2026-10-29 归档

今日共收录 3209 条安全情报，包含 2330 个 CVE，388 篇安全通告，以及 93 篇研究论文。

← 返回归档列表

漏洞预警2026-09-25 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix readahead synchronisation issues by loading all folios upfront There are some synchronisation is...

CVE-2026-98118

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix readahead synchronisation issues by load

来源摘录 · NVD

#cve #cwe-362

漏洞预警2026-10-25 发布HIGH

vLLM from 0.10.2 before 0.25.0 contains an uncontrolled resource consumption vulnerability that allows unauthenticated attackers to exhaust memory because the Nemotron-VL proces...

CVE-2026-116177

vLLM from 0.10.2 before 0.25.0 contains an uncontrolled resource consumption vulnerability that allows unauthenticated a

来源摘录 · NVD

#cve #cwe-400

漏洞预警2026-10-25 发布HIGH

vLLM from 0.20.0 before 0.30.0 contains a denial of service vulnerability that allows remote attackers to crash the engine by sending inconsistent multimodal metadata to the dis...

CVE-2026-116178

vLLM from 0.20.0 before 0.30.0 contains a denial of service vulnerability that allows remote attackers to crash the engi

来源摘录 · NVD

#cve #cwe-20

漏洞预警2026-10-25 发布HIGH

vLLM from 0.18.0 before 0.31.0 contains a resource exhaustion vulnerability that allows API clients to bypass the video/jpeg frame-count cap by overriding num_frames through med...

CVE-2026-116179

vLLM from 0.18.0 before 0.31.0 contains a resource exhaustion vulnerability that allows API clients to bypass the video/

来源摘录 · NVD

#cve #cwe-770

漏洞预警2026-10-25 发布MEDIUM

vLLM from 0.20.1 before 0.29.0 contains an improper input validation vulnerability that allows remote attackers to crash the engine by supplying out-of-vocabulary stop_token_ids...

CVE-2026-116181

vLLM from 0.20.1 before 0.29.0 contains an improper input validation vulnerability that allows remote attackers to crash

来源摘录 · NVD

#cve #cwe-129

漏洞预警2026-10-26 发布MEDIUM

vLLM is an inference and serving engine for large language models. From 0.19.0 until 0.32.0, authenticated callers can supply a request chat template when no server-side --chat-...

CVE-2026-115911

vLLM is an inference and serving engine for large language models. From 0.19.0 until 0.32.0, authenticated callers can s

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-400 #cwe-770 #cwe-834 #pip

漏洞预警2026-10-26 发布HIGH

vLLM is an inference and serving engine for large language models. Prior to 0.32.0, an authenticated caller can place forged shared-memory address and monotonic_id values in pub...

CVE-2026-115912

vLLM is an inference and serving engine for large language models. Prior to 0.32.0, an authenticated caller can place fo

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-502 #pip #severity:high

漏洞预警2026-10-26 发布MEDIUM

vLLM is an inference and serving engine for large language models. Prior to 0.32.0, the Phi-4 multimodal audio encoder in phi4mm_audio.py and phi4mm_utils.py uses eager attentio...

CVE-2026-115913

vLLM is an inference and serving engine for large language models. Prior to 0.32.0, the Phi-4 multimodal audio encoder i

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-770 #pip #severity:medium

漏洞预警2026-10-26 发布MEDIUM

vLLM is an inference and serving engine for large language models. From 0.11.1 until 0.32.0, the DeepSeek-OCR, DeepSeek-OCR-2, and Unlimited-OCR image path allows a remote clien...

CVE-2026-115914

vLLM is an inference and serving engine for large language models. From 0.11.1 until 0.32.0, the DeepSeek-OCR, DeepSeek-

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-617 #pip #severity:medium

漏洞预警2026-10-26 发布MEDIUM

vLLM is an inference and serving engine for large language models. Prior to 0.32.0, vllm/tokenizers/hf.py computes max_token_id with an off-by-one upper bound, allowing a pre-to...

CVE-2026-115916

vLLM is an inference and serving engine for large language models. Prior to 0.32.0, vllm/tokenizers/hf.py computes max_t

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-129 #cwe-193 #pip #severity:medium

漏洞预警2026-10-26 发布MEDIUM

vLLM is an inference and serving engine for large language models. From 0.16.0 until 0.32.0, the /v1/responses endpoint allows an authenticated caller to place an attacker-contr...

CVE-2026-115918

vLLM is an inference and serving engine for large language models. From 0.16.0 until 0.32.0, the /v1/responses endpoint

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-400 #cwe-770 #pip #severity:medium

漏洞预警2026-10-27 发布MEDIUM

SemanticMediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject markup through the search param...

CVE-2026-116892

SemanticMediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scripting vulnerability that allows unauthenti

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-20 发布LOW

filelock is a platform-independent file lock for Python. From 4.1.0 until 4.2.1, SoftReadWriteLock and AsyncSoftReadWriteLock cache a successful check of the <path>.rw lock tree...

CVE-2026-112941

filelock is a platform-independent file lock for Python. From 4.1.0 until 4.2.1, SoftReadWriteLock and AsyncSoftReadWrit

来源摘录 · NVD

#cve #cwe-367

漏洞预警2026-10-20 发布MEDIUM

filelock is a platform-independent file lock for Python. From 3.22.0 until 4.2.1, SoftFileLock can break a stale marker after an attacker frees its own marker following the stal...

CVE-2026-112935

filelock is a platform-independent file lock for Python. From 3.22.0 until 4.2.1, SoftFileLock can break a stale marker

来源摘录 · NVD

#cve #cwe-367

安全公告2026-10-28 发布INFO

Stable Channel Update for ChromeOS / ChromeOS Flex

CVE-2026-118307 · CVE-2026-118309 · CVE-2026-118331 · CVE-2026-118332 · CVE-2026-118339 · CVE-2026-118343 · CVE-2026-118346 · CVE-2026-118349 · CVE-2026-118358

M-156, ChromeOS version 16836.30.0 (Browser version 156.0.8078.77 has rolled out to ChromeOS devices on the Stable chann

历史摘要 · 未重新核验 · Google Chrome Releases

#browser #chrome #google

安全公告2026-10-28 发布INFO

Tornado: Open redirect in RedirectHandler via protocol-relative URLs

CVE-2026-116578

### Summary `tornado.web.RedirectHandler` builds its target URL by substituting parts of the request path into a templa

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-601 #pip #severity:low

安全公告2026-10-28 发布INFO

Backstage catalog rules can be bypassed for URL locations using encoded path segments

CVE-2026-115923

## Summary `@backstage/plugin-catalog-backend` matches URL-type locations against `catalog.rules` location patterns usi

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-22 #npm #severity:medium

安全公告2026-10-28 发布INFO

Python Social Auth: OpenID Connect nonce is not bound to the browser session, so a stolen authorization code logs the attacker in as the victim

CVE-2026-115910

### Summary The generic OpenID Connect backend (`OpenIdConnectAuth` and every backend built on it) stores the `nonce` i

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-345 #cwe-384 #pip #severity:medium

安全公告2026-10-28 发布INFO

Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction

CVE-2026-115893

## Summary When running with the Cranelift compiler backend on an aarch64 target, Wasmtime can compile a Wasm module wi

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-691 #rust #severity:critical

威胁情报2026-10-28 发布INFO

Inside KeyDrift: Analyzing historical UAT-11473 activity on Cisco SD-WAN

CVE-2026-20127

Talos has identified UAT-11473, a highly sophisticated APT, who exploited CVE-2026-20127, an authentication bypass vulne

历史摘要 · 未重新核验 · Cisco Talos

#cisco #malware #talos #vuln_research