2026-09-27 归档

今日共收录 1038 条安全情报，包含 222 个 CVE，481 篇安全通告，以及 74 篇研究论文。

漏洞预警2026-09-26 发布INFO

Hugo is a static site generator. In versions from v0.56.0 through v0.165.x, content files mapped to the text/org media type are rendered without escaping raw HTML: Org export bl...

CVE-2026-100694

Hugo is a static site generator. In versions from v0.56.0 through v0.165.x, content files mapped to the text/org media t

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-26 发布INFO

Hugo versions from v0.162.0 before v0.166.0 contain a case-sensitive validation flaw in the security.http.urls IP-literal deny rule that allows attackers to bypass restrictions....

CVE-2026-100693

Hugo versions from v0.162.0 before v0.166.0 contain a case-sensitive validation flaw in the security.http.urls IP-litera

历史摘要 · 未重新核验 · NVD

#cve #cwe-178

漏洞预警2026-09-26 发布INFO

Hugo is a static site generator. In versions after v0.123.0 and before v0.166.0, Hugo's symlink confinement checks stopped at the mount root itself, so a theme or module checked...

CVE-2026-100692

Hugo is a static site generator. In versions after v0.123.0 and before v0.166.0, Hugo's symlink confinement checks stopp

历史摘要 · 未重新核验 · NVD

#cve #cwe-59

漏洞预警2026-09-26 发布INFO

Hugo versions 0.75.0 through 0.165.x contain a stored cross-site scripting vulnerability: the syntax highlighter does not escape the `lineAnchors` option before passing it to Ch...

CVE-2026-100691

Hugo versions 0.75.0 through 0.165.x contain a stored cross-site scripting vulnerability: the syntax highlighter does no

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-26 发布INFO

Hugo versions from v0.161.0 through v0.165.0 run Node.js tools (css.PostCSS, css.TailwindCSS, js.Babel) under the Node.js permission model to restrict file system reads to the p...

CVE-2026-100690

Hugo versions from v0.161.0 through v0.165.0 run Node.js tools (css.PostCSS, css.TailwindCSS, js.Babel) under the Node.j

历史摘要 · 未重新核验 · NVD

#cve #cwe-59

漏洞预警2026-09-26 发布INFO

GitPython before 3.1.62 does not validate the `path` field read from an untrusted .gitmodules file when updating submodules. While a prior fix (GHSA-hmq2-w58f-27jc) added Submod...

CVE-2026-100689

GitPython before 3.1.62 does not validate the `path` field read from an untrusted .gitmodules file when updating submodu

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-09-26 发布INFO

Budibase server before 3.45.0 contains a cross-tenant information disclosure vulnerability in the GET /api/applications/:appId/appPackage endpoint that allows authenticated user...

CVE-2026-100688

Budibase server before 3.45.0 contains a cross-tenant information disclosure vulnerability in the GET /api/applications/

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-09-26 发布INFO

Budibase Server before 3.45.0 fails to redact plaintext datasource credentials before broadcasting external table updates to the Builder collaboration websocket room. Attackers ...

CVE-2026-100687

Budibase Server before 3.45.0 fails to redact plaintext datasource credentials before broadcasting external table update

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-26 发布INFO

Budibase versions before 3.45.0 fail to validate per-app authorization in the POST /api/global/groups/:groupId/apps endpoint, allowing builders to assign application roles acros...

CVE-2026-100686

Budibase versions before 3.45.0 fail to validate per-app authorization in the POST /api/global/groups/:groupId/apps endp

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

漏洞预警2026-09-26 发布INFO

Budibase before 3.45.0 fails to properly scope the GET /api/chat-links endpoint by workspace, allowing builders to enumerate chat identity link records across all workspaces in ...

CVE-2026-100685

Budibase before 3.45.0 fails to properly scope the GET /api/chat-links endpoint by workspace, allowing builders to enume

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-09-26 发布INFO

Budibase versions 3.41.0 before 3.45.0 contain an authentication bypass in the OIDC/SSO login path of @budibase/server. In sso.authenticate, when no existing user matches the in...

CVE-2026-100684

Budibase versions 3.41.0 before 3.45.0 contain an authentication bypass in the OIDC/SSO login path of @budibase/server.

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

漏洞预警2026-09-26 发布INFO

Budibase (@budibase/server) before 3.45.0 builds MySQL and MSSQL column-rename DDL in packages/backend-core/src/sql/sqlTable.ts by interpolating identifiers directly into a raw ...

CVE-2026-100683

Budibase (@budibase/server) before 3.45.0 builds MySQL and MSSQL column-rename DDL in packages/backend-core/src/sql/sqlT

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-26 发布INFO

Budibase Server before 3.45.0 contains an arbitrary file write vulnerability in the PWA icon upload endpoint that extracts user-supplied ZIP archives without proper symlink vali...

CVE-2026-100682

Budibase Server before 3.45.0 contains an arbitrary file write vulnerability in the PWA icon upload endpoint that extrac

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-09-26 发布INFO

Budibase before 3.45.0 contains an unauthenticated server-side request forgery and credential exfiltration vulnerability in the Microsoft Teams webhook endpoint that accepts for...

CVE-2026-100681

Budibase before 3.45.0 contains an unauthenticated server-side request forgery and credential exfiltration vulnerability

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-09-26 发布INFO

Budibase versions before 3.45.0 fail to disable external JSON reference resolution in the OpenAPI/Swagger import validator, allowing authenticated builders to read arbitrary loc...

CVE-2026-100680

Budibase versions before 3.45.0 fail to disable external JSON reference resolution in the OpenAPI/Swagger import validat

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-26 发布INFO

stoatchat before 0.15.5 fails to validate that MFA tickets belong to the authenticated user, allowing attackers to bypass MFA by using their own valid ticket with another user's...

CVE-2026-100679

stoatchat before 0.15.5 fails to validate that MFA tickets belong to the authenticated user, allowing attackers to bypas

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-09-26 发布INFO

stoatchat before 0.15.5 fails to enforce account-level attempt limits on MFA login challenges, allowing attackers who know a password to guess TOTP codes with only IP-based rate...

CVE-2026-100678

stoatchat before 0.15.5 fails to enforce account-level attempt limits on MFA login challenges, allowing attackers who kn

历史摘要 · 未重新核验 · NVD

#cve #cwe-307

漏洞预警2026-09-26 发布INFO

stoatchat before 0.15.5 contains an account enumeration vulnerability in the login endpoint that exposes source file locations in error responses. Unauthenticated attackers can ...

CVE-2026-100677

stoatchat before 0.15.5 contains an account enumeration vulnerability in the login endpoint that exposes source file loc

历史摘要 · 未重新核验 · NVD

#cve #cwe-209

漏洞预警2026-09-26 发布INFO

January, the media proxy/embed service of stoatchat (stoatchat/stoatchat), before version 0.15.5 improperly resolves SVG <image href> values as local filesystem paths when a fet...

CVE-2026-100676

January, the media proxy/embed service of stoatchat (stoatchat/stoatchat), before version 0.15.5 improperly resolves SVG

历史摘要 · 未重新核验 · NVD

#cve #cwe-693

漏洞预警2026-09-26 发布INFO

stoatchat before 0.15.5 fails to revalidate usernames after Unicode sanitization, allowing attackers to create usernames with forbidden characters by submitting Unicode letters ...

CVE-2026-100674

stoatchat before 0.15.5 fails to revalidate usernames after Unicode sanitization, allowing attackers to create usernames

历史摘要 · 未重新核验 · NVD

#cve #cwe-180