Netty 4.2.0 through 4.2.18 HTTP/3 Request Routing Bypass
CVE-2026-100659
Netty's HTTP/3 codec (io.netty:netty-codec-http3) in versions 4.2.0.Final through 4.2.17.Final does not enforce the RFC
2026-09-27 归档
今日共收录 1038 条安全情报，包含 222 个 CVE，481 篇安全通告，以及 74 篇研究论文。
← 返回归档列表Netty before 4.1.138.Final Denial of Service via WebSocketServerExtensionHandler
CVE-2026-100658
Netty (io.netty:netty-codec-http) contains an unbounded per-connection queue in WebSocketServerExtensionHandler. The han
Netty before 4.1.138.Final ByteBuf Leak in StompSubframeDecoder
CVE-2026-100657
Netty's STOMP codec (io.netty:netty-codec-stomp) contains a ByteBuf leak in StompSubframeDecoder. Once a frame's declare
Netty HttpServerCodec Unbounded Queue Growth via HTTP/1.1 Pipelining
CVE-2026-100656
Netty (io.netty:netty-codec-http) contains an unbounded per-connection queue growth flaw in HttpServerCodec. The codec t
Netty before 4.1.138.Final Denial of Service via SpdySessionHandler
CVE-2026-100655
Netty (io.netty:netty-codec-http) versions up to and including 4.1.137.Final and from 4.2.0.Final through 4.2.17.Final a
vLLM before 0.29.0 Denial of Service via out-of-range stop_token_ids
CVE-2026-100654
vLLM before 0.29.0 accepts user-controlled stop_token_ids on the OpenAI-compatible POST /v1/completions and POST /v1/cha
vLLM before 0.29.0 Resource Exhaustion via Unbounded Media Materialization
CVE-2026-100650
vLLM through 0.29.0 fetches and fully materializes remote or inline media before enforcing its documented media controls
vLLM before 0.29.0 Resource Limit Bypass via Sampler Subclass
CVE-2026-100649
vLLM before 0.29.0 contains a resource-limit bypass vulnerability in PyNvVideoCodec decoder allocation where sampler sub
vllm before 0.29.0 Uncontrolled Resource Consumption via Audio Decoding
CVE-2026-100648
vllm before 0.29.0 fails to enforce VLLM_MAX_AUDIO_CLIP_FILESIZE_MB limit in multimodal chat audio decoding, allowing un
vLLM before 0.29.0 CPU Exhaustion via unbounded cache_salt
CVE-2026-100647
vLLM versions before 0.29.0 contain a denial-of-service vulnerability in the cache_salt parameter accepted on OpenAI-com
SiYuan 3.7.0 before 3.8.4 Stored XSS via Gallery Kanban
CVE-2026-100645
SiYuan versions 3.7.0 before 3.8.4 contain a stored cross-site scripting vulnerability in gallery and kanban database re
SiYuan before v3.8.4 SQL Injection via dailyNoteSavePath
CVE-2026-100644
SiYuan before v3.8.4 contains a SQL injection vulnerability in the graph query endpoint where the dailyNoteSavePath para
SiYuan before v3.8.4 Stored XSS via Attribute View textarea
CVE-2026-100643
SiYuan versions before v3.8.4 fail to properly escape four stored Attribute View values in textarea elements, allowing a
SiYuan before v3.8.4 Stored XSS via Unescaped Flashcard Content
CVE-2026-100641
SiYuan before v3.8.4 does not HTML-escape stored flashcard block content before interpolating it into the card-manager l
SiYuan before v3.8.4 Clipboard Data Disclosure via IPC
CVE-2026-100640
SiYuan before v3.8.4 contains an authorization omission in the siyuan-get IPC handler that allows remote-kernel renderer
SiYuan before v3.8.4 Path Traversal via setNotebookIcon
CVE-2026-100638
SiYuan versions before v3.8.4 contain a path traversal vulnerability in the setNotebookIcon endpoint that allows authent
SiYuan before v3.8.4 Path Traversal via checkoutRepo sessionID
CVE-2026-100637
SiYuan versions before v3.8.4 contain a path traversal vulnerability in the checkoutRepo endpoint that allows authentica
Parse Server 9.0.0 Unauthenticated Installation Deletion via Operator Injection
CVE-2026-100631
Parse Server is an open source backend server. In versions prior to 8.6.90 and in versions from 9.0.0 prior to 9.10.1-al
Capgo backend before 12.127.5 Privilege Escalation via role_bindings PATCH
CVE-2026-100629
Capgo (capgo.app backend) before 12.127.5 contains an authorization flaw in the PATCH /private/role_bindings/:binding_id
capgo.app before 12.128.12 Authentication Bypass via apikey
CVE-2026-100628
capgo.app before 12.128.12 fails to enforce an organization's API key expiration policy when creating app-scoped API key