今日共收录 798 条安全情报，包含 82 个 CVE，390 篇安全通告，以及 72 篇研究论文。
← 返回归档列表CVE-2026-8630
justhtml before 1.12.0 (versions and . When a DOM tree is processed by sanitize_dom() using a custom policy that keeps
CVE-2026-77088
justhtml versions 0.9.0 through 1.21.0 contain a cross-site scripting vulnerability in to_markdown() where inline code s
CVE-2026-74793
justhtml before 3.11.0 contains a cross-site scripting vulnerability where the default sanitizer bypasses event handler
CVE-2026-6827
justhtml before 1.17.0 contains multiple security issues in sanitization, serialization, and programmatic DOM handling.
CVE-2026-5751
justhtml versions 1.13.0 and earlier contain a parser-differential / mutation cross-site scripting (mXSS) vulnerability
CVE-2026-5389
justhtml versions before 1.13.0 contain a cross-site scripting vulnerability in the to_markdown() function when serializ
CVE-2026-4671
justhtml before 1.18.0 contains multiple low-severity denial-of-service issues in CSS selector handling and linkificatio
CVE-2026-78115
A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function
CVE-2026-78112
A flaw has been found in itsourcecode Hospital Management System Project in PHP 1.0. This impacts an unknown function of
CVE-2026-10053
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.8 before 19.0.6, 19.1 before 19.1.4, and 1
CVE-2026-77116
Brave Popup Builder (slug: brave-popup-builder) has a broken access control issue in versions through 0.8.5. Any logged-
CVE-2026-77115
Brave Popup Builder (brave-popup-builder) up to version 0.8.5 reflects UTM query parameters into popup form HTML without
CVE-2026-77003
The Content Mask WordPress plugin before 1.8.5.5 does not check the capability required to publish the post type being c
CVE-2026-14853
The WooCommerce Bookings WordPress plugin before 3.9.0 does not perform a capability check on one of its AJAX actions, a
CVE-2026-13598
The RestrictMate WordPress plugin before 1.3.0 does not restrict the user role supplied during account registration, al
CVE-2026-78063
A security flaw has been discovered in Tenda CH22 1.0.0.1. The impacted element is the function formeditFileName of the
CVE-2026-78062
A vulnerability was identified in vas3k TaxHacker up to 0.8.2. The affected element is the function envSchema.parse of t
CVE-2026-78061
A vulnerability was determined in vas3k TaxHacker up to 0.8.2. Impacted is the function buildImapConfig of the file lib/
CVE-2026-78060
A vulnerability was found in SourceCodester Stock Management System 1.0. This issue affects some unknown processing of t
CVE-2026-78059
A vulnerability has been found in SourceCodester Stock Management System 1.0. This vulnerability affects unknown code of