nebula-mesh: Certificate revocation is never enforced at the mesh
CVE-2026-61699
### Summary nebula-mesh revokes a host by adding its certificate fingerprint to a per-CA blocklist and shipping that li
2026-07-15 归档
今日共收录 995 条安全情报，包含 81 个 CVE，528 篇安全通告，以及 87 篇研究论文。
← 返回归档列表Netty: Denial of Service via Unbounded Headers in StompSubframeDecoder
CVE-2026-44891
### Summary The StompSubframeDecoder fails to limit the total number of headers or their cumulative size per frame, allo
nebula-mesh: CA private key not zeroized on web mobile-bundle error paths
CVE-2026-53604
## Impact The web handler `renderMobileBundle` (`internal/web/handlers.go:1325`) passes the real `*pki.CAResolver` dire
Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser
CVE-2026-54448
## Summary When Trivy scans a Helm chart archive (`.tgz`), its custom tar unpacker reads each entry with `io.ReadAll(tr
EasyAdmin: Stored Cross-Site Scripting (XSS) via uploaded files served inline in FileField and ImageField
CVE-2026-54087
EasyAdmin's `FileField` and `ImageField` accept browser-executable file types by default (`FileField` applies no MIME/ex
n8n-MCP: Cross-tenant access to workflow version backups in multi-tenant HTTP deployments
CVE-2026-54052
## Impact In multi-tenant HTTP deployments — where a single n8n-mcp server serves several tenants — the locally stored
Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation
CVE-2026-50141
### Impact A vulnerability in Woodpecker CI's gRPC layer allowed any authenticated agent to impersonate any other agent
Anyquery: Arbitrary File Write (AFW) which could lead to Remote Code Execution (RCE) via Unrestricted ATTACH DATABASE in Server Mode
CVE-2026-50006
## Summary Anyquery's `server` mode does not disable or restrict native SQLite disk manipulation commands. Unauthenticat
Hoverfly: Process Crash via Concurrent Map Write Race Condition in Diff Mode
CVE-2026-50013
### Summary: When Hoverfly is running in Diff mode, the `AddDiff()` function writes to the shared `responsesDiff` map w
Firewall for AI
Firewall for AI
Google and Microsoft Pull ModHeader With 1.6 Million Installs After Dormant Collector Found
Google and Microsoft have pulled ModHeader, a popular header-editing extension with roughly 1.6 million installs across
Microsoft Patch Tuesday July 2026 - The AI Acopolypse is Here , (Tue, Jul 14th)
This patch Tuesday includes a staggering&#;x26;#;xc2;&#;x26;#;xa0;622 vulnerabilities, not including another 427 vulnera
SAP Patches Critical Vulnerabilities in NetWeaver, Approuter, Commerce Cloud
The flaws could allow attackers to access and modify data, and cause system unavailability and request-response desynchr
US, Allies Warn of Russian Cyberattacks Targeting Critical Infrastructure Routers
Multiple state-sponsored APTs are compromising poorly secured devices across critical infrastructure sector networks. Th
Firefox browsers
Firefox browsers
Sign in to Cloud
Sign in to Cloud
Sign Up for Free Cloud Tier
Sign Up for Free Cloud Tier
iOS 26.4.2 and iPadOS 26.4.2
iOS 26.4.2 and iPadOS 26.4.2
iOS 18.7.8 and iPadOS 18.7.8
iOS 18.7.8 and iPadOS 18.7.8
iOS 18.7.7 and iPadOS 18.7.7
iOS 18.7.7 and iPadOS 18.7.7