openapi-python-client: Malicious OpenAPI Documents can cause Arbitrary Code Generation
CVE-2026-105801
### Impact A malicious OpenAPI document processed by any `openapi-python-client` prior to 0.29.1 can generate arbitrary
#advisory
共收录 23210 条相关情报。
← 返回所有主题LangChain: RediSearch Filter Injection via Unescaped Tag/Text Values
CVE-2026-105799
## Summary `@langchain/redis` did not properly escape values used to construct structured RediSearch TAG and TEXT filte
External Secrets Operator: label enforcement bypass in webhook generator enables secret exfiltration
CVE-2026-26287
## Summary A bug in the `webhook` generator initialization order incorrectly cleared the label-enforcement flag (`Enforc
Vyper: Memory corruption using function calls within tuples / nested calls
### Impact When performing a function call inside a tuple or as an argument inside another function call, there is a mem
Vyper: Call stack corruption when passing complex type containing non-base type members as argument
### Impact When we pass a multi-dimensional array (like `[[1, 2], [3, 4]]`) as an argument to internal/external function
Vyper: Return inside for loop more than 1 level deep
# VVE-2020-0002 Earlier today, we received a responsible disclosure of a potential issue from @michwill (developer of @c
The Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup...
CVE-2026-75962
The Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App plugin
Contributor Broken Access Control in IATO MCP <= 1.11.0 versions.
CVE-2026-32582
Contributor Broken Access Control in IATO MCP <= 1.11.0 versions.
Subscriber Bypass Vulnerability in WP Migration Plugin DB & Files – WP Synchro <= 1.16.1 versions.
CVE-2026-41558
Subscriber Bypass Vulnerability in WP Migration Plugin DB & Files – WP Synchro <= 1.16.1 versions.
Customer Insecure Direct Object References (IDOR) in Faktur Pro for WooCommerce <= 3.2.1 versions.
CVE-2026-32576
Customer Insecure Direct Object References (IDOR) in Faktur Pro for WooCommerce <= 3.2.1 versions.
A security vulnerability has been detected in vllm-project vLLM up to 0.31.0. This impacts the...
CVE-2026-105775
A security vulnerability has been detected in vllm-project vLLM up to 0.31.0. This impacts the function conv_ssm_forward
A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This...
CVE-2026-105705
A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function o
Unauthenticated Broken Access Control in FluentBooking Pro < 2.5.0 versions.
CVE-2026-105072
Unauthenticated Broken Access Control in FluentBooking Pro < 2.5.0 versions.
A weakness has been identified in SourceCodester Drug Recommendation System 1.0. Affected is an...
CVE-2026-105706
A weakness has been identified in SourceCodester Drug Recommendation System 1.0. Affected is an unknown function. Execut
A vulnerability was determined in PHPGurukul User Registration & Login and User Management System...
CVE-2026-105703
A vulnerability was determined in PHPGurukul User Registration & Login and User Management System 3.3. The impacted elem
Unauthenticated Broken Access Control in Morning for WooCommerce <= 2.4.1 versions.
CVE-2026-39723
Unauthenticated Broken Access Control in Morning for WooCommerce <= 2.4.1 versions.
A security vulnerability has been detected in uptrace up to 2.1.0-beta.8. Affected by this...
CVE-2026-105707
A security vulnerability has been detected in uptrace up to 2.1.0-beta.8. Affected by this vulnerability is the function
A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. This affects an...
CVE-2026-105704
A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the
A flaw has been found in imgproxy up to 4.0.17. Affected by this vulnerability is the function...
CVE-2026-105708
A flaw has been found in imgproxy up to 4.0.17. Affected by this vulnerability is the function sanitizeElement of the fi
Contributor Broken Access Control in WDS MCP Content Manager <= 3.10.4 versions.
CVE-2026-39599
Contributor Broken Access Control in WDS MCP Content Manager <= 3.10.4 versions.