今日共收录 1407 条安全情报，包含 491 个 CVE，487 篇安全通告，以及 120 篇研究论文。
← 返回归档列表CVE-2026-77123
Nexus Repository 3 contains a sensitive information disclosure vulnerability in the capability read API. An account hold
CVE-2026-77122
An authorization flaw in the REST API repository details endpoint (GET /service/rest/v1/repositories/{repositoryName}) i
CVE-2026-77121
A user account with permission to deploy artifacts to a hosted Maven repository could upload a POM file containing an ov
CVE-2026-55221
Boruta is a standalone authorization server that aims to implement OAuth 2.0 and Openid Connect up to decentralized iden
CVE-2026-53706
PREVAIL is a Polynomial-Runtime EBPF Verifier using an Abstract Interpretation Layer. Prior to version 0.2.4, the prevai
CVE-2026-53671
PREVAIL is a Polynomial-Runtime EBPF Verifier using an Abstract Interpretation Layer. Prior to version 0.2.4, the abstra
CVE-2026-53670
PREVAIL is a Polynomial-Runtime EBPF Verifier using an Abstract Interpretation Layer. Prior to version 0.2.4, in the Pre
CVE-2026-49833
DSpace open source software is a repository application which provides durable access to digital resources. From version
CVE-2026-49832
DSpace open source software is a repository application which provides durable access to digital resources. From version
CVE-2026-49831
DSpace open source software is a repository application which provides durable access to digital resources. Prior to ver
CVE-2026-49830
DSpace open source software is a repository application which provides durable access to digital resources. Prior to ver
CVE-2026-84811
agentverus-scanner fails to analyze compiled Python bytecode files in companion code directories, allowing attackers to
CVE-2026-84810
claude-skill-antivirus fails to analyze executable files when scanning local skill directories, reading only SKILL.md wh
CVE-2026-84809
Tencent AI-Infra-Guard's skill-scan component excludes compiled Python bytecode files from analysis by hardcoding __pyca
CVE-2026-84376
Astro is a web framework for content-driven websites. Prior to 7.2.4, Astro stripped a configured non-root base path fro
CVE-2026-82404
TOON is a compact, human-readable serialization of JSON data for LLM prompts. Prior to 2.3.1, decoding attacker-controll
CVE-2026-79756
Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.17.4, the fix for unauth
CVE-2026-79755
Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.17.4, on the Nuclio loca
CVE-2026-79754
Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. From version 1.6.19 to before version 1.17.
CVE-2026-55421
Open edX Platform enables the authoring and delivery of online learning at any scale. Prior to commit 00b7c3c, the endpo