kin-openapi: YAML NaN/Inf Values Bypass Built-in Guards and Panic via OAS 3.1 Validation Path

CVE-2026-100352

## Summary kin-openapi guards against `NaN` and `Inf` values in its built-in schema visitor (`visitJSON`) by returning

历史摘要 · 未重新核验 · GitHub Advisory

Talos Linux: Support bundle does not redact registry credentials

CVE-2026-77564

### Summary When generating a support bundle with `talosctl support` the credentials entered for private registries are

历史摘要 · 未重新核验 · GitHub Advisory

KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication

CVE-2026-77524

## Summary A namespace admin who creates a `TriggerAuthentication` and a `ScaledObject` in their own namespace can make

历史摘要 · 未重新核验 · GitHub Advisory

Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks

CVE-2026-77459

### Impact Argo CD checks an Application's AppProject before it creates resources during a sync. That check covers dest

历史摘要 · 未重新核验 · GitHub Advisory

kin-openapi: ValidationHandler security-requirement bypass via encoded-path operation confusion

CVE-2026-100351

## Summary `openapi3filter.ValidationHandler.Middleware` validates requests with kin-openapi's legacy router, which sel

历史摘要 · 未重新核验 · GitHub Advisory

Appium: Symlink based Zip Slip in @appium/support ZIP extraction

CVE-2026-103975

### Summary CVE-2026-30973 [(GHSA-rfx7-4xw3-gh4m)](https://github.com/appium/appium/security/advisories/GHSA-rfx7-4xw3-

历史摘要 · 未重新核验 · GitHub Advisory

Dio: Cross-origin redirect leaks sensitive request headers in `dio_http2_adapter`

CVE-2026-103030

### Summary `dio_http2_adapter` follows HTTP `Location` redirects without stripping sensitive request headers when the

历史摘要 · 未重新核验 · GitHub Advisory

kin-openapi deepObject query decoding repeatedly compiles an invariant regular expression

CVE-2026-100350

### Summary `openapi3filter` decodes `deepObject`-style query parameters by looping over **every** key in the request's

历史摘要 · 未重新核验 · GitHub Advisory

Dgraph: Zero Unauthenticated HTTP Admin removeNode Denial of Service

CVE-2026-102748

### Summary Dgraph `v25.3.8` exposes a Zero HTTP administrative surface that is unauthenticated when port `6080` is rea

历史摘要 · 未重新核验 · GitHub Advisory

tinytag: Infinite loop when parsing certain M4A files containing invalid atoms

CVE-2026-104266

### Impact An M4A file containing a sub-atom with a size of zero in the `----` atom makes the parser enter an infinite l

历史摘要 · 未重新核验 · GitHub Advisory

copyparty FTP: upload outside defined volumes (limited path traversal)

CVE-2026-104102

The FTP and FTPS server -- if enabled -- would allow uploading to any folder that the copyparty process had permission t

历史摘要 · 未重新核验 · GitHub Advisory

Vitess vttablet /twopcz reflected XSS

CVE-2026-104252

From: xylove21 To: security@vitess.io Subject: [Security Report] Vitess vttablet /twopcz reflected XSS Date: Tue, 24 Jun

历史摘要 · 未重新核验 · GitHub Advisory

unstructured: Stored XSS via unescaped HTML generation

CVE-2026-104250

### Summary When `unstructured` parses an untrusted document and outputs the result as HTML, malicious markup contained

历史摘要 · 未重新核验 · GitHub Advisory

mise permits untrusted local configuration to override default shell arguments

CVE-2026-103929

## Summary Untrusted local .mise.toml [settings] can set the shell interpreter args (unix/windows default_inline / defa

历史摘要 · 未重新核验 · GitHub Advisory

kin-openapi spec loader panics on a self-referential additionalProperties $ref (nil-pointer DoS)

CVE-2026-100348

The defect ---------- Confirmed at HEAD (f0407d5, v0.144.0). openapi3/loader.go, inside resolveComponent's drill closure

历史摘要 · 未重新核验 · GitHub Advisory

kin-openapi: Unauthenticated panic (DoS) in openapi3filter legacy router via non-canonical/unsupported HTTP method on a static path

CVE-2026-100347

## Summary The `openapi3filter.ValidationHandler` (the exported, documented request-validation middleware) hard-wires th

历史摘要 · 未重新核验 · GitHub Advisory

Gotify: Insufficiently Protected Password Change endpoint

CVE-2026-102603

The password change endpoint (`POST /current/user/password`) in Gotify versions <= 2.9.1 does not require knowledge of t

历史摘要 · 未重新核验 · GitHub Advisory

In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU grace period tcp_v4_syn_recv_sock() transfers ownership of ir...

CVE-2026-98432

In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU grace

来源摘录 · NVD / OSV.dev

【大模型服务平台 TokenHub】& 【云开发 CloudBase】 关于腾讯云 MiMo-V2.5-Pro 模型下线及切换升级的通知

【大模型服务平台 TokenHub】& 【云开发 CloudBase】 关于腾讯云 MiMo-V2.5-Pro 模型下线及切换升级的通知

历史摘要 · 未重新核验 · 腾讯云安全公告

【大模型服务平台 TokenHub】&【智能体开发平台 ADP】& 【云开发 CloudBase】 关于腾讯云 DeepSeek-V4-Flash 0731 模型下线及自动切换的通知

【大模型服务平台 TokenHub】&【智能体开发平台 ADP】& 【云开发 CloudBase】 关于腾讯云 DeepSeek-V4-Flash 0731 模型下线及自动切换的通知

历史摘要 · 未重新核验 · 腾讯云安全公告