Renovate before 44.79.0 contains a server-side request forgery vulnerability that allows users to...
CVE-2026-110868
Renovate before 44.79.0 contains a server-side request forgery vulnerability that allows users to make the shared HTTP c
2026-10-15 归档
今日共收录 805 条安全情报，包含 0 个 CVE，398 篇安全通告，以及 100 篇研究论文。
← 返回归档列表A security vulnerability has been detected in sgl-project SGLang up to 0.5.19. Affected by this...
CVE-2026-110809
A security vulnerability has been detected in sgl-project SGLang up to 0.5.19. Affected by this issue is the function Se
Renovate before 44.61.3 contains a protection mechanism bypass vulnerability that allows...
CVE-2026-110866
Renovate before 44.61.3 contains a protection mechanism bypass vulnerability that allows minimumReleaseAge checks to be
Renovate before 44.60.1 contains an allowlist bypass vulnerability that allows repositories to...
CVE-2026-110867
Renovate before 44.60.1 contains an allowlist bypass vulnerability that allows repositories to set restricted environmen
Renovate before 44.60.1 contains an allowlist bypass vulnerability that allows repository users...
CVE-2026-110865
Renovate before 44.60.1 contains an allowlist bypass vulnerability that allows repository users to evade the allowedHead
Nodemailer from 3.0.0 before 10.0.13 contains an improper input validation vulnerability in its...
CVE-2026-110870
Nodemailer from 3.0.0 before 10.0.13 contains an improper input validation vulnerability in its address parser that fail
Nodemailer from 3.0.0 before 10.0.10 contains a quadratic complexity denial of service...
CVE-2026-110872
Nodemailer from 3.0.0 before 10.0.10 contains a quadratic complexity denial of service vulnerability in the SMTP client
Better Auth @better-auth/drizzle-adapter and better-auth from 1.6.17 before 1.7.7, and @better...
CVE-2026-110861
Better Auth @better-auth/drizzle-adapter and better-auth from 1.6.17 before 1.7.7, and @better-auth/kysely-adapter from
n8n before 2.41.4 and 2.42.x before 2.42.1 contains an authorization bypass in the Agents create...
CVE-2026-110851
n8n before 2.41.4 and 2.42.x before 2.42.1 contains an authorization bypass in the Agents create endpoint, which accepts
GitPython before 3.2.0 contains an argument injection vulnerability in Head.checkout() that...
CVE-2026-110859
GitPython before 3.2.0 contains an argument injection vulnerability in Head.checkout() that allows remote attackers to r
GitPython from 3.1.30 before 3.2.0 contains a remote code execution vulnerability in Remote.pull(...
CVE-2026-110858
GitPython from 3.1.30 before 3.2.0 contains a remote code execution vulnerability in Remote.pull() whose unsafe-option g
GitPython before 3.2.0 contains a remote code execution vulnerability that allows attackers to...
CVE-2026-110857
GitPython before 3.2.0 contains a remote code execution vulnerability that allows attackers to run commands because Git.
n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains an authentication...
CVE-2026-110852
n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains an authentication bypass because dynamic-path
Parse Server before 8.6.97 and 9.0.0 before 9.10.2-alpha.6 does not handle errors raised while...
CVE-2026-110854
Parse Server before 8.6.97 and 9.0.0 before 9.10.2-alpha.6 does not handle errors raised while sending verification or p
GitPython before 3.2.0 contains a regular expression denial of service vulnerability in the...
CVE-2026-110856
GitPython before 3.2.0 contains a regular expression denial of service vulnerability in the _re_actor_epoch pattern used
GitPython before 3.2.0 contains an information disclosure vulnerability that allows malicious...
CVE-2026-110855
GitPython before 3.2.0 contains an information disclosure vulnerability that allows malicious repositories to expand env
GitPython from 3.1.62 before 3.2.0 contains a symlink-following flaw in Submodule.move(), which...
CVE-2026-110860
GitPython from 3.1.62 before 3.2.0 contains a symlink-following flaw in Submodule.move(), which checks the destination o
n8n before 2.41.4 and 2.42.x before 2.42.1 contains a signature bypass in the waiting-webhook...
CVE-2026-110846
n8n before 2.41.4 and 2.42.x before 2.42.1 contains a signature bypass in the waiting-webhook endpoint, which selects Se
n8n before 1.123.83 contains an authorization bypass vulnerability that allows shared-workflow...
CVE-2026-110844
n8n before 1.123.83 contains an authorization bypass vulnerability that allows shared-workflow editors to use credential
n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a prototype pollution...
CVE-2026-110848
n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a prototype pollution vulnerability in the AI