Nodemailer 3.0.0 before 10.0.13 has a regular expression denial of service in SMTPConnection...
CVE-2026-110869
Nodemailer 3.0.0 before 10.0.13 has a regular expression denial of service in SMTPConnection._actionEHLO, whose four AUT
#advisory
共收录 22969 条相关情报。
← 返回所有主题Renovate before 44.79.0 contains a server-side request forgery vulnerability that allows users to...
CVE-2026-110868
Renovate before 44.79.0 contains a server-side request forgery vulnerability that allows users to make the shared HTTP c
A security vulnerability has been detected in sgl-project SGLang up to 0.5.19. Affected by this...
CVE-2026-110809
A security vulnerability has been detected in sgl-project SGLang up to 0.5.19. Affected by this issue is the function Se
Renovate before 44.61.3 contains a protection mechanism bypass vulnerability that allows...
CVE-2026-110866
Renovate before 44.61.3 contains a protection mechanism bypass vulnerability that allows minimumReleaseAge checks to be
Renovate before 44.60.1 contains an allowlist bypass vulnerability that allows repositories to...
CVE-2026-110867
Renovate before 44.60.1 contains an allowlist bypass vulnerability that allows repositories to set restricted environmen
Renovate before 44.60.1 contains an allowlist bypass vulnerability that allows repository users...
CVE-2026-110865
Renovate before 44.60.1 contains an allowlist bypass vulnerability that allows repository users to evade the allowedHead
Nodemailer from 3.0.0 before 10.0.13 contains an improper input validation vulnerability in its...
CVE-2026-110870
Nodemailer from 3.0.0 before 10.0.13 contains an improper input validation vulnerability in its address parser that fail
Nodemailer from 3.0.0 before 10.0.10 contains a quadratic complexity denial of service...
CVE-2026-110872
Nodemailer from 3.0.0 before 10.0.10 contains a quadratic complexity denial of service vulnerability in the SMTP client
Better Auth from 1.4.0-beta.18 before 1.7.7 contains an authentication bypass vulnerability that...
CVE-2026-110862
Better Auth from 1.4.0-beta.18 before 1.7.7 contains an authentication bypass vulnerability that allows unauthenticated
n8n before 1.123.83 contains an authorization bypass vulnerability that allows authenticated...
CVE-2026-110853
n8n before 1.123.83 contains an authorization bypass vulnerability that allows authenticated members to spoof workflow i
Better Auth @better-auth/drizzle-adapter and better-auth from 1.6.17 before 1.7.7, and @better...
CVE-2026-110861
Better Auth @better-auth/drizzle-adapter and better-auth from 1.6.17 before 1.7.7, and @better-auth/kysely-adapter from
n8n before 2.41.4 and 2.42.x before 2.42.1 contains an authorization bypass in the Agents create...
CVE-2026-110851
n8n before 2.41.4 and 2.42.x before 2.42.1 contains an authorization bypass in the Agents create endpoint, which accepts
GitPython before 3.2.0 contains an argument injection vulnerability in Head.checkout() that...
CVE-2026-110859
GitPython before 3.2.0 contains an argument injection vulnerability in Head.checkout() that allows remote attackers to r
GitPython from 3.1.30 before 3.2.0 contains a remote code execution vulnerability in Remote.pull(...
CVE-2026-110858
GitPython from 3.1.30 before 3.2.0 contains a remote code execution vulnerability in Remote.pull() whose unsafe-option g
GitPython before 3.2.0 contains a remote code execution vulnerability that allows attackers to...
CVE-2026-110857
GitPython before 3.2.0 contains a remote code execution vulnerability that allows attackers to run commands because Git.
n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains an authentication...
CVE-2026-110852
n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains an authentication bypass because dynamic-path
Parse Server before 8.6.97 and 9.0.0 before 9.10.2-alpha.6 does not handle errors raised while...
CVE-2026-110854
Parse Server before 8.6.97 and 9.0.0 before 9.10.2-alpha.6 does not handle errors raised while sending verification or p
GitPython before 3.2.0 contains a regular expression denial of service vulnerability in the...
CVE-2026-110856
GitPython before 3.2.0 contains a regular expression denial of service vulnerability in the _re_actor_epoch pattern used
GitPython before 3.2.0 contains an information disclosure vulnerability that allows malicious...
CVE-2026-110855
GitPython before 3.2.0 contains an information disclosure vulnerability that allows malicious repositories to expand env
GitPython from 3.1.62 before 3.2.0 contains a symlink-following flaw in Submodule.move(), which...
CVE-2026-110860
GitPython from 3.1.62 before 3.2.0 contains a symlink-following flaw in Submodule.move(), which checks the destination o