MLflow CrewAI autologging records LLM provider API keys in logged trace spans

CVE-2026-116691

### Summary `mlflow.crewai.autolog()` leaks CrewAI LLM provider API keys into MLflow trace telemetry. When a CrewAI `A

历史摘要 · 未重新核验 · GitHub Advisory

dd-trace: ReDOS in URL query string obfuscation

CVE-2026-116693

### Summary A regular expression used to obfuscate URL query strings can consume excessive CPU when processing certain

历史摘要 · 未重新核验 · GitHub Advisory

Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource server

CVE-2026-116684

### Summary In affected versions, the SDK's server-side bearer authentication had no way to check that a token was issue

历史摘要 · 未重新核验 · GitHub Advisory

Model Context Protocol Python SDK: HTTP client transports followed cross-origin redirects carrying custom headers and bodies

CVE-2026-116685

### Summary In affected versions, the SDK's Streamable HTTP and SSE client transports followed HTTP redirects to any hos

历史摘要 · 未重新核验 · GitHub Advisory

Model Context Protocol Python SDK: Client fetched server-chosen $ref URLs while validating tool results against output schemas

CVE-2026-116686

### Summary In affected versions, when a connected MCP server declared an `outputSchema` for a tool, the SDK's client va

历史摘要 · 未重新核验 · GitHub Advisory

CKEditor: Cross-site scripting (XSS) in the engine package

CVE-2026-116688

### Impact A Cross-Site Scripting (XSS) vulnerability has been discovered in the CKEditor 5 engine. This vulnerability i

历史摘要 · 未重新核验 · GitHub Advisory

Neko: Authorization bypass in legacy WebRTC input handling

CVE-2026-116679

### Impact When legacy mode is enabled and `session.implicit_hosting` is enabled, the legacy WebRTC data channel incorr

历史摘要 · 未重新核验 · GitHub Advisory

undici vulnerable to cache poisoning and cross-user disclosure via cross-origin redirects

CVE-2026-109829

### Impact When an originless `Agent` composes the redirect and cache interceptors as `compose(redirect(), cache())` wi

历史摘要 · 未重新核验 · GitHub Advisory

undici vulnerable to Denial of Service via TLS 1.2 certificate-changing renegotiation

CVE-2026-87018

## Impact undici crashes the client process when a TLS 1.2 server renegotiates after the connection is established and

历史摘要 · 未重新核验 · GitHub Advisory

undici WebSocket client vulnerable to Denial of Service via unbounded automatic PONG buffering

CVE-2026-109932

### Impact undici's WebSocket client (including Node.js's bundled `globalThis.WebSocket`) can be driven to exhaust proc

历史摘要 · 未重新核验 · GitHub Advisory

undici vulnerable to Denial of Service via unhandled exception in the decompress interceptor

CVE-2026-87029

## Impact undici's `decompress` interceptor forwards decompressed response data to the downstream handler from zlib str

历史摘要 · 未重新核验 · GitHub Advisory

Symfony: Unbounded Recursion in the YAML Inline Lexer Lets a Single Document Crash the Process

CVE-2026-109413

### Description `Yaml\Parser::lexInlineStructure()` recursed through `lexInlineMapping()` and `lexInlineSequence()` for

历史摘要 · 未重新核验 · GitHub Advisory

Symfony: ReDoS in HeaderUtils::split() Reachable Through the Cache-Control Request Header

CVE-2026-108082

### Description `HeaderUtils::split()` parsed header values with a pattern whose token alternative also matched whitesp

历史摘要 · 未重新核验 · GitHub Advisory

Go JOSE: DoS when parsing JWKs that contain RSA keys

CVE-2026-116587

### Summary A crafted RSA key inside a JWK can cause operations that parse JWKs to consume excess CPU. ### Details go

历史摘要 · 未重新核验 · GitHub Advisory

CTFer.io's CTFd Terraform Provider allows a local or remote attacker to read team passwords in state as non sensitive values

CVE-2026-116683

### Impact CTFer.io's CTFd Terraform Provider stores `ctfd_team.password` as non-sensitive values (CWE-522). A local or

历史摘要 · 未重新核验 · GitHub Advisory

qs : qs.stringify with arrayFormat 'comma' throws an uncaught TypeError on array elements carrying a non-callable own toString (DoS)

CVE-2026-110816

## Summary `qs.stringify(obj, { arrayFormat: 'comma' })` throws an uncaught `TypeError: Cannot convert object to primit

历史摘要 · 未重新核验 · GitHub Advisory

undici WebSocket client vulnerable to Denial of Service via failed HTTP/2 handshake

CVE-2026-109855

### Impact undici's experimental WebSocket client (enabled by default via `allowH2: true`) crashes the Node.js process

历史摘要 · 未重新核验 · GitHub Advisory

Authlib accepts an empty HMAC key, allowing JWS/JWT signature forgery (HS256/HS384/HS512)

CVE-2026-114616

Reporter: Cavan Loughran, Celvex Group Inc. Summary Authlib's symmetric (oct) key handling accepts an empty key (empty

历史摘要 · 未重新核验 · GitHub Advisory

京ICP证080047号[京ICP备08010314号-6]

京ICP证080047号[京ICP备08010314号-6]

历史摘要 · 未重新核验 · 360CERT 安全报告

京网文〔2020〕6051-1195号

京网文〔2020〕6051-1195号

历史摘要 · 未重新核验 · 360CERT 安全报告