Trestle URLSecurityValidator SSRF allowlist bypass via IPv4-mapped IPv6 and 0.0.0.0
CVE-2026-52776
Compliance-trestle (Trestle) is a tooling platform for managing compliance as code. In versions before 3.12.4 and versio
#advisory
共收录 23507 条相关情报。
← 返回所有主题Trestle has Server-Side Template Injection (SSTI) via Recursive Template Re-evaluation of Untrusted Data
CVE-2026-54757
Compliance-trestle (Trestle) is a Python SDK and command-line tool for managing OSCAL compliance documents. In versions
Doorkeeper OpenID Connect: Dynamic Client Registration feature creates public clients with client_secret
CVE-2026-44476
Doorkeeper is an OAuth 2 provider for Ruby on Rails. In version 1.9.0, an attacker who knows only a dynamically register
DB-GPT builds the destination path for an uploaded skill from the multipart filename without...
CVE-2026-80104
DB-GPT builds the destination path for an uploaded skill from the multipart filename without constraining it to the uplo
Improper input validation in Autofill in Google Chrome on on Android prior to 152.0.7977.65...
CVE-2026-79288
Improper input validation in Autofill in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to
Use after free in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote...
CVE-2026-79282
Use after free in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to execute arbit
Missing authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed...
CVE-2026-79286
Missing authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to po
UI misrepresentation in Core in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote...
CVE-2026-79284
UI misrepresentation in Core in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker who had comprom
Information leak in CSS in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to...
CVE-2026-79291
Information leak in CSS in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive informatio
Improper control of a resource through its lifetime in Workers in Google Chrome prior to 152.0...
CVE-2026-79289
Improper control of a resource through its lifetime in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote
Information leak in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker...
CVE-2026-79293
Information leak in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive info
Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to...
CVE-2026-79290
Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outsi
A flaw was found in the file-xwd plugin in GIMP. When processing a specially crafted XWD image...
CVE-2026-80101
A flaw was found in the file-xwd plugin in GIMP. When processing a specially crafted XWD image file, the plugin validate
UI misrepresentation in Geometry in Google Chrome prior to 152.0.7977.65 allowed a remote...
CVE-2026-79283
UI misrepresentation in Geometry in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to spoof UI elements
Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a...
CVE-2026-79285
Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to obtai
Observable discrepancy in Forms in Google Chrome prior to 152.0.7977.65 allowed a remote attacker...
CVE-2026-79287
Observable discrepancy in Forms in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive in
Integer overflow in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker...
CVE-2026-79292
Integer overflow in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the
A vulnerability has been found in code-projects Online Shopping System 1.0. Affected by this...
CVE-2026-79793
A vulnerability has been found in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown
A flaw has been found in zackees transcribe-anything up to 4.1.0. Affected is the function...
CVE-2026-79792
A flaw has been found in zackees transcribe-anything up to 4.1.0. Affected is the function ytdlp_download of the file sr
Incorrect reference resolution in WebView in Google Chrome on on Android prior to 152.0.7977.65...
CVE-2026-79273
Incorrect reference resolution in WebView in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacke