Tina: Code injection via unescaped Git branch name in generated client source
CVE-2026-108259
### Summary `@tinacms/cli` inserts the raw Git branch value into the generated `client.ts` source without escaping or e
2026-10-11 归档
今日共收录 1127 条安全情报，包含 372 个 CVE，412 篇安全通告，以及 88 篇研究论文。
← 返回归档列表Contao: Cross-site scripting in the comments bundle
CVE-2026-107845
An unauthenticated front end visitor can post a comment containing a XSS injection. The victim is any back end user who
ORCAGen: Orchestrating Context-Aware Malware Deception with RAG-Guided Generative AI
Malware defenses often remove or isolate suspicious programs as quickly as possible. While effective for containment, th
A Security Meta-Model for Retrieval-Augmented Generation Systems
Retrieval-Augmented Generation (RAG) systems extend large language models (LLMs) with external knowledge through a multi
LTBD: Learnable Trust-Boundary Delimiters for Prompt Injection Defense
Large language models (LLMs) perform remarkably well on complex tasks, yet remain highly vulnerable to prompt injection
SoK: Are LLMs Reliable at Source Code Recovery? A Taxonomy and Empirical Evaluation
Effective source recovery is critical to security applications such as malware analysis, vulnerability assessment, and l
Language Modeling is Monotone Compression
A long-standing hypothesis in artificial intelligence and neuroscience posits that intelligence is closely related to co
Nullify: Null-Space Activation Steering for Training-Free LLM Unlearning
Large Language Models (LLMs) inevitably internalize substantial amounts of sensitive or private information during pre-t
Sensitive-Topic Leakage Through LLM Routing Metadata: Measurement and Mitigation
LLM routers pick a cheap or expensive model per request by its content, and many gateways and some cloud platforms can l
Cloud & Application Security
Cloud & Application Security
From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise
From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise
Next-Gen Identity Security
Next-Gen Identity Security
cloud architecture assessment
cloud architecture assessment
Google Cloud Next 2026Catch-up sessions on the keynotes and select sessions are now available on demand.Explore content on-demand
Google Cloud Next 2026Catch-up sessions on the keynotes and select sessions are now available on demand.Explore content
The Identity Problem Hiding in AI Agent Deployments
The Identity Problem Hiding in AI Agent Deployments
Falcon Cloud Security June 2026 Release: Updates for Azure and Google Cloud
Falcon Cloud Security June 2026 Release: Updates for Azure and Google Cloud
Falcon Cloud Security July 2026 Release: Helping Security Teams Move Faster in the Cloud
Falcon Cloud Security July 2026 Release: Helping Security Teams Move Faster in the Cloud
CrowdStrike Named Strongest Overall Leader in 2026 Frost Radar™: Cloud Workload Protection Platforms
CrowdStrike Named Strongest Overall Leader in 2026 Frost Radar™: Cloud Workload Protection Platforms
CrowdStrike Extends Endpoint Security to Stop Software Supply Chain Attacks
CrowdStrike Extends Endpoint Security to Stop Software Supply Chain Attacks
CrowdStrike Announces Agentic Identity Provider
CrowdStrike Announces Agentic Identity Provider