Vikunja: Scoped API token can mint unrestricted OAuth session credentials
CVE-2026-57458
## Summary A scoped API token can bypass its declared permissions by using the OAuth authorization flow to mint normal
今日共收录 1383 条安全情报,包含 534 个 CVE,469 篇安全通告,以及 100 篇研究论文。
← 返回归档列表CVE-2026-57458
## Summary A scoped API token can bypass its declared permissions by using the OAuth authorization flow to mint normal
CVE-2026-108111
ruoyi-ai 3.0.0 through 3.1.0 contains a missing authorization vulnerability in the GET /workflow/search endpoint that ex
CVE-2026-107813
## Summary Incomplete fix of GHSA-5v7c-xpfp-p65m: the secure-session (OTP step-up) requirement added to the nginx, cert
Firefox browsers
Sign in to Cloud
Sign Up for Free Cloud Tier
iOS 26.4.2 and iPadOS 26.4.2
iOS 18.7.8 and iPadOS 18.7.8
iOS 18.7.7 and iPadOS 18.7.7
iOS 26.4 and iPadOS 26.4
Background Security Improvements for iOS, iPadOS, and macOS
iOS 16.7.15 and iPadOS 16.7.15
iOS 15.8.7 and iPadOS 15.8.7
iOS 26.3 and iPadOS 26.3
iOS 18.7.5 and iPadOS 18.7.5
Android Code Search
Secure an Android device
iOS 26.5 and iPadOS 26.5
iOS 18.7.9 and iPadOS 18.7.9
iOS 16.7.16 and iPadOS 16.7.16