JLine: ReDoS in Nano Editor Regex Search Mode
CVE-2026-77421
### Summary When regex search mode is enabled in the JLine3 `nano` editor, the user-supplied search term is compiled di
#advisory
共收录 23334 条相关情报。
← 返回所有主题JLine: ReDoS in Built-in grep Command Amplified by Automatic `.*` Wrapping
CVE-2026-77422
### Summary The JLine3 built-in `grep` command wraps the user-supplied regular expression with `.*` before compiling it
9router: Mass assignment in PATCH /api/settings allows authenticated authorization downgrade
CVE-2026-56679
### Summary The `PATCH /api/settings` endpoint writes the entire request body to persistent settings without a field whi
9router: Kiro region injection allows authenticated SSRF with Authorization header forwarding
CVE-2026-56678
### Summary The Kiro API-key validation endpoint builds an upstream URL using a user-controlled `region` value. By supp
9router: Image prefetch DNS rebinding allows SSRF to internal services
CVE-2026-56676
## Summary 9router validates image URLs by resolving the host before fetching, but the later server-side fetch performs
9router /v1 APIs has unauthenticated access via reverse proxy locality collapse
CVE-2026-56675
## Summary 9router treats local loopback requests as trusted and allows access to `/v1/*` without an API key. In a docu
JLine: ReDoS via `HISTORY_IGNORE` Configuration Variable
CVE-2026-77420
### Summary The JLine3 `HISTORY_IGNORE` variable is converted into a Java regular expression with only partial escaping
JLine: ReDoS via `HISTORY_IGNORE` Configuration Variable
CVE-2026-77420
JLine is a Java library for handling console input. From 3.0.0 until 3.30.15 and 4.3.1, DefaultHistory.matchPatterns(Str
JLine: ReDoS in Built-in grep Command Amplified by Automatic `.*` Wrapping
CVE-2026-77422
JLine is a Java library for handling console input. From 3.0.0 until 3.30.15 and 4.3.1, the JLine built-in grep command
NetworkManager-l2tp Privilege Escalation via pppd Username Injection
CVE-2026-75131
NetworkManager-l2tp through 1.52.4, fixed in 1.52.6, contains a privilege escalation vulnerability that allows local use
JLine: ReDoS in Nano Editor Regex Search Mode
CVE-2026-77421
JLine is a Java library for handling console input. From 3.0.0 until 3.30.15 and 4.3.1, the JLine built-in nano editor's
LimeSurvey Community Edition 7.0.14 - Reflected XSS in participant CSV import result via invalid attribute column name
CVE-2026-92730
LimeSurvey Community Edition 7.0.14 contains a reflected cross-site scripting vulnerability on the administrative survey
OpenBao's Recovery Mode Vulnerable To Token Leakage via Timing Attack
CVE-2026-63132
OpenBao is an open source identity-based secrets management system. Prior to 2.6.0, OpenBao's handleLogicalRecovery path
OpenBao LIST ACL bypass: a trailing-slash LIST request skips a more-specific deny rule (unported Vault v2.0.3 fix)
CVE-2026-63131
OpenBao is an open source identity-based secrets management system. Prior to 2.6.0, OpenBao's vault/policy/acl.go could
OpenBao Agent Writes Secrets to Stdout
CVE-2026-77285
OpenBao is an open source identity-based secrets management system. Prior to 2.6.0, OpenBao Agent's exec rendering mode
GoCD is vulnerable to authorization bypass via pipeline structure API
CVE-2026-55632
GoCD is a continuous deliver server. From 20.2.0 until 26.1.0, the internal pipeline structure API used for autocompleti
GoCD is vulnerable to authorization bypass via fetch artifact autosuggestion API
CVE-2026-52744
GoCD is a continuous deliver server. From 20.2.0 until 26.1.0, the internal GoCD UI fetch-artifact auto-suggestion API a
Caddy: fileHidden() case-sensitive pattern bypass — exposes "hidden" files via case variation
CVE-2026-77281 · CVE-2026-92284 · CVE-2026-92700
Caddy is an extensible server platform that uses TLS by default. In version 2.11.3 and earlier, in modules/caddyhttp/fil
Caddy: Unbounded body buffer via {http.request.body} placeholder — memory exhaustion DoS
CVE-2026-77281 · CVE-2026-92700 · CVE-2026-92284
Caddy is an extensible server platform that uses TLS by default. In version 2.11.3 and earlier, in modules/caddyhttp/rep
LimeSurvey Community Edition 7.0.14 - Reflected XSS through unescaped LSS survey-import warnings
CVE-2026-91775
LimeSurvey fails to safely encode attacker-controlled content from a crafted .lss survey file when displaying import war