Novu: Cross-Environment Integration Manipulation (IDOR)
CVE-2026-75517
Novu provides an API for sending notifications through multiple channels. Prior to 3.18.0, Novu integration mutation use
2026-09-23 归档
今日共收录 1513 条安全情报，包含 580 个 CVE，548 篇安全通告，以及 93 篇研究论文。
← 返回归档列表Novu: Server-Side Request Forgery (SSRF) via Chat Provider Webhook URLs
CVE-2026-75511
Novu provides an API for sending notifications through multiple channels. Prior to 3.18.0, Novu accepts chat webhook URL
Traefik: BasicAuth singleflight coalescing reintroduces an unauthenticated username-enumeration timing oracle
CVE-2026-88010
Traefik is an open source HTTP reverse proxy and load balancer. From 3.6.11 until 3.7.13, checkPassword in pkg/middlewar
Frigate: Viewer-Role User Can Access go2rtc Internal API to obtain sensitive information
CVE-2026-75608
Frigate is an open source network video recorder. Prior to 0.18.0, the prefix-matched location /api/go2rtc/api in docker
Frigate: WebSocket Missing Authorization — Viewer Can Execute Admin-Only Operations
CVE-2026-75607
Frigate is an open source network video recorder. Prior to 0.17.2, the WebSocket handler in frigate/comms/ws.py forwards
Aureus ERP before 1.5.0 Unscoped Message Access via ChatterPanel
CVE-2026-95655
Aureus ERP before 1.5.0 fails to scope message lookups to the current record in ChatterPanel, allowing authenticated use
Databasement before 1.7.14 Authorization Bypass via Stale Invitation Token
CVE-2026-95654
Databasement before 1.7.14 validates invitation tokens only when the acceptance page loads, caching the authorization de
Concrete CMS Community Store before 2.7.8 Predictable Digital Download Token
CVE-2026-95653
Concrete CMS Community Store before 2.7.8 derives digital product download tokens from order creation timestamps instead
AnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing
CVE-2026-63374
AnyIO is a high level asynchronous concurrency and networking framework that works on top of either Trio or asyncio. Pri
Twenty: Field-level read bypass
CVE-2026-85055
Twenty is an open-source CRM (customer relationship management) platform. Prior to 2.22.0, field-level read permission i
Vector: Arbitrary file write in the file sink via templated path (path traversal).
CVE-2026-77621
Vector is a high-performance observability data pipeline. From 0.10.0 until 0.57.0, the file sink renders its templated
Vector: Unauthenticated denial of service in the `logstash` source via nested compressed frames (stack exhaustion and decompression amplification).
CVE-2026-77620
Vector is a high-performance observability data pipeline. From 0.15.0 until 0.57.0, the logstash source feeds each decom
Vector: Unauthenticated denial of service in the `logstash` source via unbounded memory allocation.
CVE-2026-77619
Vector is a high-performance observability data pipeline. From 0.15.0 until 0.57.0, the logstash source reads a 32-bit c
radare2: Out-of-bounds Read at the end of string in the LUA 5.3 bytecode
CVE-2026-81883
radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Lua 5.3 bytecod
radare2: Infinite relocation-chain loop causes denial of service in radare2 NE parser
CVE-2026-81885
radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's NE relocation f
radare2: Missing string termination causes heap out-of-bounds read in radare2 bplist parser
CVE-2026-81882
radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's binary property
radare2: Uncontrolled memory allocation in radare2 dmp64 parser
CVE-2026-81886
radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Windows 64-bit
radare2: Heap out-of-bounds read in radare2 Mach-O LC_DATA_IN_CODE parser
CVE-2026-81884
radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Mach-O LC_DATA_
radare2: Uncontrolled resource consumption in radare2 PEF loader
CVE-2026-81880
radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Apple Preferred
MISP: PHP phar stream wrapper enables deserialization and code execution via caller-influenced filesystem paths
CVE-2026-95806
MISP ships with PHP's phar stream wrapper registered in both its web entry point and its console entry point. The phar