pnpm: Git Fetch Argument Injection via Lockfile resolution.commit
CVE-2026-50014
## Summary pnpm passes the lockfile-controlled git `resolution.commit` value to `git fetch` without a `--` separator or
2026-06-27 归档
今日共收录 1218 条安全情报，包含 478 个 CVE，392 篇安全通告，以及 115 篇研究论文。
← 返回归档列表pnpm Has an Integrity Check Bypass via Missing Lockfile Integrity Field
CVE-2026-50021
## Summary pnpm's tarball extraction worker skips integrity verification when the `integrity` field is absent from the
pnpm: Unsafe default behavior breaks integrity check
CVE-2026-50573
While it is unclear whether this should be classified as a vulnerability, it is being reported through this channel beca
js-toml has silent type confusion via falsy-primitive duplicate-key bypass
CVE-2026-50029
### Summary `js-toml`'s interpreter checks whether a key already exists in a parser-built container with `if (object[ke
regclient may leak authentication credentials to external blob stores
CVE-2026-49349
Credentials for a registry may be inadvertently leaked to external servers. A prerequisite for this attack is a maliciou
@microsoft/kiota-http-fetchlibrary: Bearer token and Cookie leak across origin on redirect due to case-mismatched scrub in fetchRequestAdapter
CVE-2026-49336
### Summary `@microsoft/kiota-http-fetchlibrary`'s `RedirectHandler` is documented as stripping `Authorization` and `Co
js-toml vulnerable to CPU exhaustion via O(n^2) BigInt construction on radix-prefixed integer literals
CVE-2026-49293
## Summary `js-toml` versions up to and including **1.1.0** parse hexadecimal / octal / binary integer literals via a h
Statamic CMS's unsafe method invocation via collection sorting allows data destruction
CVE-2026-49287
### Impact The fix for GHSA-4jjr-vmv7-wh4w was incomplete. It addressed the issue in the query builder, but the same pr
Statamic CMS: Missing authorization on Control Panel fieldtype endpoints allows disclosure of restricted resources
CVE-2026-49288
### Impact An authenticated Control Panel user could view metadata and content for resources they don't have permission
PhpWeasyPrint vulnerable to arbitrary file deletion at shutdown via public $temporaryFiles
CVE-2026-49358
### Summary `AbstractGenerator::$temporaryFiles` is a public array, and `removeTemporaryFiles()` — invoked from `__dest
PhpWeasyPrint vulnerable to PHAR deserialization via output filename (CVE-2023-28115 case-insensitive bypass)
CVE-2026-49286
### Summary `pontedilana/php-weasyprint` guarded the output filename against the `phar://` stream wrapper with a case-s
Hackney vulnerable to atom-table exhaustion via unrecognized URL schemes
CVE-2026-47067
### Summary [CVE-2026-47067](https://nvd.nist.gov/vuln/detail/CVE-2026-47067) is an atom table exhaustion vulnerability
Hackney has unbounded buffer accumulation in WebSocket
CVE-2026-47073
### Summary The WebSocket client in `src/hackney_ws.erl` imposes no upper bound on memory consumption across three dist
Hackney has CRLF / header injection in WebSocket upgrade request
CVE-2026-47072
### Summary CRLF injection in hackney's WebSocket upgrade request builder (`src/hackney_ws.erl`). `init/1` copies the `
Hackney has CR/LF injection in query parameter
CVE-2026-47075
### Summary `hackney_url:make_url/3` passes the URL query component directly into the HTTP/1.1 request target without p
Hackney: Per-chunk timeout with unbounded body accumulation enables slow-drip OOM
CVE-2026-47074
### Summary `hackney_h3:await_response_loop/6` in `src/hackney_h3.erl` accumulates the HTTP/3 response body in memory w
Hackney: Cross-origin Redirect Leaks Authorization, Cookie, and Request Body
CVE-2026-47070
### Summary The HTTP/3 redirect handler in `src/hackney_h3.erl` forwards the original request headers (`Authorization`,
Hackney has CRLF / header injection via unvalidated `domain` and `path` options
CVE-2026-47069
### Summary CRLF injection in `hackney_cookie:setcookie/3` (`src/hackney_cookie.erl`). The function validates `Name` an
Hackney has an infinite loop on non-token byte at start of an Alt-Svc entry
CVE-2026-47066
### Summary [CVE-2026-47066](https://nvd.nist.gov/vuln/detail/CVE-2026-47066) is an infinite loop (CWE-835) in hackney'
pnpm: Tarball hash of GitHub git dependencies is not stored in lockfile
CVE-2026-48995
### Summary A malicious `codeload.github.com` server can serve whatever tarball it wants and pnpm will install it regar