Coraza: Native audit-log format allows CRLF injection and log forgery via request body and header fields
CVE-2026-41504
## Root Cause File: `internal/auditlog/formats.go` — multiple sites write attacker-influenced bytes into the Native aud
2026-10-07 归档
今日共收录 1979 条安全情报，包含 1214 个 CVE，387 篇安全通告，以及 100 篇研究论文。
← 返回归档列表knowns OS Command Injection via Insecure LSP Binary Path Config in .knowns/config.json
CVE-2026-86540
## Overview A critical **Arbitrary Code Execution (ACE)** vulnerability exists in the Knowns Language Server Protocol (
Payload didn't enforce field-level password update restrictions
CVE-2026-105855
## Impact When an auth collection defined a field-level access.update restriction on the password field, the restrictio
Payload: ReDoS in Multipart Content-Type Validation
CVE-2026-105854
## Impact A malformed multipart request body could take an extremely long time to finish. ## Patches Users should upgra
Payload vulnerable to API key disclosure through ordinary document reads
CVE-2026-105849
### Impact Users with read access to other user documents could access their active API keys. An exposed key grants the
Payload Ecommerce has an order confirmation validation issue
CVE-2026-105850
## Impact When using the Stripe payment adapter, an order confirmation could be processed more than once under certain c
Payload relationship-query authorization bypass
CVE-2026-105852
## Impact A readable collection could expose information about protected documents in a related collection. **You are
Payload: Token refresh and password reset responses may expose restricted user fields
CVE-2026-105853
## Impact Token refresh and password reset responses could return fields that the requesting user did not have access t
Payload: Field access control bypass on auth collections
CVE-2026-105851
## Impact Payload's duplicate operation copies field values from the source document even when a field is hidden, or it
Payload: Insufficient Access Control in Stripe REST Proxy
CVE-2026-105848
## Impact An authenticated user could perform unintended Stripe operations through the optional Stripe REST proxy. **Y
Payload: Improper access control for MCP API keys
CVE-2026-105806
### Impact Under certain conditions, an authenticated user could manage MCP API keys outside their intended account allo
Payload: Prototype pollution in Payload Import Export plugin
CVE-2026-105844
### Impact An unauthenticated user could cause unintended application behavior when the Import Export plugin is enabled,
Payload: Untrusted redirect URL parameter exploit
CVE-2026-105846
### Impact Under certain conditions, an attacker can craft a redirect link that sends a guest user to an untrusted desti
Payload: Polymorphic join queries could disclose hidden fields
CVE-2026-105847
### Impact A user with query access could use polymorphic join filters to infer hidden or read-restricted field values,
Payload: Password hashes use insufficient PBKDF2 iterations
CVE-2026-105804
### Impact The password-hashing configuration used a lower work factor than what is recommended. ### Patches Payload no
Payload: Sort queries could expose protected field information
CVE-2026-105805
### Impact Under certain conditions, sorting readable records could reveal limited information about fields the requeste
Kiota: Unsafe oauth_card_path references in Kiota-generated API plugin manifests
CVE-2026-105795
### Impact When generating an API plugin manifest from an attacker-controlled or compromised OpenAPI description, Kiota
Kiota: Code injection through doc-comment delimiter reformation in Kiota Java and PHP generators
CVE-2026-105796
### Impact An attacker who controls or tampers with an OpenAPI description can cause Kiota to emit attacker-controlled
openapi-python-client: Malicious OpenAPI Documents can cause Arbitrary Code Generation
CVE-2026-105801
### Impact A malicious OpenAPI document processed by any `openapi-python-client` prior to 0.29.1 can generate arbitrary
LangChain: RediSearch Filter Injection via Unescaped Tag/Text Values
CVE-2026-105799
## Summary `@langchain/redis` did not properly escape values used to construct structured RediSearch TAG and TEXT filte