SiYuan before v3.8.4 Path Traversal via checkoutRepo sessionID
CVE-2026-100637
SiYuan versions before v3.8.4 contain a path traversal vulnerability in the checkoutRepo endpoint that allows authentica
#advisory
共收录 23334 条相关情报。
← 返回所有主题SiYuan before v3.8.4 Path Traversal via exportBrowserHTML folder
CVE-2026-100636
SiYuan versions before v3.8.4 contain a path traversal vulnerability in the exportBrowserHTML endpoint that allows authe
SiYuan before v3.8.4 Authentication Bypass via Plaintext Session Cookie
CVE-2026-100635
SiYuan before v3.8.4 contains an authentication bypass vulnerability in the publish service where session cookies are is
SiYuan before v3.8.4 Missing Authorization via siyuan-send-windows
CVE-2026-100634
SiYuan before v3.8.4 does not validate the sender or restrict recipients in the 'siyuan-send-windows' IPC handler of the
SiYuan 3.8.0 through 3.8.3 Path Traversal via MCP File Operations
CVE-2026-100633
SiYuan is a self-hosted personal knowledge management system. In versions 3.8.0 through 3.8.3, the MCP file tool's sensi
Parse Server 9.0.0 before 9.10.1 Protected Fields Disclosure via LiveQuery
CVE-2026-100632
Parse Server is an open-source backend server. In versions >= 9.0.0 and < 9.10.1-alpha.8, and in versions < 8.6.89, Live
Parse Server 9.0.0 Unauthenticated Installation Deletion via Operator Injection
CVE-2026-100631
Parse Server is an open source backend server. In versions prior to 8.6.90 and in versions from 9.0.0 prior to 9.10.1-al
Capgo backend before 12.127.5 Privilege Escalation via role_bindings PATCH
CVE-2026-100629
Capgo (capgo.app backend) before 12.127.5 contains an authorization flaw in the PATCH /private/role_bindings/:binding_id
capgo.app before 12.128.12 Authentication Bypass via apikey
CVE-2026-100628
capgo.app before 12.128.12 fails to enforce an organization's API key expiration policy when creating app-scoped API key
Capgo.app before 12.264.5 Upload Expiry Bypass via build upload
CVE-2026-100624
Capgo.app before 12.264.5 does not enforce upload expiry or build lifecycle state in the /build/upload/:jobId TUS proxy
capgo.app through 12.129.0 Cache Restoration of Deleted Bundles
CVE-2026-100622
capgo.app through 12.129.0 fails to verify deletion status when serving cached bundle artifacts from the public file rea
Capgo CLI through 7.98.2 Excessive Permissions via Overpermissioned Play Console Service Account
CVE-2026-100620
Capgo CLI (npm package @capgo/cli) through 7.98.2 is affected by an over-permissioned service account in its Android onb
Cap-go capgo.app before 12.267.1 Privilege Escalation via API Key Rotation
CVE-2026-100615
Cap-go capgo.app before 12.267.1 fails to validate target API key privilege during rotation, allowing an apikey_manager
Capgo before 12.244.1 Cross-Tenant Image Overwrite via Metadata Worker
CVE-2026-100614
Capgo before 12.244.1 contains a cross-tenant integrity vulnerability in the metadata-cleaning worker that trusts image
Capgo SSO Provider ID Authentication Bypass via Incomplete Migration
CVE-2026-100612
Capgo (capgo.app) through version 12.261.0 contains an incomplete access-control fix for the public.sso_providers table.
Flowise through 3.1.4 Missing Authorization via upsert-history
CVE-2026-100610
Flowise through 3.1.4 exposes GET /api/v1/upsert-history/:id and PATCH /api/v1/upsert-history without route-level permis
Flowise through 3.1.4 Insecure Direct Object Reference via Credential
CVE-2026-100609
Flowise (npm packages `flowise` and `flowise-components`) through 3.1.4 looks up credentials by ID without filtering on
Flowise through 3.1.4 Authorization Bypass via BullMQ Dashboard
CVE-2026-100608
Flowise through 3.1.4 does not enforce authorization on the BullMQ admin dashboard. When the server runs in queue mode w
Flowise through 3.1.4 Authentication Bypass via Email-Only SSO
CVE-2026-100607
Flowise through 3.1.4 resolves SSO and local-password users solely by email without storing provider or subject identifi
Flowise through 3.1.4 Authentication Bypass via SSO Email Match
CVE-2026-100606
Flowise through 3.1.4 (Enterprise/platform mode with SSO enabled) contains an authentication bypass in the SSO login pat