今日共收录 1656 条安全情报，包含 834 个 CVE，420 篇安全通告，以及 108 篇研究论文。
← 返回归档列表CVE-2026-45019
Chainlit is a Python framework for building production-ready conversational AI applications. From 2.4.0rc0 until 2.12.0,
CVE-2026-43670
A Content Security Policy bypass was addressed with improved enforcement in AudioWorklet contexts. This issue is fixed i
CVE-2026-43657
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.5 and iPadOS 26.5. A malic
CVE-2026-80050
ContiNew Admin fails to apply file-upload permission checks or file-type allowlist validation to multipart upload endpoi
CVE-2026-80049
Airbyte Platform resolves the workspace used for its authorization decision from a field the caller supplies. Authorizat
CVE-2026-79788
In Dradis Community Edition, the ProvidersController and AgentsController gate their admin_required before_action on `de
CVE-2026-78379
Improper neutralization of input used for LLM prompting in the python_repl tool in Amazon Strands Agents Tools before 0.
CVE-2026-65979
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture in
CVE-2026-62986
OpenEXR is the reference implementation and specification for the EXR image file format, widely used in the motion pictu
CVE-2026-61555
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture in
CVE-2026-59985
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture in
CVE-2026-55663
mediasoup is a WebRTC video conferencing system. From version 3.20.0 until 3.20.6 for the npm package and from 0.22.0 un
CVE-2026-55619
eml_parser serves as a python module for parsing eml files and returning various information found in the e-mail as well
CVE-2026-55609
sublinear-time-solver is a Rust and WebAssembly library for solving asymmetric diagonally dominant systems in sublinear
CVE-2026-80051
github.com/graphql-go/graphql (GraphQL for Go) through 0.8.1 does not validate that a scalar variable value matches its
CVE-2026-79992
A flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by processing maliciously crafted fil
CVE-2026-76198
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could lead to arbitrary file syst
CVE-2026-76189
CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an a
CVE-2026-75770
Substance3D - Painter is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution
CVE-2026-75769
Substance3D - Painter is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code exec