2026-09-27 归档

今日共收录 1038 条安全情报，包含 222 个 CVE，481 篇安全通告，以及 74 篇研究论文。

漏洞预警2026-09-26 发布INFO

vLLM through 0.29.0 fetches and fully materializes remote or inline media before enforcing its documented media controls (the VLLM_MAX_AUDIO_CLIP_FILESIZE_MB compressed-audio si...

CVE-2026-100650

vLLM through 0.29.0 fetches and fully materializes remote or inline media before enforcing its documented media controls

历史摘要 · 未重新核验 · NVD

#cve #cwe-400

漏洞预警2026-09-26 发布INFO

vLLM before 0.29.0 contains a resource-limit bypass vulnerability in PyNvVideoCodec decoder allocation where sampler subclass shadowing allows independent counter increments. Un...

CVE-2026-100649

vLLM before 0.29.0 contains a resource-limit bypass vulnerability in PyNvVideoCodec decoder allocation where sampler sub

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-09-26 发布INFO

vllm before 0.29.0 fails to enforce VLLM_MAX_AUDIO_CLIP_FILESIZE_MB limit in multimodal chat audio decoding, allowing unauthenticated clients to bypass file size restrictions. A...

CVE-2026-100648

vllm before 0.29.0 fails to enforce VLLM_MAX_AUDIO_CLIP_FILESIZE_MB limit in multimodal chat audio decoding, allowing un

历史摘要 · 未重新核验 · NVD

#cve #cwe-400

漏洞预警2026-09-26 发布INFO

vLLM versions before 0.29.0 contain a denial-of-service vulnerability in the cache_salt parameter accepted on OpenAI-compatible and Anthropic API endpoints, which lacks maximum ...

CVE-2026-100647

vLLM versions before 0.29.0 contain a denial-of-service vulnerability in the cache_salt parameter accepted on OpenAI-com

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-09-26 发布INFO

SiYuan versions 3.7.0 before 3.8.4 contain a stored cross-site scripting vulnerability in gallery and kanban database renderers where field descriptions are not escaped in aria-...

CVE-2026-100645

SiYuan versions 3.7.0 before 3.8.4 contain a stored cross-site scripting vulnerability in gallery and kanban database re

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-26 发布INFO

SiYuan before v3.8.4 contains a SQL injection vulnerability in the graph query endpoint where the dailyNoteSavePath parameter is concatenated into SQL without escaping. Unauthen...

CVE-2026-100644

SiYuan before v3.8.4 contains a SQL injection vulnerability in the graph query endpoint where the dailyNoteSavePath para

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-26 发布INFO

SiYuan versions before v3.8.4 fail to properly escape four stored Attribute View values in textarea elements, allowing authenticated attackers to inject JavaScript by modifying ...

CVE-2026-100643

SiYuan versions before v3.8.4 fail to properly escape four stored Attribute View values in textarea elements, allowing a

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-26 发布INFO

SiYuan versions from v2.1.0 before v3.8.4 contain a cross-site request forgery vulnerability in the CheckAuth lock-screen pass-through branch that grants administrator access to...

CVE-2026-100642

SiYuan versions from v2.1.0 before v3.8.4 contain a cross-site request forgery vulnerability in the CheckAuth lock-scree

历史摘要 · 未重新核验 · NVD

#cve #cwe-346

漏洞预警2026-09-26 发布INFO

SiYuan before v3.8.4 does not HTML-escape stored flashcard block content before interpolating it into the card-manager list markup. Block content returned by /api/riff/getRiffCa...

CVE-2026-100641

SiYuan before v3.8.4 does not HTML-escape stored flashcard block content before interpolating it into the card-manager l

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-26 发布INFO

SiYuan before v3.8.4 contains an authorization omission in the siyuan-get IPC handler that allows remote-kernel renderers to access native clipboard formats by invoking clipboar...

CVE-2026-100640

SiYuan before v3.8.4 contains an authorization omission in the siyuan-get IPC handler that allows remote-kernel renderer

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-26 发布INFO

SiYuan v3.8.3 fails to HTML-escape the data-subtype attribute when generating gutter-button markup (app/src/protyle/gutter/button.ts, assigned via innerHTML in app/src/protyle/g...

CVE-2026-100639

SiYuan v3.8.3 fails to HTML-escape the data-subtype attribute when generating gutter-button markup (app/src/protyle/gutt

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-26 发布INFO

SiYuan versions before v3.8.4 contain a path traversal vulnerability in the setNotebookIcon endpoint that allows authenticated administrators to create arbitrary directory trees...

CVE-2026-100638

SiYuan versions before v3.8.4 contain a path traversal vulnerability in the setNotebookIcon endpoint that allows authent

历史摘要 · 未重新核验 · NVD

#cve #cwe-73

漏洞预警2026-09-26 发布INFO

SiYuan versions before v3.8.4 contain a path traversal vulnerability in the checkoutRepo endpoint that allows authenticated administrators to write JSON files outside the worksp...

CVE-2026-100637

SiYuan versions before v3.8.4 contain a path traversal vulnerability in the checkoutRepo endpoint that allows authentica

历史摘要 · 未重新核验 · NVD

#cve #cwe-73

漏洞预警2026-09-26 发布INFO

SiYuan versions before v3.8.4 contain a path traversal vulnerability in the exportBrowserHTML endpoint that allows authenticated administrators to write arbitrary HTML content t...

CVE-2026-100636

SiYuan versions before v3.8.4 contain a path traversal vulnerability in the exportBrowserHTML endpoint that allows authe

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-09-26 发布INFO

SiYuan before v3.8.4 does not validate the sender or restrict recipients in the 'siyuan-send-windows' IPC handler of the Electron main process (app/electron/main.js). The handle...

CVE-2026-100634

SiYuan before v3.8.4 does not validate the sender or restrict recipients in the 'siyuan-send-windows' IPC handler of the

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-09-26 发布INFO

Parse Server is an open-source backend server. In versions >= 9.0.0 and < 9.10.1-alpha.8, and in versions < 8.6.89, LiveQuery evaluates the protectedFields class-level permissio...

CVE-2026-100632

Parse Server is an open-source backend server. In versions >= 9.0.0 and < 9.10.1-alpha.8, and in versions < 8.6.89, Live

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-26 发布INFO

Parse Server is an open source backend server. In versions prior to 8.6.90 and in versions from 9.0.0 prior to 9.10.1-alpha.9, the device token deduplication logic for installat...

CVE-2026-100631

Parse Server is an open source backend server. In versions prior to 8.6.90 and in versions from 9.0.0 prior to 9.10.1-al

历史摘要 · 未重新核验 · NVD

#cve #cwe-943

漏洞预警2026-09-26 发布INFO

AVideo contains a stored cross-site scripting vulnerability in the video trailer1 field rendered unsanitized within an inline onclick JavaScript string. Attackers with video upl...

CVE-2026-100630

AVideo contains a stored cross-site scripting vulnerability in the video trailer1 field rendered unsanitized within an i

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-26 发布INFO

Capgo (capgo.app backend) before 12.127.5 contains an authorization flaw in the PATCH /private/role_bindings/:binding_id endpoint. The handler verifies that the newly assigned r...

CVE-2026-100629

Capgo (capgo.app backend) before 12.127.5 contains an authorization flaw in the PATCH /private/role_bindings/:binding_id

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-09-26 发布INFO

capgo.app before 12.128.12 fails to enforce an organization's API key expiration policy when creating app-scoped API keys. In the POST /apikey endpoint, requests that supply app...

CVE-2026-100628

capgo.app before 12.128.12 fails to enforce an organization's API key expiration policy when creating app-scoped API key

历史摘要 · 未重新核验 · NVD

#cve #cwe-863