今日共收录 1258 条安全情报，包含 460 个 CVE，421 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-105784
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.1
CVE-2026-105783
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.1
CVE-2026-105782
Scrapy is a high-level web crawling and scraping framework for Python. From 1.4.0 until 2.14.2, RefererMiddleware in scr
CVE-2026-105764
Immich is a high-performance self-hosted photo and video management solution. Prior to 3.2.4, an authenticated non-admin
CVE-2026-105762
Dify is an open-source LLM app development platform. Prior to 1.13.0, the /console/api/remote-files/upload endpoint in a
CVE-2026-105471
A security flaw has been discovered in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87b
CVE-2026-105761
Dify is an open-source LLM app development platform. Prior to 1.16.0, the PUT /console/api/apps/<app_id>/server en
CVE-2026-105760
vLLM is an inference and serving engine for large language models. Prior to 0.30.0, a caller can use the request-level m
CVE-2026-105759
vLLM is an inference and serving engine for large language models. Prior to 0.30.0, the Rust frontend's track_http_metri
CVE-2026-105758
vLLM is an inference and serving engine for large language models. From 0.24.0 until 0.30.0, the Qwen2VLVideoBackend and
CVE-2026-105757
vLLM is an inference and serving engine for large language models. Prior to 0.30.0, structured-output request failures c
CVE-2026-105756
vLLM is an inference and serving engine for large language models. Prior to 0.30.0, OpenAI-compatible request models acc
CVE-2026-105755
vLLM is an inference and serving engine for large language models. Prior to 0.30.0, flash late-interaction scoring at th
CVE-2026-105754
vLLM is an inference and serving engine for large language models. Prior to 0.30.0, the /inference/v1/generate endpoint
CVE-2026-105753
vLLM is an inference and serving engine for large language models. Prior to 0.28.0, the default mirrored multimodal LRU
CVE-2026-105752
vLLM is an inference and serving engine for large language models. Prior to 0.30.0, Harmony tool continuations submitted
CVE-2026-105470
A vulnerability was identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c9
CVE-2026-105469
A vulnerability was determined in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c9
CVE-2026-104852
GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas. Prior to 12.0.1, the GraphQL Tool
CVE-2026-93321
A malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all builds