A security vulnerability has been detected in Naichen ThinkCMF up to 8.0.7. Affected by this...
CVE-2026-102771
A security vulnerability has been detected in Naichen ThinkCMF up to 8.0.7. Affected by this issue is the function MailC
2026-09-30 归档
今日共收录 1598 条安全情报，包含 728 个 CVE，467 篇安全通告，以及 100 篇研究论文。
← 返回归档列表U-Boot before 2026.10-rc4 contains an integer overflow vulnerability in sqfs_read_directory_table...
CVE-2026-71973
U-Boot before 2026.10-rc4 contains an integer overflow vulnerability in sqfs_read_directory_table() function when alloca
fast-uri vulnerable to inconsistent host case normalization via percent-encoded octets
CVE-2026-86472
### Impact `fast-uri` folds the host to lowercase before it percent-decodes the host, so a percent-encoded uppercase un
fast-uri vulnerable to mailto header injection via percent-encoded field-name desynchronization
CVE-2026-86818
### Impact `fast-uri`'s `mailto` scheme parser compares each query field name to the reserved names (`to`, `subject`, `
ip-address: isInSubnet() and isHostInSubnet() compare addresses of different families as if they shared an address space, allowing an allowlist check to admit an address outside...
CVE-2026-101912
### Summary `isInSubnet()` and `isHostInSubnet()` accept an address of either family and compare masked binary strings
ip-address: Address6 builds a parse diagnostic proportional to the input with no length bound, allowing a single long string to stall or crash the process
CVE-2026-101911
### Summary `new Address6()` and `Address6.isValid()` place no bound on the length of the string they parse. When the s
moment vulnerable to Path Traversal via crafted non-string locale name
CVE-2026-17495
### Impact moment before 2.31.0 is vulnerable to path traversal in `moment.locale()`. When an application passes a non-
brace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of service
CVE-2026-102277
### Summary Expanding `{a},b}`-shaped input takes time quadratic in the number of literal `}` characters, blocking the
brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion
CVE-2026-102278
### Summary `expand_()` recurses once per level of brace *nesting*. Deeply nested input exhausts the native stack and c
brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustion
CVE-2026-102276
### Summary `parseCommaParts()` can exhaust the native stack and crash the process. There are two distinct ways to trig
Socket.IO: Engine.IO Protocol Revision Mismatch DoS
CVE-2026-102599
### Impact A denial-of-service vulnerability exists in Engine.IO / Socket.IO servers that allow transport upgrades. Th
PyJWT: PyJWK accepts empty HMAC keys, bypassing PyJWT's empty-key validation
CVE-2026-102266
### Summary A service that verifies HS256 tokens using an empty oct JWK through PyJWK, including a PyJWK obtained from
PyJWT: Uncaught RecursionError in jwt.decode() on deeply nested token header
CVE-2026-102265
## Package pyjwt (PyPI) ## Affected versions tested & verified on: 2.13.0. Every version whose `PyJWS._load()` transl
PyJWT accepts public JWK containers as HMAC secrets
CVE-2026-102273
### Summary PyJWT 2.13.0 contains an incomplete defense against algorithm confusion when an application mixes symmetric
PyJWT: PyJWKClient follows redirects when fetching JWKS
CVE-2026-102267
### Summary PyJWT 2.13.0 `PyJWKClient` followed HTTP redirects while fetching a JWKS, without validating the redirect d
PyJWT: Public keys in DER form are accepted as HMAC secrets, bypassing the CVE-2022-29217 guard
CVE-2026-102271
### Summary `HMACAlgorithm.prepare_key` blocks asymmetric keys from being used as HMAC secrets by searching for text ma
PyJWT BOM Bypass
CVE-2026-102272
## Affected Package - **Package**: PyJWT (`pyjwt` on PyPI) - **Repository**: https://www.google.com/url?q=https://githu
PyJWT: PyJWKClient still amplifies unauthenticated JWKS fetches on unknown kid values (incomplete fix of CVE-2026-48524)
CVE-2026-101917
Summary CVE-2026-48524 (GHSA-fhv5-28vv-h8m8, "PyJWKClient unbounded JWKS endpoint requests via attacker-controlled kid v
Ammonia: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-102342
The following SVG will produce a link with a `javascript` scheme. If the user clicks this link, they will run it. ```sv
adm-zip extraction preserves SUID/SGID bits from untrusted ZIPs -> local privilege escalation
CVE-2026-102282
## Summary adm-zip applies the Unix permission bits stored in a zip entry directly to the extracted file via `fs.chmodS