2026-09-27 归档

今日共收录 1038 条安全情报,包含 222 个 CVE,481 篇安全通告,以及 74 篇研究论文。

← 返回归档列表
安全公告2026-09-27 发布INFO

http4k's Digest authentication module (org.http4k:http4k-security-digest) before versions 6.48.0...

CVE-2026-100834

http4k's Digest authentication module (org.http4k:http4k-security-digest) before versions 6.48.0.0, 5.42.0.0 and 4.51.0.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-27 发布INFO

Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.18.0, the guest...

CVE-2026-100839

Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.18.0, the guest kernel's ACPI/AML hand

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-27 发布INFO

MONAI versions before 1.6.0 contain a remote code execution vulnerability in the algo_from_pickle...

CVE-2026-100843

MONAI versions before 1.6.0 contain a remote code execution vulnerability in the algo_from_pickle() function due to unsa

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-27 发布INFO

MONAI through 1.6.0 contains an eval injection vulnerability in _get_fake_spatial_shape() in...

CVE-2026-100842

MONAI through 1.6.0 contains an eval injection vulnerability in _get_fake_spatial_shape() in monai/bundle/scripts.py. Th

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-27 发布INFO

A vulnerability has been found in Edimax BR-6428nC 1.16. The impacted element is an unknown...

CVE-2026-100745

A vulnerability has been found in Edimax BR-6428nC 1.16. The impacted element is an unknown function of the file /goform

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-27 发布INFO

Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.19.1, the Kata...

CVE-2026-100838

Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.19.1, the Kata agent policies generate

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-27 发布INFO

MONAI through 1.6.0 contains a remote code execution vulnerability in the bundle configuration...

CVE-2026-100840

MONAI through 1.6.0 contains a remote code execution vulnerability in the bundle configuration engine that resolves _tar

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-27 发布INFO

MONAI before 1.6.0 contains an unsafe deserialization vulnerability in the NumpyReader class that...

CVE-2026-100845

MONAI before 1.6.0 contains an unsafe deserialization vulnerability in the NumpyReader class that unconditionally uses n

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-27 发布INFO

Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.4.1, a...

CVE-2025-71426

Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.4.1, a recovering Coordinator does not

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-27 发布INFO

http4k (Maven artifact org.http4k:http4k-core) before 6.48.0.0, 5.42.0.0, and 4.51.0.0 ships a...

CVE-2026-100725

http4k (Maven artifact org.http4k:http4k-core) before 6.48.0.0, 5.42.0.0, and 4.51.0.0 ships a BasicCookieStorage (clien

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-27 发布INFO

http4k (Maven package org.http4k:http4k-core) before 6.49.0.0, 5.42.0.0 and 4.51.0.0 uses...

CVE-2026-100724

http4k (Maven package org.http4k:http4k-core) before 6.49.0.0, 5.42.0.0 and 4.51.0.0 uses substring (Contains) matching

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-27 发布INFO

vm2 before 3.12.2 does not apply host-side Promise rejection handling in the sandbox-to-host...

CVE-2026-100722

vm2 before 3.12.2 does not apply host-side Promise rejection handling in the sandbox-to-host construct trap. In BaseHand

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-27 发布INFO

vm2 before 3.12.2 does not apply its Buffer backing-store ownership invariant (byteOffset === 0...

CVE-2026-100723

vm2 before 3.12.2 does not apply its Buffer backing-store ownership invariant (byteOffset === 0 and buffer.byteLength ==

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-27 发布INFO

Contrast is a Kubernetes runtime for confidential containers. In versions before 1.12.1, the...

CVE-2025-71422

Contrast is a Kubernetes runtime for confidential containers. In versions before 1.12.1, the secure persistent volume fe

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-26 发布INFO

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via...

CVE-2026-94399

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-26 发布INFO

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via...

CVE-2026-94397

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-26 发布INFO

Uncontrolled Resource Consumption (CWE-400) in Kibana can lead denial of service via Excessive...

CVE-2026-94400

Uncontrolled Resource Consumption (CWE-400) in Kibana can lead denial of service via Excessive Allocation (CAPEC-130)

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-26 发布INFO

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via...

CVE-2026-94408

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-26 发布INFO

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via...

CVE-2026-94398

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-26 发布INFO

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via...

CVE-2026-94396

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-

历史摘要 · 未重新核验 · GitHub Advisory