LightRAG: SSRF via IPv6-transition address bypass (NAT64, IPv4-compatible, 6to4) of the native-markdown image-download guard

CVE-2026-85740

LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.5, _validated_addresses in lightrag/parse

历史摘要 · 未重新核验 · OSV.dev

Novu: Stored XSS in In-App Inbox via notification redirect.url javascript: scheme

CVE-2026-75510

Novu provides an API for sending notifications through multiple channels. Prior to 3.18.0, Novu's @novu/js In-App Inbox

历史摘要 · 未重新核验 · OSV.dev

Cloudreve: Storage-quota TOCTOU race allows quota bypass and storage-based denial of service

CVE-2026-77633

Cloudreve is a self-hosted file management and sharing system. Prior to 4.18.0, PrepareUpload in pkg/filemanager/fs/dbfs

历史摘要 · 未重新核验 · OSV.dev

Cloudreve: SSRF guard bypass: checkIP does not decode IPv6-transition wrappers (NAT64, IPv4-compatible, 6to4) reaching internal and cloud-metadata addresses

CVE-2026-79913

Cloudreve is a self-hosted file management and sharing system. Prior to 4.18.0, the ValidateExternalURL server-side requ

历史摘要 · 未重新核验 · OSV.dev

Dark Reader: Ability to request icon-like bitmap data from certain local web servers

CVE-2026-92706

Dark Reader is an accessibility browser extension that makes web pages colors dark. Prior to 4.9.126, a website can caus

历史摘要 · 未重新核验 · OSV.dev

MISP Reflected Cross-Site Scripting in Event Export Confirmation Form via Unescaped JSON

CVE-2026-95665

MISP contains a reflected cross-site scripting (XSS) vulnerability in the event REST search export confirmation form. Th

历史摘要 · 未重新核验 · OSV.dev

MISP Reflected Cross-Site Scripting in Attribute Histogram via Unescaped URL-Supplied Type List

CVE-2026-95661

MISP contains a reflected cross-site scripting (XSS) vulnerability in the attribute histogram view. The $selectedTypes v

历史摘要 · 未重新核验 · OSV.dev

MISP Reflected XSS via Unvalidated Object Type in AnalystData Overmind Thread

CVE-2026-95659

MISP contains a reflected cross-site scripting (XSS) vulnerability in the AnalystDataController::viewForObject action. T

历史摘要 · 未重新核验 · OSV.dev

MISP CSRF vulnerability in workflow moduleStatelessExecution allows cross-site execution of workflow modules

CVE-2026-95658

MISP's WorkflowsController exposed the moduleStatelessExecution action in the Security component's unlockedActions list.

历史摘要 · 未重新核验 · OSV.dev

Tauri framework v2 SSRF Protection Bypass via HTTP Redirects

CVE-2026-95623

The Tauri HTTP plugin validates requested URLs against the application's configured scope allowlist only once, on the in

历史摘要 · 未重新核验 · OSV.dev

Chartbrew: DNS Rebinding SSRF Bypass in Outbound Request Validation

CVE-2026-61743

Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create c

历史摘要 · 未重新核验 · OSV.dev

lightrag-hku: Sensitive Information Exposure Through Raw Exception Messages in API Error Responses

CVE-2026-85709

### Summary The LightRAG API server passes raw Python exception messages directly into HTTP error responses across 30+

历史摘要 · 未重新核验 · GitHub Advisory

KubeEdge: Command Injection in NodeUpgradeJob - RCE on edge nodes via v1alpha2 API

CVE-2026-62371

## Impact The KubeEdge NodeUpgradeJob handler constructed the `keadm upgrade edge` command by concatenating the user-co

历史摘要 · 未重新核验 · GitHub Advisory

KubeEdge: keadm DecompressTarGz path traversal enables arbitrary file write on Windows during edge node join

CVE-2026-62369

## Description KubeEdge `keadm` contains a path traversal vulnerability in the `DecompressTarGz` archive extraction fun

历史摘要 · 未重新核验 · GitHub Advisory

Dynamic Conformance Testing of WebGPU Through Specification-Driven Mutation

该论文（arXiv, cs.SE）研究的是浏览器中 WebGPU 实现的质量与安全问题。WebGPU 是一项向 Web 应用暴露现代 GPU 能力的低层图形与计算 API，其官方一致性测试套件（CTS）主要验证「符合规范的正常用法」，并不覆

历史摘要 · 未重新核验 · arXiv cs.CR

Firefox browsers

Firefox browsers

历史摘要 · 未重新核验 · Mozilla Security Advisories

Sign in to Cloud

Sign in to Cloud

历史摘要 · 未重新核验 · Oracle Critical Patch Updates

Sign Up for Free Cloud Tier

Sign Up for Free Cloud Tier

历史摘要 · 未重新核验 · Oracle Critical Patch Updates

iOS 26.4.2 and iPadOS 26.4.2

iOS 26.4.2 and iPadOS 26.4.2

历史摘要 · 未重新核验 · Apple Security Releases

iOS 18.7.8 and iPadOS 18.7.8

iOS 18.7.8 and iPadOS 18.7.8

历史摘要 · 未重新核验 · Apple Security Releases