Cocos AI: Intra-handshake attested TLS implementation is vulnerable to session-misbinding attacks for Intel TDX verifier path

CVE-2026-92701

trusted execution environments. In versions up to and including 0.8.2, the intra-handshake attested TLS (aTLS) Intel TDX

历史摘要 · 未重新核验 · OSV.dev

AnyIO process-pool workers can block indefinitely on undrained stderr

CVE-2026-64847

AnyIO is a high level asynchronous concurrency and networking framework that works on top of either Trio or asyncio. Pri

历史摘要 · 未重新核验 · OSV.dev

LMDeploy vulnerable to arbitrary code execution via eval() of untrusted quant_dtype in model config loading

CVE-2026-33625

### Summary lmdeploy <= latest contains a code injection vulnerability in `lmdeploy/pytorch/config.py` line 620 that al

历史摘要 · 未重新核验 · GitHub Advisory

LMDeploy has Remote Code Execution by Pickle Deserialization via handle_zmq_recv in lmdeploy/lmdeploy/pytorch/disagg/conn/engine_conn.py

CVE-2025-66455

## Summary LMDeploy's PyTorch DistServe/PD-disaggregation control plane used `recv_pyobj()` to deserialize messages rec

历史摘要 · 未重新核验 · GitHub Advisory

LMDeploy has Remote Code Execution by Pickle Deserialization via handle_zmq_recv in lmdeploy/lmdeploy/pytorch/disagg/conn/engine_conn.py

CVE-2025-66455

LMDeploy is a toolkit for compressing, deploying, and serving large language models. Starting in version 0.9.2 and prior

历史摘要 · 未重新核验 · OSV.dev

Cocos AI: Intra-handshake attested TLS implementation can accept Evidence with nil, empty, or omitted reportData in the AMD SEV-SNP path

CVE-2026-92702

Cocos AI is a confidential computing system for running AI workloads inside trusted execution environments. In versions

历史摘要 · 未重新核验 · OSV.dev

AnyIO run_process/open_process ignores extra_groups and can retain parent supplementary groups

CVE-2026-63349

AnyIO is a high level asynchronous concurrency and networking framework that works on top of either Trio or asyncio. In

历史摘要 · 未重新核验 · OSV.dev

Semantic MediaWiki'a missing authorization in the smwtask API module allows unauthenticated access to admin-only maintenance tasks

### Summary The `api.php?action=smwtask` API module performs no authorization check. The equivalent maintenance interfa

历史摘要 · 未重新核验 · GitHub Advisory

Semantic MediaWiki's Special:FacetedSearch cstate hidden inputs enable reflected XSS (residual of CVE-2025-10354)

### Summary Special:FacetedSearch `cstate` hidden inputs enable reflected XSS (residual of CVE-2025-10354) ### Details

历史摘要 · 未重新核验 · GitHub Advisory

Semantic MediaWiki affected by reflected XSS in `Special:Ask` via a forged cursor pagination token

CVE-2026-77616

Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's

历史摘要 · 未重新核验 · OSV.dev

zot: Bearer authentication maps DELETE to push scope, allowing unauthorized deletion

CVE-2026-61833

zot is a container image and artifact registry based on the Open Container Initiative Distribution Specification. Prior

历史摘要 · 未重新核验 · OSV.dev

Semantic MediaWiki has a query debug output XSS (`DebugFormatter`)

CVE-2026-77610

Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's

历史摘要 · 未重新核验 · OSV.dev

Rsyslog: mmpstrucdata stack buffer overflow with oversized RFC5424 structured data

CVE-2026-61548

Rsyslog is a rocket-fast system for log processing. From 7.5.4 until 8.2606.0, the optional mmpstrucdata plugin's parseS

历史摘要 · 未重新核验 · OSV.dev

Rsyslog: Heap buffer overflow in imhttp plugin Basic Authentication handling

CVE-2026-55556

Rsyslog is a rocket-fast system for log processing. From 8.2110.0 until 8.2604.0, the optional imhttp module's parse_aut

历史摘要 · 未重新核验 · OSV.dev

Semantic MediaWiki has an open redirect in Special:URIResolver

CVE-2026-77609

Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's

历史摘要 · 未重新核验 · OSV.dev

AnyCable: Telemetry Subsystem Contains Hardcoded Authentication Token and Transmits CLI Arguments Including Secrets

CVE-2026-63406

AnyCable is a realtime server for reliable two-way communication that supports any backend. Prior to 1.6.15, the telemet

历史摘要 · 未重新核验 · OSV.dev

Semantic MediaWiki affected by Special:Ask table `sep` parameter reflected XSS

CVE-2026-77607

Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's

历史摘要 · 未重新核验 · OSV.dev

AnyCable: Pusher REST API Does Not Verify Request Body MD5 Enabling Signed-Request Replay with Arbitrary Body

CVE-2026-63405

AnyCable is a realtime server for reliable two-way communication that supports any backend. Prior to 1.6.15, the Pusher-

历史摘要 · 未重新核验 · OSV.dev

virtio-win: Integer overflow causing a heap overflow in Viosock driver

CVE-2026-46655

virtio-win provides Windows paravirtualized drivers for QEMU and KVM. From mm210 until mm320, the Viosock driver permits

历史摘要 · 未重新核验 · OSV.dev

Forget-C Jellyfish AI Short Drama Studio FastAPI dependencies.py missing authentication

CVE-2026-93559

A vulnerability was identified in Forget-C Jellyfish AI Short Drama Studio 0.1.0-alpha/0.2.0/0.3.0/0.3.1/0.3.2. This aff

历史摘要 · 未重新核验 · OSV.dev