ws < 8.21.1 Default maxFragments Allows Memory Exhaustion DoS
CVE-2026-62389
ws before 8.21.1 contains a memory exhaustion vulnerability in lib/receiver.js where the fragment guard only triggers wh
2026-07-16 归档
今日共收录 1958 条安全情报，包含 992 个 CVE，550 篇安全通告，以及 113 篇研究论文。
← 返回归档列表Kanboard BoardAjaxController Missing Ownership Check via Drag-and-Drop
CVE-2026-58660
Kanboard through 1.2.52, fixed in commit 564cc30, BoardAjaxController save() method (used by the kanban board drag-and-d
PyTorch Lightning Arbitrary Code Execution via _instantiator Hyperparameter
CVE-2026-58659
PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_st
GPUStack Unauthenticated Information Disclosure via Worker Endpoints
CVE-2026-58658
GPUStack through 2.2.1, fixed in commit 4e20551, contains an unauthenticated information disclosure vulnerability that a
RustFS Console: Critical Stored XSS in Preview Modal leading to Administrative Account Takeover
CVE-2026-62378
RustFS Console is a web management console for the RustFS distributed file system. From 0.1.7 until 0.1.10, the RustFS C
Composer: Github Actions issued GITHUB_TOKEN disclosure in GitHub Actions logs
CVE-2026-45793
Composer is a dependency Manager for the PHP language. Prior to 1.10.28, 2.2.28, and 2.9.8, Composer\IO\BaseIO::loadConf
Postiz: Unauthenticated arbitrary lifetime PRO grant via Nowpayments webhook
CVE-2026-48799
Postiz is an AI social media scheduling tool. Prior to 2.21.8, Postiz fails to verify Nowpayments IPN callback authentic
Diffusers: TOCTOU Trust Remote Code Bypass
CVE-2026-45804
Diffusers is the a library for pretrained diffusion models. Prior to 0.38.0, Diffusers' DiffusionPipeline.from_pretraine
AdGuard Home: DoQ-to-UDP State Reduction and Source-Port Oracle
CVE-2026-47703
AdGuard Home is a network-wide software for blocking ads and tracking. Prior to 0.107.75, AdGuard Home's client-triggere
ERPNext: Server-Side Template Injection (SSTI) in Batch autonaming via Stock Settings.naming_series_prefix
CVE-2026-55242
ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.111.0 and 16.22.0, an authenticated use
Penpot: MCP REPL server binds to 0.0.0.0 with unauthenticated /execute endpoint — RCE
CVE-2026-45805
Penpot is an open-source design tool for design and code collaboration. Prior to 2.15.0, Penpot MCP's mcp/packages/serve
Penpot: Pre-authenticated account takeover via team-invitation token + prepare-register-profile
CVE-2026-44986
Penpot is an open-source design tool for design and code collaboration. Prior to 2.14.5, Penpot exposed teams_invitation
Penpot: Authenticated SSRF in remote image import via create-file-media-object-from-url
CVE-2026-45806
Penpot is an open-source design tool for design and code collaboration. Prior to 2.15.0, Penpot's remote image import pa
Vaultwarden: Server-side request forgery (SSRF) via Icon Endpoint Decimal/Hex/Octal IP Bypass
CVE-2026-47160
Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to 1.36.0, Vaultwarden's /icons/{domain}/icon.png en
Tabby: Drag-and-drop path injection still allows RCE via shell command substitution (incomplete fix for CVE-2026-45038)
CVE-2026-46709
Tabby (formerly Terminus) is a highly configurable terminal emulator. Prior to 1.0.234, Tabby inserts dropped file paths
nixos/mysql : `services.mysql` is configured with insecure authentication by default when used with `mysql` or `percona-server`
CVE-2026-61828
Nixpkgs is a collection of software packages that can be installed with the Nix package manager. Prior to the 25.11 and
Redash: Open redirect vulnerability in post-login redirect handling
CVE-2026-33213
Redash is a package for data visualization and sharing. From 5.0.2 to 26.3.0, the get_next_path() function in Redash's a
Flameshot: OCTOU symlink attack via predictable /tmp path in Flameshot "Open With"
CVE-2026-62294
Flameshot is powerful yet simple to use screenshot software. Prior to 14.0.0, the Open With feature wrote screenshots to
Directus: Authorization-dependent response served from unsegmented cache key
CVE-2026-61836
Directus is a real-time API and App dashboard for managing SQL database content. Prior to 12.0.0, when response caching
Directus: SSRF Protection Bypass via 0.0.0.0 in File Import
CVE-2026-61835
Directus is a real-time API and App dashboard for managing SQL database content. Prior to 12.0.0, the SSRF protection on