Scriban before 7.0.0 (affected versions <= 6.6.0) contains a stack overflow vulnerability in...
CVE-2026-74792
Scriban before 7.0.0 (affected versions <= 6.6.0) contains a stack overflow vulnerability in nested array initializer pa
2026-08-17 归档
今日共收录 803 条安全情报，包含 111 个 CVE，370 篇安全通告，以及 71 篇研究论文。
← 返回归档列表OpenTofu before 1.11.7 fails to validate existing symlinks in the provider cache directory during...
CVE-2026-74796
OpenTofu before 1.11.7 fails to validate existing symlinks in the provider cache directory during initialization. Attack
Scriban before 7.0.0 (affected <= 6.6.0) applies its LoopLimit constraint only to script loop...
CVE-2026-74789
Scriban before 7.0.0 (affected <= 6.6.0) applies its LoopLimit constraint only to script loop statements and not to expe
Scriban before 7.0.0 fails to clear the CachedTemplates dictionary when TemplateContext.Reset()...
CVE-2026-74791
Scriban before 7.0.0 fails to clear the CachedTemplates dictionary when TemplateContext.Reset() is called, allowing cach
OpenTofu versions before 1.11.4 contain a denial of service vulnerability in the tofu init...
CVE-2026-74797
OpenTofu versions before 1.11.4 contain a denial of service vulnerability in the tofu init command when processing malic
Scriban before 7.2.0 contains a denial of service vulnerability in the array.insert_at function...
CVE-2026-74784
Scriban before 7.2.0 contains a denial of service vulnerability in the array.insert_at function that allocates unbounded
Scriban before 7.0.0 (affected versions <= 6.6.0) contains a denial-of-service vulnerability in...
CVE-2026-74786
Scriban before 7.0.0 (affected versions <= 6.6.0) contains a denial-of-service vulnerability in which the LimitToString
Scriban before 7.0.0 contains three distinct denial-of-service vulnerabilities in expression...
CVE-2026-74785
Scriban before 7.0.0 contains three distinct denial-of-service vulnerabilities in expression evaluation that bypass exis
Scriban before 7.0.0 contains an uncontrolled recursion vulnerability in the object.to_json...
CVE-2026-74787
Scriban before 7.0.0 contains an uncontrolled recursion vulnerability in the object.to_json builtin function that lacks
Scriban versions 6.6.0 through 7.2.0 contain a non-enforcing ExpressionDepthLimit guard that...
CVE-2026-74783
Scriban versions 6.6.0 through 7.2.0 contain a non-enforcing ExpressionDepthLimit guard that fails to stop recursive des
Scriban before 7.0.0 (affected versions <= 6.6.0) contains an uncontrolled memory allocation...
CVE-2026-74788
Scriban before 7.0.0 (affected versions <= 6.6.0) contains an uncontrolled memory allocation vulnerability in the string
Scriban versions 3.0.0 through 7.2.0 contain a denial of service vulnerability in the array...
CVE-2026-73062
Scriban versions 3.0.0 through 7.2.0 contain a denial of service vulnerability in the array multiplication operator that
stoatchat before 0.15.0 contains a permission bypass vulnerability in the message_fetch route...
CVE-2026-73059
stoatchat before 0.15.0 contains a permission bypass vulnerability in the message_fetch route that checks only ViewChann
Scriban versions from 3.0.0 through 7.2.5 contain a denial of service vulnerability in the...
CVE-2026-73060
Scriban versions from 3.0.0 through 7.2.5 contain a denial of service vulnerability in the ScriptRange.Multiply operator
Joomla Extension - phoca.cz - Unauthenticated SQL injection via attribute filter in Phoca Cart 5...
CVE-2026-74251
Joomla Extension - phoca.cz - Unauthenticated SQL injection via attribute filter in Phoca Cart 5.0.0-6.1.6 - The a[] (a
OpenTofu versions 1.8.0 through 1.8.2 do not properly restrict sensitive variables and locals...
CVE-2024-58375
OpenTofu versions 1.8.0 through 1.8.2 do not properly restrict sensitive variables and locals when users have opted into
stoatchat versions before 0.15.0 fail to block the IPv6 unspecified address (::) in the SSRF...
CVE-2026-73058
stoatchat versions before 0.15.0 fail to block the IPv6 unspecified address (::) in the SSRF blocklist, allowing unauthe
stoatchat before 0.15.0 fails to validate SVG viewBox dimensions in the proxy endpoint, allowing...
CVE-2026-73057
stoatchat before 0.15.0 fails to validate SVG viewBox dimensions in the proxy endpoint, allowing attackers to cause deni
The Gallery by BestWebSoft plugin for WordPress is vulnerable to SQL Injection via the ...
CVE-2026-2497
The Gallery by BestWebSoft plugin for WordPress is vulnerable to SQL Injection via the '_gallery_order_{post_id}' parame
The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is...
CVE-2026-18347
The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to authorization bypa