability in the confirm-signup endpoint that...
CVE-2026-56332
Capgo before 12.128.2 contains an open redirect vulnerability in the confirm-signup endpoint that allows attackers to re
Capgo before 12.128.2 contains an information disclosure vulnerability in the unauthenticated ...
CVE-2026-56282
Capgo before 12.128.2 contains an information disclosure vulnerability in the unauthenticated /replication endpoint that
capacitor-native-biometric before 12.128.2 contains an authentication bypass vulnerability where...
CVE-2026-56294
capacitor-native-biometric before 12.128.2 contains an authentication bypass vulnerability where the onAuthenticationSuc