A vulnerability was detected in lo48576 fbxcel up to 0.9.0. This affects an unknown part of the...
CVE-2026-15274
A vulnerability was detected in lo48576 fbxcel up to 0.9.0. This affects an unknown part of the file src/pull_parser/v74
2026-07-10 归档
今日共收录 1398 条安全情报，包含 466 个 CVE，522 篇安全通告，以及 115 篇研究论文。
← 返回归档列表Tesla vulnerable to multipart part smuggling via unescaped `content-disposition` values
CVE-2026-48598
### Summary `Tesla.Multipart.part_headers_for_disposition/1` interpolates `Content-Disposition` parameter values (field
Tesla vulnerable to atom exhaustion via untrusted URL scheme
CVE-2026-48597
### Summary In the Mint adapter for the Tesla HTTP client library, `Tesla.Adapter.Mint.open_conn/2` passes the URL sche
Tesla: Authorization header leaks on cross-origin redirect via case-sensitive filtering
CVE-2026-48595
### Summary `Tesla.Middleware.FollowRedirects` is meant to strip the `Authorization` header when following a cross-orig
Tesla has decompression bomb on response body
CVE-2026-48594
### Summary Any Tesla client pipeline that includes `Tesla.Middleware.DecompressResponse` or `Tesla.Middleware.Compress
Tesla has CRLF injection in request `Content-Type` header via `add_content_type_param`
CVE-2026-48596
### Summary `Tesla.Multipart.add_content_type_param/2` appends caller-supplied strings to the multipart `Content-Type`
Mistune: Potential DoS via quadratic-time parsing in parse_link_text
CVE-2026-49851
### Summary Mistune is vulnerable to a CPU exhaustion DoS due to superlinear (approximately O(n²)) behavior in parse_lin
GoBGP confederation validation panics on empty AS_PATH attribute
CVE-2026-49838
Found through variant analysis based on `CVE-2026-41643` ## Summary GoBGP accepts a zero-length AS_PATH during UPDATE d
GoBGP: BGP OPEN capability parser may read capability values outside declared CapLen boundaries
CVE-2026-49837
### Summary GoBGP contains a BGP OPEN capability parsing issue where several concrete capability decoders may parse
psd-tools vulnerable to arbitrary file write via smart-object filename
CVE-2026-49836
# psd-tools: arbitrary file write/read via smart-object path traversal ## Summary In `psd-tools` (all releases exposin
sigstore-go has a multi-log threshold bypass via single compromised log
CVE-2026-49834
### Impact _What kind of vulnerability is it? Who is impacted?_ A verifier configured with WithTransparencyLog(N>1) or
Rattler vulnerable to package cache path traversal via conda package build string
CVE-2026-53956
`rattler_cache` and `py-rattler` were vulnerable to package-cache path traversal when handling package metadata from con
mint: Unbounded CONTINUATION/HEADERS frame accumulation (CONTINUATION flood)
CVE-2026-49754
### Summary Mint's HTTP/2 client accumulates `CONTINUATION` header-block fragments into a per-connection buffer with no
mint: Content-Length header accepts non-RFC "+" sign prefix
CVE-2026-49753
### Summary Mint's HTTP/1 client accepts `Content-Length` header values with a leading `+` sign (e.g. `+0`, `+123`), wh
An Out-of-bounds Write vulnerability in the SNMP daemon (snmpd) of Juniper Networks Junos OS and...
CVE-2026-33799
An Out-of-bounds Write vulnerability in the SNMP daemon (snmpd) of Juniper Networks Junos OS and Junos OS Evolved allows
Incorrect access control in Proximus b-box v8c.725A allows authenticated attackers to bypass...
CVE-2025-45422
Incorrect access control in Proximus b-box v8c.725A allows authenticated attackers to bypass normal restrictions and mak
A weakness has been identified in D-link DIR-823G 1.0.2B05_20181207. Affected by this...
CVE-2026-15270
A weakness has been identified in D-link DIR-823G 1.0.2B05_20181207. Affected by this vulnerability is an unknown functi
An Unchecked Input for Loop Condition vulnerability in the Packet Forwarding Engine (pfe) of...
CVE-2026-33800
An Unchecked Input for Loop Condition vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS o
An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol...
CVE-2026-33801
An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol daemon (RPD) of Juniper Ne
An issue in docuForm GmbH Client v.11.11c allows a remote attacker to execute arbitrary code via...
CVE-2026-51924
An issue in docuForm GmbH Client v.11.11c allows a remote attacker to execute arbitrary code via the file upload and rep