fast-jwt: Verifier cache accepts expired JWTs without iat.

CVE-2026-107719

### Summary `cacheSet` only derives its `exp` cache deadline inside `hasIat` (`src/verifier.js:127-140`). JWT `iat` is o

历史摘要 · 未重新核验 · GitHub Advisory

Banks: Symlink traversal and arbitrary file disclosure/overwrite in DirectoryPromptRegistry

CVE-2026-107716

### Summary In `banks.registries.DirectoryPromptRegistry`, prompt file paths and the index file (`index.json`) do not re

历史摘要 · 未重新核验 · GitHub Advisory

Banks: User-controlled prompt input can be parsed as privileged chat messages

CVE-2026-107717

## Summary Banks' `Prompt.chat_messages()` method parses every rendered output line as a potential `ChatMessage` JSON

历史摘要 · 未重新核验 · GitHub Advisory

Indico: Missing access check in legacy session export API

CVE-2026-107395

### Impact A legacy API to retrieve session details could be misused to retrieve metadata (such as title, description an

历史摘要 · 未重新核验 · GitHub Advisory

Indico: Cross-Site-Scripting in minutes editor

CVE-2026-107397

### Impact There is a Cross-Site-Scripting vulnerability in the minute editor conflict UI tha's shown when concurrent ed

历史摘要 · 未重新核验 · GitHub Advisory

Indico: Cross-Site-Scripting in link fields

CVE-2026-107396

### Impact There is a Cross-Site-Scripting vulnerability in fields that allow entering custom URLs. ### Patches You sho

历史摘要 · 未重新核验 · GitHub Advisory

Hazelcast has an authorization bypass in IMap Predicates API

CVE-2026-107725

### Impact Missing authorization checks in the [Predicates API](https://docs.hazelcast.com/hazelcast/5.7/query/predicat

历史摘要 · 未重新核验 · GitHub Advisory

Mechanize sends credential headers to another origin after a meta refresh

CVE-2026-107399

## Summary `mechanize` applied no trust boundary to a `meta` refresh, so credentials set through `Mechanize#request_hea

历史摘要 · 未重新核验 · GitHub Advisory

Mechanize sends credential headers to another host after an HTTP redirect

CVE-2026-107715

## Summary `mechanize` leaked credentials to the redirect target when an HTTP redirect crossed to another host. Credent

历史摘要 · 未重新核验 · GitHub Advisory

fast-jwt: createVerifier accepts unsigned JWTs when key is '' or null and algorithms is explicitly set

CVE-2026-107720

### Summary `createVerifier` in fast-jwt ≤ 6.3.0 skips signature verification entirely when the `key` option is a falsy

历史摘要 · 未重新核验 · GitHub Advisory

fast-jwt clockTolerance: Infinity silently bypasses both exp and nbf validation (and persists in the verifier cache)

CVE-2026-107721

## Summary `createVerifier({ clockTolerance: Infinity })` silently bypasses both `exp` (expiry) AND `nbf` (not-before)

历史摘要 · 未重新核验 · GitHub Advisory

fast-jwt : Silent claim-validator bypass when JWT payload is a JSON array

CVE-2026-107723

### Summary `fast-jwt`'s `createVerifier` silently skips **all** configured claim validators (`exp`, `nbf`, `iss`, `aud

历史摘要 · 未重新核验 · GitHub Advisory

fast-jwt treats raw public JWK JSON as an HMAC secret, enabling HS256 token forgery

CVE-2026-107724

### Summary `fast-jwt` 6.2.4 silently classifies raw serialized public JWK JSON as an HMAC secret. If an application s

历史摘要 · 未重新核验 · GitHub Advisory

PraisonAI: AgentOS defaults to network-exposed no-auth mode, allowing unauthenticated agent invocation and instruction disclosure

CVE-2026-61426

## Summary The AgentOS server in the `praisonai` TypeScript/npm package ships an insecure default: it binds `0.0.0.0`,

历史摘要 · 未重新核验 · GitHub Advisory

PraisonAI: Shell command allowlist bypass via find -exec built-in action

CVE-2026-61434

### Summary The shell command execution hardening introduced in PraisonAI npm 1.7.2 / Python 4.6.58 to fix GHSA-5jv7-2m

历史摘要 · 未重新核验 · GitHub Advisory

music-metadata: MP4 stsd sample-entry size==0 causes a synchronous infinite loop (DoS) — unreleased regression on master

CVE-2026-107391

### Summary `StsdAtom.get()` in `lib/mp4/AtomToken.ts` parses an MP4 `stsd` (sample description) box's entry table by a

历史摘要 · 未重新核验 · GitHub Advisory

music-metadata: Uncontrolled memory allocation in APEv2 parser

CVE-2026-107387

## Summary `music-metadata` 11.15.0 is vulnerable to uncontrolled memory allocation in the APEv2 parser. The parser re

历史摘要 · 未重新核验 · GitHub Advisory

music-metadata: ID3v2 tag size not validated before allocation, causing memory exhaustion DoS

CVE-2026-107388

### Summary The ID3v2 parser in music-metadata trusts the tag size field without validation and allocates the full requ

历史摘要 · 未重新核验 · GitHub Advisory

京ICP证080047号[京ICP备08010314号-6]

京ICP证080047号[京ICP备08010314号-6]

历史摘要 · 未重新核验 · 360CERT 安全报告

京网文〔2020〕6051-1195号

京网文〔2020〕6051-1195号

历史摘要 · 未重新核验 · 360CERT 安全报告