今日共收录 1224 条安全情报，包含 453 个 CVE，382 篇安全通告，以及 98 篇研究论文。
← 返回归档列表CVE-2026-66018
Build readers can access another repository's environment properties. A caller with read access to an ordinary repositor
CVE-2026-66015
An authenticated privilege-escalation vulnerability in JFrog Platform may be exploited under admin-provisioned account c
CVE-2026-66014
JFrog Artifactory contains an authentication handling weakness in internal request processing that, under specific condi
CVE-2026-65925
A user with JFrog Artifactory Cargo remote repository read access could make Artifactory request unintended URLs and ret
CVE-2026-65924
JFrog Artifactory support for Terraform remote repositories was found to be susceptible to Server-Side Request Forgery (
CVE-2026-65923
A URL validation weakness in JFrog Artifactory Ansible repository handling could allow a user, under specific repository
CVE-2026-65922
An authorization weakness in JFrog Artifactory internal metadata handling could allow a user with limited repository acc
CVE-2026-65921
A path validation weakness in archive extraction/write handling allows entries with traversal sequences to be written ou
CVE-2026-65618
Improper URL validation when handling specific URLs, allows an attacker, under certain conditions, to make unauthorized
CVE-2026-65617
A deserialization weakness in JFrog Artifactory package handling could allow a low-privileged user to impact confidentia
CVE-2026-65616
Incorrect authorization validation in refresh token signature allows non-admin users to obtain a signed JFrog administra
CVE-2026-64649
Next.js is a React framework for building full-stack web applications. In versions 14.1.1 through 15.5.20 and 16.0.0 thr
CVE-2026-64648
Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15.5.20 and 16.0.0 thr
CVE-2026-59729
Astro is a web framework for content-driven websites. Versions prior to 7.0.6 are vulnerable to XSS through unescaped sp
CVE-2026-59727
Astro is a web framework for content-driven websites. In versions 3.10.0 through 7.0.3, when a transition:persist, trans
CVE-2026-56748
Improper validation of symbolic links in the Pack Git import feature in Cribl Stream before 4.18.2 allows a remote authe
CVE-2026-56747
Improper control of generation of code in the JSON Pointer-to-accessor compiler in Cribl Stream before 4.18.2 allows a r
CVE-2026-42017
An event-handling weakness in JFrog Artifactory could expose privileged authorization material to a lower-privileged use
CVE-2026-42016
JFrog Artifactory (Self Hosted) versions before 7.133.11 are vulnerable to a privilege escalation attack due to a valida
CVE-2026-66759
A flaw was found in the file-icns plugin in GIMP. When applying a decompressed mask during ICNS image processing, the pl