Unhandled KeyError in AshGraphql relay node resolution crashes queries via an unknown type segment
CVE-2026-81633
Improper Input Validation vulnerability in ash-project ash_graphql allows an unauthenticated client to crash a relay nod
#advisory
共收录 23717 条相关情报。
← 返回所有主题Broken access control in AshGraphql subscription batcher applies authorization suppression to only the first notification
CVE-2026-81643
Incorrect Authorization vulnerability in ash-project ash_graphql delivers GraphQL subscription payloads for records a su
Re-entrant synchronous publish in AshGraphql subscription batcher delivers one subscriber's records to another's topic
CVE-2026-82367
Exposure of Data Element to Wrong Session vulnerability in ash-project ash_graphql can deliver one subscription's resolv
Cloaked plaintext leaks through a non-sensitive action argument in AshCloak
CVE-2026-81322
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ash-project ash_cloak allows anyone with acc
Unsafe deserialization of decrypted terms enables node DoS in AshCloak
CVE-2026-81319
Deserialization of Untrusted Data vulnerability in ash-project ash_cloak allows an attacker who can influence the bytes
Linux Foundation Magma gNB Termination ngap_amf.c denial of service
CVE-2026-82552
A security vulnerability has been detected in Linux Foundation Magma 1.9.0. Affected by this vulnerability is an unknown
Linux Foundation Magma NGSetup ngap_amf_handlers.c state issue
CVE-2026-82551
A weakness has been identified in Linux Foundation Magma 1.9.0. Affected is an unknown function of the file ngap_amf_han
Linux Foundation Magma NGSetupRequest input validation
CVE-2026-82550
A security flaw has been discovered in Linux Foundation Magma 1.9.0. This impacts an unknown function of the component N
SiYuan before v3.8.1 contains a stored cross-site scripting vulnerability in confirmDialog()...
CVE-2026-82653
SiYuan before v3.8.1 contains a stored cross-site scripting vulnerability in confirmDialog() where unescaped package nam
WWBN AVideo contains a server-side request forgery filter bypass vulnerability in the...
CVE-2026-82648
WWBN AVideo contains a server-side request forgery filter bypass vulnerability in the isSSRFSafeURL function that fails
Admidio before 5.0.12 fails to enforce login-only module restrictions in RSS feed endpoints for...
CVE-2026-82657
Admidio before 5.0.12 fails to enforce login-only module restrictions in RSS feed endpoints for forum and announcements
SiYuan before v3.8.1 fails to filter invisible-tier content from SQL embed blocks, attribute-view...
CVE-2026-82652
SiYuan before v3.8.1 fails to filter invisible-tier content from SQL embed blocks, attribute-view keys, and attribute-vi
SiYuan Windows installer before version 3.8.1 (affected versions >= 2.0.14) contains an...
CVE-2026-82649
SiYuan Windows installer before version 3.8.1 (affected versions >= 2.0.14) contains an uncontrolled search path element
SiYuan before v3.8.1 does not apply the IsForbiddenAbsPath guard (introduced in GHSA-c8r8-95hg...
CVE-2026-82651
SiYuan before v3.8.1 does not apply the IsForbiddenAbsPath guard (introduced in GHSA-c8r8-95hg-mp34) to the /history/*pa
SiYuan 3.8.0 contains a path traversal / sensitive file exposure vulnerability in the...
CVE-2026-82650
SiYuan 3.8.0 contains a path traversal / sensitive file exposure vulnerability in the RenderTemplate function (kernel/mo
AVideo (current commit e01e41ecc and earlier) exposes stream credentials through the plugin/Live...
CVE-2026-82645
AVideo (current commit e01e41ecc and earlier) exposes stream credentials through the plugin/Live/view/Live_restreams/get
WWBN AVideo contains an unauthenticated reflected cross-site scripting vulnerability in the...
CVE-2026-82646
WWBN AVideo contains an unauthenticated reflected cross-site scripting vulnerability in the url2Embed.json.php endpoint
Admidio before 5.0.12 fails to sanitize album names in the photo ZIP download functionality,...
CVE-2026-82656
Admidio before 5.0.12 fails to sanitize album names in the photo ZIP download functionality, allowing authenticated user
Admidio versions before 5.0.12 contain a broken access control vulnerability in profile_function...
CVE-2026-82658
Admidio versions before 5.0.12 contain a broken access control vulnerability in profile_function.php that allows authent
WWBN AVideo contains a cross-site request forgery vulnerability in sendEmail.json.php that allows...
CVE-2026-82647
WWBN AVideo contains a cross-site request forgery vulnerability in sendEmail.json.php that allows authenticated administ