In AMD Versal™ Adaptive SoC devices, insufficient boundary checks in USB boot mode—when enabled...

CVE-2026-0482

In AMD Versal™ Adaptive SoC devices, insufficient boundary checks in USB boot mode—when enabled through board modificati

历史摘要 · 未重新核验 · GitHub Advisory

Insufficient boundary validation in the USB boot mode implementation of AMD Zynq™ UltraScale+...

CVE-2026-0461

Insufficient boundary validation in the USB boot mode implementation of AMD Zynq™ UltraScale+ MPSoC and RFSoC devices co

历史摘要 · 未重新核验 · GitHub Advisory

Docling: `enable_local_fetch` is not enforced in HTML browser-rendering mode

CVE-2026-105750

### Summary When the HTML backend renders pages in a headless browser (`HTMLBackendOptions(render_page=True)`), the `en

历史摘要 · 未重新核验 · GitHub Advisory

vLLM: Mirrored multimodal IPC caches desync after a rejected request — a later request reusing the same media hash trips a receiver assertion in the engine core

CVE-2026-105753

## Affected - **Ecosystem / package:** pip / `vllm` - **Affected versions:** vLLM ≤ 0.25.1 (confirmed on 0.25.1, commit

历史摘要 · 未重新核验 · GitHub Advisory

vLLM: Harmony tool continuations drop `cache_salt` — restoring a cross-tenant prefix-cache membership oracle

CVE-2026-105752

## Affected - **Ecosystem / package:** pip / `vllm` - **Affected versions:** vLLM ≤ 0.25.1 (confirmed on 0.25.1, commit

历史摘要 · 未重新核验 · GitHub Advisory

Werkzeug safe_join() allows Windows special device names

CVE-2026-102598

Werkzeug's `safe_join` function allows Windows device names as filenames when they have an empty ADS marker on NTFS. Th

历史摘要 · 未重新核验 · GitHub Advisory

simple-git: `VISUAL` editor environment variable is omitted from unsafe editor detection

CVE-2026-102829

# Security control bypass in `@simple-git/argv-parser`: Git's `VISUAL` editor fallback is not classified as `allowUnsafe

历史摘要 · 未重新核验 · GitHub Advisory

simple-git unsafe-operation guard does not block trailer command configuration

CVE-2026-102828

## Affected product The default `blockUnsafeOperationsPlugin` in `simple-git` when an application permits untrusted val

历史摘要 · 未重新核验 · GitHub Advisory

simple-git allows command execution through unblocked Git configuration includes

CVE-2026-102826

## Summary An OS command injection vulnerability in `git.clone()` allows any application that flows attacker-influenced

历史摘要 · 未重新核验 · GitHub Advisory

simple-git: unsafe-operations plugin bypass via git long-option abbreviation (--receive-p/--exe) -> command execution (residual of CVE-2026-28291)

CVE-2026-102827

simple-git's blockUnsafeOperationsPlugin blocks dangerous git options (--upload-pack/--receive-pack/--exec/...) unless t

历史摘要 · 未重新核验 · GitHub Advisory

PyMongo: PYTHON-5996 Heap out-of-bounds write via signed size overflow in BSON document encoding

CVE-2026-96749

An integer overflow in the BSON document encoding component of the MongoDB Python Driver's bundled native extension may

历史摘要 · 未重新核验 · GitHub Advisory

PyMongo: PYTHON-5986 Host injection in PyMongo connection string parsing via percent-encoded delimiters

CVE-2026-96748

### Summary PyMongo percent-decoded the entire host section of a connection string before splitting it into individual

历史摘要 · 未重新核验 · GitHub Advisory

PyMongo: PYTHON-5990 Forced Unix domain socket connection via a .sock KMS endpoint in client-side field level encryption

CVE-2026-96747

### Summary PyMongo passed the KMS endpoint of a data key verbatim into `parse_host()`, which returns any string ending

历史摘要 · 未重新核验 · GitHub Advisory

Socket.IO: Prototype Pollution via Unsafe Client Session Lookup

CVE-2026-102600

### Impact This is a **prototype pollution / improper client lookup** vulnerability in `@socket.io/cluster-engine`. Se

历史摘要 · 未重新核验 · GitHub Advisory

Filament: Multi-factor authentication (app) management actions do not require password reauthentication

CVE-2026-104181

App-based multi-factor authentication management actions did not consistently require the user to confirm their current

历史摘要 · 未重新核验 · GitHub Advisory

PyJWT accepts inconsistent OKP x/d JWKs, causing public/private key identity confusion

CVE-2026-102275

### Summary PyJWT accepts internally inconsistent OKP private JWKs where the declared public key `x` does not correspon

历史摘要 · 未重新核验 · GitHub Advisory

DOMPurify: IN_PLACE returns a force-removed rawtext root whose text carries attacker markup — pure HTML reparse executes

## Environment - dompurify 3.4.15 (current npm release); reproduced independently on jsdom 30.0.1 and 29.1.1 (Node.js 2

历史摘要 · 未重新核验 · GitHub Advisory

vLLM: Qwen2-VL / Qwen3-VL video samplers bound on request-controlled max_frames, which the num_frames ceiling does not reach

CVE-2026-105758

### Summary An unauthenticated remote attacker can exhaust the memory of the vLLM API-server process by raising the req

历史摘要 · 未重新核验 · GitHub Advisory

vLLM: GLMGA video sampling permits request-driven CPU and memory exhaustion

CVE-2026-105760

## Summary The OpenAI-compatible chat endpoint accepts request-level video loader options through `media_io_kwargs`. A

历史摘要 · 未重新核验 · GitHub Advisory

vLLM: Scale-out disaggregated multimodal transport trusts caller-supplied features

CVE-2026-105754

## Affected - **Ecosystem / package:** pip / `vllm` - **Affected versions:** vLLM ≤ 0.25.1 (confirmed on 0.25.1, commit

历史摘要 · 未重新核验 · GitHub Advisory