odf-kit has HTML injection leading to XSS in odsToHtml() via unescaped style attribute values
### Summary ODF style values are interpolated into `style="..."` attributes without HTML-escaping in odf-kit's ODS to-H
#advisory
共收录 22920 条相关情报。
← 返回所有主题pypdf: Possible long runtimes for repeated references to the same missing object
CVE-2026-115572
### Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires loading
pypdf: Possible long runtimes for repeated malformed cross-reference entries (Follow-up)
CVE-2026-115585
### Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires cross-re
pypdf: Possible long runtimes for large xref table header limits
CVE-2026-115580
### Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires opening
Tokio: Race condition in `tokio::time::Interval`
CVE-2026-115567
### Summary On the multi-threaded runtime, there is a race condition between `Interval::poll_tick` and the runtime's ti
Electron: Mitigation for compromised eMudhra intermediate certificates
CVE-2026-115570
### Impact A set of eMudhra intermediate certificates were compromised and are being blocked by browsers and other TLS
body-parser vulnerable to Denial of Service via trailing bytes after a compressed request body
CVE-2026-111181
### Impact A single request can crash any application using `body-parser` with default options. When a request carries
gitoxide gix: untrusted .git/config disables filesystem .git-protection path checks via unfiltered protect_options()
## Summary In the `gix` crate, `Cache::protect_options()` in `gix/src/config/cache/access.rs` reads the three filesyste
Livewire: Authorization bypass in #[Authorize] via reordered parameter keys and #[Json] execution order
### Impact Three issues allowed actions protected by the `#[Authorize]` attribute to run against records the current us
Echo: X-Real-IP extractor trusts the header value instead of the sending peer
## Impact In Echo v5, `ExtractIPFromRealIPHeader` checked whether the address supplied in `X-Real-IP` belonged to a tru
Echo: WebSocket proxy can retain connections and handlers after client disconnect
## Impact Echo's Proxy middleware could retain a handler, copy goroutines and network connections after a WebSocket cli
Echo: Decompress permits unbounded gzip expansion in v4
## Impact Echo v4's opt-in Decompress middleware exposed a gzip-decoded request stream without limiting its expanded si
Echo: Rejected WebSocket upgrades can bypass Echo route-level access controls
## Impact Echo's Proxy middleware selected a raw tunnel when the client requested a WebSocket upgrade, before validatin
Echo: BodyDump can discard BodyLimit overflow errors for unknown-length requests
## Impact Echo v5's BodyDump middleware captured a bounded prefix, drained the remaining request body while ignoring re
Echo: BodyDump captures request and response bodies without size limits in v4
## Impact Echo v4's opt-in BodyDump middleware read complete request bodies into memory and retained complete response
Strands Agents SDK: Exposure of data element to wrong session in the A2A Server
CVE-2026-115419
**Summary** Strands Agents SDK is an open-source SDK, available for Python (strands-agents) and TypeScript (@strands-a
virtualenv: Bash activator leaves the --prompt value unescaped in PS1 when promptvars is off, so prompt expansion later executes it (regression in 21.14.9)
CVE-2026-115586
## Summary The bash activator puts the caller-supplied prompt value into `PS1` unescaped whenever `promptvars` is off a
Mistune: Path Traversal and XSS in Include directive
CVE-2026-115355
The Include directive in `src/mistune/directives/include.py` does not validate that the resolved file path stays within
Twisted: Denial of Service in the Twisted IMAP4 Server via a Negative Literal Size in SEARCH
CVE-2026-115774
## Summary An infinite-loop vulnerability (CWE-835) in the Twisted IMAP4 server lets an authenticated client freeze the
Twisted: Unauthenticated Remote Denial of Service in the Twisted IRC Server via an Unbounded Line Buffer
CVE-2026-115776
## Summary An unbounded-buffer vulnerability (CWE-770) in the Twisted words IRC server lets any unauthenticated remote