今日共收录 1910 条安全情报，包含 1065 个 CVE，437 篇安全通告，以及 97 篇研究论文。
← 返回归档列表CVE-2026-18942
A flaw was found in the Feast operator. A malicious tenant could inject arbitrary code into their feature repository. Th
CVE-2026-18941
A flaw was found in Feast and feast-operator. The default configuration for both the Feast SDK and the feast-operator is
CVE-2026-18621
A flaw was found in Data Science Pipelines (DSP). An attacker with namespace editor privileges can bypass security harde
CVE-2026-18620
A flaw was found in Data Science Pipelines. A restricted user, or tenant, can exploit an improper authorization vulnerab
CVE-2026-18618
A flaw was found in ml-metadata. The statically-linked gRPC stack in ml-metadata is outdated, making it vulnerable to kn
CVE-2026-18617
A flaw was found in the Data Science Pipelines Operator (DSPO). A namespace editor can exploit a vulnerability in the sp
CVE-2026-18611
A flaw was found in the Data Science Pipelines Operator. This vulnerability allows an unauthenticated attacker to derive
CVE-2026-18608
A flaw was found in the Data Science Pipelines Operator (DSPO). The operator's ClusterRole, which defines its permission
CVE-2026-16456
A flaw was found in the `odh-model-controller`. An authenticated user with permissions to create custom resources can ex
CVE-2026-15581
A flaw was found in the TrustyAI Service (TAS) deployment. This vulnerability allows any pod on the cluster network to b
CVE-2026-15467
A flaw was found in the trustyai-service-operator's LMEvalJob controller. An authenticated user within the cluster can e
CVE-2026-11810
The UpdateHub firmware-update agent's probe handler (z_impl_updatehub_probe() in subsys/mgmt/updatehub/updatehub.c) pars
CVE-2026-11809
The UpdateHub OTA client in subsys/mgmt/updatehub/updatehub.c contains an out-of-bounds / uninitialized-memory read in z
CVE-2026-72885
Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, dockerContextPath accepted by apps/dokp
CVE-2026-72884
Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, sanitizeCommand in packages/server/src/
CVE-2026-72879
Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.8, the getRegistryCommands() function in pa
CVE-2026-72874
Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, cloneGitRepository in packages/server/s
CVE-2026-71965
CyberPanel 2.4.3, fixed in commit eca0c3c, contains an authenticated remote code execution vulnerability in the remote b
CVE-2026-69118
Cachet through 2.4.1 contains a server-side template injection vulnerability in incident template rendering that allows
CVE-2026-69116
FlyEnv before 4.18.0 fails to sanitize HTML from markdown rendering and AI chat content passed to Vue v-html directives.