Coze Studio through 0.5.1 fails to restrict the server URL supplied when registering plugin tools...
CVE-2026-92795
Coze Studio through 0.5.1 fails to restrict the server URL supplied when registering plugin tools, allowing authenticate
#advisory
共收录 23421 条相关情报。
← 返回所有主题OpenNHP through 1.0.2 selects its trusted-execution attestation verifier based on attacker...
CVE-2026-92792
OpenNHP through 1.0.2 selects its trusted-execution attestation verifier based on attacker-supplied evidence containing
Graylog through 7.1.4 validates outbound URLs against an allowlist before making requests but...
CVE-2026-92789
Graylog through 7.1.4 validates outbound URLs against an allowlist before making requests but fails to re-validate after
GoAdmin through 1.2.26 fails to properly anchor the logout pattern when checking permissions,...
CVE-2026-92793
GoAdmin through 1.2.26 fails to properly anchor the logout pattern when checking permissions, allowing authenticated use
LightGBM through 4.7.0 fails to validate child and split array values when parsing text models,...
CVE-2026-92786
LightGBM through 4.7.0 fails to validate child and split array values when parsing text models, allowing attackers to wr
Coze Studio through 0.5.1 fails to validate that table names in workflow SQL customization nodes...
CVE-2026-92788
Coze Studio through 0.5.1 fails to validate that table names in workflow SQL customization nodes belong to the caller's
Angel through 3.3.0 deserializes untrusted setAlgoMetrics payload using Kryo without class...
CVE-2026-92785
Angel through 3.3.0 deserializes untrusted setAlgoMetrics payload using Kryo without class registration or allowlist val
Higress before 2.2.4 panics when processing a Cookie header segment without an equals sign,...
CVE-2026-92790
Higress before 2.2.4 panics when processing a Cookie header segment without an equals sign, causing the plugin wrapper t
Uber Kraken through 0.1.29 fails to validate the tag parameter in the /tags/{tag} endpoint,...
CVE-2026-92791
Uber Kraken through 0.1.29 fails to validate the tag parameter in the /tags/{tag} endpoint, allowing unauthenticated att
Builder.io Gen2 SDKs through versions 5.2.11 and 0.25.13 contain a prototype pollution...
CVE-2026-92781
Builder.io Gen2 SDKs through versions 5.2.11 and 0.25.13 contain a prototype pollution vulnerability in the unflatten he
KnowStreaming through 3.4.1 fails to enforce role-based access control on REST API endpoints,...
CVE-2026-92780
KnowStreaming through 3.4.1 fails to enforce role-based access control on REST API endpoints, allowing any authenticated
Wiki.js through 2.5.314 contains a server-side request forgery vulnerability in the Image...
CVE-2026-92775
Wiki.js through 2.5.314 contains a server-side request forgery vulnerability in the Image Prefetch renderer that fetches
Yeti through 2.11.0 fails to validate caller permissions in the DELETE /api/v2/rbac/{id} endpoint...
CVE-2026-92783
Yeti through 2.11.0 fails to validate caller permissions in the DELETE /api/v2/rbac/{id} endpoint, allowing users with r
Wiki.js through 2.5.314 fails to require path separators when matching START and END page rules,...
CVE-2026-92776
Wiki.js through 2.5.314 fails to require path separators when matching START and END page rules, allowing attackers to a
Chroma through 1.5.9 fails to validate tenant and database segments when resolving collections,...
CVE-2026-92782
Chroma through 1.5.9 fails to validate tenant and database segments when resolving collections, allowing authenticated a
CMAK through 3.0.0.6 fails to apply the scheduled leader election feature toggle to HTML form...
CVE-2026-92778
CMAK through 3.0.0.6 fails to apply the scheduled leader election feature toggle to HTML form routes, allowing attackers
Wiki.js through 2.5.314 omits page tags from authorization checks in multiple GraphQL resolvers,...
CVE-2026-92774
Wiki.js through 2.5.314 omits page tags from authorization checks in multiple GraphQL resolvers, allowing tag-based acce
Builder.io Gen2 SDKs through versions 5.2.11 and 0.25.13 contain a prototype pollution...
CVE-2026-92779
Builder.io Gen2 SDKs through versions 5.2.11 and 0.25.13 contain a prototype pollution vulnerability in the deep-set hel
Trigger.dev before 4.6.0 fails to verify that an authenticated user controls a GitHub App...
CVE-2026-92773
Trigger.dev before 4.6.0 fails to verify that an authenticated user controls a GitHub App installation before binding it
Rundeck through 6.2.1 fails to properly authorize the importConfig and importNodesSources...
CVE-2026-92763
Rundeck through 6.2.1 fails to properly authorize the importConfig and importNodesSources parameters in the project arch