今日共收录 2436 条安全情报，包含 1258 个 CVE，779 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-93013
RAGFlow through 0.27.2 contains a path traversal vulnerability in the dev_insert_chunks_from_file and dev_insert_metadat
CVE-2026-92881
A security vulnerability has been detected in vgmstream. The affected element is the function init_vgmstream_awb_memory
CVE-2026-91039
Authentication Bypass by Spoofing vulnerability in team-alembic ash_authentication allows an attacker who operates one i
CVE-2026-89036
Appwrite before 2.0.0 contains an argument injection vulnerability that allows authenticated users with functions.write
CVE-2026-86864
pgAdmin 4's Backup tool appended the client-supplied 'database' field from the /backup/job//object request to the pg_dum
CVE-2026-86862
pgAdmin 4's Restore and Maintenance tools passed the client-supplied 'database' field directly as the value of the --dbn
CVE-2026-86861
pgAdmin 4's File Manager save_file endpoint, which backs saving from the Query Tool and ERD, validated the requested pat
CVE-2026-86040
libp2p is a JavaScript implementation of the libp2p networking stack. Prior to 11.0.26, @libp2p/floodsub accepts unauthe
CVE-2026-86038
libp2p is a JavaScript implementation of the libp2p networking stack. From 15.0.0 until 16.0.5, @libp2p/gossipsub uses t
CVE-2026-86000
Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.9, the selector parser in src
CVE-2026-85999
Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.9, selector_iter in src/soups
CVE-2026-85721
The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HT
CVE-2026-85719
The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HT
CVE-2026-85718
The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HT
CVE-2026-85715
ExifReader is a JavaScript Exif information parser. Prior to 4.41.1, ExifReader parses attacker-controlled HEIC or AVIF
CVE-2026-81516
Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applicati
CVE-2026-81515
Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applicati
CVE-2026-76834
b2evolution CMS versions 6.7.8 through 7.2.5 contain an incomplete fix for CVE-2016-8901 where the serialized-array obje
CVE-2026-76781
A flaw was found in libxml2. A local user or an attacker providing a specially crafted XML catalog can trigger a NULL po
CVE-2026-75588
Mattermost Desktop App versions <=6.2 6.2.2.0 fail to validate the URL scheme when checking whether a target URL is inte