2026-10-07 归档

今日共收录 1979 条安全情报，包含 1214 个 CVE，387 篇安全通告，以及 100 篇研究论文。

漏洞预警2026-10-06 发布INFO

Backstage is an open framework for building developer portals. Prior to 0.16.1 and 0.17.8, the @backstage/backend-defaults package is affected by improper preservation of access...

CVE-2026-106492

Backstage is an open framework for building developer portals. Prior to 0.16.1 and 0.17.8, the @backstage/backend-defaul

历史摘要 · 未重新核验 · NVD

#cve #cwe-269 #cwe-863

漏洞预警2026-10-06 发布INFO

Backstage is an open framework for building developer portals. Prior to 0.6.17, the @backstage/plugin-proxy-backend package is affected by improper input validation in proxy-bac...

CVE-2026-106491

Backstage is an open framework for building developer portals. Prior to 0.6.17, the @backstage/plugin-proxy-backend pack

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-22

漏洞预警2026-10-06 发布INFO

Backstage is an open framework for building developer portals. Prior to 2.2.4, the @backstage/plugin-techdocs-backend package is affected by improper input validation in techdoc...

CVE-2026-106490

Backstage is an open framework for building developer portals. Prior to 2.2.4, the @backstage/plugin-techdocs-backend pa

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-23

漏洞预警2026-10-06 发布INFO

Backstage is an open framework for building developer portals. Prior to 2.2.4, the @backstage/plugin-techdocs-backend package is affected by improper authorization enforcement f...

CVE-2026-106489

Backstage is an open framework for building developer portals. Prior to 2.2.4, the @backstage/plugin-techdocs-backend pa

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-862

漏洞预警2026-10-06 发布INFO

Backstage is an open framework for building developer portals. Prior to 0.4.20, the @backstage/plugin-auth-backend-module-oidc-provider package is affected by improper authentic...

CVE-2026-106488

Backstage is an open framework for building developer portals. Prior to 0.4.20, the @backstage/plugin-auth-backend-modul

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

漏洞预警2026-10-06 发布INFO

Backstage is an open framework for building developer portals. Prior to 0.21.10, the @backstage/plugin-kubernetes-backend package is affected by unsupported catalog cluster auth...

CVE-2026-106487

Backstage is an open framework for building developer portals. Prior to 0.21.10, the @backstage/plugin-kubernetes-backen

历史摘要 · 未重新核验 · NVD

#cve #cwe-441

漏洞预警2026-10-06 发布INFO

Backstage is an open framework for building developer portals. Prior to 0.3.10 in @backstage/plugin-scaffolder-backend-module-bitbucket-cloud and 0.2.25 in @backstage/plugin-sca...

CVE-2026-106486

Backstage is an open framework for building developer portals. Prior to 0.3.10 in @backstage/plugin-scaffolder-backend-m

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-59

漏洞预警2026-10-06 发布INFO

Backstage is an open framework for building developer portals. Prior to 0.8.7, the @backstage/plugin-catalog-backend-module-gitlab package is affected by improper authorization ...

CVE-2026-106463

Backstage is an open framework for building developer portals. Prior to 0.8.7, the @backstage/plugin-catalog-backend-mod

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-10-06 发布INFO

Backstage is an open framework for building developer portals. Prior to 1.54.6, scaffolder source-control actions may not consistently enforce intended credential boundaries. An...

CVE-2026-106462

Backstage is an open framework for building developer portals. Prior to 1.54.6, scaffolder source-control actions may no

历史摘要 · 未重新核验 · NVD

#cve #cwe-441 #cwe-863

漏洞预警2026-10-06 发布INFO

Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend package is affected by incorrect authorization in scaffol...

CVE-2026-106461

Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-10-06 发布INFO

Backstage is an open framework for building developer portals. From 0.3.0 until 0.6.15 and 0.7.5, the @backstage/plugin-auth-node package did not consistently honor explicit neg...

CVE-2026-106460

Backstage is an open framework for building developer portals. From 0.3.0 until 0.6.15 and 0.7.5, the @backstage/plugin-

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

漏洞预警2026-10-06 发布INFO

Backstage is an open framework for building developer portals. From 0.3.0 until 0.3.8, the @backstage/plugin-scaffolder-backend-module-sentry package is affected by improper inp...

CVE-2026-106459

Backstage is an open framework for building developer portals. From 0.3.0 until 0.3.8, the @backstage/plugin-scaffolder-

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-918

漏洞预警2026-10-06 发布INFO

Backstage is an open framework for building developer portals. From 0.4.0 until 0.5.15, the @backstage/plugin-catalog-backend-module-bitbucket-server package is affected by inco...

CVE-2026-106458

Backstage is an open framework for building developer portals. From 0.4.0 until 0.5.15, the @backstage/plugin-catalog-ba

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-10-06 发布INFO

Backstage is an open framework for building developer portals. From 0.1.0 until 0.5.0, the @backstage/plugin-auth-backend-module-cloudflare-access-provider package is affected b...

CVE-2026-106457

Backstage is an open framework for building developer portals. From 0.1.0 until 0.5.0, the @backstage/plugin-auth-backen

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

漏洞预警2026-10-06 发布INFO

Backstage is an open framework for building developer portals. From 0.5.0 until 0.6.18, the @backstage/plugin-proxy-backend package is affected by inconsistent credential enforc...

CVE-2026-106456

Backstage is an open framework for building developer portals. From 0.5.0 until 0.6.18, the @backstage/plugin-proxy-back

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-10-06 发布INFO

Backstage is an open framework for building developer portals. From 0.11.12 until 1.14.7 and 1.15.5, the @backstage/plugin-techdocs-node package is affected by improper validati...

CVE-2026-106455

Backstage is an open framework for building developer portals. From 0.11.12 until 1.14.7 and 1.15.5, the @backstage/plug

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-10-06 发布INFO

A heap-based buffer overflow was found in GIMP’s DirectDraw Surface (DDS) loader. When loading a crafted DDS image, buffer sizes derived from width, height, and pitch can be com...

CVE-2026-106062

A heap-based buffer overflow was found in GIMP’s DirectDraw Surface (DDS) loader. When loading a crafted DDS image, buff

历史摘要 · 未重新核验 · NVD

#cve #cwe-119

漏洞预警2026-10-06 发布INFO

Server-side request forgery in the OpenAPI schema processing of the agent import functionality in Amazon Bedrock AgentCore Starter Toolkit before 0.3.14 might allow an authentic...

CVE-2026-106032

Server-side request forgery in the OpenAPI schema processing of the agent import functionality in Amazon Bedrock AgentCo

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-10-06 发布INFO

Authorization bypass through a user-controlled key in the optional Amazon Q Business Lambda hook sample ( q-business-lambda-hook https://github.com/aws-solutions-library-samples...

CVE-2026-105811

Authorization bypass through a user-controlled key in the optional Amazon Q Business Lambda hook sample ( q-business-lam

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-06 发布INFO

A flaw was found in SSSD (System Security Services Daemon). When Identity Provider (IdP) authentication is enabled, pre-authentication requests retain state in memory without be...

CVE-2026-104046

A flaw was found in SSSD (System Security Services Daemon). When Identity Provider (IdP) authentication is enabled, pre-

历史摘要 · 未重新核验 · NVD

#cve #cwe-770