@hulumi/policies before 1.3.2 OIDC Trust Policy Bypass
CVE-2026-82856
@hulumi/policies versions before 1.3.2 fail to properly validate set-qualified AWS IAM condition operators in GitHub OID
#advisory
共收录 23717 条相关情报。
← 返回所有主题@hulumi/policies before 1.3.2 Evidence Validation Bypass
CVE-2026-82855
@hulumi/policies versions before 1.3.2 contain an evidence validation bypass vulnerability in Cloudflare and deployment-
Nodemailer before 8.0.3 SMTP Command Injection via envelope.size
CVE-2026-82854
Nodemailer before 8.0.4 is vulnerable to SMTP command injection through the unsanitized envelope.size parameter. When an
Nodemailer before 8.0.5 SMTP Command Injection via CRLF
CVE-2026-82853
Nodemailer versions before 8.0.5 contain an SMTP command injection vulnerability in the transport name option used in EH
Nodemailer before 8.0.8 TLS Certificate Validation Bypass
CVE-2026-82662
Nodemailer before 8.0.8 disables TLS certificate verification in lib/fetch/index.js through rejectUnauthorized: false, a
Nodemailer CRLF Injection via List-* Header Comments
CVE-2026-82661
Nodemailer before 8.0.9 fails to sanitize carriage return and line feed characters in list comment fields, allowing atta
Nodemailer jsonTransport bypasses disableFileAccess and disableUrlAccess
CVE-2026-82660
Nodemailer before 8.0.9 fails to enforce disableFileAccess and disableUrlAccess options during message normalization in
nodemailer before 9.0.1 File Read and SSRF via raw option
CVE-2026-82659
nodemailer before 9.0.1 fails to apply disableFileAccess and disableUrlAccess flags to message-level raw option, allowin
nodemailer before 6.9.9 ReDoS via attachDataUrls parameter
CVE-2024-58379
nodemailer before 6.9.9 contains a regular expression denial of service vulnerability in email parsing when attachDataUr
valkey-io valkey Blocked-on-keys blocked.c handleClientsBlockedOnKey use after free
CVE-2026-82631
A security flaw has been discovered in valkey-io valkey 9.1.0. The affected element is the function handleClientsBlocked
PowerJob Transport Endpoint TestController.java MuConnectionManager.getOrCreateConnection server-side request forgery
CVE-2026-82630
A vulnerability was identified in PowerJob up to 5.1.2. Impacted is the function MuConnectionManager.getOrCreateConnecti
open62541 History Backend ua_history_data_backend_memory.c UA_DataValue_backend_copyRange use after free
CVE-2026-82623
A vulnerability was detected in open62541 up to 1.5.5. Affected by this vulnerability is the function UA_DataValue_backe
Systerel S2OPC subscription_mgr.c use after free
CVE-2026-82619
A vulnerability was identified in Systerel S2OPC up to 1.7.3. The impacted element is the function monitored_item_event_
A vulnerability has been found in BareBones BBEdit up to 15.5.5. The affected element is an...
CVE-2026-82605
A vulnerability has been found in BareBones BBEdit up to 15.5.5. The affected element is an unknown function of the comp
A vulnerability was found in Cozmoslabs Profile Builder Plugin up to 3.16.1 on WordPress. The...
CVE-2026-82607
A vulnerability was found in Cozmoslabs Profile Builder Plugin up to 3.16.1 on WordPress. The impacted element is the fu
A vulnerability was determined in Kamailio up to 5.5.0/6.0.7. This affects the function...
CVE-2026-82608
A vulnerability was determined in Kamailio up to 5.5.0/6.0.7. This affects the function get_4bytes of the file src/modul
A vulnerability was detected in SeaCMS up to 13.6. This issue affects some unknown processing of...
CVE-2026-82603
A vulnerability was detected in SeaCMS up to 13.6. This issue affects some unknown processing of the file /member.php?ac
A security flaw has been discovered in SeaCMS up to 13.6. Affected by this issue is some unknown...
CVE-2026-82600
A security flaw has been discovered in SeaCMS up to 13.6. Affected by this issue is some unknown functionality of the fi
A weakness has been identified in SeaCMS up to 13.6. This affects an unknown part of the file ...
CVE-2026-82601
A weakness has been identified in SeaCMS up to 13.6. This affects an unknown part of the file /err.php. Executing a mani
A vulnerability was determined in SeaCMS up to 13.6. Affected is the function parseIf of the file...
CVE-2026-82598
A vulnerability was determined in SeaCMS up to 13.6. Affected is the function parseIf of the file search.php of the comp