今日共收录 1353 条安全情报，包含 493 个 CVE，458 篇安全通告，以及 108 篇研究论文。
← 返回归档列表CVE-2026-69242
libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, a crafted many-band TIFF proc
CVE-2026-73040
Dockge validates a stack name only on the write path. In backend/stack.ts the allow-list check in validate(), which requ
CVE-2026-72861
The github-issue-bot templates in appwrite/templates verify the GitHub webhook signature with an inverted condition. ver
CVE-2026-77151
A security flaw has been discovered in lin-snow Ech0 up to 5.4.1. Affected by this issue is the function MD5Encrypt of t
CVE-2026-53586
libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing
CVE-2026-66002
Frappe is a full-stack web application framework. Prior to 15.115.0 and 16.27.0, the public request-data web form and Pe
CVE-2026-63003
django CMS is an easy-to-use and developer-friendly enterprise content management system powered by Django. Prior to 5.0
CVE-2026-63385
Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has two HTTP parsing weaknesses in
CVE-2026-63381
Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has a use-after-free in buffer.c wh
CVE-2026-63388
Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has a heap out-of-bounds write in b
CVE-2026-73256
Mongoose is an embedded web server and network library. Prior to 7.22, a remote unauthenticated attacker can exploit an
CVE-2026-72847
broot renders each file and directory name in its interactive tree view exactly as read from the filesystem. Names are c
CVE-2026-72844
The Lean 4 kernel does not verify that the structure named in a projection expression matches the type of the value bein
CVE-2026-54136
Windmill is an open-source developer platform for internal code: APIs, background jobs, workflows and UIs. Prior to 1.71
CVE-2026-65842
Plate is a rich-text editor with AI and shadcn/ui. Prior to 53.3.2, @platejs/docx-io fetches remote image URLs while con
CVE-2026-55586
SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, a crafted CHM file can supply malformed LZX Huffm
CVE-2026-63481
Hurl is a command line tool that runs and tests HTTP requests defined in plain text files. In version 8.0.1 and earlier,
CVE-2026-55095
OpenProject is open-source, web-based project management software. In version 17.5.1 and earlier, an authenticated non-a
CVE-2026-15686
Adminer multi_query Incorrect Check of Function Return Value Remote Code Execution Vulnerability. This vulnerability all
CVE-2026-18309
GIMP APNG File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers