Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the API server decompressed uploaded pipeline archives witho...

CVE-2026-118761

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the

来源摘录 · NVD / GitHub Advisory

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the API server's GET /apis/v1alpha1/runs/{run_id}/nodes/{nod...

CVE-2026-118759

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the

来源摘录 · NVD / GitHub Advisory

Broken Object Level Authorization in Users Configuration Endpoint allows Information Disclosure to authenticated user

CVE-2025-12523

Broken Object Level Authorization in Users Configuration Endpoint allows Information Disclosure to authenticated user

来源摘录 · NVD / OSV.dev

Twisted: Unauthenticated Remote Denial of Service in the Twisted HTTP/2 Server via Rapid Stream Reset

## Summary An uncontrolled-resource-consumption vulnerability (CWE-400) in the Twisted HTTP/2 server lets any unauthent

来源摘录 · GitHub Advisory

zip: legacy Shrink/Reduce/Implode decoder: denial of service from attacker-controlled ZIP64 uncompressed size

CVE-2026-115907

### Summary A malicious 149-byte ZIP archive can cause a denial of service in applications that enable `legacy-zip` and

来源摘录 · GitHub Advisory

zip: Arbitrary file write outside the extraction directory, because ZipArchive::extract validates symlink targets lexically.

CVE-2026-115908

### Summary - **Verified version:** zip `9.0.0-pre3` - **Affected versions:** `7.2.0` and later - **Precondition:** The

来源摘录 · GitHub Advisory

zip: AES Entry HMAC Authentication Bypass on Premature EOF

CVE-2026-115906

### Summary An AES-encrypted (AE-x) entry's authentication code is verified only when the reader's byte counter lands e

来源摘录 · GitHub Advisory

zip: Unbounded Symlink-Target Handling Can Abort Or Exhaust Memory During Extraction

CVE-2026-115909

### Summary The symbolic-link branch of `ZipArchive::extract_internal()` allocates a buffer using an attacker-declared

来源摘录 · GitHub Advisory

Shopify App: Token exchange shop context confusion may allow cross-shop authorization bypass in affected apps

CVE-2026-63414

In token-exchange authenticated controllers, `shopify_app` exposes shop context through helpers such as `current_shopify

来源摘录 · GitHub Advisory

cert-manager: Direct ACME Challenge resources can bypass Issuer DNS01 solver policy and use ClusterIssuer DNS credentials

CVE-2026-62290

## Summary `Challenge` resources under `acme.cert-manager.io` can be created directly by namespace users. On create, ce

来源摘录 · GitHub Advisory

Keycloak vulnerable to cross-site scripting (xss) via case-insensitive uri validation bypass

CVE-2026-9086

### Description A flaw was found in Keycloak. A remote attacker with administrative privileges, specifically those with

来源摘录 · GitHub Advisory

Keycloak vulnerable to information disclosure through arbitrary filesystem path probing

CVE-2026-9083

### Description A flaw was found in Keycloak. A realm administrator with the "manage-realm" role can exploit this vulner

来源摘录 · GitHub Advisory

Keycloak allows unauthorized access to resources via uma permission ticket bypass

CVE-2026-9799

### Description A flaw was found in org.keycloak.authorization. An authenticated user with a granted User-Managed Access

来源摘录 · GitHub Advisory

Keycloak vulnerable to authorization bypass via incorrect uri comparison

CVE-2026-9800

### Description A flaw was found in Keycloak Policy Enforcer. This vulnerability allows any authenticated user to bypass

来源摘录 · GitHub Advisory

Keycloak: Attacker can re-enable and take over disabled clients via registration access token

CVE-2026-9705

### Description A flaw was found in Keycloak's client registration service. A remote attacker, possessing a previously i

来源摘录 · GitHub Advisory

@eeacms/volto-chatbot has Unauthenticated Danswer API Confused Deputy Proxy

## Unauthenticated Danswer API Confused Deputy Proxy in @eeacms/volto-chatbot ### Summary `@eeacms/volto-chatbot` expo

来源摘录 · GitHub Advisory

Crass: Non-ASCII characters cause superlinear CPU consumption

CVE-2026-61848

### Impact When parsing an input containing non-ASCII characters, inefficiencies in how Crass tracks the positions of m

来源摘录 · GitHub Advisory

Crass: A large number of adjacent CSS comments can trigger a SystemStackError

CVE-2026-61847

### Impact When the `:preserve_comments` option is not enabled (which is the default behavior), Crass discards CSS comm

来源摘录 · GitHub Advisory

Crass: Deeply nested CSS blocks and functions can trigger a SystemStackError or excessive memory usage

CVE-2026-61846

### Impact Crass recursively parses CSS simple blocks and functions without a depth guard. An attacker-controlled value

来源摘录 · GitHub Advisory

Cedar: JSON template is in scope missing slot-id validation allows link panic and decision divergence

Cedar users must be using all of the following features to be affected by this advisory: JSON format policies, policy te

来源摘录 · GitHub Advisory