#advisory

共收录 22911 条相关情报。

漏洞预警2026-10-30 发布MEDIUM

A flaw was found in the required action provider mechanism of Keycloak. The issue occurs when an authorization request includes the kc_action query parameter set to a mandatory ...

CVE-2026-118959

A flaw was found in the required action provider mechanism of Keycloak. The issue occurs when an authorization request i

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-287 #severity:medium

漏洞预警2026-10-30 发布MEDIUM

A flaw was found in the UMA resource registration endpoint of the keycloak-services component, which provides the core logic for Keycloak's authorization and identity services. ...

CVE-2026-118947

A flaw was found in the UMA resource registration endpoint of the keycloak-services component, which provides the core l

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-639 #severity:medium

漏洞预警2026-10-29 发布INFO

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-112211

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

来源摘录 · NVD / GitHub Advisory

#advisory #cve

漏洞预警2026-10-29 发布CRITICAL

Docat is a tool for hosting versioned static documentation. In the affected implementation, an arbitrary file upload vulnerability in the `Upload API` arises because the API doe...

CVE-2026-61645

Docat is a tool for hosting versioned static documentation. In the affected implementation, an arbitrary file upload vul

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-434

漏洞预警2026-10-29 发布HIGH

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the `Cross-Domain Single Sign-On` (`CDSSO`) servlet allows a logged-in user's raw OpenAM sessi...

CVE-2026-45049

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the `Cross-Domain Single Sign-On` (`C

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-201

漏洞预警2026-10-29 发布HIGH

GraphQL-core is a Python port of the GraphQL.js reference implementation. From 3.3.0a3 until 3.3.1, validate() reuses a module-level ValidationAbortedError when a document excee...

CVE-2026-119286

GraphQL-core is a Python port of the GraphQL.js reference implementation. From 3.3.0a3 until 3.3.1, validate() reuses a

来源摘录 · NVD / GitHub Advisory / OSV.dev

#advisory #cve #cwe-400 #cwe-401 #pip #severity:high

漏洞预警2026-10-29 发布MEDIUM

Fiber is an Express inspired web framework written in Go. From 2.52.1 until 2.52.3, the CORS middleware's validateDomain wildcard matcher in middleware/cors/utils.go strips the ...

CVE-2026-119285

Fiber is an Express inspired web framework written in Go. From 2.52.1 until 2.52.3, the CORS middleware's validateDomain

来源摘录 · NVD / GitHub Advisory / OSV.dev

#advisory #cve #cwe-346 #cwe-942 #go #severity:medium

漏洞预警2026-10-29 发布INFO

Nx is a monorepo solution for TypeScript and polyglot codebases. From 22.0.2 until 22.7.9 and 23.1.2 for @nx/maven, and from 21.0.0 until 22.7.9 and 23.1.2 for @nx/gradle, the p...

CVE-2026-119282

Nx is a monorepo solution for TypeScript and polyglot codebases. From 22.0.2 until 22.7.9 and 23.1.2 for @nx/maven, and

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-78 #cwe-88

漏洞预警2026-10-29 发布MEDIUM