KaTeX: Existing prototype pollution can bypass trust restrictions
CVE-2026-103923
KaTeX is a fast, easy-to-use JavaScript library for TeX math rendering on the web. From 0.11.0 until 0.18.2, KaTeX uses
2026-10-02 归档
今日共收录 1399 条安全情报，包含 504 个 CVE，518 篇安全通告，以及 100 篇研究论文。
← 返回归档列表Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path
CVE-2026-103922
Capacitor is a cross-platform native runtime for web applications. From 6.0.0 until 6.2.2, 7.6.9, 8.3.5, 8.4.3, and 8.5.
GraphQL Tools: TLS Certificate Validation Disabled in Legacy GraphQL WebSocket Executor
CVE-2026-103921
GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas. Prior to 1.1.35, the executor-leg
CVE-2026-101322
CVE-2026-101322
In Eclipse BaSyx AAS Web UI versions v2-241220 through releases before v2-260924, the shared request handler attached th
Budibase before 3.41.0 SSRF via uploadUrl in AI Table Generation
CVE-2026-103757
Budibase through 3.41.0 contains a server-side request forgery vulnerability in AI table generation because the uploadUr
Ghost 3.10.0 before 6.34.0 Session Invalidation Bypass
CVE-2026-103279
Ghost versions from 3.10.0 before 6.34.0 fail to fully invalidate all sessions after a password change. Attackers with a
Fleet before 4.87.0 Authentication Bypass via Device Identifiers
CVE-2026-103264
Fleet versions before 4.87.0 contain an authentication bypass vulnerability in the device API that accepts hostnames and
n8n before 2.39.6 and 2.40.x before 2.40.1 Approval Bypass via Send and Wait Node
CVE-2026-103260
n8n versions before 2.39.6 and 2.40.0 before 2.40.1 contain an approval bypass vulnerability in the Send and Wait node's
David-Crty databasement database-servers API Endpoint RestoreRequest.php 511 path traversal
CVE-2026-103533
A vulnerability was found in David-Crty databasement up to 1.7.1. This impacts the function https:/github.com/David-Crty
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMa...
CVE-2026-104286
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.
Kiteworks Email Protection Gateway did not sufficiently restrict which account a certificate could be assigned to. This could allow an attacker to associate a certificate with a...
CVE-2026-102149
Kiteworks Email Protection Gateway did not sufficiently restrict which account a certificate could be assigned to. This
Improper authentication in a Kiteworks Email Protection Gateway administrative service. An administrative service in Kiteworks Email Protection Gateway did not consistently enfo...
CVE-2026-102106
Improper authentication in a Kiteworks Email Protection Gateway administrative service. An administrative service in Kit
Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery (SSRF). A server-side request forgery (SSRF) weakness in Kiteworks Email Pro...
CVE-2026-102105
Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery (SSRF). A server-si
Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery (SSRF). A server-side request forgery (SSRF) weakness in Kiteworks Email Pro...
CVE-2026-102104
Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery (SSRF). A server-si
Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery (SSRF). A server-side request forgery (SSRF) weakness in Kiteworks Email Pro...
CVE-2026-102103
Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery (SSRF). A server-si
Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery (SSRF). A server-side request forgery (SSRF) weakness in Kiteworks Email Pro...
CVE-2026-102102
Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery (SSRF). A server-si
Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery. Kiteworks Email Protection Gateway performed server-side fetches of URLs co...
CVE-2026-102095
Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery. Kiteworks Email Pr
PLANET VDR-300NU ADSL Router - 未授权修改DNS
PLANET VDR-300NU ADSL Router - 未授权修改DNS
Acknowledgements
Acknowledgements
The /knowledge_base/upload_temp_docs temporary document upload endpoint in Langchain Chatchat 0.3...
CVE-2026-51884
The /knowledge_base/upload_temp_docs temporary document upload endpoint in Langchain Chatchat 0.3.1 is vulnerable to pat