In the Linux kernel, the following vulnerability has been resolved: mshv: Order pt_vp_array...
CVE-2026-80895
In the Linux kernel, the following vulnerability has been resolved: mshv: Order pt_vp_array publish against irqfd asser
#advisory
共收录 23717 条相关情报。
← 返回所有主题In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix swap entry...
CVE-2026-80893
In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix swap entry corruption when clearing
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Validate...
CVE-2026-80891
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Validate AIBV and AISB before pinni
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: drop dma_buf...
CVE-2026-80888
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: drop dma_buf reference on foreign-fd pr
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: use...
CVE-2026-80887
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: use check_add_overflow for shader size+
In the Linux kernel, the following vulnerability has been resolved: mshv: Fix race in...
CVE-2026-80896
In the Linux kernel, the following vulnerability has been resolved: mshv: Fix race in mshv_irqfd_deassign mshv_irqfd_d
In the Linux kernel, the following vulnerability has been resolved: afs: Fix uncancelled rxrpc...
CVE-2026-80885
In the Linux kernel, the following vulnerability has been resolved: afs: Fix uncancelled rxrpc OOB message handler Fix
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-18745
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CodeWhale: Project config `allow_shell` override enables arbitrary shell command execution via cloned repository
CVE-2026-75911
### Maintainer resolution The CodeWhale maintainers validated this report. The affected package ranges are recorded in
CodeWhale: rlm_eval auto-approves arbitrary Python execution, bypassing the user's approval policy (RCE)
CVE-2026-75858
### Maintainer resolution The CodeWhale maintainers validated this report. The affected package ranges are recorded in
CodeWhale: Argument Injection in `git_blame` Tool Allows Arbitrary File Read Without Approval
CVE-2026-75912
### Maintainer resolution The CodeWhale maintainers validated this report. The affected package ranges are recorded in
CodeWhale: SSRF bypass - TOCTOU on DNS failure for DNS pinning
CVE-2026-75856
### Maintainer resolution The CodeWhale maintainers validated this report. The affected package ranges are recorded in
CodeWhale: js_execution leaks parent environment to model context via missing env scrub
CVE-2026-75915
### Maintainer resolution The CodeWhale maintainers validated this report. The affected package ranges are recorded in
CodeWhale: Argument Injection in `git_show` Tool Allows Arbitrary File Write Without Approval
CVE-2026-75913
### Maintainer resolution The CodeWhale maintainers validated this report. The affected package ranges are recorded in
CodeWhale: exec_shell_interact sends LLM-controlled input to a running shell without an approval prompt (privilege escalation)
CVE-2026-75857
### Maintainer resolution The CodeWhale maintainers validated this report. The affected package ranges are recorded in
Frappe CRM: Authentication Bypass via Logged Invitation Keys in crm/api
CVE-2026-53761
Frappe CRM is an open-source customer relationship management tool. Prior to version 1.73.0, there is an authentication
CodeWhale: Project config `instructions` override enables arbitrary file read into AI system prompt via cloned repository
CVE-2026-75859
### Maintainer resolution The CodeWhale maintainers validated this report. The affected package ranges are recorded in
Nango < 0.71.6 Missing Authentication RCE via runner tRPC server
CVE-2026-9317
Nango before 0.71.6 contains a missing authentication vulnerability in the runner tRPC server that allows unauthenticate
SolidInvoice allows cross-user access to API token request history via writable DataGrid LiveComponent props
CVE-2026-61688
SolidInvoice is an open-source invoicing platform. Prior to version 3.0.1, an authenticated user can view the API reques
SolidInvoice's long-lived API tokens accepted as URL query parameters, exposing credentials in server logs and browser history
CVE-2026-61614
SolidInvoice is an open-source invoicing platform. Prior to version 3.0.1, the REST API authenticator accepts bearer tok