今日共收录 2620 条安全情报，包含 1789 个 CVE，446 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-79705
A flaw was found in the buildah/copier Go package. When used outside of Buildah by a non-root caller, a crafted tar arch
CVE-2026-79699
A flaw was found in the containers/storage library. A crafted tar archive containing a malicious whiteout header (e.g. v
CVE-2026-63443
Coder allows organizations to provision remote development environments via Terraform. Prior to 2.29.19, 2.32.9, 2.33.10
CVE-2026-59160
Yeger is a monorepo for npm packages maintained under the yeger scope. Prior to 2.8.9, the turbo-graph package starts it
CVE-2026-58201
Lokka is a Model Context Protocol server for Microsoft 365, including Microsoft Graph and other services. Prior to 2.1.2
CVE-2026-58200
Payload Plugins is a collection of plugins designed to enhance Payload CMS. From 0.3.0 until 0.4.0, @jhb.software/payloa
CVE-2026-55863
motionEye (mEye) is an online interface for a piece of software called "motion," which is a video surveillance program w
CVE-2026-55692
The EmbedVideo Extension is a MediaWiki extension which adds a parser function called #ev and various parser tags for em
CVE-2026-55691
The EmbedVideo Extension is a MediaWiki extension which adds a parser function called #ev and various parser tags for em
CVE-2026-55690
The EmbedVideo Extension is a MediaWiki extension which adds a parser function called #ev and various parser tags for em
CVE-2026-55149
Vouch Proxy is an SSO and OAuth/OIDC login solution for Nginx using the auth_request module. Prior to 0.48.0, Cookie in
CVE-2026-54561
MCP Memory Keeper is an MCP server for persistent context management in AI coding assistants. Prior to 0.13.0, context_i
CVE-2026-54503
plone.app.textfield provides a zope.schema-style field type called RichText for storing a value with a related MIME type
CVE-2026-46488
motionEye (mEye) is an online interface for a piece of software called "motion," which is a video surveillance program w
CVE-2026-44778
Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Li
CVE-2026-21588
This High severity DoS (Denial of Service) vulnerability was introduced in versions 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9
CVE-2026-21587
This High severity Improper Authorization vulnerability was introduced in version 11.3.0 of Jira Service Management Data
CVE-2026-21586
This High severity Improper Authorization vulnerability was introduced in versions 7.4.0, 7.13.0, 8.5.0, 8.9.0, 9.0.1, 9
CVE-2026-19780
Koha Eval Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbi
CVE-2026-18111
Concrete CMS 9 before 9.5.3 was vulnerable to stored cross-site scripting (XSS) in the Feature, Feature Link, Hero Image