ApostropheCMS before 4.33.0 allows authentication bypass for REST API page reading, as...
CVE-2026-110904
ApostropheCMS before 4.33.0 allows authentication bypass for REST API page reading, as demonstrated by a /api/v1/@apostr
#advisory
共收录 23002 条相关情报。
← 返回所有主题Ellucian WebAdvisor 3.2 contains an unauthenticated XML External Entity (XXE) injection...
CVE-2026-109430
Ellucian WebAdvisor 3.2 contains an unauthenticated XML External Entity (XXE) injection vulnerability that allows remote
Better Auth @better-auth/sso from 1.7.0-rc.2 before 1.7.3 contains an authentication bypass...
CVE-2026-110863
Better Auth @better-auth/sso from 1.7.0-rc.2 before 1.7.3 contains an authentication bypass vulnerability that allows au
Nodemailer from 3.0.0 before 10.0.10 contains a denial of service vulnerability in MessageParser...
CVE-2026-110871
Nodemailer from 3.0.0 before 10.0.10 contains a denial of service vulnerability in MessageParser.parseHeaders that allow
Heym from 0.0.55 before 0.0.121 contains a privilege escalation vulnerability that allows shared...
CVE-2026-110873
Heym from 0.0.55 before 0.0.121 contains a privilege escalation vulnerability that allows shared collaborators to overwr
Better Auth from 1.5.0-beta.12 before 1.7.7 contains an authentication bypass vulnerability in...
CVE-2026-110864
Better Auth from 1.5.0-beta.12 before 1.7.7 contains an authentication bypass vulnerability in the OAuth Proxy plugin th
Nodemailer 3.0.0 before 10.0.13 has a regular expression denial of service in SMTPConnection...
CVE-2026-110869
Nodemailer 3.0.0 before 10.0.13 has a regular expression denial of service in SMTPConnection._actionEHLO, whose four AUT
Renovate before 44.79.0 contains a server-side request forgery vulnerability that allows users to...
CVE-2026-110868
Renovate before 44.79.0 contains a server-side request forgery vulnerability that allows users to make the shared HTTP c
A security vulnerability has been detected in sgl-project SGLang up to 0.5.19. Affected by this...
CVE-2026-110809
A security vulnerability has been detected in sgl-project SGLang up to 0.5.19. Affected by this issue is the function Se
Renovate before 44.61.3 contains a protection mechanism bypass vulnerability that allows...
CVE-2026-110866
Renovate before 44.61.3 contains a protection mechanism bypass vulnerability that allows minimumReleaseAge checks to be
Renovate before 44.60.1 contains an allowlist bypass vulnerability that allows repositories to...
CVE-2026-110867
Renovate before 44.60.1 contains an allowlist bypass vulnerability that allows repositories to set restricted environmen
Renovate before 44.60.1 contains an allowlist bypass vulnerability that allows repository users...
CVE-2026-110865
Renovate before 44.60.1 contains an allowlist bypass vulnerability that allows repository users to evade the allowedHead
Nodemailer from 3.0.0 before 10.0.13 contains an improper input validation vulnerability in its...
CVE-2026-110870
Nodemailer from 3.0.0 before 10.0.13 contains an improper input validation vulnerability in its address parser that fail
Nodemailer from 3.0.0 before 10.0.10 contains a quadratic complexity denial of service...
CVE-2026-110872
Nodemailer from 3.0.0 before 10.0.10 contains a quadratic complexity denial of service vulnerability in the SMTP client
Better Auth from 1.4.0-beta.18 before 1.7.7 contains an authentication bypass vulnerability that...
CVE-2026-110862
Better Auth from 1.4.0-beta.18 before 1.7.7 contains an authentication bypass vulnerability that allows unauthenticated
n8n before 1.123.83 contains an authorization bypass vulnerability that allows authenticated...
CVE-2026-110853
n8n before 1.123.83 contains an authorization bypass vulnerability that allows authenticated members to spoof workflow i
Better Auth @better-auth/drizzle-adapter and better-auth from 1.6.17 before 1.7.7, and @better...
CVE-2026-110861
Better Auth @better-auth/drizzle-adapter and better-auth from 1.6.17 before 1.7.7, and @better-auth/kysely-adapter from
n8n before 2.41.4 and 2.42.x before 2.42.1 contains an authorization bypass in the Agents create...
CVE-2026-110851
n8n before 2.41.4 and 2.42.x before 2.42.1 contains an authorization bypass in the Agents create endpoint, which accepts
GitPython before 3.2.0 contains an argument injection vulnerability in Head.checkout() that...
CVE-2026-110859
GitPython before 3.2.0 contains an argument injection vulnerability in Head.checkout() that allows remote attackers to r
GitPython from 3.1.30 before 3.2.0 contains a remote code execution vulnerability in Remote.pull(...
CVE-2026-110858
GitPython from 3.1.30 before 3.2.0 contains a remote code execution vulnerability in Remote.pull() whose unsafe-option g