LLaMA-Factory SSRF Guard Bypass via Redirect and DNS Rebinding
CVE-2026-85673
LLaMA-Factory contains a server-side request forgery vulnerability in the OpenAI-compatible API multimodal media URL han
#advisory
共收录 23717 条相关情报。
← 返回所有主题QAnything 2.0.0 Unauthenticated Cross-User File Disclosure
CVE-2026-85671
QAnything 2.0.0 contains an authentication bypass vulnerability in the /api/local_doc_qa/get_file_base64 and /api/local_
tokenizers BpeBuilder Buffer Overflow via merge token
CVE-2026-85670
tokenizers (Hugging Face) is affected by an out-of-bounds buffer access in BpeBuilder::build (tokenizers/src/models/bpe/
potpie through 2.0.0 Missing Ownership Check via code-changes sync
CVE-2026-85669
potpie through 2.0.0 fails to verify user ownership on the POST /conversations/{conversation_id}/code-changes/sync endpo
Xinference 3.3.0 Unauthenticated Arbitrary-Path File Read via /v1/models/llm/auto-register
CVE-2026-85668
Xinference (affected commit 4a94832, v3.x) contains an unauthenticated arbitrary-path file read vulnerability in the POS
xiaobei through 5.5.2 Unauthenticated Webhook Message Injection
CVE-2026-85667
xiaobei through 5.5.2 fails to implement authentication or signature validation on webhook endpoints, allowing unauthent
ogx 1.3.1 Server-Side Request Forgery via MCP tool server_url
CVE-2026-85666
OGX (formerly Llama Stack, affected at commit fbe8e0f) contains an unauthenticated server-side request forgery vulnerabi
Bruno 3.4.2 Arbitrary File Read via Unconfined Body File Path
CVE-2026-85665
Bruno versions through 3.4.2 fail to validate file paths in request body declarations, allowing attackers to read arbitr
Chroma 1.5.9 Unbounded HNSW Index Parameters Memory Exhaustion
CVE-2026-85664
Chroma 1.5.9 fails to validate maximum bounds on HNSW index parameters max_neighbors, ef_construction, and ef_search in
Aim 3.29.1 Remote Code Execution via Unauthenticated Method Dispatch
CVE-2026-85663
Aim 3.29.1 remote tracking server fails to authenticate requests and dispatches arbitrary methods through getattr withou
Marqo 2.26.0 Server-Side Request Forgery via Media URLs
CVE-2026-85662
Marqo 2.26.0 contains a server-side request forgery vulnerability in the add_documents endpoint that allows unauthentica
excel-mcp-server 0.1.8 Arbitrary File Read/Write via stdio mode
CVE-2026-85661
excel-mcp-server 0.1.8 fails to enforce path confinement in stdio mode when EXCEL_FILES_PATH is unset, allowing attacker
Trigger.dev before 4.5.2 Unauthorized Environment Access via Run Replay
CVE-2026-85651
Trigger.dev versions before 4.5.2 fail to validate environment membership during run replay operations, allowing authent
Trigger.dev before 4.5.2 Server-Side Request Forgery via webhook alert-channel
CVE-2026-85650
Trigger.dev before 4.5.2 contains a server-side request forgery vulnerability in webhook alert channel delivery URLs tha
git-mcp-server 2.15.1 Argument Injection via Git Ref Parameters
CVE-2026-85626
git-mcp-server 2.15.1 contains an argument injection vulnerability in the ref and object parameters of git_log, git_diff
sift 17.1.3 Prototype Pollution Remote Code Execution via $where
CVE-2026-85625
sift (sift.js) 17.1.3 enumerates query keys with for...in, which walks the object prototype chain, and dispatches any ma
Blinko 1.8.7 Cross-User Private Note Disclosure via noteReferenceList
CVE-2026-85624
Blinko 1.8.7 contains a cross-user private note disclosure vulnerability in the noteReferenceList procedure that perform
AppFlowy-Cloud through 0.9.64 Cross-Workspace Collab Read via WebSocket
CVE-2026-85622
AppFlowy-Cloud through 0.9.64 fails to validate workspace membership when establishing WebSocket connections in the esta
LobeChat 2.2.1 Webhook Signature Verification Bypass QQ Feishu
CVE-2026-85621
LobeChat (LobeHub) 2.2.1 does not properly verify inbound chat-platform webhook signatures in the QQ and Feishu adapters
Postgres MCP Pro 0.3.0 Restricted-Mode Bypass via FROM-Clause Function
CVE-2026-85620
Postgres MCP Pro 0.3.0 contains a restricted-mode bypass vulnerability where function-name validation is not applied to