Http4s: ResourceService and Webjar Service path escape via percent-encoded separators
CVE-2026-69201
The static content handlers `ResourceService` and `WebjarService` URL decode each path segment and then reject only segm
2026-09-16 归档
今日共收录 2620 条安全情报，包含 1789 个 CVE，446 篇安全通告，以及 100 篇研究论文。
← 返回归档列表Http4s Ember HTTP/2: unbounded continuation frame accumulation
CVE-2026-69218
When Ember receives an HTTP/2 `HEADERS` or `PUSH_PROMISE` frame without the `END_HEADERS` flag, it buffers the header bl
Http4s: CookieJar middleware matches by substring, leaking cookies cross-origin
CVE-2026-69215
The `CookieJar` client middleware decides whether to attach a cookie to an outgoing request using an unanchored substrin
Http4s: CookieJar middleware accepts arbitrary Set-Cookie domain
CVE-2026-69214
When processing a `Set-Cookie` from a response, the `CookieJar` client middleware trusts the server-supplied `Domain` at
Http4s Ember HTTP/2 has an unbounded outbound frame queue
CVE-2026-69213
Ember's HTTP/2 connection serializes all outgoing frames through a single unbounded queue drained by one writer fiber (`
Http4s: DigestAuth nonce map grows unbounded
CVE-2026-69208
The `DigestAuth` server middleware's stale-nonce cleanup uses an inverted comparison: it removes *fresh* nonces and stop
Http4s Ember HTTP/2 does not enforce SETTINGS_MAX_CONCURRENT_STREAMS
CVE-2026-69203
An ember server with HTTP/2 enabled (`.withHttp2`) does not enforce `SETTINGS_MAX_CONCURRENT_STREAMS` on streams opened
Http4s Ember HTTP/2: unbounded inbound body buffering
CVE-2026-69202
Ember's HTTP/2 stack replenishes the inbound flow-control window based on bytes received off the wire, not bytes consume
Netmaker has a boolean‑based SQL Injection
CVE-2026-32599
# SQL Injection in Netmaker SQLite Database Backend ## Summary The `sqliteDeleteRecord` function in Netmaker's databas
ZITADEL: Improper Role Revocation on Granted Projects during Multiple Role Deletions
CVE-2026-76081
### Summary A bug in how ZITADEL updates permissions when multiple project roles are deleted at the same time can cause
Vulnerability Localization Benchmark: Measuring Agentic Security Analysis at Repository Scale
该论文针对语言模型智能体在完整软件仓库上执行安全分析的能力评估问题展开研究。作者指出，当前网络安全领域的评测工作主要关注智能体能否「检测」、「复现」或「修复」漏洞，却很少衡量一个更基础的能力：能否在陌生仓库中准确定位与特定弱点类别相关联的实
Python Import as an Execution Boundary: An Empirical Study of Bugs, Vulnerabilities, and Analysis Gaps
该论文关注一个长期被安全社区低估的问题：Python 的 import 语句不仅是依赖解析机制，更是一个执行边界——在模块与包的初始化阶段就会实际执行代码。这种执行可能触发异常、动态加载模块或原生扩展、访问文件/网络/环境资源，甚至在应用尚
An Empirical Security Analysis of Open-Source Software Used in Onboard Satellite Systems
本文针对星载（onboard）卫星飞行系统中日益广泛使用的开源软件（OSS）开展了一次实证性安全分析。研究背景在于：现代卫星任务为加速研发，大量采用可复用框架、共享库与社区维护组件，但这些组件被引入到补丁更新代价极高、失效可能直接影响任务运
Policy-Governed Post-Quantum Migration for Legacy Microservices Using Ephemeral Sidecar Architectures
该论文聚焦量子计算对云原生与微服务企业系统中经典密码学的长期威胁，指出传统密码原语已深度耦合进遗留微服务的代码与通信链路，直接改造应用代码升级到后量子密码（PQC）既复杂、风险高，又会造成业务中断。为此作者提出「策略治理的临时边车式后量子迁
The Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Overwrite in all versions up to...
CVE-2026-78088
CVE-2026-78088 是 WordPress 插件 Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe 中的一个任意文件覆盖漏洞。NVD
The WP Directory Kit plugin for WordPress is vulnerable to blind SQL Injection via the 'order_by' parameter in all versions up to, and including, 1.5.4 due to insufficient escap...
CVE-2026-16588
本漏洞为 WordPress 插件 WP Directory Kit 中的盲注型 SQL 注入（Blind SQL Injection），影响所有版本直至并包含 1.5.4。漏洞根因在于插件对用户可控的 'order_by' 请求参数未做充
The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.8.16 due to a missing capability ch...
CVE-2026-11984
CVE-2026-11984 是 WordPress 插件 Ad Inserter – Ad Manager & AdSense Ads 中的一个授权绕过（authorization bypass / 缺失权限校验）漏洞，影响该插件 2.8
A vulnerability was determined in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Affected by this vulnerability is the function generate_index_pa...
CVE-2026-92221
CVE-2026-92221 是一起被公开披露的 SQL 注入漏洞，影响开源项目 gedelumbung HospitalManagement（一套医院信息管理系统的 Web 应用）。根据 NVD 元数据，受影响代码位于 applicati
@jitsi/electron-sdk before 10.0.5 exposes getDesktopSources() via contextBridge without requiring an active getDisplayMedia() picker, allowing any script in the meeting page to ...
CVE-2026-92299
本条目记录的是 @jitsi/electron-sdk 10.0.5 之前版本存在的一处桌面源信息泄露缺陷（CVE-2026-92299，来源 NVD）。该 SDK 通过 Electron 的 contextBridge 向渲染进程（即 J
A vulnerability was determined in a2ui-project a2ui up to 0.10.6. This affects the function processMessages of the file renderers/web_core/src/v0_9/processing/message-processor....
CVE-2026-92217
CVE-2026-92217 是 a2ui-project 开源项目 a2ui（0.10.6 及更早版本）中的一个安全缺陷，位于渲染核心的消息处理组件。问题点在该项目 renderers/web_core/src/v0_9/processi