2026-08-30 归档

今日共收录 849 条安全情报，包含 76 个 CVE，428 篇安全通告，以及 85 篇研究论文。

漏洞预警2026-08-30 发布MEDIUM

### Summary `qs.stringify` throws a `TypeError` when it serializes an object whose own `constructor` property has a truthy, non-callable `isBuffer` member. `utils.isBuffer` d...

CVE-2026-82417

CVE-2026-82417 是 Node.js 的 qs 库（用于查询字符串解析与序列化）中的一个拒绝服务漏洞，影响版本 >=2.2.5 且 <6.16.0。漏洞根源在于 qs.stringify 在序列化非原始值时会调用 utils.i

历史摘要 · 未重新核验 · NVD

#cve #cwe-248 #cwe-703

漏洞预警2026-08-29 发布INFO

Rodauth before 2.47.0 contains a time-based one-time password reuse vulnerability in the otp feature that fails to track the last accepted code timestamp. Attackers who observe ...

CVE-2026-82470

Rodauth before 2.47.0 contains a time-based one-time password reuse vulnerability in the otp feature that fails to track

历史摘要 · 未重新核验 · NVD

#cve #cwe-294

漏洞预警2026-08-29 发布INFO

Rodauth before 2.47.0 contains an authentication bypass vulnerability in the jwt_refresh route that issues new JWT access tokens without requiring a refresh token. Attackers can...

CVE-2026-82469

Rodauth before 2.47.0 contains an authentication bypass vulnerability in the jwt_refresh route that issues new JWT acces

历史摘要 · 未重新核验 · NVD

#cve #cwe-613

漏洞预警2026-08-29 发布INFO

Rodauth before 2.47.0 contains a cross-site request forgery protection bypass vulnerability in the JSON request content type validation. Attackers can craft cross-origin form po...

CVE-2026-82468

Rodauth before 2.47.0 contains a cross-site request forgery protection bypass vulnerability in the JSON request content

历史摘要 · 未重新核验 · NVD

#cve #cwe-352

漏洞预警2026-08-29 发布INFO

Rodauth before 2.47.0 fails to validate protocol-relative return-to paths in confirm_password, login_return_to_requested_location, and two_factor_auth_return_to_requested_locati...

CVE-2026-82467

Rodauth before 2.47.0 fails to validate protocol-relative return-to paths in confirm_password, login_return_to_requested

历史摘要 · 未重新核验 · NVD

#cve #cwe-601

漏洞预警2026-08-29 发布INFO

Rodauth before 2.46.0 contains an authentication bypass vulnerability in the webauthn_login route that allows logged-in users to authenticate as any other account. Attackers can...

CVE-2026-82466

Rodauth before 2.46.0 contains an authentication bypass vulnerability in the webauthn_login route that allows logged-in

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

漏洞预警2026-08-29 发布INFO

pac4j-saml before 6.5.6 does not require signature validation of SAML LogoutRequest messages in SAML2LogoutValidator.validateLogoutRequest(). When an IdP sends no SessionIndex, ...

CVE-2026-82465

pac4j-saml before 6.5.6 does not require signature validation of SAML LogoutRequest messages in SAML2LogoutValidator.val

历史摘要 · 未重新核验 · NVD

#cve #cwe-345

漏洞预警2026-08-29 发布INFO

pac4j-core before 6.5.6 contains an open redirect vulnerability in DefaultLogoutLogic.perform() that accepts backslash-prefixed logout redirect targets matching logoutUrlPattern...

CVE-2026-82464

pac4j-core before 6.5.6 contains an open redirect vulnerability in DefaultLogoutLogic.perform() that accepts backslash-p

历史摘要 · 未重新核验 · NVD

#cve #cwe-601

漏洞预警2026-08-29 发布INFO

pac4j-core before 6.5.6 contains an authentication bypass vulnerability in CheckProfileTypeAuthorizer that reverses the profile type validation logic. Attackers can authenticate...

CVE-2026-82463

pac4j-core before 6.5.6 contains an authentication bypass vulnerability in CheckProfileTypeAuthorizer that reverses the

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-08-29 发布INFO

pac4j-oidc before 6.5.6 accepts OIDC callbacks carrying only an access token without authorization code or ID token validation. Attackers can substitute access tokens minted for...

CVE-2026-82462

pac4j-oidc before 6.5.6 accepts OIDC callbacks carrying only an access token without authorization code or ID token vali

历史摘要 · 未重新核验 · NVD

#cve #cwe-345

漏洞预警2026-08-29 发布INFO

pac4j-oidc before 6.5.6 fails to verify access token signatures, issuers, audiences, or expiry when extracting Keycloak realm and client roles. Attackers can forge access tokens...

CVE-2026-82461

pac4j-oidc before 6.5.6 fails to verify access token signatures, issuers, audiences, or expiry when extracting Keycloak

历史摘要 · 未重新核验 · NVD

#cve #cwe-347

漏洞预警2026-08-29 发布INFO

The cohttp package before 6.3.0 for OCaml allows directory traversal.

CVE-2026-82481

The cohttp package before 6.3.0 for OCaml allows directory traversal.

历史摘要 · 未重新核验 · NVD

#cve #cwe-180

漏洞预警2026-08-29 发布INFO

In MITRE SAF Heimdall 2.11.6 through 2.13.x before 2.14.0, an SSRF issue allows remote attackers to access internal network resources via the Tenable proxy endpoint. This occurs...

CVE-2026-82477

In MITRE SAF Heimdall 2.11.6 through 2.13.x before 2.14.0, an SSRF issue allows remote attackers to access internal netw

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-08-29 发布INFO

su-exec through 0.3 fails to validate numeric user and group identifiers parsed with strtol before assigning to uid_t and gid_t, allowing truncation of out-of-range values to ze...

CVE-2026-82457

su-exec through 0.3 fails to validate numeric user and group identifiers parsed with strtol before assigning to uid_t an

历史摘要 · 未重新核验 · NVD

#cve #cwe-681

漏洞预警2026-08-29 发布INFO

RubyGems fails to re-validate path containment after filesystem symlink resolution during gem extraction. When a pre-existing symlink inside the destination directory points out...

CVE-2026-82455

RubyGems fails to re-validate path containment after filesystem symlink resolution during gem extraction. When a pre-exi

历史摘要 · 未重新核验 · NVD

#cve #cwe-59

漏洞预警2026-08-29 发布INFO

rust-iot-platform through commit 5df942ab stores user passwords in cleartext without hashing in the user model. Attackers can read API responses from user retrieval and listing ...

CVE-2026-82453

rust-iot-platform through commit 5df942ab stores user passwords in cleartext without hashing in the user model. Attacker

历史摘要 · 未重新核验 · NVD

#cve #cwe-256

漏洞预警2026-08-29 发布INFO

Formwork through 2.3.14 contains a stored cross-site scripting vulnerability in visit tracking that records the Referer header host unescaped. Unauthenticated attackers can craf...

CVE-2026-82451

Formwork through 2.3.14 contains a stored cross-site scripting vulnerability in visit tracking that records the Referer

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-29 发布INFO

BookStack before 26.05.4 contains a remote code execution vulnerability in the portable ZIP import functionality that allows users with Import Content and Create Books permissio...

CVE-2026-82450

BookStack before 26.05.4 contains a remote code execution vulnerability in the portable ZIP import functionality that al

历史摘要 · 未重新核验 · NVD

#cve #cwe-434

漏洞预警2026-08-29 发布INFO

Cockpit CMS before 2.14.1 contains an account enumeration vulnerability in the auth check endpoint due to timing discrepancies in password verification. Attackers can measure re...

CVE-2026-82449

Cockpit CMS before 2.14.1 contains an account enumeration vulnerability in the auth check endpoint due to timing discrep

历史摘要 · 未重新核验 · NVD

#cve #cwe-208

漏洞预警2026-08-29 发布INFO

Skyvern before 1.0.45 contains a sandbox escape vulnerability in TextPromptBlock that renders prompts twice, first through a sandboxed Jinja environment and then through an unsa...

CVE-2026-82447

Skyvern before 1.0.45 contains a sandbox escape vulnerability in TextPromptBlock that renders prompts twice, first throu

历史摘要 · 未重新核验 · NVD

#cve #cwe-1336