今日共收录 1258 条安全情报，包含 460 个 CVE，421 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-104956
Plane is an open-source project management tool. Prior to 1.4.0, the unauthenticated public issues endpoint accepts grou
CVE-2026-104894
Plane is an open-source project management tool. Prior to 1.4.0, the modules endpoint accepts issue UUIDs in the URL pat
CVE-2026-104893
Plane is an open-source project management tool. Prior to 1.4.0, GET /api/users/api-tokens/ allows an authenticated user
CVE-2026-12171
auto-changelog before 2.6.1 merges configuration from inside the target repository (the .auto-changelog file and the aut
CVE-2026-104892
Plane is an open-source project management tool. Prior to 1.4.0, aPITokenLogMiddleware logs API keys in plaintext. This
CVE-2026-104890
Kunstmaan CMS is an open source content management system based on the Symfony framework. Prior to 7.3.2, src/Kunstmaan/
CVE-2026-105329
A vulnerability was determined in TallCMS up to 4.8.0. This affects an unknown function of the file packages/tallcms/cms
CVE-2026-105315
A vulnerability has been found in django-haystack up to 3.3.0. Affected is the function _to_python of the file haystack/
CVE-2026-105396
Heym before v0.0.112 contains a token leakage vulnerability in build_public_base_url() that allows unauthenticated attac
CVE-2026-105263
A security flaw has been discovered in Shaarli up to 0.16.3. The affected element is the function MetadataController of
CVE-2026-105251
A vulnerability was detected in vgmstream up to r2117. Affected by this vulnerability is the function ps_find_padding of
CVE-2026-105250
A security vulnerability has been detected in vgmstream up to r2117. Affected is the function decode_ms_ima of the file
CVE-2026-105249
A weakness has been identified in vgmstream up to r2117. This impacts the function make_group_random of the file src/met
CVE-2026-105314
Papermerge 3.5.3 allows remote code execution by a standard user via directory traversal in a /api/documents/upload call
CVE-2026-105248
A security flaw has been discovered in vgmstream up to r2117. This affects the function parse_params/txtp_parse of the f
CVE-2026-105245
A vulnerability has been found in sgl-project sglang up to 0.5.21. This issue affects the function server_info of the fi
CVE-2026-105238
A flaw has been found in ChatGPTNextWeb NextChat up to 2.16.1. This vulnerability affects the function proxyHandler of t
CVE-2026-105225
A vulnerability was identified in osCommerce osCommerce2 up to 2.3.4.1. This affects the function include of the file in
CVE-2026-105295
GitAhead 2.5.0 through 2.7.1 contains an insecure update mechanism that installs downloaded updates without integrity or
CVE-2026-105294
Legcord 1.1.0 through 1.3.0 contains a configuration injection vulnerability that allows script in the Discord page to w