sqlparse: Reindentation of tuple lists causes near-cap quadratic CPU consumption
CVE-2026-84305
sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, sqlparse.format(sql, reindent=True) and sqlfo
#advisory
共收录 23717 条相关情报。
← 返回所有主题gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation
CVE-2026-84304
gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, internal/transport/transport.go stores each fragment
gRPC-Go: xDS RBAC HTTP Filter bypass via mixed-case Header Matching and gRFC A41 validation evasion
CVE-2026-84303
gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, the xDS RBAC HTTP filter in internal/xds/httpfilter/
Cleartext storage of HMAC signing key in Amazon SageMaker Python SDK @step/@remote pipeline path
CVE-2026-83551
Cleartext storage of sensitive information in the @step and @remote decorator pipeline component in Amazon SageMaker Pyt
Wyoming < 1.10.2 SSRF via uri Query Parameter
CVE-2026-8712
Wyoming before 1.10.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers with ne
MLFLOW_ALLOW_PICKLE_DESERIALIZATION=False safety control bypassed by mlflow.statsmodels flavor — RCE via crafted model artifact
## Summary MLflow introduced `MLFLOW_ALLOW_PICKLE_DESERIALIZATION` as a security control to prevent unsafe `pickle.load
Browserslist: Unbounded memory growth (no cache eviction) via distinct query results, leading to eventual OOM
CVE-2026-73089
## Vulnerability Details **File**: `index.js` **Location**: `cache` (browserslist()'s result cache, line ~402) and `par
Browserslist: Uncaught crash / prototype write via untrusted browserslist-stats.json custom stats (normalizeStats)
CVE-2026-73088
## Vulnerability Details **File**: `node.js` **Function**: `normalizeStats()` (line ~214), reached from `getStat()` (ca
MySQL2: Auth Plugin Downgrade to mysql_clear_password Leaks Plaintext Credentials
## Summary A rogue MySQL server (or MITM) can force mysql2 to send credentials in **plaintext** by requesting an auth s
Smarty: SSRF via redirect bypass of trusted_uri using {fetch}
CVE-2026-62993
When a Security policy is active, {fetch} validates the requested remote URL against the trusted_uri allowlist via Secur
Kirby: System path exposure from error messages in the REST API
CVE-2026-69127
### TL;DR This vulnerability affects all Kirby sites that have not disabled the REST API with the `'api' => false` opti
Heym before 0.0.98 SSRF via WebSocket endpoints
CVE-2026-84207
Heym before 0.0.98 fails to apply SSRF egress guards to WebSocket Send and WebSocket Trigger nodes, allowing authenticat
Snipe-IT before 8.7.0 Authorization Bypass via Bulk Restore
CVE-2026-84206
Snipe-IT before 8.7.0 gates the bulk asset restore endpoint on the assets.edit permission instead of assets.delete, allo
GROWI through 8.0.2 Authorization Bypass Through User-Controlled Key on apiv3 Revision Retrieval
CVE-2026-84205
GROWI contains an access control vulnerability in the GET /_api/v3/revisions/:id endpoint that validates access against
GROWI through 8.0.2 Missing Authorization on apiv3 Attachment Retrieval
CVE-2026-84204
GROWI contains an access control vulnerability in the GET /_api/v3/attachment/:id endpoint that fails to validate page a
Memos 0.26.0 through 0.30.0 Insufficient Session Expiration on Password Change
CVE-2026-84203
Memos versions 0.26.0 through 0.30.0 fail to revoke refresh tokens when a user changes their password, allowing attacker
ModelScope through 1.40.0 Unsafe YAML Deserialization in Model Config Loading
CVE-2026-84202
ModelScope uses PyYAML's unsafe yaml.Loader to parse model configuration files, allowing arbitrary code execution throug
jackson-databind omits java.lang.Comparable from DefaultBaseTypeLimitingValidator's unsafe base types
CVE-2026-83557
DefaultBaseTypeLimitingValidator is the PolymorphicTypeValidator applied automatically whenever @JsonTypeInfo is used wi
xmldom: End-tag Whitespace-Trim Regex ReDoS — quadratic backtracking in the 0.8.x end-tag parser
CVE-2026-83619
xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. From 0.7.0 unt
xmldom: requireWellFormed DocType publicId/systemId validation is bypassable via an embedded line terminator
CVE-2026-83618
xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. From 0.9.10 un