TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` serialization

CVE-2026-116675

### Impact Stored XSS vulnerability in the media plugin. Attackers can inject malicious scripts via elements crafted thr

历史摘要 · 未重新核验 · GitHub Advisory

Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource server

CVE-2026-116684

### Summary In affected versions, the SDK's server-side bearer authentication had no way to check that a token was issue

历史摘要 · 未重新核验 · GitHub Advisory

OpenTelemetry Python: Unbounded memory allocation in Jaeger baggage propagation

CVE-2026-116694

## Summary `JaegerPropagator.extract()` in `opentelemetry-propagator-jaeger` did not enforce limits when extracting inb

历史摘要 · 未重新核验 · GitHub Advisory

Model Context Protocol Python SDK: HTTP client transports followed cross-origin redirects carrying custom headers and bodies

CVE-2026-116685

### Summary In affected versions, the SDK's Streamable HTTP and SSE client transports followed HTTP redirects to any hos

历史摘要 · 未重新核验 · GitHub Advisory

Model Context Protocol Python SDK: Client fetched server-chosen $ref URLs while validating tool results against output schemas

CVE-2026-116686

### Summary In affected versions, when a connected MCP server declared an `outputSchema` for a tool, the SDK's client va

历史摘要 · 未重新核验 · GitHub Advisory

CKEditor: Cross-site scripting (XSS) in the engine package

CVE-2026-116687

### Impact A Cross-Site Scripting (XSS) vulnerability has been discovered in the CKEditor 5 engine. This vulnerability c

历史摘要 · 未重新核验 · GitHub Advisory

CKEditor: Cross-site scripting (XSS) in the engine package

CVE-2026-116688

### Impact A Cross-Site Scripting (XSS) vulnerability has been discovered in the CKEditor 5 engine. This vulnerability i

历史摘要 · 未重新核验 · GitHub Advisory

Neko: Authorization bypass in legacy WebRTC input handling

CVE-2026-116679

### Impact When legacy mode is enabled and `session.implicit_hosting` is enabled, the legacy WebRTC data channel incorr

历史摘要 · 未重新核验 · GitHub Advisory

Atlantis: OS command injection through PR-controlled Terraform workspace enables RCE during plan

CVE-2026-116676

### Summary Atlantis passes the Terraform `workspace` value from a pull request's `atlantis.yaml` into a shell command

历史摘要 · 未重新核验 · GitHub Advisory

FileBrowser: Symlink following escapes user scope allowing arbitrary file read outside the served directory

CVE-2026-116682

## Summary File read paths resolve symbolic links with `filepath.EvalSymlinks` and then operate on the resolved target

历史摘要 · 未重新核验 · GitHub Advisory

follow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically follows redirects. From 1.16.0 until 1.16.2, the documented sensitiveHeaders option is checked wit...

CVE-2026-116689

follow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically follows redirects. From 1.16.0 until 1.16

来源摘录 · NVD / GitHub Advisory / OSV.dev

Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource server

CVE-2026-116684

The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. From 1.

历史摘要 · 未重新核验 · OSV.dev

undici vulnerable to cache poisoning and cross-user disclosure via cross-origin redirects

CVE-2026-109829

### Impact When an originless `Agent` composes the redirect and cache interceptors as `compose(redirect(), cache())` wi

历史摘要 · 未重新核验 · GitHub Advisory

undici vulnerable to TLS certificate validation bypass via dropped tls options in Agent

CVE-2026-109383

### Impact undici's `Agent` passes its constructor options through a JSON-based deep clone (`JSON.parse(JSON.stringify(

历史摘要 · 未重新核验 · GitHub Advisory

undici vulnerable to Denial of Service via TLS 1.2 certificate-changing renegotiation

CVE-2026-87018

## Impact undici crashes the client process when a TLS 1.2 server renegotiates after the connection is established and

历史摘要 · 未重新核验 · GitHub Advisory

undici WebSocket client vulnerable to Denial of Service via unbounded automatic PONG buffering

CVE-2026-109932

### Impact undici's WebSocket client (including Node.js's bundled `globalThis.WebSocket`) can be driven to exhaust proc

历史摘要 · 未重新核验 · GitHub Advisory

undici vulnerable to Denial of Service via unhandled exception in the decompress interceptor

CVE-2026-87029

## Impact undici's `decompress` interceptor forwards decompressed response data to the downstream handler from zlib str

历史摘要 · 未重新核验 · GitHub Advisory

MCP TypeScript SDK: HTTP server transports and handlers did not limit request body size or JSON-RPC batch length

### Summary In affected versions, MCP servers reachable over HTTP put no limit on the size of a POST body or on the numb

历史摘要 · 未重新核验 · GitHub Advisory

Symfony: Unbounded Recursion in the YAML Inline Lexer Lets a Single Document Crash the Process

CVE-2026-109413

### Description `Yaml\Parser::lexInlineStructure()` recursed through `lexInlineMapping()` and `lexInlineSequence()` for

历史摘要 · 未重新核验 · GitHub Advisory

Symfony: ReDoS in HeaderUtils::split() Reachable Through the Cache-Control Request Header

CVE-2026-108082

### Description `HeaderUtils::split()` parsed header values with a pattern whose token alternative also matched whitesp

历史摘要 · 未重新核验 · GitHub Advisory